Sure dot1X can be disabled in Interface Settings, but if a tech doesn't think to check it, changing the Controller and NVRAM won't help him (seen that waaay too many times).
I can recall over a dozen times where NCS clear has not wiped the Access list (or indeed any time that it has done), perhaps my guys are just unlucky but I'll test tomorrow. Plus already mentioned a telnet flush cured a problem when the access list was blank. The more complicated these things get, the stranger the faults!
Bookmarks