In which configuration mode is show wlan summary used?

The show wlan summary command is entered in Privileged EXEC mode on Cisco IOS devices.

WirelessPrivileged EXEC

show wlan summary

Displays a summary of all WLANs configured on a Cisco wireless controller, used to quickly verify WLAN IDs, names, SSIDs, status, security settings, and interface bindings.

Definition: show wlan summary is a Cisco IOS privileged exec command. Displays a summary of all WLANs configured on a Cisco wireless controller, used to quickly verify WLAN IDs, names, SSIDs, status, security settings, and interface bindings.

Overview

The 'show wlan summary' command is a fundamental tool for any network engineer managing Cisco wireless controllers (WLCs). It provides a concise, tabular overview of all configured WLANs, displaying key attributes such as WLAN ID, profile name, SSID, status, security policies, and interface bindings. This command is essential for day-to-day operations, allowing engineers to quickly verify the configuration and operational state of wireless networks without parsing through verbose output.

The command operates in Privileged EXEC mode and does not alter the running configuration; it simply reads the current WLAN database from the controller's memory. Understanding the output of 'show wlan summary' is critical for troubleshooting connectivity issues, ensuring security compliance, and validating changes during maintenance windows. For example, if users report inability to associate, an engineer can run this command to confirm the WLAN is enabled, the correct SSID is broadcast, and the interface is up.

Compared to 'show wlan all' or 'show wlan detailed <wlan-id>', this summary view is ideal for a high-level health check, while the detailed commands are better for deep dives into specific WLAN parameters. In a broader workflow, this command is often the first step in wireless troubleshooting, followed by 'show client summary' to check client associations, and 'show ap summary' to verify AP status. The output is buffered and can be captured for logging.

Note that on some platforms, the command may require privilege level 15, but typically it is available at privilege level 1. The command does not impact the running configuration and is safe to use in production environments. It is also useful for auditing: by comparing the output against a baseline, engineers can detect unauthorized WLANs or misconfigurations.

The summary includes the WLAN ID (used in other commands), the profile name (a logical grouping), the SSID (the network name seen by clients), status (enabled/disabled), security (e.g., WPA2, 802.1X), and the interface or VLAN assigned. This information is crucial for ensuring that the correct SSID is broadcast on the intended VLAN with the appropriate security. In summary, 'show wlan summary' is a quick, powerful command that every wireless engineer should master for efficient network management and troubleshooting.

Syntax·Privileged EXEC

show wlan summary

When to Use This Command

After configuring multiple WLANs, verify that each WLAN is enabled and has the correct SSID and security settings.
Troubleshoot client connectivity issues by checking if the target WLAN is in 'Enabled' state and bound to the correct interface.
Audit WLAN configurations for compliance, ensuring only authorized SSIDs are active and using expected security policies.
Before making changes, take a snapshot of current WLAN settings to compare after modifications.

Command Examples

Basic WLAN summary

show wlan summary

Number of WLANs: 3

WLAN ID  WLAN Profile Name / SSID               Status   Interface Name
-------  ---------------------------------------- -------  -----------------
1        Corporate / Corporate-Net                Enabled  management
2        Guest / Guest-Access                     Enabled  guest
3        IoT / IoT-Sensors                        Disabled iot

Line 1: Total number of WLANs configured (3). Column 'WLAN ID': Numeric identifier for each WLAN (1, 2, 3). Column 'WLAN Profile Name / SSID': Shows the profile name and the broadcast SSID. Column 'Status': 'Enabled' means the WLAN is active and broadcasting; 'Disabled' means it is not. Column 'Interface Name': The interface (VLAN) to which the WLAN is mapped.

WLAN summary with additional details (verbose)

show wlan summary verbose

Number of WLANs: 2

WLAN ID  WLAN Profile Name / SSID               Status   Interface Name  Security
-------  ---------------------------------------- -------  ----------------  ---------------
1        Corporate / Corporate-Net                Enabled  management        WPA2+AES
2        Guest / Guest-Access                     Enabled  guest             Open

Same as basic output but adds a 'Security' column showing the encryption method (e.g., WPA2+AES, Open). Useful for quick security posture checks.

