//from its own controller

public function actionForbidden {

    return $this->renderAjax('forbidden');

}

//from a different controller, same module

$this->redirect(array('site/forbidden'));

//from a different module

use yii\helpers\Url;

$this->redirect(array(Url::to('/site/forbidden')));