Cisco Systems OL-6109-01 manual Accepting Learning Phase 1 Policy Construction

Chapter 4 Zone Configuration

Zone Traffic Learning

Accepting Learning Phase 1 – Policy Construction

The user may accept the Detector’s suggested policies.

To accept the results of the initial Policy Construction phase perform the following:

1.From the Global command group level type the following:

admin@DETECTOR# no learning <zone-name> accept

Or alternatively:

From the Zone command group level type the following:

admin@DETECTOR-conf-zone-<zone-name># no learning accept

Where zone-namespecifies a zone name.

Note that the Detector enables the use of an asterisk (*) as a wildcard denoting either of the following options:

–All of the Detector’s zones. Issuing no learning* accept means ending and accepting the learning results for all of the Detector’s zones.

–A wildcard denoting zone names (i.e. OBL*).

2.Choose ENTER.

Aborting Learning Phase 1 – Policy Construction

The user may decide to abort the first phase of the Learning procedure. In this case the Detector stops the process, erases all its learned data, and reverts back its default settings (in the case of a new-zone) to the zone traffic configurations it had prior to the aborted Learning phase.

To abort the Policy Construction phase perform the following:

1.From the Global command group level type the following:

admin@DETECTOR# no learning <zone-name> reject

Or alternatively:

From the Zone command group level type the following:

admin@DETECTOR-conf-zone-<zone-name># no learning reject

Where zone-namespecifies a zone name.

	Cisco Traffic Anomaly Detector User Guide
OL-6109-01		4-15