Cisco OL-6109-01 - Manual (Page 14)

Chapter 4 Zone Configuration
Zone Traffic Learning
4-14
Cisco Traffic Anomaly Detector User Guide
OL-6109-01
Where zone-name specifies a zone name.
Note that the Guard enables the use of an asterisk (*) as a wildcard denoting
either of the following options:
– All of the Guard’s zones. Issuing learning policy-construction* means
setting the policy construction phase for all of the Detector’s zones.
– A wildcard denoting zone names (i.e. OBL*).
2. Choose ENTER.
Note Cisco recommends letting the Learning Phase 1 - Policy Construction continue
for at least two hours prior to proceeding to the next phase.
Note Policy Construction cannot be performed for zones based on the
bandwidth-limited link templates: LINK_128K, LINK_1M, LINK_4M,
LINK_512K.
Terminating Learning Phase 1 –Policy Construction
After a sufficient period of time (see the above note) the user ends the Policy
Construction phase. The user may accept the Detector’s suggested policies.
The user may decide to abort the first phase of the Learning process. In this case,
the Detector stops the process and erases all its learned data. As a result, the
Detector falls back into its default settings (in the case of a new zone) or to the
zone traffic configurations it had prior to the initiation of the learning process.
The user may decide to view the learning process outcomes prior to making a
decision. See the
“Zone and Learning Phase Snapshot” section in Chapter 7,
“Policy Procedures” for further details.