Introduction
Welcome back. In our last lesson, we designed the complete structure for an IP Address Management (IPAM) document. We established it as the "single source of truth" for the network, with essential fields for VLANs, subnets, gateways, locations, and crucially, VRFs. You now have the empty blueprint for a professionally managed network.
Today, you'll bring that blueprint to life. The goal of this lesson is to populate an IPAM document by mapping a VLAN plan to a VLSM allocation. This is where your subnetting math from Module 2 meets the documentation strategy from our last lesson. We'll take a list of business requirements (the VLAN plan), use the VLSM process to carve up a large address block, and methodically fill in your IPAM sheet.
This process is the core of network address planning. It ensures every device has a logical place, prevents address conflicts, and makes the entire network comprehensible and scalable.
The Foundation: The VLSM Allocation Process
Before we touch an IP address, we need a clear, repeatable process. You've already learned the mechanics of VLSM, but applying it to a large plan requires discipline. The core idea is to allocate the largest subnets first to avoid fragmenting your address space.
Let's review the step-by-step process for VLSM allocation.
VLSM Subnetting - subnetting a subnet
This video from Sunny Classroom provides an excellent, concise demonstration of the entire VLSM process, from organizing requirements to allocating subnets. Pay close attention to the methodical, step-by-step approach.
Watch from 03:37 to the end. The key steps to focus on are: Step 1 (03:37): Arranging networks from largest to smallest host requirement. This is the most critical first step. Subsequent Steps: Notice how they take the largest requirement, find the right subnet size, allocate it, and then move to the next available address to continue the process for the smaller requirements. This sequential allocation is what prevents overlaps.
This process of "sort, allocate, repeat" is exactly what we will use to populate our IPAM document.
Scenario: The AlphaCorp Network Plan
Let's work with a practical scenario. You are designing the network for a company called "AlphaCorp," which has two buildings, HQ and Engineering. You have been given the parent address block 10.50.0.0/16 to use for the entire company.
From the previous module's work, you have the following VLAN plan based on the company's requirements, including a 25% growth forecast:
| Department/Purpose | Required Hosts | Future Hosts (25% growth) | Location | VRF | VLAN ID (Proposed) |
|---|---|---|---|---|---|
| HQ Corporate Users | 350 | 438 | HQ | INTERNAL |
10 |
| Engineering Users | 180 | 225 | Engineering | INTERNAL |
20 |
| HQ WiFi | 80 | 100 | HQ | INTERNAL |
11 |
| Engineering WiFi | 45 | 57 | Engineering | INTERNAL |
21 |
| Servers | 40 | 50 | HQ Data Center | INTERNAL |
30 |
| Voice | 90 | 113 | HQ & Engineering | INTERNAL |
40 |
| Network Management | 15 | 19 | All Sites | INTERNAL |
99 |
| Guest WiFi | 200 | 250 | All Sites | GUEST |
100 |
| P2P Link: HQ-Core to Eng-Core | 2 | 2 | N/A | INTERNAL |
500 |
Our task is to take this plan and create a detailed IPAM entry for each requirement.
Step-by-Step IPAM Population
We will now execute the VLSM process, populating our IPAM document as we go. We start with a blank version of the IPAM sheet we designed in the last lesson. Our parent block is 10.50.0.0/16.
1. Sort Requirements
First, we sort the list by the "Future Hosts" column, from largest to smallest.
- HQ Corporate Users: 438 hosts
- Guest WiFi: 250 hosts
- Engineering Users: 225 hosts
- Voice: 113 hosts
- HQ WiFi: 100 hosts
- Engineering WiFi: 57 hosts
- Servers: 50 hosts
- Network Management: 19 hosts
- P2P Link: 2 hosts
2. Allocate and Document
Now, we go down the sorted list, one by one.
Requirement 1: HQ Corporate Users (438 hosts)
- Calculation: We need 438 usable addresses. A
/24gives 254, which is too small. A/23gives 510, which is perfect. - Allocation: We take the first available block from our parent range:
10.50.0.0/23. - Documentation: We create the first row in our IPAM document. We'll assign the gateway (SVI) to be the first usable IP,
.1, a common practice.
IPAM Document (Version 1):
| VLAN ID | VLAN Name | Subnet (CIDR) | Network Addr | Usable Range | Broadcast Addr | Gateway IP | VRF | Location |
|---|---|---|---|---|---|---|---|---|
| 10 | HQ_CORP_USERS | 10.50.0.0/23 |
10.50.0.0 |
10.50.0.1 - 10.50.1.254 |
10.50.1.255 |
10.50.0.1 |
INTERNAL |
HQ |
Requirement 2: Guest WiFi (250 hosts)
- Calculation: 250 hosts. A
/24gives 254 addresses. This is a tight fit, but acceptable. To allow for more growth, a/23(510 hosts) might be better, but we will stick to the most efficient size for this exercise,/24. - Allocation: Our last subnet ended at
10.50.1.255. The next available address is10.50.2.0. We allocate10.50.2.0/24. - Documentation: We add the second row. Note the different
VRF.
