|
|
|
See active-measurement avoid. Prevents the CNA measuring processes from excessively probing an IP address.
active-measurement traceprobe avoid address <addr> no active-measurement traceprobe avoid address <addr>
Must be in engine configuration mode (config-engine) that requires privileged-level access.
Available for use multiple times in the configuration.
The traceprobe type of active probe uses a traceprobe retries-per-hop process to get as close as possible to a designated target which is unreachable by conventional probing techniques.
It is expected that the probe will die before reaching the target, either at a firewall or a nearby host. The last interface to respond to the traceroute contact is the address that the CNA measurement process will continue to probe, for the duration of the interval specified by the traceprobe refresh command.
If continual probing of that address is unacceptable, you can flag it with the active-measurement traceprobe avoid address command, and the CNA measuring processes will not direct probes to it.
This is not a guarantee that the address will never be contacted again. At each refresh interval, the traceroute process will be invoked again and will fail again, likely at the same address as before. So, even though you flag an address to be avoided, it may still be contacted periodically. This cannot be prevented. There is no way to configure a traceroute packet to avoid intermediate hops.
See also the contact command.
|
|
|