How To Toggle Enforcement on Layer 2 or Layer 3 networks (RBE/PBR)

Enable

Enabling enforcement will put all devices under those enforcement devices under policy. Follow the steps defined for your Layer 2 or Layer 3 network.

RBE (Layer 2/RADIUS Based Enforcement)

Navigate to Configuration Manager > RADIUS Configuration and click "Enable Configuration Mode". Enter the RADIUS Server tab.

images/download/attachments/6076096/image2019-3-18_17-20-16.png

Click "Enable".

images/download/attachments/6076096/image2019-3-18_17-20-39.png

Click "OK".

images/download/attachments/6076096/image2019-3-18_17-21-2.png

The "Enforcement Status" icon will now be green, indicating that enforcement is on.

images/download/attachments/6076096/image2019-3-18_17-21-39.png

PBR (Layer 3/Policy Based Routing)

Navigate to Configuration Manager > Routers/Switches.

images/download/attachments/6076096/image2019-3-18_17-31-30.png

Click "Enable".

images/download/attachments/6076096/image2019-3-18_17-32-11.png

Router should now have a red checkmark as a status icon, indicating that enforcement on that router is enabled.

images/download/attachments/6076096/image2019-3-18_17-32-58.png

Disable

Disabling enforcement will put the network in a fail-open state. Follow the steps defined for your Layer 2 or Layer 3 network.

RBE (Layer 2/RADIUS Based Enforcement)

Navigate to Configuration Manager > RADIUS Configuration and click "Enable Configuration Mode". Enter the RADIUS Server tab.

images/download/attachments/6076096/image2019-3-18_17-25-8.png

Click "Disable".

images/download/attachments/6076096/rbe_disable.PNG

Click "OK".

images/download/attachments/6076096/disable_roles.PNG

The "Enforcement Status" icon will now be red, indicating that enforcement is off.

images/download/attachments/6076096/enforcement_off.PNG

PBR (Layer 3/Policy Based Routing)

Navigate to Configuration Manager > Routers/Switches.

images/download/attachments/6076096/image2019-3-18_17-33-47.png

Click "Disable".

images/download/attachments/6076096/disable.PNG

In the popup window, enter a message detailing why enforcement is being disabled for tracking and then click "Submit".

images/download/attachments/6076096/clear_acl.PNG

Router should now have a red X as a status icon, indicating that enforcement on that router is disabled.

images/download/attachments/6076096/image2019-3-18_17-34-26.png