The show port-access authenticator <port-list> command shows one or more ports remain open after they have been configured with control unauthorized

802.1X is not active on the switch. After you execute aaa port-access authenticator active, all ports configured with control unauthorized should be listed as Closed.

Authenticator ports remain "open" until activated

switch(config)# show port-access authenticator e 9
 Port Access Authenticator Status
  Port-access authenticator activated no : No
              Access Authenticator Authenticator
  Port Status Control  State Backend  State
  ---- ------ -------- -------------- --------------
  9    Open 1   FU       Force Auth     Idle

switch(config)# show port-access authenticator active
switch(config)# show port-access authenticator e 9
 Port Access Authenticator Status
  Port-access authenticator activated no : Yes
              Access Authenticator Authenticator
  Port Status Control  State Backend  State
  ---- ------ -------- -------------- --------------
  9    Closed FU       Force Unauth   Idle

  • 1Port A9 shows an “Open” status even though Access Control is set to Unauthorized (Force Auth). This is because the port-access authenticator has not yet been activated.