TechKnowSurge
CompTIA Network+ 1.7 Cisco CCNA 1.7 Cisco CCST Networking 2.2 CompTIA A+ Core 1 2.6 Cisco CCST Networking 2.1 Cisco CCNA 4.1 Cisco CCST Cybersecurity 2.2
VideoNetworkFree

IPv4 Unique Networks and Addresses

IPv4 includes several reserved address ranges with specific purposes that affect how networks are designed and managed. Understanding these ranges — including private, loopback, and link-local addresses — is essential for proper network configuration and troubleshooting.

Complete this video to capture a CTF flag worth 1 point.

About this video

IPv4 defines several reserved address ranges that serve distinct technical purposes and are treated differently from standard routable addresses. The three private address ranges — 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 — are unassigned in the sense that any organization can use them freely on internal networks. They are not routable on the public internet and will be blocked if they reach it, so traffic originating from these ranges must be translated into a public IP address through NAT before leaving the local network. Home networks and small businesses most commonly use the 192.168.0.0 range, often with a third octet of 0 or 1. The loopback range 127.0.0.0/8 is reserved for a device to communicate with itself. While the entire /8 block is technically reserved for this purpose, 127.0.0.1 — known as localhost — is the standard address used in practice. Pinging localhost causes the device to form a packet, send it to itself, and receive a reply, confirming that the network interface and protocol stack are functioning. This makes it a valuable first step in network troubleshooting, helping isolate whether a connectivity problem lies within the local device or somewhere beyond it. The link-local range 169.254.0.0/16, referred to as APIPA (Automatic Private IP Addressing) or AutoIP, is self-assigned by a device when it fails to obtain an address from a DHCP server. The device randomly selects values for the last two octets, giving itself a reachable address even without a DHCP server present. This is useful for direct device-to-device connections or for accessing equipment that has not been configured with a static address. Finally, 0.0.0.0/0 represents the entire IPv4 address space and appears in routing tables as the default route — the fallback path for traffic with no more specific destination — and in access control lists when a rule needs to match all possible addresses.

What you'll learn

What's covered

IPv4 Special Address Ranges

Aligned to

CompTIA Network+
1.7 Given a scenario, use appropriate IPv4 network addressing.
Cisco CCNA
1.7 Describe private IPv4 addressing.
4.1 Configure and verify inside source NAT using static and pools.
Cisco CCST Networking
2.2 Identify IPv4 addresses and subnet formats.
2.1 Compare and contrast private addresses and public addresses.
CompTIA A+ Core 1
2.6 Compare and contrast common network configuration concepts.
Cisco CCST Cybersecurity
2.2 Explain how network addresses impact network security.

Key terms

IP Address
A numerical label assigned to each device connected to a network that uses the Internet Protocol.
Network Address Translation
NAT
A method that maps private IP addresses to a public IP address, allowing multiple devices to share a single public IP.
Dynamic Host Configuration Protocol
DHCP
A network protocol that automatically assigns IP addresses and other configuration parameters to devices on a network.
Subnet Mask
A 32-bit number that divides an IP address into network and host portions.
Private IPv4 Address
An IP address from RFC 1918 ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) that is not routable on the public internet and must be translated before traversing it.
Loopback Address
The reserved IPv4 address 127.0.0.1 (within the 127.0.0.0/8 range) that a device uses to send traffic to itself, allowing the local network stack to be tested without sending packets onto a physical network. Pinging 127.0.0.1 is a quick way to verify that a device's TCP/IP stack is functioning.
Automatic Private IP Addressing
APIPA
A feature that automatically assigns a device an IP address in the 169.254.0.0/16 range when it cannot obtain an address from a DHCP server. APIPA allows limited local-network communication but does not provide internet access.
Default Route
A catch-all routing entry represented as 0.0.0.0/0 (IPv4) or ::/0 (IPv6) that a router uses to forward packets when no more specific matching route exists in the routing table. It is typically configured to point toward the next-hop router or ISP connection.

Transcript

Well-Known Unique Networks

What I'm going to do is call out just a few — there's quite a bit more than this, but just a few of the well-known unique addresses. That is, networks that fall outside the zone that you probably shouldn't use, or probably should use, according to what your use case is.

The first thing that jumps network. Another one is the 172.16.0.0 network, and the 192.168.0.0 network. All of these ranges right here — and notice that this range right here is actually much larger than its classful range, so we have 256 networks within this.

These unique addresses are private addressing, and private addressing means that it's assigned to a business or a home, but it could be assigned to lots of different homes or lots of different businesses. It's not something that's routable on the internet, not something that's routable out there in the world. It is only supposed to be within the private network, and then once it exits that private network it needs to be translated into something else, translated into a public address.

Next we have the 0.0.0.0 range, and that represents everything essentially. That's the first network address. If this was a zero, then this would represent all of the network. But for this purpose right here, just don't use this range. This is not a range that's going to be assignable.

Then we've got this 127.0.0.0 address right here. This is what's known as a loopback address, or it's actually a range of loopback addresses. This one's reserved for loopback addresses, so that way we can test our NIC cards and our interfaces.

If you plug your switch into a network but it does not get a dynamically assigned IP address, and it's looking for a dynamically assigned IP address, what it will do, when it can't find a DHCP server, is then just take on one of the addresses within this 169.254 range. So you typically wouldn't assign your machines to this address range. This would be reserved more for networks that wouldn't have a DHCP server on it, or if you need to connect to certain pieces of equipment that are not picking up a DHCP address, then possibly you can connect into that equipment using this address right here.

