← CertOwl Blog

Subnetting explained for beginners (the way it finally clicks)

By the founder of CertOwl • July 2026 • 4 min read

Subnetting scares more CompTIA Network+ candidates than any other topic, and most of that fear comes from how it gets taught: binary tables first, understanding later, panic somewhere in between. Let's flip the order. Once you see what a subnet mask is for, the math turns out to be a small set of moves you repeat until they're automatic.

What a subnet mask really does

Every IPv4 address has two jobs baked into one number: it names a network, and it names a device on that network. The subnet mask is simply the line between those two parts.

Think of a postal address. "Oak Street" gets the letter to the right street; "number 42" gets it to the right house. An IP address works the same way. In 192.168.1.42 with a mask of 255.255.255.0, the first three octets (192.168.1) are the street and the last octet (42) is the house. Routers only care about the street. Devices on the same street can talk directly; anything else goes through a router.

Subnetting is the act of moving that line. Slide it to the right and you carve one big network into several smaller ones, each with fewer houses. That's the entire concept. Everything else is arithmetic.

CIDR notation without the mystery

The slash you keep seeing, as in 192.168.1.0/24, is CIDR notation, and it counts how many of the 32 bits in the address belong to the network. A /24 means 24 network bits, which leaves 8 bits for hosts. Two to the power of eight is 256 addresses, and after reserving one for the network itself and one for broadcast, you get 254 usable hosts.

That subtraction of two trips up beginners constantly, so make it a reflex: total addresses minus two equals usable hosts. A /26 leaves 6 host bits, so 64 addresses and 62 hosts. A /30 leaves 2 host bits, so 4 addresses and 2 hosts, which is why /30 links connect exactly two router interfaces.

The five step method

For any "what subnet is this address in" question, run the same routine:

1. Find the interesting octet. It's the one where the mask isn't 255 or 0. For /26, the mask is 255.255.255.192, so the fourth octet is interesting.
2. Compute the magic number. Subtract the mask value from 256. For 192: the magic number is 64.
3. List the block starts. Count up by the magic number: 0, 64, 128, 192.
4. Place the address. Take 192.168.10.77/26. The number 77 falls between 64 and 128, so the network is 192.168.10.64.
5. Mark the edges. The broadcast is one below the next block: 192.168.10.127. Usable hosts run from .65 to .126.

Five steps, maybe thirty seconds once you've drilled it. The whole trick lives in the powers of two: 128, 64, 32, 16, 8, 4, 2. If you memorize one thing, memorize that ladder and the matching mask values (128, 192, 224, 240, 248, 252, 254).

The traps the exam loves

The CompTIA Network+ (N10-009) puts subnetting in Domain 1 alongside IPv4 addressing, CIDR, and VLSM, and the questions lean on a few predictable traps. Expect to be asked whether a given address is a usable host, a network address, or a broadcast address; the wrong options will always include the block edges. Expect a "how many subnets and how many hosts" question where forgetting to subtract two is the designed mistake. And expect VLSM scenarios where you pick the smallest prefix that fits a required host count, such as a /27 (30 hosts) for a department of 25 people.

None of these are hard once the method is automatic. They are brutal if you're deriving everything from binary under time pressure, which is a big part of why people rate the exam harder than expected.

How to practice it

Subnetting is a skill you drill, not a fact you learn. Do five problems a day, every day, from your first week of studying, and it becomes a strength by exam time, the same daily habit behind any realistic Network+ study timeline. Generate problems by picking a random address and prefix, or let practice questions do it. When you can clear a problem in under a minute without writing out binary, you're exam ready on this topic, and every fast subnetting answer buys you time for the harder troubleshooting questions later in the test. With a voucher costing what it does, those saved minutes are worth real money.