Understanding the Output

The 'show wlan summary' command provides a high-level overview of all WLANs on the controller. The 'Number of WLANs' line indicates how many WLAN profiles exist. Each row represents one WLAN.

The 'WLAN ID' is a unique numeric identifier used in other commands. The 'WLAN Profile Name / SSID' shows both the internal profile name and the SSID broadcast to clients. 'Status' is critical: 'Enabled' means the WLAN is operational and clients can associate; 'Disabled' means it is not broadcasting.

'Interface Name' shows the VLAN or interface that the WLAN is mapped to, which determines the subnet and gateway for clients. In verbose mode, an additional 'Security' column shows the encryption type (e.g., 'WPA2+AES' for secure, 'Open' for no encryption). Good values: all expected WLANs present, status 'Enabled' for active networks, security set appropriately.

Bad values: missing WLANs, 'Disabled' status on WLANs that should be active, 'Open' security on corporate networks. Watch for mismatched interface names that could cause connectivity issues.

Configuration Scenarios

Verify WLAN Configuration After Adding a New SSID

A network administrator has just configured a new guest WLAN with SSID 'GuestNet' on a Cisco 9800 WLC. They need to confirm the WLAN is enabled, the correct security policy (open) is applied, and it is mapped to the guest VLAN interface.

Topology

WLC (Management IP 10.10.10.1) --- Network --- APs (192.168.1.x)

Steps

1.Step 1: Access the WLC via SSH or console and enter privileged EXEC mode: enable
2.Step 2: Run the command: show wlan summary
3.Step 3: Locate the row for the new WLAN (e.g., ID 3) and verify: Status = Enabled, SSID = GuestNet, Security = [Open], Interface = guest-vlan

Configuration

! No configuration is performed by this command; it is a show command.
! The WLAN was previously configured using:
wlan guest 3 GuestNet
 no security wpa
 no security wpa2
 no security dot11r
 no security ft
 client vlan guest-vlan
 no shutdown
 end

Verify: show wlan summary | include GuestNet Expected output: 3 guest GuestNet Enabled Open guest-vlan

Watch out: If the WLAN appears as 'Disabled', ensure the 'no shutdown' command was issued under the WLAN configuration. Also, check that the interface 'guest-vlan' exists and is up.

Troubleshoot Client Association Failures by Checking WLAN Status

Users in the engineering department cannot connect to the 'Eng-WiFi' SSID. The administrator suspects the WLAN might be disabled or the security settings changed inadvertently.

Topology

WLC (10.10.10.1) --- Switch --- APs (192.168.2.x) --- Clients

Steps

1.Step 1: Enter privileged EXEC mode: enable
2.Step 2: Run: show wlan summary
3.Step 3: Find the 'Eng-WiFi' entry. Check the Status column. If it shows 'Disabled', the WLAN is administratively down. If 'Enabled', check the Security column for expected value (e.g., WPA2+802.1X). Also verify the Interface column matches the correct VLAN.
4.Step 4: If the WLAN is disabled, re-enable it: configure terminal -> wlan <id> -> no shutdown -> end. If security is wrong, correct it under the WLAN configuration.

Configuration

! To re-enable a disabled WLAN:
configure terminal
wlan 2
 no shutdown
 end

Verify: show wlan summary | include Eng-WiFi Expected output: 2 engineering Eng-WiFi Enabled WPA2+802.1X eng-vlan

Watch out: A common mistake is confusing the 'Status' column with the 'Admin State' in detailed output. The summary shows 'Enabled' or 'Disabled' based on the 'shutdown' command. Also, if the interface is missing or down, clients will not get an IP address even if the WLAN is enabled.

Troubleshooting with This Command

When troubleshooting wireless connectivity issues, 'show wlan summary' is often the first command to run. A healthy output shows all expected WLANs with a status of 'Enabled', appropriate security settings, and valid interface bindings. Problem indicators include: a WLAN showing 'Disabled' (administratively down), an unexpected security type (e.g., 'Open' when WPA2 is required), or an interface that is 'N/A' or a VLAN that doesn't exist.

For example, if clients cannot see the SSID, check that the WLAN is enabled and the SSID is broadcast (by default, SSID broadcast is enabled unless 'broadcast-ssid disable' is configured). If clients can see the SSID but fail to associate, examine the security column: if it shows 'WPA2+802.1X' but the client is configured for WPA2-PSK, authentication will fail. Another common issue is the interface binding: if the WLAN is mapped to a VLAN that is not trunked to the AP or the SVI is down, clients will not obtain an IP address.

The command also helps in identifying duplicate SSIDs or misconfigured WLANs. A step-by-step diagnostic flow: 1) Run 'show wlan summary' and note the WLAN IDs. 2) For any problematic WLAN, run 'show wlan detailed <id>' to drill into parameters like DHCP required, AAA override, or band select. 3) Correlate with 'show client summary' to see if clients are attempting to associate. 4) Check 'show ap summary' to ensure APs are registered and serving the WLAN. 5) Use 'debug client <mac>' to see authentication and association messages. The output of 'show wlan summary' can also be filtered using 'include' or 'section' to isolate specific WLANs.

For instance, 'show wlan summary | include Guest' quickly shows guest WLANs. Remember that the command output is static at the time of execution; if changes are made, re-run the command to see updates. In large deployments with many WLANs, the summary helps in quickly identifying which WLANs are active and which are not, enabling efficient troubleshooting and capacity planning.

CCNA Exam Tips

CCNA exam may ask which command to verify WLAN status; remember 'show wlan summary' is the quick check.

Know that 'Disabled' status means the WLAN is not broadcasting; clients cannot see or connect to it.

The 'Interface Name' column is key for VLAN mapping; exam scenarios may test troubleshooting when clients get wrong IP addresses.

Be aware that 'show wlan summary' does not show detailed security settings like PSK or 802.1X; use 'show wlan <id>' for that.

Common Mistakes

Mistake 1: Confusing 'Disabled' with 'Down' — a disabled WLAN is administratively off, not a connectivity issue.

Mistake 2: Assuming all WLANs are enabled by default; always verify status after configuration.

Mistake 3: Overlooking the interface binding; clients may connect but get no IP if the interface is misconfigured.

show wlan summary vs show ap summary

The 'show wlan summary' and 'show ap summary' commands both provide summarized views of wireless components but serve different purposes. They are commonly confused because they both start with 'show' and relate to wireless, yet one focuses on WLAN configurations (SSIDs, security, interfaces) and the other on access point hardware (model, IP, status).

Aspect	show wlan summary	show ap summary
Scope	WLAN configurations (SSIDs, security, interfaces)	Access point hardware (name, IP, model, status)
Data Displayed	WLAN ID, SSID, status, security, interface binding	AP name, IP address, status, model, serial number
Typical Use	Verify WLAN configuration and mapping	Check AP connectivity and operational state
Command Mode	Privileged EXEC	Privileged EXEC
Category	Wireless	Wireless

Use show wlan summary when you need to verify WLAN IDs, SSIDs, security settings, and interface bindings are correctly configured.

Use show ap summary when you need to quickly check which access points are connected, their IP addresses, and operational status.

Platform Notes

On Cisco IOS-XE based controllers (e.g., Catalyst 9800, Embedded Wireless Controller on ISR/ASR), the 'show wlan summary' command syntax and output are consistent with AireOS, but there may be additional columns like 'Policy' or 'Band Select'. The command is available in Privileged EXEC mode. On NX-OS (Cisco Nexus switches), there is no direct equivalent for wireless WLANs, as NX-OS is primarily for data center switching; wireless management is not a feature.

For ASA firewalls, there is no WLAN summary command; ASAs handle VPN and firewall functions, not wireless. In IOS-XR (Cisco routers), the command does not exist; IOS-XR focuses on service provider routing and does not support WLAN management. Between IOS versions (12.x, 15.x, 16.x), the output format has remained largely the same, but newer versions may include additional fields like 'WLAN Profile Name' or 'Multicast'.

On older AireOS controllers (7.x, 8.x), the command output is identical. On IOS-XE 16.x and later, the command may also show 'WLAN ID' and 'Profile Name' as separate columns. Always ensure you are in the correct mode (Privileged EXEC) and that the controller is in a stable state.

For the most accurate and up-to-date syntax, refer to the specific IOS-XE configuration guide for your platform.

Practice for the CCNA 200-301

Test your knowledge with practice questions covering all CCNA 200-301 exam domains.

Practice CCNA 200-301 Questions