If a replica server fails during the download of a configuration package, the configuration may be corrupted or it may have a stale secret.
To recover after a failed download:
- Stop the RADIUS service on the replica server.
- Log into the replica server as root.
- Open a command window and navigate to the \Radius\Service directory (Windows) or /opt/juniper/radius directory (Solaris/Linux).
- Run the sbrsetuptool utility with the identity option and information on where to download configuration information.
- To obtain configuration from a configuration package, issue the following command:
# sbrsetuptool -identity REPLICA -reppkg pathname
Where:
pathname specifies the path to a replica.ccmpkg package.
- To obtain configuration from the primary server for the realm, issue the following command:
# sbrsetuptool -identity REPLICA -primary name address secret
Where:
name specifies the DNS name of the primary server
address specifies the IP address of the primary server
secret specifies the shared secret used to authenticate configuration downloads.
- Restart the updated replica server so that it can load its new configuration. After the replica server is restarted, it will be re-synchronized with the current primary server.
