41
votes

For best performance and ease of management, is it better to use 192.168.x.x or 10.x.x.x range of addresses for a small (<50 PCs) business network?

This would correspond to a subnet of 255.255.0.0 and 255.0.0.0 respectively.

1
  • 8
    Don't forget, there is nothing stopping you from using 10.0.0.0/24.
    – David
    Aug 11, 2009 at 14:18

12 Answers 12

36
votes

RFC 1918 may offer you some guidance on this. At the end of it all though, you've got to design your network to suit, well, your network. If you've only got ~50 devices on the network, then any /24 (255.255.255.0 netmask) will more then suffice

What do you estimate your growth to be? Will a /24 suit in the future? That's a consideration you need to take into account

The performance side of things, I'd probably leave any performance impact to be theoretical. And management, well, that may depend on the tool used. Are you just considering IP allocation. Will DHCP work for you? Do you plan on having statically configured devices? You IP address management may start in the form of a spreadsheet. It may be more elaborate, and be database backed. You may want to tie it in to a NMS or something. There's a lot of scope in this area

1
  • 6
    +1 for actually mentioning RFC1918 Aug 11, 2009 at 13:31
32
votes

Just because the "default" mask for a space is something large doesn't mean you have to use that mask with that space.

I would pick a subnet in the 10/8 space, like 10.1.0.0/24. This would give you room to grow in the future (ie add 10.1.1.0/24 for new space in the current site, and 10.2.0.0/24 for an alternate site).

For larger initial sites, we usually use a /20 network -- that would give you 10.0.0.0 through 10.0.15.255 to play with, or around 4094 individual IP addresses. That way you can allocate DHCP scopes in logical chunks (like 10.0.8.0 through 10.0.9.255) while allocating other specific addresses in specific places (ie we always put printers and networking gear in 10.0.15).

I would avoid using the whole 10/8 at once because if your network ever grows beyond around 4000 systems the arp noise is going to start taking a non-trivial amount of bandwidth.

I would avoid 192.168.0/24 and 192.168.1/24 because these are defaults for many consumer-grade home devices, and should you ever have to get into VPN access it will cause problems if your users home networks conflict with the "corporate" one.

I personally would avoid 192.168 totally because it doesn't flow off the fingers like the low-hanging fruit in 10.x does. On the other hand, if you have a site policy of avoiding 192.168, it makes it easy to use such addresses for local playing (ie VMware).

3
  • 2
    'it doesn't flow off the fingers' exactly how I see it too.
    – fduff
    Mar 10, 2015 at 8:33
  • 1
    That argument against 192.x.x.x is very true. I've come across home/work clashes in several cases because a work network used 192.168.1.x May 9, 2015 at 7:37
  • I have just that problem at work. We use the 10.1 subset but some client sites exposed within our intranet use 192.168, the result being that when I work from home I can resolve all domains but cannot access some sites without doing SSH-in-RDP.
    – Thomas
    Jul 28, 2015 at 20:38
14
votes

There will be no difference for a such small network.
Just note that 172.16/12 is also reserved for private use. (172.16.0.0 to 172.31.255.255) (see RFC1918)

2
  • 4
    +1 I also use 172.16.16.0/24 for home-installations
    – ThorstenS
    Aug 11, 2009 at 15:18
  • in that case it might interfere with docker.
    – None
    May 12, 2019 at 13:44
14
votes

Use 10.X.X.X it is often generally faster to type than 192.168.X.X. Other than that, there is no different except the number of supported hosts, not going into VLANs.

1
  • 6
    +1 for ease of typing ;-) Aug 11, 2009 at 14:22
11
votes

As everyone has mentioned, there is no difference between them.

You can carve the address space as small or as large as you want. You want as small as you need, but not so small to make it hard to expand.

The only reason to pick one over the other is if you connect to another network, either by a VPN or by a direct link. You will run into trouble if you have the same address range, so consider what networks you are likely to connect to. Readdressing is not a task to be taken lightly.

2
  • Sums up my feelings on the subject. +1 Aug 11, 2009 at 11:18
  • 2
    Pick something like 192.168.79.0/24 IMO. Chances are the networks you will have to VPN to will be 192.168.0.0, 192.168.1.0. 172.16 is also a nice touch.
    – Kyle
    Aug 11, 2009 at 11:41
6
votes

There is no difference at all for such a small network - certainly any performance differences would be highly theoretical and miniscule.

4
  • 4
    Not even theoretical. There is no difference. Aug 11, 2009 at 11:15
  • I said that because there's bound to be someone who will argue that there will be a TINY difference if maths/processing used for one over the other - people can be like that, but you're right.
    – Chopper3
    Aug 11, 2009 at 11:47
  • 6
    this is not true at all, every network tool that will try to discover hosts on the net by scan will try to perform a scan of the entire net. This leeds to geological scan times even for a very small number of effectively present hosts if the netmask used is too "permissive". LEt choose the smallest net you can live with!
    – drAlberT
    Aug 11, 2009 at 11:48
  • 1
    great point AlberT. Some examples are finding out network printers via broadcast.
    – hayalci
    Aug 11, 2009 at 13:11
1
vote

If you have less than 50 PC use a /24 mask. I would go for an 192.168.1.0/24 series out of convention. 192.168.x.x is reserved for class C subnet and for a /24 that would be appropriate.

raj

1
vote

There's no obvious advantage or disadvantage choosing a range out of 10.0.0.0/8, 172.16.0.0/12 or 192.168.0.0/24 these days (with almost everything capable of using CIDR). If you're looking at a corporate merger down the line, there MAY be some advantage of picking a random starting point in one of the two larger blocks, as that MAY mean you won't have to renumber. However, planning for that isn't really a priority.

1
vote

The real reason to go with 10.x.x.x for a small business network is, as David touches on, is VPN access to the system.

192.168.1.x is a very commonly used network. Avoid it.

0
votes

It does not mather what network you use no, but there is a advatage in NOT using 10.0.0.X or 192.16.45.x. If you use those networks it can easly create issues if you for some reason need a VPN system, and the network you dail has the same network mask as you.

0
votes

That depend on your need :
192.168.x.x is a Private Internet address Class C that support 65534 hosts
10.x.x.x is a Private Internet address Class A that support 16777214 hosts.

In my network i have about 1000 targets and i use the Class C of address.
May be for some security view you can use 10.x.x.x/24 if you have less that 50 targets. please find here a similar post

2
  • 2
    Almost. 192.168.0.0/16 256 (or 254) Class C networks, each able to support 254 devices. However, the actual "class" of network is mostly a moot point in this day and age.
    – Vatine
    Aug 11, 2009 at 17:44
  • 2
    Indeed, CIDR (Classless Inter-Domain Routing) was promulgated something like 15 years ago.
    – pjz
    Feb 10, 2012 at 15:11
0
votes

Either/or, but just make sure that you throw everything you may have ever heard about classes out of the nearest window and use CIDR instead.

With 50 hosts you might even be able to use a 25 bit netmask which would help avoid the VPN issues mentioned by others (I doubt if many networks out there use 25 bit netmasks).

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .