Chapter 4 Zone Configuration
Zone Traffic Learning
Accepting Learning Phase 1 – Policy Construction
The user may accept the Detector’s suggested policies.
To accept the results of the initial Policy Construction phase perform the following:
1.From the Global command group level type the following:
admin@DETECTOR# no learning <zone-name> accept
Or alternatively:
From the Zone command group level type the following:
admin@DETECTOR-conf-zone-<zone-name># no learning accept
Where
Note that the Detector enables the use of an asterisk (*) as a wildcard denoting either of the following options:
–All of the Detector’s zones. Issuing no learning* accept means ending and accepting the learning results for all of the Detector’s zones.
–A wildcard denoting zone names (i.e. OBL*).
2.Choose ENTER.
Aborting Learning Phase 1 – Policy Construction
The user may decide to abort the first phase of the Learning procedure. In this case the Detector stops the process, erases all its learned data, and reverts back its default settings (in the case of a
To abort the Policy Construction phase perform the following:
1.From the Global command group level type the following:
admin@DETECTOR# no learning <zone-name> reject
Or alternatively:
From the Zone command group level type the following:
admin@DETECTOR-conf-zone-<zone-name># no learning reject
Where
|
| Cisco Traffic Anomaly Detector User Guide |
|
|
|
|
| ||
|
|
|
| |
|
|
|