Filter
Top Products
Chapter 4 Zone Configuration
Zone Traffic Learning
4-16
Cisco Traffic Anomaly Detector User Guide
OL-6109-01
Note that the Detector enables the use of an asterisk (*) as a wildcard
denoting either of the following options:
–
All of the Detector’s zones. Issuing no learning* reject means aborting
the learning phase for all of the Detector’s zones.
–
A wildcard denoting zone names (i.e. OBL*).
2. Choose ENTER.
Learning Phase 2 – Threshold Tuning
During this stage the Detector constructs its detection policies and begins to tune
its traffic type thresholds (see Chapter 7, “Policy Procedures” for further details).
To begin the second Learning phase perform the following:
1. From the Global command group level type the following:
admin@DETECTOR# learning threshold-tuning <zone-name>
Or alternatively:
From the zone command group level type the following:
admin@DETECTOR-conf-zone-<zone-name># learning threshold-tuning
Where zone-name specifies a zone name.
Note that the Detector enables the use of an asterisk (*) as a wildcard
denoting either of the following options:
–
All of the Detector’s zones. Issuing learning threshold-tuning* means
setting the threshold tuning phase for all of the Detector’s zones.
–
A wildcard denoting zone names (i.e. OBL*).
2. Choose ENTER.
Note Cisco Systems recommends letting the Learning Phase 2 - Threshold Tuning
continue for 24 hours before concluding.