IPAM Document (Version 2):
| VLAN ID | ... | Subnet (CIDR) | ... | VRF | Location |
|---|---|---|---|---|---|
| 10 | ... | 10.50.0.0/23 |
... | INTERNAL |
HQ |
| 100 | GUEST_WIFI | 10.50.2.0/24 |
10.50.2.0 |
10.50.2.1 - 10.50.2.254 |
10.50.2.255 |
Requirement 3: Engineering Users (225 hosts)
- Calculation: 225 hosts. A
/24(254 usable) is the right fit. - Allocation: The last subnet ended at
10.50.2.255. The next available address is10.50.3.0. We allocate10.50.3.0/24. - Documentation: We add the third row.
IPAM Document (Version 3):
| VLAN ID | ... | Subnet (CIDR) | ... | VRF | Location |
|---|---|---|---|---|---|
| ... | ... | ... | ... | ... | ... |
| 20 | ENG_USERS | 10.50.3.0/24 |
10.50.3.0 |
10.50.3.1 - 10.50.3.254 |
10.50.3.255 |
We continue this process for every requirement until our sorted list is complete. For the smaller subnets:
- Servers (50 hosts): Needs a
/26(62 usable IPs). - Network Management (19 hosts): Needs a
/27(30 usable IPs). - P2P Link (2 hosts): Needs a
/30(2 usable IPs).
The key is to always find the end of the last allocated subnet and start the new one at the very next address.
This process gives you a complete, non-overlapping address plan documented in one place. The Cisco guide below contains a fantastic example of a finished plan that looks very similar to what we are building.
The 'IP Addressing Guide' from Cisco is an invaluable resource. The table within it serves as a professional reference for what a final IPAM document looks like.
Study 'Table 1. SBA Assigned IP Addresses'. Notice how it clearly maps a location (Headquarters, Branch 1) and VLAN to a specific subnet. It also includes summary addresses, a topic we'll cover later. This is your target for a well-documented plan.
From Spreadsheet to Professional IPAM
While a spreadsheet is excellent for learning and planning, in a production environment with thousands of IPs, you'd use a dedicated IPAM tool like NetBox. The manual process you just learned is critical for understanding what these tools do automatically.
These tools allow you to define your parent aggregate (10.50.0.0/16) and then create prefixes (your subnets) from it. The tool validates your work, preventing you from creating overlapping subnets and automatically tracking IP address utilization.
For someone comfortable on the CLI, a major benefit of these tools is their API and import/export functions. You could plan your entire network in a spreadsheet, save it as a CSV, and bulk-import it into the IPAM, which then becomes the source of truth for your automation scripts.
Netbox IPAM Prefixes and IP addresses the right way
Let's revisit this clip from Jeremy Cioara. Focus on how you can populate an IPAM tool from a CSV file. This bridges the gap between manual spreadsheet planning and professional-grade tools.
Watch the section from 11:20 to 13:02. The presenter explains and demonstrates how to use a CSV file to bulk-import IP addresses and their descriptions. This is a highly practical skill for deploying a large, pre-planned addressing scheme.
Exercise: Complete the AlphaCorp IPAM
Now it's your turn. Below is the complete, sorted list of requirements for AlphaCorp. Your task is to complete the IPAM document we started.
Parent Block: 10.50.0.0/16
Starting Point: Our last allocated subnet was for Engineering Users (10.50.3.0/24), which ends at 10.50.3.255. The next available address is 10.50.4.0.
Sorted Requirements List:
- HQ Corporate Users: 438 hosts ->
/23(Allocated:10.50.0.0/23) - Guest WiFi: 250 hosts ->
/24(Allocated:10.50.2.0/24) - Engineering Users: 225 hosts ->
/24(Allocated:10.50.3.0/24) - Voice: 113 hosts ->
/25(126 usable) - HQ WiFi: 100 hosts ->
/25(126 usable) - Engineering WiFi: 57 hosts ->
/26(62 usable) - Servers: 50 hosts ->
/26(62 usable) - Network Management: 19 hosts ->
/27(30 usable) - P2P Link: 2 hosts ->
/30(2 usable)
Your Task:
Create a Markdown table for requirements 4 through 9. For each one, determine the correct subnet allocation starting from 10.50.4.0 and fill in all the columns of the IPAM document. Assume the gateway is always the first usable IP address.
Here is the table structure for you to fill in:
| VLAN ID | VLAN Name | Subnet (CIDR) | Network Addr | Usable Range | Broadcast Addr | Gateway IP | VRF | Location |
|---|---|---|---|---|---|---|---|---|
... |
... |
... |
... |
... |
... |
... |
... |
... |
Conclusion
In this lesson, you've performed the most critical task in IP address planning: mapping a list of requirements to a VLSM allocation and documenting it in a structured IPAM. This disciplined process transforms a chaotic list of needs into an orderly, efficient, and non-overlapping address plan.
Key Takeaways:
- The VLSM allocation process must be methodical: sort requirements from largest to smallest, then allocate subnets sequentially from your parent block.
- Each requirement (VLAN) maps to one row in the IPAM document.
- The IPAM document captures all essential data: the VLAN, the calculated subnet details (network, usable range, broadcast), the gateway IP, and contextual information like VRF and location.
- This filled-out IPAM is the master blueprint that will guide your CLI configurations.
In our next lesson, we will focus on verifying the IPAM plan for completeness and the absence of overlapping allocations. You'll learn how to audit your own work to catch common errors before a single line of configuration is written, ensuring your network deployment is smooth and error-free.