Summary Addresses and the Default Route

When we get into routers, what happens is that we can have a bunch of networks that get summarized up into one network. It will condense things down into some summary networks. But the whole internet can be condensed down, or summarized, into one address, and that's what you're looking at right here. This represents the whole address. This represents a summary of all of the networks that are out there.

So this is a summary address for everything, and we see this used quite often in things like access control lists, where you're trying to block certain traffic or allow certain traffic. Another example would be a routing table, where this would represent the default route — if I don't know where it goes, then as a last resort let's send it in this direction and get it to the next hop. So this address right here, 0.0.0 0.0/z, represents everything, all of the internet.

Loopback Addresses

What we'll have on machines is what's called a loopback address, and a loopback address is used for testing that interface. Here I have a machine, it has a network interface, and let's say that network interface is not plugged into the network right now. If I were to try to ping the loopback address, because that interface is down it's not going to communicate; nothing is going to happen.

Now let's say we plug it into the wall or into a network connection and that interface comes up. There are certain protocols and certain things that are activated on that interface, and now I can ping that loopback address, the interface. What it essentially does is that machine will test out the stack and it'll test everything out to see if it's functioning correctly. That machine will actually form a packet and send it to itself and get a reply back, and then you get a verification that the network interface is up and is functioning.

If you are having additional communication issues getting out to the outside world, or to someplace out there, then you at least know that the interface is functioning to a certain level and is communicating at a certain level. One of the things it's used for — it can be used for many different things — is to troubleshoot, to see if your connection or that device is the problem, or if the problem exists somewhere beyond that device. So loopback addresses can be really helpful for troubleshooting.

There's actually a huge amount of addresses that are assigned to this loopback address, a whole network, and that network is 127.0.0.08. So anything that is 127 whatever, whatever, whatever, with the exception of 127.0.0.0, which specifically is a network address, so that's not going to work. But any other combination within this — if you get on a Windows machine and ping 12754.31.68, that will actually get some sort of reply. That's one of the loopback addresses that you can use for testing that interface or talking to itself. If there's some sort of connection that it needs to make to itself, you can use something within this address range to make a connection to itself. This range right here is devoted to computers and servers for them to make connections to themselves and test things out, for local traffic on that machine.

Now the one that we typically use as the loopback address to test out that local machine is the 127.0.0.1. This is known as localhost. In fact, if you ping localhost, it will translate it to this IP address and then ping that IP address. So localhost is just a host; it's within the host file of the machine, and it's just a way to address the machine itself using a name rather than an IP address. What it's going to do is translate that name to this IP address, 127.0.0.1.

Private Address Ranges

Private addresses are a range here: the 10, the 172, and the 192. There are certain networks within those that can be used on your local network. It could be used in your home office, it could be used in a business. So these are assigned to businesses and — excuse me, they're not assigned, they're unassigned. Anybody can use them. You can put them on all of your equipment and use it within your networks for testing or for just communication within your networks.

But these private address ranges cannot be used out on the internet. They will get blocked out on the internet at some point. As you exit your interface, or when you exit your network, that will get translated into some sort of public address. So these address ranges are not to be used on the internet and out in the public realm; they'll get translated as they exit.

These are ranges that you can use, and they're most often used in fact nowadays. If you go and look on your computer at home, it will probably use — actually, even more specific, it'll probably be somewhere in the 192.168 range, and that third octet would probably be a zero or one. I've seen some exceptions to that, but for the most part that's the range that gets assigned to your home networks and to a lot of businesses that are small businesses.

Link-Local Addresses

Then we have that link local network, or link local address. It also goes by a couple of different names. We've got the APIPA address, or the automatic private IP address — automatic private IP address, APIPA — or it's also known as AutoIP.

When you connect to a network that doesn't have a DHCP server, but your computer is out there searching for a DHCP server, it's going to look for a little while, and when it fails, then it will say, "Okay, I can't connect via this method. I can't get an IP address that's going to be in the range of this network. So I'm just going to take a 169.254 something." It will randomly choose these last two octets — randomly choose a number and assign it to the computer. That way, devices that go through this process at least will have some number assigned to them, and what that will do is help make that machine addressable in some way.

Let me give you an example of this. As I was going around setting up a lot of card readers at these different stations, the machines themselves weren't on the network, but they were connecting directly to a machine. They couldn't get an IP address because they're connected to the network interface on these machines, and the machines weren't handing out this automatic address to these card readers. What had to happen was the machines would come up, they look for an address, it would auto assign one of these APIPA addresses, and then I would have to go and manually set on the machine some sort of address within this range, so I could connect to that machine and configure it to be set up to work and be able to connect into this computer. So that's a way to network devices that are on a network that doesn't have a DHCP server — connect these devices and do some configuration, and at least do some sort of communication, even if it's not going to communicate to the outside world.

Those were just some brief concepts around the IP version 4 addresses. We talked about the IP addresses, networks, hosts and subnet masks and how those are formed, address types, and some unique networks and addresses. Once again, this is not supposed to be a comprehensive view of IP version 4 addresses. We didn't get really in depth into subnetting, but this gives you a general idea for future discussions.

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →