The 802.1X & Wireless First Response Kit is a free, 28-page, print-ready PDF for the first ten minutes of an access incident. It helps you get the first useful evidence before anyone changes a port, a policy or a profile. It's free with a PingLabz account.

802.1X & Wireless First Response Kit
Free with a PingLabz account · 28 pages · US Letter PDF
The Windows 11 wired 802.1X checklist, EAPOL packet reading, host-mode selection and Catalyst 9800 first-response commands in one printable kit.
Already a member? Sign in.
What's inside
- Start here and the first-evidence map (pages 2–3): where each section collects its evidence, for wired and wireless access.
- 01 Windows 11 wired 802.1X checklist (pages 4–9): the client has no profile, the wrong certificate, or a GPO you are not sure landed.
- 02 EAPOL packet-reading reference (pages 10–15): you have a capture and need to know which side stopped talking.
- 03 802.1X host-mode selection reference (pages 16–21): a phone, a PC or a hub sits behind one port and only some of them get access.
- 04 Catalyst 9800 first-response command reference (pages 22–27): an AP will not join, an SSID is missing, or one wireless client fails.
How it was built
These are documentation-based references. The commands and fields were checked against the Cisco and Microsoft documents cited on each page; they were not run as printed on your platform. Behaviour varies by platform and release, so confirm on your own gear before you rely on it.
Going deeper: the Pro kits
When the first evidence points to a real fault, two Pro kits pick up from here. Both are included in PingLabz Pro ($59/year or $7.99/month), with nothing extra to buy.
- Campus Access Field Kit: 802.1X + ISE: 55 pages on wired 802.1X, MAB and Cisco ISE 3.5 policy, with three ISE cases built in my home lab.
- Catalyst 9800 Field Kit: 41 pages on AP join, upgrades, SSO, guest portals and FlexConnect, with a controller RADIUS runbook built in my home lab.
The posts behind each section are free to read: Enable IEEE 802.1X Authentication on Windows 11, EAPOL explained, 802.1X host modes on Cisco IOS XE and C9800 show commands.