IPv4 range expander

Given a start and an end IPv4 address, this tool calculates a valid IPv4 subnet along with its CIDR notation.

Enable JavaScript to use the interactive tool. The guide below explains how it works.

IPv4 Range Expander: CIDR and Subnet Optimization Guide

What the tool does

The IPv4 Range Expander is a sophisticated networking utility designed to bridge the gap between arbitrary IP address ranges and formal Classless Inter-Domain Routing (CIDR) blocks. In networking, we often have a "Start IP" and an "End IP," but routers and firewalls usually require these to be defined as a network address and a prefix length (e.g., 192.168.1.0/24).

This tool takes a start and end IPv4 address and automatically calculates the smallest possible CIDR block that encompasses the original range. Because CIDR blocks must start on specific bit-boundaries, the tool also "expands" the range to match the requirements of the calculated mask, showing you the new normalized start and end addresses, the total number of addresses in the resulting block, and the CIDR notation itself. It provides a side-by-side comparison of the "old" (input) values and the "new" (calculated) values, ensuring absolute clarity for network configuration.

Why someone uses it

Modern networking relies almost entirely on CIDR for routing and security rules. However, human requirements often don't align perfectly with binary boundaries.

1. Firewall Rule Generation

A security engineer might be told to block a range of IPs found in a log file, such as 10.0.5.10 to 10.0.5.200. Since they can't simply enter that range into many hardware firewalls, they use this tool to find the most efficient CIDR block (like 10.0.5.0/24) that covers that range.

2. Network Planning and Consolidation

When designing a cloud VPC (Virtual Private Cloud) or an on-premise data center, architects often need to consolidate multiple small ranges into larger, more manageable subnets. This tool helps visualize how much "waste" or "buffer" is created when a range is rounded up to the nearest valid CIDR block.

3. Troubleshooting Routing Tables

BGP (Border Gateway Protocol) and OSPF (Open Shortest Path First) use CIDR prefixes for route advertisement. Network administrators use this tool to verify that a specific range of addresses is correctly summarized within a larger advertised prefix.

4. Cloud Infrastructure as Code (IaC)

Tools like Terraform, CloudFormation, or Ansible require CIDR blocks for VPC and Subnet resources. This tool allows developers to quickly translate their intended IP coverage into the precise format required by these automation platforms.

Step-by-step instructions

  1. Access the Tool: Navigate to the "IPv4 range expander" tool in the sidebar.
  2. Input the Start Address: Enter the first IP of your desired range in the "Start address" field.
  3. Input the End Address: Enter the last IP of your desired range in the "End address" field.
    • Note: The tool validates that both inputs are valid IPv4 addresses and that the end address is numerically greater than or equal to the start address.
  4. Analyze the Result Table: The tool will generate a comparison table with three columns: "Label", "Old Value", and "New Value".
    • Start address: Shows your input vs. the start of the valid CIDR block.
    • End address: Shows your input vs. the end of the valid CIDR block.
    • Addresses in range: Compares the raw count of IPs you provided against the total size of the CIDR block (e.g., 256 for a /24).
    • CIDR: The final calculated prefix (e.g., 192.168.0.0/24).
  5. Handle Errors: If the "End" address is lower than the "Start" address, an alert will appear. You can click the "Switch start and end IPv4 address" button to automatically swap them and fix the calculation.
  6. Copy Data: You can highlight and copy the CIDR notation or the expanded IP addresses directly from the table.

Examples

Example 1: Standard /24 Alignment

Example 2: Small Range to CIDR

Example 3: Large Cross-Octet Range

FAQs

Q: Why does the "New Start Address" change?

A: CIDR blocks must start on a boundary where the host portion of the address (in binary) is all zeros. If your "Start IP" is 192.168.1.5, the nearest valid CIDR block covering it might start at 192.168.1.0.

Q: Can one range be represented by multiple CIDR blocks?

A: Yes. For example, the range 10.0.0.1 to 10.0.0.3 cannot be represented by a single CIDR block without including 10.0.0.0 or 10.0.0.4. This tool focuses on finding the single smallest block that fully contains your input range.

Q: What is the difference between this and a Subnet Calculator?

A: A Subnet Calculator usually takes a CIDR (e.g., /24) and tells you the range. This tool does the opposite: it takes a range and tells you the CIDR.

Q: Does this support IPv6?

A: Currently, this tool is optimized for IPv4. IPv6 range expansion follows similar bitwise logic but is handled by separate specialized tools.

Q: What does the number after the slash (e.g., /24) mean?

A: It is the prefix length, representing the number of fixed "network bits" in the 32-bit address. A /24 means 24 bits are for the network, leaving 8 bits (2^8 = 256 addresses) for the hosts.

Common mistakes

1. Assuming CIDR blocks can start anywhere

A common mistake is thinking you can have a /24 that starts at 10.0.0.50. Mathematically, a /24 must start at an IP where the last octet is .0. If you try to force a range starting at .50, the tool will correctly expand it down to .0.

2. Overestimating "Efficient" CIDR blocks

Sometimes, to cover 5 IPs, you might need a /29 (8 IPs). If those 5 IPs span across a binary boundary (like ...7 and ...8), you might even need a /28 (16 IPs). Always check the "Addresses in range" comparison to see how much extra space is being included.

3. Ignoring the "New End Address"

When you apply a CIDR block to a firewall, you are often blocking more IPs than you originally intended because of the "rounding up" effect. Always verify the "New End Address" to ensure you aren't accidentally blocking legitimate traffic.

4. Swapping Start and End IPs

Entering the higher IP in the "Start" field is a common logical error. While the tool provides a button to fix this, it's important to understand that IP ranges are strictly directional (low to high).

Use cases

Related tools

All tools

Guides and articles