Subnetting & IP Addressing
IP addressing and subnetting are the number system the rest of the CCNA runs on: every routing table, ACL, and OSPF statement is really just addresses and masks. This hub ties the core concepts together with step-by-step guides, a printable cheat sheet, and graded hands-on labs so the math becomes automatic.
New to this? Start with the explainer: What Is Subnetting? Subnetting Explained
Subnetting, in reading order
- 1 · ExplainerWhat Is Subnetting? Subnetting Explained
- 2 · ExplainerWhat Is a Subnet Mask?
- 3 · ExplainerWhat Is an IP Address? IPv4 vs IPv6
- 4 · GuideHow to Subnet with VLSM (No Calculator)
- 5 · GuideHow to Configure IPv6 Addressing on Cisco
- 6 · GuideHow to Configure a Loopback Interface on Cisco
- 7 · GuideThe Best Subnet Calculator (and Why You Should Still Subnet by Hand)
- 8 · ComparisonIPv6 Link-Local vs Global Unicast Address
- 9 · Cheat sheetSubnetting Cheat Sheet
- 10 · PathCCNA Complete Path
Subnetting and IP addressing sit in the Network Fundamentals area of the CCNA, and they are the one skill that surfaces everywhere else: you cannot summarize a route, write an access list, bring up OSPF, or hand-address a topology without doing this math cleanly and fast. Exact exam weightings shift between blueprint revisions, so treat any percentage as secondary. The practical reality is simpler: a candidate who is slow or shaky here loses time on every other question, so the goal of this hub is fluency, not memorization.
Start with the subnet mask itself, which draws the line between the network bits and the host bits of a 32-bit address. From the host bits you get the size of each subnet, where usable hosts = 2^(host bits) - 2, because you subtract the network address and the broadcast address. The two exceptions are a /31, which carries two usable addresses for point-to-point links (RFC 3021), and a /32, a single-host route. The block-size (or 'magic number') method - 256 minus the interesting mask octet - gives you the subnet increment, so you can find network and broadcast boundaries by hand without a calculator.
Once fixed-length subnetting is comfortable, VLSM is the next layer: applying different mask lengths inside the same major network so a 50-host LAN takes a /26 while a two-host WAN link takes a /30 or /31, instead of wasting a /24 on each. The 'Subnet with VLSM (No Calculator)' guide walks that method end to end. Closely related is the wildcard mask - the bit-inverse of the subnet mask, or 255.255.255.255 minus the mask - which is what OSPF network statements and ACLs actually match on. A /24 becomes wildcard 0.0.0.255, and getting the inverse wrong is one of the most common reasons an OSPF adjacency or an ACL silently fails.
IPv6 addressing reframes the same ideas at 128 bits, and the 'Configure IPv6 Addressing on Cisco' guide covers the address types you must recognize: global unicast (2000::/3), link-local (fe80::/10, present on every IPv6-enabled interface), unique local, and multicast (ff00::/8). There is no broadcast in IPv6 - its role is taken over by multicast. Loopbacks tie both worlds together: a loopback is an always-up virtual interface used as a stable router ID and test target, and the 'Configure a Loopback Interface' guide shows how OSPF advertises a loopback as a /32 host route by default unless you change its network type.
The way to master this topic is a loop: understand the why first, keep the Subnetting Cheat Sheet at hand for the mask-to-block-size table and powers of two, then build and grade the labs until the arithmetic is muscle memory. The 'Best Subnet Calculator' guide is deliberate about this - a calculator is fine for checking your work, but the exam is timed and gives you none, so you still subnet by hand. Reach for the cheat sheet while you are learning, and lean on it less as the labs make the block-size method second nature.
Work the pieces in the order they build on each other: masks and host math, then the block-size shortcut, then VLSM, then wildcard masks, and finally IPv6 and loopbacks. Each graded lab in the bundle forces a real config on live Cisco IOS and checks it, so a wrong mask or a bad wildcard fails the grade the same way it would fail in production - which is exactly the feedback that turns memorized rules into a skill you can perform under time pressure.
Practice on real Cisco IOS
Build and grade hands-on Cisco Modeling Labs — the only way it sticks.
Now build it
Labs that drill this on real Cisco IOS — configure it yourself, then grade your config against the answer key.
Related study hubs
Frequently asked questions
In what order should I learn subnetting for the CCNA?
Build it in layers. First master the subnet mask and host math (usable hosts = 2^(host bits) - 2, with /31 and /32 as the exceptions). Next learn the block-size / magic-number method (256 minus the interesting mask octet) so you can find subnet and broadcast boundaries by hand. Then move to VLSM, which mixes mask lengths inside one network. After that, add wildcard masks (the inverse of the subnet mask), since OSPF and ACLs depend on them. Finish with IPv6 address types and loopback interfaces. The linked guides follow roughly this progression.
Do I really need to subnet by hand, or can I just use a subnet calculator?
Learn to do it by hand. A calculator is great for checking your work and speeding up planning, but the CCNA exam is timed and does not give you one, and the same is true when you are staring at a live console. The block-size method makes hand subnetting fast enough that a calculator becomes a convenience rather than a crutch. The 'Best Subnet Calculator' guide explains exactly where the tool helps and where it will let your skills atrophy if you lean on it too early.
What is the difference between a subnet mask and a wildcard mask?
A subnet mask marks which bits are the network (1s) and which are the host (0s), for example 255.255.255.0 for a /24. A wildcard mask is the bit-for-bit inverse of that mask - 255.255.255.255 minus the subnet mask - so a /24 becomes 0.0.0.255. Cisco uses wildcard masks in OSPF network statements and in ACLs to say which address bits must match and which are 'don't care.' Mixing the two up is a very common cause of an OSPF neighbor that never forms or an ACL that matches the wrong traffic.
This is what grading your config looks like
A sample result — 4 of 5 requirements met. This is exactly what you see the moment you submit.
subnetting-lab-export.yaml — read 3 device configs
- Passed: R1 Gi0/0 addressed 192.168.10.1/26
- Passed: R1 Gi0/1 addressed 192.168.10.65/28
- Passed: Subnets do not overlap
- Passed: Point-to-point link uses a /30
- Failed: Loopback0 advertised as /32 — configured /24 on R2
Solution revealed
The full node-by-node answer key unlocks the moment you submit — so you see exactly what you missed.
Study every CCNA topic this way
Every topic has graded CCNA labs. The CCNA Complete Path puts them in order.