Introduction

When 802.11 authentication is complete, the station and AP will move onto to the association phase. The purpose of this exchange is for the station to obtain an Association Identifier (AID). This is achieved by the client sending an Association Request to the AP which then responds with an Association Response.

After the association phase, a second authentication may occur depending on whether a protocol like WPA is set up.

Management Frame Fields & Information Elements

Listen Interval

This 2-byte field is sent in Association and Reassociation Request in order to signal to the AP how often a station wakes up in order to listen to beacon management frames. Its value is in beacon interval units - a value of indicates that the station wakes up every beacons.

Association Request

If the authentication phase was successful, then the station willing to join the network will issue an association request.

The following elements may be present in an association request:

OrderNameStatusDescription
1Capability InformationMandatory
2Listen IntervalMandatory
3Service Set Identifier (SSID)Mandatory
4Supported RatesMandatory
5Extended Supported RatesOptionalSee Supported Rates.
6Power CapabilityOptionalUsed with 802.11h.
7Supported ChannelsOptionalUsed with 802.11h.
8RSNOptionalUsed with 802.11i.
9QoS CapabilityOptionalUsed with 802.11e QoS when the EDCA Parameter element is missing.
10RRM Enabled CapabilitiesOptionalUsed with 802.11k.
11Mobility DomainOptionalUsed with 802.11r Fast BSS Transition.
12Supported Regulatory ClassesOptionalUsed with 802.11r.
13HT CapabilitiesOptionalUsed with 802.11n.
1420/40 BSS CoexistenceOptionalUsed with 802.11n.
15Extended CapabilitiesOptionalSee Capability Information.
LastVendor-SpecificOptional

Association Response

After the association request is acknowledged by the AP, it is examined to verify that its parameters match those of the AP. If differences are found, then the AP must decide whether or not the discrepancy is significant enough to deny association.

If the station can join the network, then the Status Code will contain 0. Otherwise, it will contain the reason for the failure. Additionally, the AP sends its own parameters in the response. A station who is denied association can examine the parameters sent by the AP in the response and try to tweak its own parameters and attempt association anew.

If the association is successful, then the response will contain the association ID for the station. The station can now proceed with sending data or undergoing further authentication. Notwithstanding the 2-byte size of this field, only the 14 less significant bits are used in practice, with the rest of the bits being set to 1.

OrderNameStatusDescription
1Capability InformationMandatory
2Status CodeMandatory
3Association IDMandatory
4Supported RatesMandatory
5Extended Supported RatesOptionalSee Supported Rates.
6EDCA ParameterOptionalUsed with 802.11e QoS when the QoS Capability element is missing.
7RCPIOptionalUsed with 802.11k.
8RSNIOptionalUsed with 802.11k.
9RRM Enabled CapabilitiesOptionalUsed with 802.11k.
10Mobility DomainOptionalUsed with 802.11r. Fast BSS Transition
11Fast BSS TransitionOptionalUsed with 802.11r.
12DSE Registered LocationOptionalUsed with 802.11y.
13Timeout Interval (Association Comeback Time)OptionalUsed with 802.11w.
14HT CapabilitiesOptionalUsed with 802.11n.
15HT OperationOptionalUsed with 802.11n.
1620/40 BSS CoexistenceOptionalUsed with 802.11n.
17Overlapping BSS Scan ParametersOptional
18Extended CapabilitiesOptionalSee Capability Information.
LastVendor-SpecificOptional

Reassociation Request

This frame may be sent only from a station to an AP and is used when the station is already connected to the ESS and wishes to connect to another AP within the same ESS. Furthermore, a station may avail itself of this frame when it wants to rejoin the network after it left for a short duration. If the authentication timer has expired, then the station will need to begin anew from the authentication phase and then proceed to issuing a reassociation request. Finally, a station already associated with the network may use a reassociation request in order to tweak some parameters which were exchanged during the original association phase.

The following elements may be present in a reassociation request:

OrderNameStatusDescription
1Capability InformationMandatory
2Listen IntervalMandatory
3Current AP MAC AddressMandatory
4Service Set Identifier (SSID)Mandatory
5Supported RatesMandatory
6Extended Supported RatesOptionalSee Supported Rates.
7Power CapabilityOptionalUsed with 802.11h.
8Supported ChannelsOptionalUsed with 802.11h.
9RSNOptionalUsed with 802.11i.
10QoS CapabilityOptionalUsed with 802.11e QoS when the EDCA Parameter element is missing.
11RRM Enabled CapabilitiesOptionalUsed with 802.11k.
12Mobility DomainOptionalUsed with 802.11r Fast BSS Transition.
13Fast TransitionOptionalUsed with 802.11r.
14Resource Information ContainerOptionalUsed with 802.11r.
15Supported Regulatory ClassesOptionalUsed with 802.11r.
16HT CapabilitiesOptionalUsed with 802.11n.
1720/40 BSS CoexistenceOptionalUsed with 802.11n.
18Extended CapabilitiesOptionalSee Capability Information.
LastVendor-SpecificOptional

Reassociation Response

The response to a reassociation request has the exact same format as the Association Response Frame.

Disassociation Frame

Association can be terminated by either side at any time by sending a disassociation frame. A station could send such a frame, for example, because it leaves the cell to roam to another AP. An AP could send this frame for example because the station tries to use invalid parameters.

A disassociated station, however, retains its authentication status and may attempt to associate anew without going through the authentication phase.

The Destination MAC for this type of frame may be the MAC address of the target station/AP, or the broadcast address if the AP needs to disassociate all clients.

A deassociation frame typically contains only a Reason Code field, although it may be augmented by vendor-specific MFIEs following this reason code. The last element (if present and if it is not the reason code itself) is used with 802.11w.