Manuals / Cisco Systems / Computer Equipment / Computer Hardware

Cisco Systems OL-6109-01 manual Zone Remote Guard List, Removing all Zone IP Addresses

Models: OL-6109-01

1 22

Download 22 pages 56.21 Kb

Page 9

Removing all Zone IP Addresses

Chapter 4 Zone Configuration

Zone Remote Guard List

Note If no mask is specified, the Detector assumes the default subnet mask 255.255.255.255.

2.Choose ENTER. Below is an example of the no ip address command implementation:

admin@DETECTOR-conf-zone-scannet# no ip address 192.168.100.34 admin@DETECTOR-conf-zone-scannet#

Removing all Zone IP Addresses

The user may remove all the zone IP addresses.

Caution Removing all zone IP addresses eliminates the zone DDoS detection.

To remove all the zone’s IP addresses perform the following:

1.From the desired Zone command group level type the following:

admin@DETECTOR-conf-zone-<zone-name># no ip address *

2.Choose ENTER.

Zone Remote Guard List

The Detector has a list containing a Guard (or Guards) to remotely activate when a traffic abnormality is detected. The zone remote Guard list is part of the zone configuration. When the Detector detects a traffic abnormality it first consults the zone remote Guard list for alerting (provided the Detector is configured for remote-activation).

If the Detector does not find a Guard on the list it refers to the remote Guard (or Guards) on the Detector default list (see the “Default Remote Guard List” section in Chapter 3, “Detector Configuration” for further details).

		Cisco Traffic Anomaly Detector User Guide
		Cisco Traffic Anomaly Detector User Guide
	OL-6109-01			4-9
	OL-6109-01			4-9

Image 9

Cisco Systems OL-6109-01 manual Zone Remote Guard List, Removing all Zone IP Addresses

Contents

Basic Zone Configuration Zone ConfigurationC H A P T E R Defining a New Zone admin@DETECTOR-conf# zone new-zone-name copy-from base-zone-name Duplicating a Zonecopy-from-this Removing a ZoneDisplaying Zone Templates Removing All Zonesadmin@DETECTOR-conf# no zone admin@DETECTOR-conf# show templatesadmin@DETECTOR-conf# show templates DEFAULT Zone is INACTIVE Entering a Zone Command LevelOperation Mode AUTOMATIC Description Zone ID Template DEFAULT PROTECT IP STATE all-zone FLEX-FILTER FLEX-FILTER ACTION disableDescribing a Zone Defining the Zone IP Addressfor demonstration purposes admin@DETECTOR-conf-zone-zone-name# no ip address ip-addr Removing a Zone IP AddressRemoving all Zone IP Addresses Zone Remote Guard ListRemoving a Guard from the Zone Remote Guard List Adding a Guard to the Zone Remote Guard List4-10 Adding a Guard to the Zone Remote Guard ListInteractive Recommendations Mode Activating the Interactive Recommendation Mode4-11 Zone Traffic Learning Deactivating the Interactive Recommendation Mode4-12 4-13 Learning Phase 1 - Policy Construction4-14 Terminating Learning Phase 1 -Policy ConstructionAborting Learning Phase 1 - Policy Construction Accepting Learning Phase 1 - Policy Construction4-15 admin@DETECTOR# no learning zone-name acceptLearning Phase 2 - Threshold Tuning 4-16admin@DETECTOR# learning threshold-tuning zone-name Terminating Learning Phase 2 - Threshold Tuning Accepting Learning Phase 2 - Threshold Tuning4-17 Learning Phase Verification Aborting Learning Phase 2 - Tuning Threshold4-18 4-19 Zone DetectionGuard-Protection Activation Forms 4-20only-dest-ip policy-type 4-21 Zone Detection Verification4-22 Ending the Zone Detectionadmin@DETECTOR# no detect zone-name admin@DETECTOR-conf-zone-zone-name# no detect