/28 subnet
A /28 has a subnet mask of 255.255.255.240 and 14 usable hosts.
The numbers
| Prefix length | /28 |
| Subnet mask | 255.255.255.240 |
| Wildcard mask | 0.0.0.15 |
| Network bits | 28 |
| Host bits | 4 |
| Total addresses | 16 |
| Usable hosts | 14 |
| /24 networks contained | — |
Where a /28 is used
14 usable hosts. A typical size for a public block assigned to a small business, or for a firewall DMZ with a handful of servers.
Why the usable count is what it is
A /28 leaves 4 bits for hosts, giving 24 = 16 addresses. Two of those cannot be assigned to a machine: the one with all host bits set to zero is the network address, which names the subnet itself, and the one with all host bits set to one is the broadcast address. That leaves 14.
Binary layout
mask 11111111.11111111.11111111.11110000
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
28 network bits, 4 host bitsSplitting and combining
| Prefix | Usable hosts | Relationship | |
|---|---|---|---|
| Twice the size | /27 | 30 | Two /28 networks combine into one /27 |
| This network | /28 | 14 | — |
| Half the size | /29 | 6 | One /28 splits into two /29 networks |
| A quarter | /30 | 2 | Four /30 networks fit in a /28 |
Frequently asked questions
How many hosts are in a /28?
16 addresses in total, of which 14 are usable. The first is the network address and the last is the broadcast address, so two are always lost.
What is the subnet mask for /28?
255.255.255.240. The prefix length is the count of leading 1 bits in the mask, so /28 is 28 ones followed by 4 zeros.
What is the wildcard mask for /28?
0.0.0.15 — the bitwise inverse of the subnet mask. Cisco access lists and OSPF network statements take the wildcard rather than the mask; a zero bit must match and a one bit is ignored.
How does a /28 compare to a /24?
A /28 is smaller: 16 of them fit inside one /24.