CIDR notation shows up in more places than most people expect — configuring a cloud VPC, setting up a home router's DHCP range, or reading a firewall rule that only makes sense once you know what "/24" means. You don't need a networking certification to work with it, just a clear mental model.
The slash number is a mask, not a version number
The "/24" in 192.168.1.0/24 tells you how many of the address's 32 bits are fixed as the network portion — the rest are available for hosts. A /24 fixes the first 24 bits (the first three octets), leaving 8 bits, or 256 addresses, for hosts on that network. A /28 leaves only 4 bits — 16 addresses, most of which aren't usable.
Network and broadcast addresses aren't for hosts
Every subnet reserves its first address (the network address) and its last address (the broadcast address) — neither can be assigned to a device. That's why a /24 gives you 256 total addresses but only 254 usable ones. Forgetting this is a common source of "off by two" errors when planning IP ranges by hand.
Let the arithmetic be automatic
Doing this bit math manually is exactly the kind of thing that's easy to get subtly wrong under time pressure. TeckForge's IPv4 Subnet Calculator takes an address and a prefix and returns the network address, broadcast address, usable host range and total address count instantly. If you're working the other direction — you have two IPs and need the smallest block that covers both — the CIDR Range Calculator handles that too.
Both tools run entirely as local arithmetic in your browser — no address you type is ever sent anywhere, which matters if you're planning internal network ranges you'd rather not paste into a random web service.
