IPv4 subnetting
- Hosts per subnet
- 2(32 − prefix) − 2 (/31: 2, /32: 1)
- Block size
- 256 − (mask octet)
- Network address
- IP AND mask
- Broadcast address
- IP OR (NOT mask): all host bits set to 1
- Subnets from n borrowed bits
- 2n
Formula sheets, the key method steps for every topic and 6 practice problems, with full solutions at the back.
A department needs 976 host addresses in a single subnet. What is the longest prefix length p (smallest subnet) that is big enough?
A host has the address 172.20.205.136/17. What is the third octet x of its subnet's broadcast address?
How does a stateful firewall differ from a simple packet filter?
An attacker on a LAN sends forged ARP replies claiming the gateway's IP address. What is the likely result?
Set the bits so they store −57 in 8-bit two's complement. Read as an unsigned number, what is the pattern's value U?
Set the bits to the 8-bit result of 0111 0110 << 2. What is the result's value R in decimal?
Answer: p = 22
IPv4 subnetting: an address has 32 bits. The prefix /p says how many leading bits identify the network; the remaining 32 − p bits number the hosts. A subnet has 2³²⁻ᵖ addresses, but the first (network address) and last (broadcast address) cannot be given to hosts, so 2³²⁻ᵖ − 2 hosts fit. Exceptions: a /31 (point-to-point link, RFC 3021) uses both of its 2 addresses for hosts, and a /32 is one single address (a single host or a loopback).
Answer: x = 255
IPv4 subnetting: an address has 32 bits. The prefix /p says how many leading bits identify the network; the remaining 32 − p bits number the hosts. A subnet has 2³²⁻ᵖ addresses, but the first (network address) and last (broadcast address) cannot be given to hosts, so 2³²⁻ᵖ − 2 hosts fit. Exceptions: a /31 (point-to-point link, RFC 3021) uses both of its 2 addresses for hosts, and a /32 is one single address (a single host or a loopback).
Answer: D · It tracks connections and allows replies that belong to established sessions
A stateful firewall keeps a table of active connections, so return traffic is allowed automatically. A stateless filter judges each packet in isolation.
Answer: D · Victims send traffic for the gateway to the attacker, enabling a man-in-the-middle attack
ARP spoofing poisons hosts' ARP caches with the attacker's MAC for the gateway IP. The attacker can then read, change or drop traffic; dynamic ARP inspection helps prevent it.
Answer: U = 199
Setting bits: each bit is worth a power of two (128, 64, …, 1). One hex digit is exactly four bits, and in 8-bit two's complement the leftmost bit is worth −128. Bitwise operations work on each bit position separately.
Answer: R = 216
Setting bits: each bit is worth a power of two (128, 64, …, 1). One hex digit is exactly four bits, and in 8-bit two's complement the leftmost bit is worth −128. Bitwise operations work on each bit position separately.
Shifting left by 2 moves every bit 2 places to the left; bits that fall off the left end are lost and zeros come in on the right.
ExamProblems · examproblems.com/courses/computer-networks