IP Addressing, NAT, DHCP, Subnetting, and Email Tracing

🔑Quick reminder: this is PLTW's Activity 4.2.4, taught here in Unit 3 instead of its usual home in Unit 4, because subnetting is prerequisite knowledge for the network you'll design in Project 2.1.3. The digital-signature content that normally lives under this number comes back later, folded into 4.2.3.
Foundational NetworkingConcept

IPv4 and IPv6 Addressing

Every device on a network needs a unique address. IPv4 addresses are written as four numbers 0–255 separated by dots (dotted decimal), like 192.168.1.10 — roughly 4.3 billion possible addresses, which the modern internet has essentially exhausted. IPv6 addresses are written in hexadecimal, separated by colons, like 2001:0db8::1 — an address space large enough that exhaustion isn't a realistic concern.

💡Private networks reserve specific IPv4 ranges for internal use — 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 — none of which are routable on the public internet directly. That's exactly the gap NAT exists to bridge.
Foundational NetworkingConcept

NAT and DHCP

NAT (Network Address Translation) translates private, internal IP addresses into a single public address when traffic leaves the local network — letting an entire office or household share one public IP address, while also hiding internal network structure from the outside world.

DHCP (Dynamic Host Configuration Protocol) automatically assigns an IP address to a device when it joins a network, instead of requiring someone to configure it by hand. A device requests an address; a DHCP server leases one out of its available pool for a set period of time.

ProtocolWhat it solves
NATLets many private devices share one public address
DHCPAutomatically hands out addresses instead of manual configuration
3.3.ASkill

Subnetting and CIDR Notation

Subnetting divides one network into smaller, isolated pieces. CIDR (Classless Inter-Domain Routing) notation — the "/24" you see after an IP address — states how many bits of the address are fixed as the network portion; the remaining bits are available for individual hosts.

🔢 Subnetting Walkthrough — click each step
192.168.1.0 /24 — a /24 means the first 24 bits (three octets) identify the network, leaving 8 bits for hosts: 256 possible addresses (254 usable).
🔑Notice the tradeoff: the more bits you borrow for subnets, the fewer addresses each subnet has left for hosts. Going from /24 to /26 quadrupled your subnet count but cut each subnet's capacity from 254 usable addresses down to 62.
3.3.AConcept

Why This All Matters for Security

Subnetting isn't just an organizational nicety — it's a real security control. If a device on one subnet is compromised, proper segmentation contains the breach to that subnet instead of exposing the entire network. This is the exact mechanism behind two concepts you'll use directly in the next project:

ConceptWhat it is
DMZ (screened subnet)A lower-security subnet sitting between the public internet and the internal network — holds public-facing resources without exposing internal systems directly
VLANA switch-level logical separation of devices, even when they're physically connected to the same hardware
💡When you design the e-commerce network in Project 2.1.3, every subnet boundary you draw is a direct application of what you just practiced here.
Foundational NetworkingSkill

Tracing an Email's Real Origin

Every email carries a stack of Received: headers — one added by each server the message passed through on its way to you. Reading them from the bottom up reconstructs the actual path the email took, regardless of what the visible From: address claims.

📧 Trace This Email — read bottom to top
Received: from mail.suspicious-domain.net (203.0.113.45) by mx.school.edu
Received: from smtp.relay-service.com (198.51.100.22) by mail.suspicious-domain.net
Received: from workstation-42.internal (10.0.5.12) by smtp.relay-service.com
From: "IT Support" <helpdesk@school-district-support.net>
⚠️A whois lookup on any IP address in those headers reveals who actually registered it — the fastest way to check whether a "trusted" sender's claimed identity matches who's really behind the address. This is the exact skill behind verifying whether a phishing email from Unit 1 is really coming from where it claims.
← Back to Activity 4.2.4Next: Project 2.1.3 →E-Commerce Architecture.