How to clear node secret from NetScreen Firewall
3 years ago
Originally Published: 2001-10-04
Article Number
000044618
Applies To
NetScreen Firewall
RSA ACE/Server
Issue
How to clear node secret from NetScreen Firewall
Error: "Node verification failed" in ACE/Server logs
Resolution
1. From a NetScreen telnet session, execute the following command:

    clear node_secret <enter>

or for newer versions (e.g. version 5.3), execute the following command:

    delete node_secret <enter>

2. If you are in high availability mode, execute the following command to synchronize NetScreen slave servers:

    exec ha file-sync node_secret.ace

NOTE: You also must clear the node secret on the ACE/Server

3. Run Database Administration (sdadmin on UNIX)

4. Go to Agent Host > Edit Agent Host

5. Uncheck the "Sent Node Secret" box. The next successful authentication will establish a new node secret between the ACE/Server and the NetScreen Firewall.