CIDR Notation Explained: /24, /16, /8 Made Simple

CIDR notation is the compact shorthand that tells routers and network devices exactly how large a network is — and once you understand it, those mysterious slash numbers like /24, /16, and /8 stop looking like typos and start making perfect sense. Whether you're configuring your home router, setting up a guest network, or just trying to understand what your ISP means by a "subnet mask," CIDR notation explained simply is the networking skill that unlocks everything else.

In this guide you'll learn exactly what CIDR notation means, how to read those slash numbers at a glance, and how subnet sizes affect your everyday home network. Understanding subnets pairs naturally with knowing what an IP address actually is and how your router hands them out via DHCP — so by the end you'll have a solid mental model of how your entire local network is organized.

What Is CIDR Notation and How Does It Work?

CIDR stands for Classless Inter-Domain Routing, a system introduced in 1993 to replace the older "classful" networking model and slow the exhaustion of IPv4 addresses. The notation itself is beautifully simple: you write an IP address, add a forward slash, and then write a number between 0 and 32. That number — called the prefix length — tells you how many of the 32 bits in an IPv4 address are "locked" to identify the network, leaving the rest to identify individual devices. So 192.168.1.0/24 means the first 24 bits identify the network and the last 8 bits are available for hosts.

To picture this concretely, think of an IP address as a 32-bit binary number divided into four groups of eight bits (called octets). The number after the slash tells you how many bits from the left are the "network part." A /24 locks the first three octets (192.168.1), leaving the fourth octet free — giving you 256 possible addresses, of which 254 are usable by devices (two are reserved: the network address and the broadcast address). This is exactly the subnet your home router uses almost every time you buy one off the shelf.

A /16 locks only the first two octets, freeing up two full octets for hosts. That means 65,536 total addresses (65,534 usable) — the kind of range a mid-sized business or a large office building might use. Go further to a /8 and you've locked just the first octet, opening up roughly 16.7 million addresses. The famous 10.0.0.0/8 block is one of the three private address ranges reserved by IANA for use inside private networks like corporate intranets.

Before CIDR, networks were grouped into rigid "Class A," "Class B," and "Class C" blocks, which wasted enormous numbers of addresses. A company needing 300 hosts had to claim an entire Class B network with 65,000 addresses just because Class C only held 254. CIDR eliminated that waste by letting administrators define exactly the size of network they need — a concept called variable-length subnet masking (VLSM). Today, CIDR notation appears everywhere: router admin pages, firewall rules, ISP allocation tables, and cloud security groups.

How to Read Any CIDR Block in Five Steps

Follow these steps and you'll be able to decode any CIDR address in seconds, no binary math required.

1. Identify the prefix length — Look at the number after the slash. This is your prefix length (e.g., /24). It tells you how many bits are "network bits." The remaining bits (32 minus the prefix) are the "host bits" available for individual devices.
2. Calculate the number of host addresses — Raise 2 to the power of the host bits. For a /24, that's 2⁸ = 256 total addresses, or 254 usable after subtracting the network and broadcast addresses. For a /16, it's 2¹⁶ = 65,536 (65,534 usable).
3. Find the subnet mask — Convert the prefix length to a traditional dotted-decimal subnet mask by filling the first N bits with 1s and the rest with 0s. A /24 becomes 255.255.255.0; a /16 becomes 255.255.0.0; a /8 becomes 255.0.0.0. Your router's admin panel often shows this mask alongside the CIDR prefix.
4. Determine the network address — The network address is the IP with all host bits set to zero. For 192.168.5.75/24, the network address is 192.168.5.0. This address is reserved — no device can be assigned it. You can confirm your network address by checking your router's LAN IP settings.
5. Find the broadcast address — The broadcast address is the IP with all host bits set to one. For 192.168.5.0/24, the broadcast address is 192.168.5.255. This address is also reserved and is used to send a message to every device on the subnet simultaneously, which is how ARP requests work.

Common CIDR Blocks at a Glance

This table covers the CIDR prefixes you'll encounter most often, from the tiny /30 blocks used on point-to-point router links all the way up to the massive /8 blocks assigned to large organizations.

