/20 subnet: mask 255.255.240.0, 4,094 usable hosts
Runs in your browser — nothing you paste leaves this page. How we prove that
Subnet Calculator playground
IPv4 or IPv6, with or without a prefix — 10.0.0.0/8, 2001:db8::/48, or a dotted netmask like 192.168.1.0 255.255.255.0. A bare address means one host (/32 or /128).
Results update as you type — press Enter to run now.
Addressing
- Network address
- 10.
0. 0. 0 - Broadcast address
- 10.
0. 15. 255 - Usable host range
- 10.
0. 0. 1 – 10. 0. 15. 254
Masks
- Netmask
- 255.
255. 240. 0 - Wildcard maskInverse of the netmask — the match form Cisco ACLs and OSPF expect.
- 0.
0. 15. 255 - Netmask (binary)The mask bit by bit — the 1s are the network part.
- 11111111.
11111111. 11110000. 00000000
Details
- Address type
- Private (RFC 1918)
- Network (integer)The network address as a single 32-bit number, as scripts and databases store it.
- 167 772 160
A /20 gives 4,096 addresses and 4,094 usable hosts under netmask 255.255.240.0. It is sixteen /24s in one block, a common size for cloud subnets that host containers or autoscaling groups.
Reading the /20 mask
Twenty network bits fill the first two octets and four bits of the third, so the mask is 255.255.240.0 and the wildcard is 0.0.15.255. The third octet therefore steps in blocks of 16: a /20 can start at .0, .16, .32 and so on, never at .8.
The host count is 2^12 = 4,096. With network and broadcast removed, 4,094 addresses are usable. In 10.0.0.0/20 that is 10.0.0.1 through 10.0.15.254, broadcast 10.0.15.255.
Why cloud teams pick /20
AWS default VPCs create one /20 per availability zone inside 172.31.0.0/16, which made the size familiar. After the five AWS-reserved addresses a /20 subnet leaves 4,091 assignable IPs, enough for EKS or ECS workloads where every pod or task takes a VPC address.
It is also a comfortable unit for IP address management: big enough that a busy subnet does not run dry during a scale-out, small enough that a /16 still yields sixteen of them.
Neighbouring sizes
Halve a /20 and you get two /21s; quarter it for four /22s. Doubling goes the other way: two aligned /20s make a /19. If a /20 is more than a workload needs, a /22 (about a thousand hosts) is the usual next step down.
Watch alignment when you split by hand. 10.0.8.0/20 is not a valid network address; the calculator will report it as a host inside 10.0.0.0/20.
Configuring and checking
The gateway for 10.0.0.0/20 is conventionally the first usable address, 10.0.0.1, though nothing enforces it. Hosts must carry the full 255.255.240.0 mask; a host left on 255.255.255.0 would treat everything outside its own /24 as remote and push same-subnet traffic through the router.
Before carving a VPC, list the /20s you need per availability zone and per tier. Three zones times public, private and data tiers is nine /20s, which still leaves seven spare in a /16 for later services.
FAQ
Questions, answered.
Tap a question to expand the answer.
How many /24s are in a /20?
Sixteen. A /20 spans sixteen consecutive values of the third octet, starting on a multiple of 16.
How many usable IPs does a /20 have on AWS?
4,091. AWS reserves the first four addresses and the last one in every subnet, so 4,096 minus 5.
More free, private DevOps tools.
The Subnet Calculator is one tool in OpsCanopy — a growing canopy of browser-based validators, converters and testers that never touch a server.
More in Networking
Read more about this
- IPv6 subnet calculator: what ipcalc can't do, and how sipcalc handles /64s An IPv6 subnet calculator explained: why classic ipcalc is IPv4-only, how sipcalc adds IPv6 support, and the exact math behind splitting a /48 into /64s.
- The complete guide to private IP address ranges (RFC 1918) The three RFC 1918 private IP ranges, why 172.16.0.0/12 catches people out, the addresses that look private but aren't, and how to pick a range that won't collide.
New to Networking? Read the Networking guide →
42 free tools, every one offline-capable — opscanopy.com works with no signup and nothing uploaded.
More networking: the IP Address Converter, the CIDR / Subnet Checker and the Subnet Splitter, or browse the full tools directory.
Provided as-is for convenience; always confirm critical network changes against your own authority. OpsCanopy is free and open.