Juniper SYSTEM BASICS - CONFIGURATION GUIDE V 11.1.X Configuration Manual page 303

When you turn on auto-recovery, the behavior of the file synchronization, stateful
SRP switchover (high availability), and unified ISSU tasks changes to prevent
synchronization of corrupt configuration. On detecting configuration file corruption,
JUNOSe Software determines whether a corrupt file is recoverable by the application.
If the file is recoverable:
The configuration monitor on the SRP tries to recover it from a good configuration
1.
as determined by the application.
The file synchronization, high availability, and unified ISSU operations are
2.
re-enabled.
You can manually or automatically recover the recoverable corrupt configuration
files in the running configuration as determined by the application.
You can use the service check-config auto-recover command to enable auto-recovery
of corrupt CFG files in the running configuration.
You can use the service check-config running-configuration command to view a
list of corrupt files in the running configuration and the files that are recoverable.
You can use the service check-config running-configuration recover command to
recover the corrupted CFG files in the running configuration. You can recover only
the files that the service check-config running-configuration command output lists
as recoverable.
Auto-recovery of a corrupted running configuration in the active and standby SRPs
works as follows:
If the file system on the primary SRP is corrupt when HA is disabled and the
mode of the service check-config command has been set to auto-recover, the
following changes occur:
File Synchronization–Configuration files are not synchronized to the standby
SRP until successful recovery of the corrupted files is complete.
HA–Enabling of HA is prevented during recovery and the state is restored
on successful recovery.
Unified ISSU–If unified ISSU is in the idle state, the operation is disabled
until recovery is complete. The unified ISSU process continues if it has started.
Auto-Recovery A message indicates whether the configuration files are
recoverable. If the files are recoverable, the auto-recovery process starts. If
the recovery is unsuccessful, configuration monitoring is turned off. You can
revert the SRP to the last-known good configuration on the standby SRP
using the srp switch force command. The standby SRP boots up using the
last indicated configuration using the boot conf command.
If the file system on the primary SRP is corrupt when HA is enabled and the
mode of the service check-config command has been set to auto-recover, the
following changes occur:
Chapter 5: Managing the System
Monitoring the Current Configuration
273