4-9
Cisco Traffic Anomaly Detector User Guide
OL-6109-01
Chapter 4 Zone Configuration
Zone Remote Guard List
Note
If no mask is specified, the Detector assumes the default subnet
mask 255.255.255.255.
2.
Choose
ENTER
. Below is an example of the
no ip
address command
implementation:
admin@DETECTOR-conf-zone-scannet#
no ip address 192.168.100.34
admin@DETECTOR-conf-zone-scannet#
Removing all Zone IP Addresses
The user may remove all the zone IP addresses.
Caution
Removing all zone IP addresses eliminates the zone DDoS detection.
To remove all the zone’s IP addresses perform the following:
1.
From the desired Zone command group level type the following:
admin@DETECTOR-conf-zone-<
zone-name
>#
no ip address *
2.
Choose
ENTER
.
Zone Remote Guard List
The Detector has a list containing a Guard (or Guards) to remotely activate when
a traffic abnormality is detected. The zone remote Guard list is part of the zone
configuration. When the Detector detects a traffic abnormality it first consults the
zone remote Guard list for alerting (provided the Detector is configured for
remote-activation).
If the Detector does not find a Guard on the list it refers to the remote Guard (or
Guards) on the Detector default list (see the
“Default Remote Guard List”
section
in
Chapter 3, “Detector Configuration”
for further details).
