An IPv4 address isn't a single, monolithic number. It's a combination of two distinct pieces of information: a network address and a host address. The subnet mask is the tool that tells a device where one part ends and the other begins.

Think of it as a filter. When a device looks at an IP address through its subnet mask, it can instantly determine which part identifies the local network (like a street name) and which part identifies the specific device on that network (like a house number). This division is crucial for routing traffic efficiently.

The mask achieves this separation using a simple but powerful binary operation: the logical AND operation.

To find the network address for a given IP, a device performs a bitwise AND operation between the IP address and its subnet mask. The result of this calculation is the network ID.

Here’s how it works: you line up the binary for the IP address and the binary for the subnet mask. For each bit position, you compare the two. If both bits are 1, the resulting bit is 1. If either bit is a 0, the resulting bit is 0.

Notice how the 1s in the subnet mask act like open gates, letting the original IP address bits pass through. The 0s in the mask act like closed gates, forcing the resulting bits to be 0. This is why the network portion of the mask is a solid block of 1s, and the host portion is a solid block of 0s.

Once you know the network ID, you can determine the range of valid IP addresses for hosts on that subnet, as well as two special, reserved addresses.

1. Network Address: The first address in the range, where all host bits are 0. This is the network's identifier and cannot be assigned to a device.
2. Broadcast Address: The last address in the range, where all host bits are 1. A packet sent to this address is delivered to every device on the subnet. This also cannot be assigned to a single device.

All the addresses between these two are the usable host addresses.

The /24 is CIDR notation for the subnet mask 255.255.255.0. It simply means the first 24 bits of the mask are 1s, defining the network portion. This leaves the remaining 8 bits for the host portion (32 total bits - 24 network bits = 8 host bits).

For a /24 network, we have 8 host bits. So, $2^8 - 2 = 256 - 2 = 254$ usable host addresses.

Let's check your understanding of these core mechanics.

Understanding how a subnet mask divides an IP address is the key to designing and troubleshooting networks. By applying these binary operations, you can control traffic flow, improve security, and use address space efficiently.