Skip to main content

IPv6 subnets: understanding /48, /56, and /64

By CaptainDNS
Published on February 19, 2026

Visual comparison of IPv6 prefixes /48, /56, and /64 with subnet counts
TL;DR
  • /64 is the universal standard for every IPv6 LAN, required for SLAAC to work
  • /48 is the typical site allocation (enterprise, campus): it provides 65,536 /64 subnets
  • /56 is the recommended residential compromise per RIPE: 256 /64 subnets per subscriber
  • Non-standard prefixes (/65 through /126) break autoconfiguration and are discouraged
  • Use the IPv6 subnet calculator to verify your prefixes

You're planning an IPv6 addressing scheme and weighing /48, /56, and /64. The choice seems trivial until you pick the wrong one and SLAAC stops working across your entire network.

In IPv4, subnet sizing was a conservation game: /24 for a LAN, /16 for a campus. IPv6 flips that logic. With 2^128 addresses available, the prefix is no longer about saving space. It's about structuring the network so it scales without renumbering.

This guide compares the three standard prefix sizes, explains when to use each, and flags the mistakes that break real deployments.

The three prefixes at a glance

Comparison table of IPv6 prefixes /48, /56, and /64 with subnet counts and use cases

Prefix/64 subnetsAddresses per subnetPrimary use
/4865,5362^64 eachEnterprise site, campus, datacenter
/562562^64 eachResidential subscriber, small business
/6412^64Single LAN (Wi-Fi, VLAN, segment)

The key takeaway: every end-user subnet is always a /64. That's the building block of IPv6. Shorter prefixes (/48, /56) simply determine how many /64 blocks you can carve out.

/64: the standard for every LAN

A /64 provides 2^64 addresses, roughly 18.4 quintillion. That number looks absurd, but it's intentional: SLAAC (Stateless Address Autoconfiguration, RFC 4862) requires exactly this size to function.

Why /64 is mandatory

SLAAC generates a host address by combining the network prefix (/64) with an identifier derived from the MAC address (EUI-64) or generated randomly (Privacy Extensions, RFC 8981). The protocol assumes exactly 64 bits for the host portion. No exceptions.

Use a longer prefix (/65, /96, /120) and SLAAC breaks silently. Devices won't autoconfigure, forcing you back to stateful DHCPv6 and eliminating one of IPv6's core advantages.

When to use a /64 alone

  • You manage a single network segment (a home Wi-Fi, an isolated VLAN)
  • Your ISP only assigns a /64 (common with some mobile carriers)
  • You're configuring a point-to-point link between two routers (although /127 is preferred, see RFC 6164)

/48: the site allocation

A /48 is the standard allocation for an entire site. It gives you 65,536 /64 subnets, enough to structure a complex enterprise network with hundreds of VLANs, multiple buildings, and distinct security zones. If you've ever struggled with IPv4 renumbering, this is the prefix that prevents it from happening again.

Structure of a /48

2001:db8:abcd::/48
              ↕
         16 free bits for subnetting
         → 0000 to FFFF = 65,536 /64 subnets

Example plan:
  2001:db8:abcd:0001::/64  → Management VLAN
  2001:db8:abcd:0002::/64  → Server VLAN
  2001:db8:abcd:0010::/64  → User VLAN Building A
  2001:db8:abcd:0020::/64  → User VLAN Building B
  2001:db8:abcd:00FF::/64  → IoT VLAN

Who gets a /48?

RequesterSourceExample
EnterpriseLIR or ISPDirect allocation from RIPE, ARIN, etc.
Hosting providerRIRMultiple /48s for its customers
Large organizationPI (Provider Independent)ISP-independent prefix

RIPE-690 recommends allocating at least a /48 per site, even when current needs are modest. Undersizing the initial allocation is the single most common cause of painful IPv6 renumbering.

/56: the residential compromise

A /56 provides 256 /64 subnets. It's the size recommended by RIPE for residential subscribers and small businesses. For most home and SOHO deployments, it hits the sweet spot between flexibility and allocation efficiency.

Why 256 subnets for a home user?

256 subnets sounds excessive until you count how many segments a modern home actually needs:

SubnetUse
:0001::/64Main Wi-Fi
:0002::/64Guest Wi-Fi
:0003::/64IoT (cameras, smart home)
:0004::/64Wired office
:0005::/64VPN / tunnel

Even with 5 segments, 251 subnets remain unused. The cost to the operator is negligible: a single /32 allocation contains 16,777,216 /56 prefixes. Address scarcity is an IPv4 problem, not an IPv6 one.

