This article provides an example of how to clear an authenticated session from a particular VLAN on the WLC, because the admin would like to place the sessions in a different VLAN.

Let's say that the service-profile 'Frank' with a PSK-SSID "Skyler" is configured as follows:

set service-profile Frank ssid-name Skyler
set service-profile Frank auth-fallthru last-resort
set service-profile Frank psk-encrypted 040259035c74481b
set service-profile Frank wpa-ie auth-dot1x disable
set service-profile Frank rsn-ie cipher-ccmp enable
set service-profile Frank rsn-ie auth-psk enable
set service-profile Frank rsn-ie auth-dot1x disable
set service-profile Frank rsn-ie enable
set service-profile Frank attr vlan-name default

When clients connect to the SSID "Skyler", the clients successfully authenticated will be placed on the vlan-name "default", as shown in the following session output:

WLC_Pri# sh sessions
2 sessions total
User Name             SessID  Type  Address              VLAN              AP/Rdo
--------------------- ------  ----- -------------------- --------------    -------
LR-Skyler-36              81* open  10.9.221.212,V6      default             1/1
LR-Skyler-35              80* open  10.9.221.210,V6      default             1/1

To remove the authenticated sessions from the vlan "default", run the following command on the CLI of the WLC controller:

WLC_Pri# clear sessions network vlan default

2 of 2 sessions cleared

This will clear all the active sessions from the vlan "default".

To confirm the cleared sessions on VLAN, please use the below command.

WLC_Pri# show sessions network vlan default

0 of 0 sessions matched