Skip to content

Subnet mask ↔ CIDR

Subnet mask calculator.

Turn a subnet mask into a CIDR prefix, wildcard mask and host count — or enter a prefix to get the mask. Includes the full subnet mask list.

Enter a dotted subnet mask (255.255.248.0) or a prefix (/21)

CIDR prefix/21
Subnet mask255.255.248.0
Wildcard mask0.0.7.255
Total addresses2,048
Usable hosts2,046
Binary mask11111111.11111111.11111000.00000000

What does a subnet mask mean?

An IP subnet mask separates the network part of an IP address from the host part. Written as four decimal numbers — 255.255.255.0 — it is really a 32-bit pattern of consecutive 1s followed by consecutive 0s. When a device combines the mask with an IP address using a bitwise AND, the result is the network address. Two devices are on the same subnet when they produce the same network address.

Subnet mask to CIDR

To convert a subnet mask to CIDR, count the 1 bits. Each full 255 octet contributes 8 bits, and partial octets contribute as follows: 128 = 1, 192 = 2, 224 = 3, 240 = 4, 248 = 5, 252 = 6, 254 = 7. So 255.255.255.224 is 8 + 8 + 8 + 3 = /27. Masks such as 255.0.255.0 are invalid because their 1 bits are not contiguous.

Subnet mask of class A, B and C

ClassDefault maskCIDRFirst octet
A255.0.0.0/81 – 126
B255.255.0.0/16128 – 191
C255.255.255.0/24192 – 223

Subnet mask list: /0 to /32

Every IPv4 prefix with its subnet mask, wildcard mask and number of usable hosts. Click a prefix on the cheat sheet for its dedicated page.

CIDRSubnet maskWildcardUsable hosts
/00.0.0.0255.255.255.2554,294,967,294
/1128.0.0.0127.255.255.2552,147,483,646
/2192.0.0.063.255.255.2551,073,741,822
/3224.0.0.031.255.255.255536,870,910
/4240.0.0.015.255.255.255268,435,454
/5248.0.0.07.255.255.255134,217,726
/6252.0.0.03.255.255.25567,108,862
/7254.0.0.01.255.255.25533,554,430
/8255.0.0.00.255.255.25516,777,214
/9255.128.0.00.127.255.2558,388,606
/10255.192.0.00.63.255.2554,194,302
/11255.224.0.00.31.255.2552,097,150
/12255.240.0.00.15.255.2551,048,574
/13255.248.0.00.7.255.255524,286
/14255.252.0.00.3.255.255262,142
/15255.254.0.00.1.255.255131,070
/16255.255.0.00.0.255.25565,534
/17255.255.128.00.0.127.25532,766
/18255.255.192.00.0.63.25516,382
/19255.255.224.00.0.31.2558,190
/20255.255.240.00.0.15.2554,094
/21255.255.248.00.0.7.2552,046
/22255.255.252.00.0.3.2551,022
/23255.255.254.00.0.1.255510
/24255.255.255.00.0.0.255254
/25255.255.255.1280.0.0.127126
/26255.255.255.1920.0.0.6362
/27255.255.255.2240.0.0.3130
/28255.255.255.2400.0.0.1514
/29255.255.255.2480.0.0.76
/30255.255.255.2520.0.0.32
/31255.255.255.2540.0.0.12
/32255.255.255.2550.0.0.01

Subnet mask and the default gateway

Every host is configured with an IP address, a subnet mask and a default gateway. The mask tells the host which addresses are “local”. Anything outside the subnet is sent to the gateway, so the gateway must be inside the same subnet. If you enter a gateway that falls outside the range shown by the calculator, the host will not be able to reach it — one of the most common misconfigurations in small networks.

Frequently asked questions

What is a subnet mask?

A subnet mask is a 32-bit value that tells a device which part of an IPv4 address is the network and which part is the host. 255.255.255.0 means the first 24 bits are the network and the last 8 bits identify hosts.

How do I convert a subnet mask to CIDR?

Count the number of 1 bits in the mask. 255.255.255.0 has 24 ones, so it is /24. 255.255.255.240 has 28 ones, so it is /28. A valid mask must be a run of 1s followed by 0s with no gaps.

What is the subnet mask for /24, /26 and /29?

/24 is 255.255.255.0 (254 hosts), /26 is 255.255.255.192 (62 hosts) and /29 is 255.255.255.248 (6 hosts).

What are the default subnet masks for class A, B and C?

Class A uses 255.0.0.0 (/8), class B uses 255.255.0.0 (/16) and class C uses 255.255.255.0 (/24). Modern networks use classless CIDR masks instead.

What does the subnet mask have to do with the default gateway?

A host uses its subnet mask to decide whether a destination is on the same network. If it is, the host sends the packet directly; if not, it sends it to the default gateway, which must be an address inside the host’s own subnet.