Subnetting…..but in reverse
Based on NetworkChuck's video on YouTube. If you like this content, support the original creators by watching, liking and subscribing to their content.
Reverse subnetting reconstructs network address, broadcast address, and range from an existing IP configuration when subnetting was already applied.
Briefing
A host losing all network access can come down to a simple but non-obvious subnetting mistake: the IP address might be “valid” for its subnet, yet the default gateway can land in a different subnet entirely—leaving the machine unable to ping anything, including the internet. The core task is “reverse subnetting,” where subnetting has already been applied and the job becomes reconstructing the network, broadcast, and valid host ranges from an existing IP configuration.
The walkthrough starts with real-world-style troubleshooting. Using an IP address, subnet mask, and default gateway from a problem host (Beatrice), the goal is to determine the network address, broadcast address, and network range. Because the subnet mask is already present, the process focuses on working backward: convert the subnet mask from decimal to binary, identify the slash length by counting contiguous “1” bits, then compute the increment (the value of the last network bit). That increment dictates where network boundaries fall.
With the mask converted to binary, the subnet is determined to be /20, meaning the increment is 16. Instead of incrementing in the usual fourth octet (common with class C thinking), the boundaries shift in the third octet. That’s the key mental pivot: network ranges advance by 16 in the third octet, producing ranges like 172.17.0.0–172.31.0.255 (with the network address and broadcast address derived accordingly). The example also highlights a subtle validity check: an IP ending in 255 can be a broadcast address and normally shouldn’t be assigned—but depending on the size of the subnet, even values that look suspicious at first glance can still fall within a valid range. In this case, Beatrice’s IP is treated as valid for its subnet.
Even with a valid IP, connectivity still fails. The reason emerges when comparing subnets between hosts. Bernard Hackwell’s IP places him in a different network segment than Beatrice—effectively “on different planets.” The decisive clue is Beatrice’s default gateway: it points to 172.17.0.1, which is not in the same subnet as her actual network. Since routers only forward traffic when the destination is outside the local subnet—and because the gateway itself isn’t reachable as a local neighbor—Beatrice can’t even reach the router, so pings to Bernard and external destinations fail.
By reconstructing the subnet boundaries from the configured mask, the troubleshooting becomes mechanical: compute the network address, broadcast address, and range; verify whether the default gateway belongs to the same subnet; then confirm whether other hosts share that same network range. The episode frames reverse subnetting as a practical superpower for CCNA-style exam questions and real troubleshooting tickets, ending with a teaser: the next step is subnetting a subnet—pushing the same logic further into more complex scenarios.
Cornell Notes
Reverse subnetting turns an existing IP configuration into the missing subnet details: network address, broadcast address, and the valid network range. The method hinges on converting the subnet mask to binary, counting contiguous network bits to get the prefix length (/20 in the example), and using the increment (16) to determine where network boundaries fall. A key twist is that boundaries may move in the third octet rather than the fourth, changing how ranges are constructed. The practical payoff is troubleshooting: Beatrice’s IP can be valid for its subnet, yet her default gateway can sit in a different subnet, making the router unreachable and breaking connectivity.
What does “reverse subnetting” mean in troubleshooting terms?
How do you determine the prefix length and increment from a subnet mask?
Why does the example increment in the third octet instead of the fourth?
How can an IP address be “valid” but the host still can’t communicate?
What’s the fastest way to spot the subnet mismatch between two hosts?
Review Questions
- Given an IP address and subnet mask, what steps let you compute the network address, broadcast address, and increment without relying on classful assumptions?
- If a host can’t ping anything, how would you use reverse subnetting to check whether the default gateway is in the same subnet?
- Why might an IP value that looks like a broadcast address still be usable in some subnet sizes?
Key Points
- 1
Reverse subnetting reconstructs network address, broadcast address, and range from an existing IP configuration when subnetting was already applied.
- 2
Convert the subnet mask to binary, count contiguous network bits to get the prefix length, and use the last network bit to find the increment.
- 3
With masks like /20, network boundaries can shift in the third octet, so incrementing may not follow the usual fourth-octet pattern.
- 4
An IP can be valid within its computed subnet range while still failing connectivity if the default gateway is in a different subnet.
- 5
A practical connectivity check is to verify that the default gateway’s IP falls inside the same computed network range as the host.
- 6
Comparing computed network ranges between hosts quickly reveals whether they share a subnet or require correct routing.