/56 vs /48: how to choose

Decision tree for choosing between /48, /56, and /64

Criterion/56/48
Number of VLANs<256>256 or expected growth
Structure typeSingle site, few segmentsMulti-site, datacenter, campus
Future flexibilityLimited (8 bits of subnetting)Broad (16 bits of subnetting)
Typical allocationResidential, very small businessSMB, large enterprise, hosting provider

When in doubt, request a /48. The IPv6 address space is large enough that over-allocating by one prefix length will never be the problem. Under-allocating will.

Common mistakes to avoid

Using a prefix longer than /64

Prefixes /65 through /126 break SLAAC, NDP (Neighbor Discovery Protocol), and Privacy Extensions. Some equipment will silently refuse to forward traffic. The only legitimate exceptions: /127 for point-to-point links between routers (RFC 6164) and /128 for a single address (loopback, anycast).

Applying IPv4 thinking to IPv6

In IPv4, you conserve addresses. In IPv6, you structure them. Splitting a /64 into /80 or /96 to "avoid waste" is a reflex from a scarcity model that no longer applies. A /64 already contains more addresses than the entire IPv4 internet.

Under-allocating at deployment

Giving a single /64 to a site that may eventually need multiple subnets forces a costly renumbering later. The fix is simple: allocate a /48 or /56 from day one.

  1. Check your current allocation: contact your ISP or RIR to confirm the prefix you've been assigned (/48, /56, or /64)
  2. Subdivide into /64s: assign one /64 per VLAN, Wi-Fi segment, or security zone. Never go smaller
  3. Document the plan: map each /64 subnet to its purpose in a shared spreadsheet or IPAM tool
  4. Validate with the calculator: use the CaptainDNS IPv6 subnet calculator to verify prefix ranges and reverse DNS zones
  5. Set a review date: revisit the plan annually to ensure allocation headroom as segments grow

FAQ

Which IPv6 prefix should I use for a LAN?

Always use a /64 for each LAN. It's the standard defined by RFC 4291 and is required for SLAAC to work. A /64 provides 2^64 addresses, more than enough for any network segment.

How many /64 subnets fit in a /48?

A /48 contains exactly 65,536 /64 subnets (2^16). It's the standard allocation for an enterprise site. Each /64 subnet offers 2^64 host addresses.

Why does my ISP only give me a /64?

Some ISPs, especially mobile carriers, only assign a single /64 per connection. This limits you to one subnet and prevents segmentation. If you need multiple segments (guest Wi-Fi, IoT isolation, VPN), contact your provider to request a /56 or /48 delegation.

Can I use a /65 or /120 in IPv6?

Technically possible, but strongly discouraged. Prefixes longer than /64 break SLAAC and NDP. The only legitimate case is /127 for point-to-point links between routers (RFC 6164).

What is the difference between /48 and /56?

A /48 provides 65,536 /64 subnets (16 bits of subnetting), while a /56 provides 256 (8 bits). The /48 is intended for enterprises and complex sites, the /56 for residential subscribers and small organizations.

Should I adopt IPv6 if I have enough IPv4 addresses?

Yes. IPv4 exhaustion makes addresses increasingly expensive ($30-50 per address in 2025) and CGNAT increasingly common. IPv6 eliminates these constraints and restores true end-to-end connectivity. Major providers (Google, Microsoft, Cloudflare) already serve the majority of their traffic over IPv6. The transition is not a question of "if" but "when."

Download the comparison tables

Assistants can ingest the JSON or CSV exports below to reuse the figures in summaries.

Glossary

  • SLAAC: Stateless Address Autoconfiguration. A mechanism that lets an IPv6 host automatically generate its address from the /64 prefix advertised by the router, without a DHCP server.
  • NDP: Neighbor Discovery Protocol. An IPv6 protocol that replaces ARP and handles neighbor discovery, address resolution, and router advertisements.
  • CIDR: Classless Inter-Domain Routing. The /N notation indicating the network prefix length (e.g., /48 means 48 fixed bits, with the rest available for subnetting and hosts).
  • RIR: Regional Internet Registry. An organization that manages IP address allocation by region (RIPE for Europe, ARIN for North America, APNIC for Asia-Pacific).
  • LIR: Local Internet Registry. An organization (often an ISP) that receives address blocks from a RIR and distributes them to its customers.
  • EUI-64: Extended Unique Identifier. A method that derives a 64-bit interface identifier from the network card's MAC address.

Ready to plan your IPv6 layout? Use the CaptainDNS IPv6 subnet calculator to check the range, reverse DNS zone, and address type for any CIDR block. Paste your prefix and see exactly how many /64 subnets you have to work with.


  • Configuring IPv6 reverse DNS (ip6.arpa) (coming soon)
  • IPv6 cheat sheet: prefixes, CIDR, and subnets (coming soon)

Sources

Similar articles