My ADD

07 October 2008

Private Network Tips

* Never use 192.168.0.0/24
* Never use 192.168.1.0/24
* Never use 10.0.0.0/24
* Never use 192.168.0.0/16
* Never use 10.0.0.0/8
* Heck, don't use ANYTHING in 192.168.0.0/16

Why? They are in use everywhere. At work, we created our private network many moons ago, and used 192.168.0.0/24 as the data network, and 192.168.1.0/24 as the voice network. And we have been regretting it ever since. This becomes a problem when a user tries to VPN in from his/her Linksys/Netgear/whatever network, which is invariably numbered 192.168.0.0/24 or 192.168.1.0/24. Hello network overlap!

Instead, pick a random range in the RFC1918 space. There are 256 possible /24s in 192.168.0.0/16. 65,536 /24s in 10.0.0.0/8. Heck, most people overlook 172.16.0.0/12, that's 4096 /24s right there. The following private networks have been randomly generated, just for you:

* 10.135.147.0/24
* 10.175.98.0/24
* 10.112.200.0/24
* 172.24.98.0/24
* 10.208.129.0/24

Reload to get more random private networks. A web page to specify other IP ranges/netmasks is coming soon. In the mean time, if you know PHP and want to see the source to this page, it is available