Access Keys:
Skip to content (Access Key - 0)

Q: What are MIT's IP ranges?

What IP addresses might you see at MIT ?

Answer

This article collects information from multiple sources and presents it on a single page as a convenience, but could be out of date or missing information.

The ranges in the following table were compiled from a variety of locations, including ARIN data and an MIT Libraries page.

Range CIDR Notation ARIN Info Organizational Entity
18.0.0.0 - 18.31.255.255 18.0.0.0/11
MIT-2 Most of campus.
Also see: Standard Building Subnets
128.30.0.0 - 128.31.255.255 128.30.0.0/15 MIT-2 128.30.0.0/16: Official CSAIL research activities (offices and servers in 32 and OC40)
128.31.0.0/16: Guest (i.e., non-CSAIL) activities hosted on the CSAIL network (in 32 and OC40)
128.31.4.0/22: Laboratory for Information and Decision Systems
128.31.16.0/24: EECS lounge and classroom in 32 basement
128.52.0.0 - 128.52.255.255 128.52.0.0/16 MIT-2 CSAIL and non-CSAIL virtual machines in CSAIL's OpenStack cloud
129.55.0.0 - 129.55.255.255 129.55.0.0/16 MIT Lincoln Laboratory, Lexington, MA
192.52.61.0 - 192.52.66.255 See note 2 below MIT-7 Haystack Observatory, Tyngsboro, MA
198.125.160.0 - 198.125.163.255 198.125.160.0/22 MITNS ESnet* range used by LNS (Lab for Nuclear Science).
198.125.176.0 - 198.125.191.255 198.125.176.0/20 PSFC-1 ESnet* range used by Plasma Science Fusion Center, on campus
2603:4000:: - 2603:40ff:ffff:ffff:ffff:ffff:ffff:ffff 2603:4000::/24 MIT-2 Most of campus as/when IPv6 is rolled out.

*ESnet (Energy Sciences Network) is used by universities, research labs, national labs, etc.

Note 1: There are two separate ranges: 128.30.0.0/16 and 128.31.0.0/16.
Note 2: Haystack's IP range is actually 6 consecutive /24s. That is, 192.52.61.0/24, 192.52.62.0/24, 192.52.63.0/24, etc.

Woods Hole

Woods Hole Oceanographic Institution ("WHOI") has a long affiliation with MIT, and in some cases, their machines count as "on campus" (e.g. for access to outgoing-legacy.mit.edu), whereas in other cases they don't (access to some MIT Libraries digital resources). Users at Woods Hole who are unable to access certain digital resources on campus should try using the Remote Access VPN or contacting the administrators of that resource.

Woods Hole has the IP address range 128.128.0.0/16 (128.128.x.x http://whois.arin.net/rest/net/NET-128-128-0-0-1)

Remote Access VPN Address Pools

  • 18.30.128.0/17
  • 18.28.128.0/17
  • 18.19.0.0/18 {when connected from MITnet}

Note: IP addresses assigned to devices that are connected to the Remote Access VPN from outside of MITnet (e.g. connected from a user's home network) will be NAT'd to a Prisma Access IP address (the IP of the VPN gateway) when communicating out to sites on the Internet. No NAT is applied when communicating with hosts/sites on MITnet.

Wi-Fi

  • 10.29.0.0/16, 10.31.0.0/16   --NAT--> 18.29.0.0/16 [MIT SECURE], [MIT]
  • 10.189.0.0/17 --NAT--> 192.54.222.0/24 [MIT GUEST]

Note: Devices connected to the Wi-Fi networks are assigned an IP address, which will be NAT'd to the target range when communicating out to sites on the Internet (or to destinations on the "MIT GUEST" Wi-Fi network). No NAT is applied when communicating with hosts/sites on MITnet.

Campus Firewall NAT Pool

  • 18.10.0.0/16
  • 18.11.0.0/16

Note: The campus firewall NAT pool applies to any device on the MITnet wired (not Wi-Fi) networks assigned a 10.x.x.x IP address. When those devices communicate out to sites on the Internet, the 10-net IP address will be NAT'd to an IP within the campus firewall NAT pool. No NAT is applied when communicating with hosts/sites on MITnet.

Community

Documentation and information provided by the MIT Community


Last Modified:

January 10, 2024

Get Help

Request help
from the Help Desk
Report a security incident
to the Security Team
Labels:
address address Delete
c-networking c-networking Delete
ip ip Delete
range range Delete
valid valid Delete
network network Delete
guest guest Delete
secure secure Delete
vpn vpn Delete
host host Delete
assignment assignment Delete
gpvpn gpvpn Delete
Enter labels to add to this page:
Please wait 
Looking for a label? Just start typing.
Feedback
This product/service is:
Easy to use
Average
Difficult to use

This article is:
Helpful
Inaccurate
Obsolete
  1. Jun 29, 2018

    is there away we can link this KB article http://kb.mit.edu.ezproxy.canberra.edu.au/confluence/x/CIMwCQ here?

  2. Aug 06, 2019

    128.52.0.0/16 should in the the same row as 128.30.0.0/15. These networks are used as follows:

    • 128.30.0.0/16: Official CSAIL research activities (offices and servers in 32 and OC40)
    • 128.31.0.0/16: Guest (i.e., non-CSAIL) activities hosted on the CSAIL network (in 32 and OC40)
      • 128.31.4.0/22: Laboratory for Information and Decision Systems
      • 128.31.16.0/24: EECS lounge and classroom in 32 basement
    • 128.52.0.0/16: CSAIL and non-CSAIL virtual machines in CSAIL's OpenStack cloud
  3. Oct 30, 2020

    Sorry, does the statment
    "IP address ranges in completed buildings will be as follows"
    mean that the ranges as specified in "Standard Building Subnets" http://kb.mit.edu.ezproxy.canberra.edu.au/confluence/display/istcontrib/Standard+Building+Subnets are null and void?

    1. Nov 13, 2020

      The "Standard Building Subnets" (which still apply) refer to the wired network as opposed to the Wi-Fi.

Adaptavist Theme Builder (4.2.3) Powered by Atlassian Confluence 3.5.13, the Enterprise Wiki