CIDR Prefix	Subnet Mask	Total Addresses	Usable Hosts
/8	255.0.0.0	16,777,216	16,777,214
/16	255.255.0.0	65,536	65,534
/24	255.255.255.0	256	254
/28	255.255.255.240	16	14
/30	255.255.255.252	4	2

Troubleshooting & Common CIDR Mistakes

Most home networking headaches that seem mysterious — devices not getting IP addresses, two routers conflicting, a VPN that won't route properly — trace back to a subnet misconfiguration. Understanding CIDR notation lets you diagnose these problems directly instead of guessing. Start by checking your router's DHCP settings to confirm the subnet it's assigning matches the subnet mask; a mismatch is a surprisingly common source of "device connects to Wi-Fi but has no internet" complaints. You can also use our subnet calculator to instantly verify that any CIDR block you're configuring covers the address range you intend.

A second class of problems arises when two networks on the same physical path share overlapping subnets. If your main router uses 192.168.1.0/24 and you add a second router or mesh node also configured to 192.168.1.0/24, devices will be confused about which gateway to use, causing intermittent connectivity. The fix is always to assign a non-overlapping subnet (e.g., 192.168.2.0/24) to the second router. Similarly, many consumer VPN clients assign a virtual IP in the 10.0.0.0/8 space — if your home LAN already uses an address in that block, you'll lose access to local devices while the VPN is active.

• Always note which private range your router uses (192.168.x.x, 10.x.x.x, or 172.16–31.x.x) before adding a second router or VPN
• Use /24 for home networks; don't go larger unless you have a specific reason — it keeps your broadcast domain small and fast
• When setting a static IP for a device like a printer or NAS, make sure the address falls within the /24 range and isn't inside the DHCP pool (to avoid address conflicts)
• Check that your subnet mask and default gateway are consistent — a device with a /16 mask on a /24 network will try to reach too-wide a range directly without going through the router

Pro Tip: Before changing any subnet settings on your router, use the subnet calculator tool to preview the exact address range, broadcast address, and usable host count — it takes 10 seconds and prevents hours of troubleshooting.

Frequently Asked Questions

What does the /24 mean in an IP address like 192.168.1.0/24?

The /24 is the CIDR prefix length, meaning the first 24 bits of the address are the network identifier and the remaining 8 bits are available for host devices. In practical terms, this gives you 254 usable IP addresses ranging from 192.168.1.1 to 192.168.1.254. This is the standard subnet used by virtually every consumer home router, and it corresponds to a subnet mask of 255.255.255.0 — which you can verify in your router's DHCP settings.

What is the difference between /24, /16, and /8?

Each step down in prefix length doubles the number of available host addresses. A /24 provides 254 usable hosts, a /16 provides 65,534 usable hosts, and a /8 provides over 16 million. Home networks almost always use /24; /16 and /8 are typically reserved for large enterprise or ISP environments where thousands of devices need to share a single subnet.

How do I convert a CIDR prefix to a subnet mask?

Fill a 32-bit string with the prefix-length number of 1s followed by 0s, then split it into four octets and convert each to decimal. A /24 gives you 11111111.11111111.11111111.00000000, which converts to 255.255.255.0. A /16 converts to 255.255.0.0 and a /8 converts to 255.0.0.0. Our subnet calculator does this instantly if you'd rather not do the binary math by hand.

Can two devices on the same network have IPs from different CIDR blocks?

If two devices have IP addresses in different subnets, they won't be able to communicate directly — all traffic between them would need to pass through a router, even if they're plugged into the same switch. This is a common misconfiguration when setting a manual static IP with the wrong subnet mask. Always ensure every device on the same LAN segment shares the same CIDR network address and subnet mask.

Why do home routers use 192.168.x.x instead of other private ranges?

The three private IPv4 ranges are 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 — all defined in RFC 1918. Consumer router manufacturers defaulted to the 192.168.x.x range because it's specific enough (only a /16 block) that it's unlikely to overlap with corporate VPN ranges, which often use the larger 10.x.x.x space. You can change your router to any private range you like, but 192.168.1.0/24 is overwhelmingly standard and safe for home use.

Does CIDR notation apply to IPv6 as well?

Yes — CIDR notation works the same way in IPv6, except addresses are 128 bits long instead of 32, so prefix lengths range from /0 to /128. Home networks typically receive a /64 prefix from their ISP, which provides an almost incomprehensibly large number of addresses (18 quintillion) for a single subnet. Understanding the IPv4 CIDR concepts of prefix length, network address, and host range translates directly to IPv6 with only the address length changing.

Related Guides

• What Is an IP Address? A Complete Beginner's Guide
• Subnet Calculator Tool
• What Is DHCP and How Does It Work?
• IP Lookup Tool

For authoritative networking standards and specifications, refer to the Internet Assigned Numbers Authority (IANA) or IETF RFC documents.