This text shows the network interface config for a device. Ip is 1.2.3.7 in the subnet 1.2.3.4/30
IPs are 32-bit numbers that represent the addresses, machines in a network use to communicate. Each IP is part of a network.
A subnet is a defined subset of a network and represented by a number of 0-32 showing the number of bits at the end, that can be altered.
For example your home network is probably in the subnet of 192.168.0.0/16
This means that your IP starts with 192.168 and the 16 shows the size of the subnet. IPs in that subnet are 192.168.0.0 all the way to 192.168.255.255.
All devices in this subnet are local. You could also make smaller subnets inside this one to structure you local network or (and that is why companies use this) to allow devices in the same network to connect to each other or to disallow devices in different subnets.
To do this, a gateway is brought into the network. Its purpose is to connect multiple networks. At home your router can do this but in a company there probably is a dedicated firewall-machine.
The gateway also needs an IP. So in this “joke” the server is in the net starting with 1.2.3.4 and only the last 2 bits can be changed. So the IPs are 1.2.3.4 to 1.2.3.7.
The first IP (1.2.3.4) is reserved for the network, the last is broadcasting (1.2.3.7)and we also need a gateway (1.2.3.5) so we only have one IP left (1.2.3.6) so this device is really “secure”…
A Firewall could do the same and a lot of other things as well, but some companies are weird and networking is hard™.
I didn’t doctor the copy/paste (except for redacting the MAC address)… Weird, now I’ve been nerdsniped.
EDIT: No, this makes sense… but is also worse: Network address is 1.2.3.4, usable IP range is 1.2.3.5, 1.2.3.6 and broadcast is 1.2.3.7… Which means they’re assigning the network address somehow. And I guess somehow the router/remote device just says “ok”… I’m leaving this alone lest I lose more of my sanity.
(Also there are lots of parallel subnets and, to the best of my knowledge, no firewall doing anything meaningful between them… shrugs)
Wait! You’re right… I misread that, because everything is abbreviated and I don’t look at ifconfigs that often
“brd” is broadcast
“inet” is the real IP plus the netmask
When Palo Alto sells your dipshit CIO one firewall appliance per virtual server. “Somehow. Someway,” says the salesperson, “we’re gonna get even more firewalls in here!”
I’ll take the
/30, because I don’t want to share a subnet with someone else!… Incidentally I know a “serious” organization IRL which actually takes this to heart (NSFL, and I promise this is a real, production machine):
x: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP link/ether <redacted> brd ff:ff:ff:ff:ff:ff inet 1.2.3.4/30 brd 1.2.3.7 scope global br0 valid_lft forever preferred_lft foreverUhm… Is there a translation for people who don’t speak machine? I’d really like to get this joke
I’ll try my best:
This text shows the network interface config for a device. Ip is 1.2.3.7 in the subnet 1.2.3.4/30
IPs are 32-bit numbers that represent the addresses, machines in a network use to communicate. Each IP is part of a network. A subnet is a defined subset of a network and represented by a number of 0-32 showing the number of bits at the end, that can be altered.
For example your home network is probably in the subnet of 192.168.0.0/16
This means that your IP starts with 192.168 and the 16 shows the size of the subnet. IPs in that subnet are 192.168.0.0 all the way to 192.168.255.255.
All devices in this subnet are local. You could also make smaller subnets inside this one to structure you local network or (and that is why companies use this) to allow devices in the same network to connect to each other or to disallow devices in different subnets.
To do this, a gateway is brought into the network. Its purpose is to connect multiple networks. At home your router can do this but in a company there probably is a dedicated firewall-machine.
The gateway also needs an IP. So in this “joke” the server is in the net starting with 1.2.3.4 and only the last 2 bits can be changed. So the IPs are 1.2.3.4 to 1.2.3.7.
The first IP (1.2.3.4) is reserved for the network, the last is broadcasting (1.2.3.7)and we also need a gateway (1.2.3.5) so we only have one IP left (1.2.3.6) so this device is really “secure”…
A Firewall could do the same and a lot of other things as well, but some companies are weird and networking is hard™.
Btw.: I think his 1.2.3.7 should be a 1.2.3.6
I didn’t doctor the copy/paste (except for redacting the MAC address)… Weird, now I’ve been nerdsniped.
EDIT: No, this makes sense… but is also worse: Network address is
1.2.3.4, usable IP range is1.2.3.5, 1.2.3.6and broadcast is1.2.3.7… Which means they’re assigning the network address somehow. And I guess somehow the router/remote device just says “ok”… I’m leaving this alone lest I lose more of my sanity.(Also there are lots of parallel subnets and, to the best of my knowledge, no firewall doing anything meaningful between them… shrugs)
Wait! You’re right… I misread that, because everything is abbreviated and I don’t look at ifconfigs that often
“brd” is broadcast
“inet” is the real IP plus the netmask
Wtf!
Thanks very much for this explanation!
When Palo Alto sells your dipshit CIO one firewall appliance per virtual server. “Somehow. Someway,” says the salesperson, “we’re gonna get even more firewalls in here!”
Is 1.2.3.4 even private or do you guys actually own that range?
Hahahahahaahahahah
Standards only apply if you care. And these guys certainly don’t! Welcome to the world of ~*~ The Sad Corporate Reality ~*~