Cisco OL-6109-01 - Manual (Page 15)

4-15
Cisco Traffic Anomaly Detector User Guide
OL-6109-01
Chapter 4 Zone Configuration
Zone Traffic Learning
Accepting Learning Phase 1 – Policy Construction
The user may accept the Detector’s suggested policies.
To accept the results of the initial Policy Construction phase perform the
following:
1. From the Global command group level type the following:
admin@DETECTOR# no learning <zone-name> accept
Or alternatively:
From the Zone command group level type the following:
admin@DETECTOR-conf-zone-<zone-name># no learning accept
Where
zone-name
specifies a zone name.
Note that the Detector enables the use of an asterisk (*) as a wildcard
denoting either of the following options:
– All of the Detector’s zones. Issuing no learning* accept means ending
and accepting the learning results for all of the Detector’s zones.
– A wildcard denoting zone names (i.e. OBL*).
2. Choose ENTER.
Aborting Learning Phase 1 – Policy Construction
The user may decide to abort the first phase of the Learning procedure. In this case
the Detector stops the process, erases all its learned data, and reverts back its
default settings (in the case of a new-zone) to the zone traffic configurations it had
prior to the aborted Learning phase.
To abort the Policy Construction phase perform the following:
1. From the Global command group level type the following:
admin@DETECTOR# no learning <zone-name> reject
Or alternatively:
From the Zone command group level type the following:
admin@DETECTOR-conf-zone-<zone-name># no learning reject
Where zone-name specifies a zone name.