WirelessPrivileged EXEC

show dot11 associations

Displays the list of wireless clients currently associated with a Cisco access point, including their MAC addresses, IP addresses, signal strength, and connection state, used for troubleshooting client connectivity and performance issues.

Syntax·Privileged EXEC
show dot11 associations

When to Use This Command

  • Verify if a specific client device is connected to the access point and check its signal strength.
  • Troubleshoot a client that is experiencing slow speeds or intermittent disconnections by examining association details.
  • Monitor the number of associated clients to assess access point load and capacity.
  • Identify unauthorized clients by reviewing MAC addresses of associated devices.

Command Examples

Basic show dot11 associations output

show dot11 associations
802.11 Client Associations on Dot11Radio0:
SSID [Corporate] :
MAC Address     IP Address      Device        State        CCX  CCX Ver  RSSI  SNR  Rate
00:1a:2b:3c:4d:5e  192.168.1.100  Laptop        Associated   Yes  4        -45   35   54M
00:1a:2b:3c:4d:5f  192.168.1.101  Phone         Associated   No   -        -60   20   24M
00:1a:2b:3c:4d:60  192.168.1.102  Tablet        Associated   Yes  4        -55   28   36M
Total Client Associations: 3

Line 1: Indicates the radio interface (Dot11Radio0). Line 2: SSID name. Columns: MAC Address - client's hardware address; IP Address - client's IP (if DHCP); Device - client type (if identified); State - connection status (Associated, Authenticating, etc.); CCX - Cisco Compatible Extensions support; CCX Ver - CCX version; RSSI - Received Signal Strength Indicator in dBm (higher is better, -45 is excellent, -60 is fair); SNR - Signal-to-Noise Ratio in dB (higher is better, >25 is good); Rate - current data rate in Mbps. Last line: total number of associated clients.

Show dot11 associations with client details

show dot11 associations 00:1a:2b:3c:4d:5e
Client: 00:1a:2b:3c:4d:5e  IP: 192.168.1.100
  State: Associated
  CCX: Yes  CCX Version: 4
  RSSI: -45 dBm  SNR: 35 dB
  Rate: 54 Mbps
  SSID: Corporate
  VLAN: 10
  Authentication: Open
  Encryption: WPA2
  Association ID: 1
  Channel: 6
  Uptime: 0 days 02:15:30

Shows detailed information for a specific client. Fields: Client MAC and IP; State (Associated means fully connected); CCX support; RSSI and SNR (good values: RSSI > -70, SNR > 25); current data rate; SSID; VLAN assigned; authentication and encryption methods; Association ID (unique per client); channel used; uptime (how long client has been associated).

Understanding the Output

The 'show dot11 associations' command output lists all wireless clients associated with the access point. The first line indicates the radio interface. Each SSID is listed with its associated clients. Key columns: MAC Address (unique client identifier), IP Address (client's IP if DHCP is used), Device (optional client type), State (should be 'Associated' for a fully connected client; other states like 'Authenticating' or 'Disassociated' indicate issues), CCX and CCX Version (Cisco proprietary extensions for enhanced features), RSSI (signal strength in dBm; values closer to 0 are better, -50 to -70 is typical for good connections, below -80 is weak), SNR (signal-to-noise ratio; >25 dB is good, <15 dB may cause problems), Rate (current data rate; lower rates may indicate poor signal or interference). The total count helps assess load. For troubleshooting, look for clients in non-'Associated' states, weak RSSI (< -75), low SNR (< 20), or low data rates. A high number of clients may indicate capacity issues.

CCNA Exam Tips

1.

CCNA exam may ask which command to verify client connectivity; 'show dot11 associations' is the correct answer.

2.

Know that RSSI is measured in dBm and SNR in dB; lower RSSI (more negative) means weaker signal.

3.

Remember that 'Associated' state means the client is fully connected; other states indicate problems.

4.

The command can be filtered by MAC address to get detailed client info.

Common Mistakes

Mistake: Confusing RSSI and SNR; RSSI measures signal strength, SNR measures signal quality relative to noise.

Mistake: Assuming all clients in 'Associated' state have good connectivity; weak RSSI or low SNR can still cause issues.

Mistake: Forgetting that the command shows only clients on the specific radio interface; on dual-band APs, check both Dot11Radio0 (2.4 GHz) and Dot11Radio1 (5 GHz).

Practice for the CCNA 200-301

Test your knowledge with hundreds of CCNA practice questions covering all exam domains.

Practice CCNA Questions