802.1x readiness check

The 802.1X readiness check audits all the ports for 802.1X activity and displays information about the devices with 802.1X-supported ports. The 802.1X readiness check can be used to establish whether the devices connected to the ports are 802.1X-capable.

The 802.1X readiness check is allowed on all ports that can be configured for 802.1X. The 802.1X readiness check is not available on a port that is configured by the dot1x port-control force-unauthorized command.

When you execute the dot1x test eapol-capable command on an 802.1X-enabled port, and the link comes up, the port queries the connected client about its 802.1X capability. When the client responds with a notification packet, it is 802.1X-capable. A RASLog message is generated if the client responds within the timeout period. If the client does not respond to the query, the client is not 802.1X-capable, and a syslog message is generated indicating the client is not EAPOL-capable.

Follow these guidelines to enable the 802.1X readiness check on the device:

• The 802.1X readiness check is typically used before 802.1X is enabled on the device.
• 802.1X authentication cannot be initiated while the 802.1X readiness check is in progress.
• The 802.1X readiness check cannot be initiated while 802.1X authentication is active.
• 802.1X readiness can be checked on a per-interface basis.
• The 802.1X readiness check for all interfaces at once is not supported.
• The 802.1X test timeout is shown in the output of the show dot1x command.