The Net Agent represents the final step in policy enforcement. 

It's responsibility is to translate XACML messages received from Net PEM into accesses to the network infrastructure (i.e. the routers). It has an internal Database (DB) to retrieve the information needed to access the router specified in the XACML command. This access information (i.e. the Router IP address, the router type and the user name & password) are uses to establish an SSH session to the router and access the command line interface (CLI). The commands sent to the router depend on the XACML message type.

Upon completion, Net Agent sends back an XACML response message, indicating success or failure of the XACML command

NetAgent supports following router types:

• Cisco
• Linux (OpenWRT)
• Juniper

and handles QoS related actions on the router like:

• Enabling QoS
• Disabling QoS
• Defining a Policy on a router
• Applying a Policy to an Interface
• Removing a Policy from an Interface
• Removing a Policy from a router