AWScloud~5 mins

CIDR blocks and IP addressing in AWS - Commands & Configuration

Choose your learning style10 modes available

Learn Why Deep Visual Try Challenge Project Recall Time

Start learning this pattern below

Jump into concepts and practice - no test required

Recommended

Test this pattern10 questions across easy, medium, and hard to know if this pattern is strong

Introduction

When you create networks in the cloud, you need to decide which IP addresses devices will use. CIDR blocks help you define a range of IP addresses in a simple way. This lets your cloud resources talk to each other without conflicts.

When setting up a new virtual private cloud (VPC) in AWS to isolate your resources.

When you want to divide your network into smaller parts called subnets for better organization.

When you need to control which IP addresses can access your servers.

When connecting multiple networks and avoiding overlapping IP addresses.

When planning how many devices or servers you want to fit in your network.

Config File - vpc.yaml

vpc.yaml

Resources:
  MyVPC:
    Type: AWS::EC2::VPC
    Properties:
      CidrBlock: 10.0.0.0/16
      EnableDnsSupport: true
      EnableDnsHostnames: true
      Tags:
        - Key: Name
          Value: my-vpc
  MySubnet:
    Type: AWS::EC2::Subnet
    Properties:
      VpcId: !Ref MyVPC
      CidrBlock: 10.0.1.0/24
      AvailabilityZone: us-east-1a
      Tags:
        - Key: Name
          Value: my-subnet

This file creates a VPC with a CIDR block of 10.0.0.0/16, which means it can hold many IP addresses.

It also creates a subnet inside that VPC with a smaller CIDR block 10.0.1.0/24, which is a smaller range inside the VPC.

This setup helps organize your network and control IP address allocation.

Commands

This command creates a new VPC with the IP address range 10.0.0.0 to 10.0.255.255, allowing many devices inside.

Terminal

aws ec2 create-vpc --cidr-block 10.0.0.0/16

Expected OutputExpected

{ "Vpc": { "VpcId": "vpc-0abcd1234efgh5678", "State": "pending", "CidrBlock": "10.0.0.0/16", "IsDefault": false } }

→

--cidr-block - Defines the IP address range for the VPC using CIDR notation

This command creates a subnet inside the VPC with a smaller IP range, allowing better organization and control.

Terminal

aws ec2 create-subnet --vpc-id vpc-0abcd1234efgh5678 --cidr-block 10.0.1.0/24 --availability-zone us-east-1a

Expected OutputExpected

{ "Subnet": { "SubnetId": "subnet-0123abcd4567efgh8", "VpcId": "vpc-0abcd1234efgh5678", "CidrBlock": "10.0.1.0/24", "AvailabilityZone": "us-east-1a", "State": "pending" } }

→

--vpc-id - Specifies which VPC the subnet belongs to

→

--cidr-block - Defines the IP address range for the subnet

→

--availability-zone - Sets the physical location for the subnet

This command checks the details of the VPC to confirm the CIDR block and status.

Terminal

aws ec2 describe-vpcs --vpc-ids vpc-0abcd1234efgh5678

Expected OutputExpected

{ "Vpcs": [ { "VpcId": "vpc-0abcd1234efgh5678", "State": "available", "CidrBlock": "10.0.0.0/16", "IsDefault": false } ] }

→

--vpc-ids - Filters the output to show only the specified VPC

This command checks the details of the subnet to confirm its CIDR block and availability zone.

Terminal

aws ec2 describe-subnets --subnet-ids subnet-0123abcd4567efgh8

Expected OutputExpected

{ "Subnets": [ { "SubnetId": "subnet-0123abcd4567efgh8", "VpcId": "vpc-0abcd1234efgh5678", "CidrBlock": "10.0.1.0/24", "AvailabilityZone": "us-east-1a", "State": "available" } ] }

→

--subnet-ids - Filters the output to show only the specified subnet

Key Concept

If you remember nothing else from this pattern, remember: CIDR blocks define the size and range of IP addresses your cloud network can use.

Common Mistakes

Using overlapping CIDR blocks for multiple VPCs or subnets

Overlapping IP ranges cause network conflicts and communication failures between resources.

Plan and assign unique, non-overlapping CIDR blocks for each VPC and subnet.

Choosing too small a CIDR block that cannot hold enough IP addresses

You will run out of IP addresses and cannot add more resources to the network.

Estimate the number of devices and choose a CIDR block large enough to fit them.

Not specifying the correct VPC ID when creating subnets

The subnet will not be created in the intended VPC, causing confusion and errors.

Always double-check and use the correct VPC ID when creating subnets.

Summary

Create a VPC with a CIDR block to define the IP address range for your cloud network.

Create subnets inside the VPC with smaller CIDR blocks to organize and separate resources.

Use AWS CLI commands to create and verify your VPC and subnets with their CIDR blocks.

Practice

(1/5)

1. What does a CIDR block like 192.168.1.0/24 represent in AWS networking?

easy

A. A single IP address 192.168.1.24

B. An invalid IP address range

C. A subnet mask of 255.255.0.0

D. A range of IP addresses from 192.168.1.0 to 192.168.1.255

CIDR blocks and IP addressing in AWS - Commands & Configuration

Start learning this pattern below

Practice

Solution

Step 1: Understand CIDR notation

Step 2: Calculate the IP range

Final Answer:

Quick Check:

Solution

Step 1: Calculate bits needed for 512 addresses

Step 2: Determine CIDR prefix

Final Answer:

Quick Check:

Solution

Step 1: Calculate total IPs in /26 block

Step 2: Subtract network and broadcast addresses

Final Answer:

Quick Check:

Solution

Step 1: Understand the VPC range

Step 2: Check subnet ranges for overlap

Final Answer:

Quick Check:

Solution

Step 1: Calculate needed CIDR for each subnet

Step 2: Assign CIDRs inside 10.0.0.0/24 without overlap

Final Answer:

Quick Check: