This article provides an example of how to clear an authenticated session from a particular VLAN on the WLC, because the admin would like to place the sessions in a different VLAN.
Let's say that the service-profile 'Frank' with a PSK-SSID "Skyler" is configured as follows:
set service-profile Frank ssid-name Skyler
set service-profile Frank auth-fallthru last-resort
set service-profile Frank psk-encrypted 040259035c74481b
set service-profile Frank wpa-ie auth-dot1x disable
set service-profile Frank rsn-ie cipher-ccmp enable
set service-profile Frank rsn-ie auth-psk enable
set service-profile Frank rsn-ie auth-dot1x disable
set service-profile Frank rsn-ie enable
set service-profile Frank attr vlan-name default
When clients connect to the SSID "Skyler", the clients successfully authenticated will be placed on the vlan-name "default", as shown in the following session output:
WLC_Pri# sh sessions
2 sessions total
User Name SessID Type Address VLAN AP/Rdo
--------------------- ------ ----- -------------------- -------------- -------
LR-Skyler-36 81* open 10.9.221.212,V6 default 1/1
LR-Skyler-35 80* open 10.9.221.210,V6 default 1/1
To remove the authenticated sessions from the vlan "default", run the following command on the CLI of the WLC controller:
WLC_Pri# clear sessions network vlan default
2 of 2 sessions cleared
This will clear all the active sessions from the vlan "default".
To confirm the cleared sessions on VLAN, please use the below command.
WLC_Pri# show sessions network vlan default
0 of 0 sessions matched