Clearing A Port - D-Link DWS-1008 - AirPremier MobileLAN Switch Product Manual

For 802.1X clients, wired authentication works only if the clients are directly attached to the wired
authentication port, or are attached through a hub that does not block forwarding of packets from the
client to the PAE group address (01: 80:c2:00:00:03). Wired authentication works in accordance with
the 802.1X specification, which prohibits a client from sending traffic directly to an authenticator's MAC
address until the client is authenticated. Instead of sending traffic to the authenticator's MAC address,
the client sends packets to the PAE group address. The 802.1X specification prohibits networking
devices from forwarding PAE group address packets, because this would make it possible for multiple
authenticators to acquire the same client.
For non-802.1X clients, who use MAC authentication, WebAAA, or last-resort authentication, wired
authentication works if the clients are directly attached or indirectly attached.
Note: If clients are connected to a wired authentication port through a downstream third-party switch,
the switch attempts to authenticate based on any traffic coming from the switch, such as Spanning
Tree Protocol (STP) BPDUs. In this case, disable repetitive traffic emissions such as STP BPDUs from
downstream switches. If you want to provide a management path to a downstream switch, use MAC
authentication.
Caution: When you clear a port, MSS ends user sessions that are using the port.
To change a port's type from AP access port or wired authentication port, you must first clear the port,
then set the port type.
Clearing a port removes all the port's configuration settings and resets the port as a network port.
• If the port is an AP access port, clearing the port disables PoE and 802.1X authentication.
• If the port is a wired authenticated port, clearing the port disables 802.1X authentication.
• If the port is a network port, the port must first be removed from all VLANs, which removes the
port from all spanning trees, load-sharing port groups, and so on.
Note: A cleared port is not placed in any VLANs, not even the default VLAN (VLAN 1).
To clear a port, use the following command:
clear port type port-list
For example, to clear the port-related settings from port 5 and reset the port as a network port, type the
following command:
DWS-1008# clear port type 5
This may disrupt currently authenticated users. Are you sure? (y/n) [n]y
success: change accepted.
D-Link DWS-1008 User Manual

Clearing a Port