How To Toggle Enforcement on Layer 2 or Layer 3 networks (RBE/PBR)?
This article applies to a range of supported network management devices, the current MetaAccess NAC Enforcer and the MetaAccess Web UI.
When Enforcement is enabled, all devices under the configured Enforcement Device will be placed under the associated Policy.
To toggle enforcement on your network, follow the network-appropriate steps below.
Layer 2 / Radius Based Enforcement / RBE
- Naviaget to RADIUS>Configuration. Next to Status, click Enable. Then, in the pop-up, click OK.
To confirm that enforcement is enabled, look at the Status icon, which will now appear green (or red when enforcement has is disabled).
Layer 3 / Policy Based Routing / PBR
- Go to your MetaAccess NAC Dashboard>Configuration>Enforcement Setup>Routers/Switches.
- Then click Enable alongside your chosen L3 routing device connection, or, in the top right-hand corner of the screen, click Enable All.
- The router should now show a Green checkmark, indicating its enabled status.
Disabling Enforcement
Disabling enforcement will place your network in a fail-open state, opening your network to possible attack in the event of a failure.
Please follow the network-specific steps below to disable enforcement.
Disabling Layer 2 / Radius Based Enforcement / RBE
- Go to your MetaAccess NAC Dashboard>Configuration>Radius>Configuration.
- Then, alongside the Status icon, click Disable, as shown below, then click OK in the pop-up box to confirm.
- The enforcement Status icon will now appear in red, indicating that enforcement is disabled.
Disabling Layer 3 / Policy Based Routing / PBR
- Go to your MetaAccess NAC Dashboard>Configuration>Enforcement Setup>Routers/Switches.
- Then click Disable alongside your chosen L3 routing device connection, or, in the top right-hand corner of the screen, click Disable All.
- In the pop-up, add an optional note for change management, then click Submit.
- The router should now display a Red checkmark, indicating its disabled status.
If you have followed the instructions above but have been unable to Toggle Enforcement On Layer 2 / Layer 3 (RBE/PBR) Networks, please open a Support Case with the OPSWAT team via phone, online chat or form, or feel free to ask the community on our OPSWAT Expert Forum.