Concept and mechanism
Use layers to form hypotheses while retaining observed evidence. An HTTP 403 after completed TCP and TLS demonstrates communication to the responding component; it does not establish correct application authorization. Correlate the request ID and confirm which component responded, including proxies. For a new design, document subnets, gateways, reservations, and dependencies. On a conventional IPv4 LAN, /27 contains 32 addresses and normally permits 30 hosts after reserving network and broadcast. Do not apply this calculation unchanged to point-to-point /31 or platform-specific cloud reservations. The exercise requirement explicitly includes the gateway address.
Guided application
For 10.42.8.64/26, block size is 64:.64 through.127, with conventional hosts.65 through.126. Record the range in IPAM and check overlap before connecting networks. Integrating two AWS VPCs with the same 10.20.0.0/16 is not solved by opening rules: direct peering does not allow that overlap. Renumbering requires inventorying configurations, ACLs, allowlists, monitoring, and applications holding IPs. Plan tests and rollback with owners. In a fictional banking setting, a subnet change may affect jobs, transfers, and databases even when the main page responds. Acceptance should cover relevant flows.
28 devices plus one gateway require 29 hosts: /27 fits a conventional LAN, but confirm extra reservations in the chosen service.
Common pitfalls
Confusing HTTP status with physical failure; forgetting the gateway; assigning broadcast; ignoring overlapping CIDRs.
Related topics: Protocols, cloud, and shared dependencies · Routing, switching, and physical installation
Turn requirements into verifiable addressing and use observed responses to choose the layer to investigate.
Reference: CIDR addressing and aggregation · N10-009 V9