blank.gif (43 bytes)

Church Of The
Swimming Elephant

Nested Prefixes Connected: An Internet Encyclopedia
Nested Prefixes

Up: Connected: An Internet Encyclopedia
Up: Programmed Instruction Course
Up: Subnetting and CIDR
Prev: A Real Example (cont)
Next: Tricks of the Trade

Nested Prefixes As the last example demonstrated, a single IP address can be matched by multiple address prefixes of different lengths. Likewise, a single address prefix can be matched by other address prefixes. More precisely, all the addresses matched by an address prefix can be matched by other, shorter prefixes.

Recall that was matched by both 208.130.28/22 and 208.128/11. In fact, all the addresses matched by 208.130.28/22 are also matched by 208.128/11. As the diagram shows, everything matching 208.130.28/22 must agree with it in the first 22 bits. Likewise, everything matching 208.128/11 must agree with it in the first 11 bits. Since the first 11 bits of the two prefixes are the same, everything matching the longer one (22 bits) will by necessity match the shorter one as well. The converse is not true - the longer prefix does not match everything the shorter prefix does, since the middle 11 bits could be anything to match the shorter prefix, but must follow an exact pattern to match the longer one.

If a shorter prefix matches everything a longer prefix does, we say that the shorter prefix contains the longer one, and that the longer prefix extends, or is an extension of, the shorter one. Since longer prefixes, with larger prefix length numbers, match fewer IP addresses, I will try to avoid using the confusing terms larger or smaller, and instead use longer and shorter when referring to IP address prefixes.

    Shorter prefixes match more addresses and contain longer ones

    Longer prefixes match fewer addresses and extend shorter ones

Next: Tricks of the Trade

Connected: An Internet Encyclopedia
Nested Prefixes


Protect yourself from cyberstalkers, identity thieves, and those who would snoop on you.
Stop spam from invading your inbox without losing the mail you want. We give you more control over your e-mail than any other service.
Block popups, ads, and malicious scripts while you surf the net through our anonymous proxies.
Participate in Usenet, host your web files, easily send anonymous messages, and more, much more.
All private, all encrypted, all secure, all in an easy to use service, and all for only $5.95 a month!

Service Details

Have you gone to church today?
All pages ©1999, 2000, 2001, 2002, 2003 Church of the Swimming Elephant unless otherwise stated
Church of the Swimming Elephant©1999, 2000, 2001, 2002, 2003 is a wholly owned subsidiary of Packetderm, LLC.

Packetderm, LLC
210 Park Ave #308
Worcester, MA 01609