Private IPv4 Subnets (RFC1918 Address Space Explained)
Overview
Private IPv4 addresses — defined in RFC 1918 — are used for internal networks that do not require global Internet routing. Every home, business, datacenter, and cloud environment relies heavily on these ranges.
This CSV provides a clean summary of each private block, including:
- Network address
- Gateway convention
- Broadcast address
- Purpose / usage notes
This allows users to immediately understand how private addressing works and why it’s foundational for NAT, LAN segmentation, VPNs, WiFi networks, cloud VPCs, and enterprise routing.
What This CSV Contains
Each private IPv4 range includes:
- Subnet (CIDR)
- Network address
- Gateway (.1 or first usable)
- Broadcast address
- Technical usage note
The three private ranges are:
10.0.0.0/8— Large enterprise, ISP backbones, massive internal segmentation172.16.0.0/12— Corporate VPNs, internal services, medium-sized segmentation192.168.0.0/16— Home and SMB LANs, WiFi networks, departmental VLANs
Why This Matters
This table is a great introductory primer for anyone learning:
- How subnets work
- Why NAT is required
- How broadcast domains behave
- Why certain subnets appear in DHCP pools
It also helps cybersecurity professionals identify when private addresses show up in unusual locations (for example, private ranges leaking across VPN tunnels or misconfigured networks).
| Example Subnet (CIDR) | Prefix Length | Private Range | Class | Network Address | Gateway IP (Example) | Broadcast Address | First Usable Host | Last Usable Host | Total Addresses | Usable Hosts | Notes |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 10.0.0.0/8 | 8 | 10.0.0.0/8 | A | 10.0.0.0 | 10.0.0.1 | 10.255.255.255 | 10.0.0.1 | 10.255.255.254 | 16777216 | 16777214 | Very large private networks; often ISP cores, large enterprises, or big internal address plans (10.0.0.0/8). |
| 172.16.0.0/12 | 12 | 172.16.0.0/12 | B | 172.16.0.0 | 172.16.0.1 | 172.31.255.255 | 172.16.0.1 | 172.31.255.254 | 1048576 | 1048574 | Private aggregation for multiple sites or departments (172.16.0.0/12); often split into /16-/24 blocks. |
| 192.168.0.0/16 | 16 | 192.168.0.0/16 | C | 192.168.0.0 | 192.168.0.1 | 192.168.255.255 | 192.168.0.1 | 192.168.255.254 | 65536 | 65534 | Common for large campus or multi-department LANs; often further subnetted into /24s (192.168.0.0/16). |
| 10.0.0.0/20 | 20 | 10.0.0.0/8 | A | 10.0.0.0 | 10.0.0.1 | 10.0.15.255 | 10.0.0.1 | 10.0.15.254 | 4096 | 4094 | Good for medium-sized segments, shared services, or container/VM clusters (≈4094 usable hosts). |
| 10.0.8.0/21 | 21 | 10.0.0.0/8 | A | 10.0.8.0 | 10.0.8.1 | 10.0.15.255 | 10.0.8.1 | 10.0.15.254 | 2048 | 2046 | Used for large WiFi pools, guest networks, or dense IoT segments (≈2046 usable hosts). |
| 192.168.0.0/22 | 22 | 192.168.0.0/16 | C | 192.168.0.0 | 192.168.0.1 | 192.168.3.255 | 192.168.0.1 | 192.168.3.254 | 1024 | 1022 | Common in data centers or large VLANs where ~1000 hosts are needed (≈1022 usable hosts). |
| 192.168.0.0/23 | 23 | 192.168.0.0/16 | C | 192.168.0.0 | 192.168.0.1 | 192.168.1.255 | 192.168.0.1 | 192.168.1.254 | 512 | 510 | Popular for large access VLANs, WiFi, or combined segments needing ~500 hosts (≈510 usable hosts). |
| 192.168.0.0/24 | 24 | 192.168.0.0/16 | C | 192.168.0.0 | 192.168.0.1 | 192.168.0.255 | 192.168.0.1 | 192.168.0.254 | 256 | 254 | Standard LAN size; typical office, lab, or VLAN network (254 usable hosts). |
| 192.168.0.0/25 | 25 | 192.168.0.0/16 | C | 192.168.0.0 | 192.168.0.1 | 192.168.0.127 | 192.168.0.1 | 192.168.0.126 | 128 | 126 | Smaller secured segments like management, desktops vs. servers, or separated user groups (126 usable hosts). |
| 192.168.0.0/26 | 26 | 192.168.0.0/16 | C | 192.168.0.0 | 192.168.0.1 | 192.168.0.63 | 192.168.0.1 | 192.168.0.62 | 64 | 62 | Voice VLANs, cameras, or tightly-scoped access networks (62 usable hosts). |
| 192.168.0.0/27 | 27 | 192.168.0.0/16 | C | 192.168.0.0 | 192.168.0.1 | 192.168.0.31 | 192.168.0.1 | 192.168.0.30 | 32 | 30 | Small device groups, labs, or IoT segments (30 usable hosts). |
| 192.168.0.0/28 | 28 | 192.168.0.0/16 | C | 192.168.0.0 | 192.168.0.1 | 192.168.0.15 | 192.168.0.1 | 192.168.0.14 | 16 | 14 | Very small segments—testing, out-of-band, or small device clusters (14 usable hosts). |
| 192.168.0.0/29 | 29 | 192.168.0.0/16 | C | 192.168.0.0 | 192.168.0.1 | 192.168.0.7 | 192.168.0.1 | 192.168.0.6 | 8 | 6 | WAN edges, firewall transit networks, or tiny infrastructure segments (6 usable hosts). |
| 192.168.0.0/30 | 30 | 192.168.0.0/16 | C | 192.168.0.0 | 192.168.0.1 | 192.168.0.3 | 192.168.0.1 | 192.168.0.2 | 4 | 2 | Classic point-to-point link size (2 usable hosts). |
| 192.168.0.0/31 | 31 | 192.168.0.0/16 | C | 192.168.0.0 | 192.168.0.0 | N/A | 192.168.0.0 | 192.168.0.1 | 2 | 2 | Modern point-to-point links per RFC 3021; both addresses are usable, no broadcast. |
| 192.168.0.10/32 | 32 | 192.168.0.0/16 | C | 192.168.0.10 | 192.168.0.10 | N/A | 192.168.0.10 | 192.168.0.10 | 1 | 1 | Single host assignment—loopbacks, VIPs, or device-specific addresses. |