Concept and mechanism
An IPv4 prefix defines how many bits belong to the network. A /27 leaves five bits, giving 32 addresses. For a conventional subnet, reserving network and broadcast leaves 30 host addresses. The 10.24.8.128/27 range ends at 10.24.8.159; hosts range from 129 to 158. Do not apply this reservation rule indiscriminately to special cases such as /31 links. When sizing a VLAN, count gateways, supporting equipment, and growth headroom. Record the prefix explicitly: similar-looking addresses do not prove membership of the same subnet without the mask.
Guided application
During a banking incident, separate levels of evidence. A TCP ACK confirms transport receipt, not validation of an order or a database commit. Acceptance requires the corresponding functional response. If retransmissions and CRC errors rise, inspect both link ends and interfaces along the path. Cabling, optics, and ports are hypotheses to investigate; one counter does not automatically identify the faulty component. Retain the time window and traffic volume to distinguish recent increases from accumulated historical errors.
For 28 usable addresses including the gateway, /27 is the smallest sufficient conventional block among /28, /27, and /26. Then validate the transaction as well as ping.
Common pitfalls
Counting only servers; forgetting the mask; treating ACK as business proof; assigning CRC one cause without inspection.
Related topics: IPv6, MAC learning, and VRFs · VLANs, trunks, and access protection
First identify address scope and what each observation actually proves.
Reference: CIDR addressing and aggregation · 200-301 CCNA v1.1