Advertisement
Chapter 4
Zone Configuration
Accepting Learning Phase 1 – Policy Construction
Aborting Learning Phase 1 – Policy Construction
OL-6109-01
The user may accept the Detector's suggested policies.
To accept the results of the initial Policy Construction phase perform the
following:
From the Global command group level type the following:
1.
admin@DETECTOR# no learning <zone-name> accept
Or alternatively:
From the Zone command group level type the following:
admin@DETECTOR-conf-zone-<zone-name># no learning accept
Where
zone-name
Note that the Detector enables the use of an asterisk (*) as a wildcard
denoting either of the following options:
All of the Detector's zones. Issuing no learning* accept means ending
–
and accepting the learning results for all of the Detector's zones.
A wildcard denoting zone names (i.e. OBL*).
–
Choose ENTER.
2.
The user may decide to abort the first phase of the Learning procedure. In this case
the Detector stops the process, erases all its learned data, and reverts back its
default settings (in the case of a new-zone) to the zone traffic configurations it had
prior to the aborted Learning phase.
To abort the Policy Construction phase perform the following:
From the Global command group level type the following:
1.
admin@DETECTOR# no learning <zone-name> reject
Or alternatively:
From the Zone command group level type the following:
admin@DETECTOR-conf-zone-<zone-name># no learning reject
Where
zone-name
specifies a zone name.
specifies a zone name.
Cisco Traffic Anomaly Detector User Guide
Zone Traffic Learning
4-15
Advertisement
