A 32-bit address used in conjunction with an IP address to segment network traffic; used to restrict transmissions to certain subnets.