SAProuter

[Former Member]

hi All,

Im new in SAP BASIS administration and not yet taking any formal training.

I need to configure the SAProuter in the system , and can somebody assist me in doing that? I have the documentation about SAProuter , which i have downloaded the saprouter_####.sar , where can i convert itto the executable file?and do i have to download any software to make it up and running? Thanks in adv.

Cheers

[former_member227600 · Accepted solution]

hi,

Please follow the following step

Hi,

Follow the following steps:-

1:-Create a saprouter subdirectory under Ex:-usr/sap/saproter

2:-Download saprouter.sar file from service.sap.com . Extract this file using SAPCAR in

Saprouter directory. Saprouter.sar file containing two files saprouter & nipping.

3:-Download the SAP cryptographic software from service.sap.com/swdc.Extract this file

& place all files in saprouter subdirectory [sapcrypto.dll,sapgenpse.exe,ticket}.

4:-Set the environment variable for SECUDIR & SNC_LIB

CERTIFICATE FOR SAPROUTER

Note:- Owner is <sid>adm

1:-Now login on service.sap.com/tcsSAPtrust Center Service in Detail SAProuter

Certificatesapply now continue.

2:-Note down your distinguished name.

Ex:- CN=XXXXXs, OU=XXXXX, OU=SAProuter, O=SAP, C=DE

3:- Execute the following command in the saprouter/ntintel directory.

sapgenpse get_pse u2013v u2013r certreq u2013p local..pse u201CCN=XXXX, OU=XXXXX,

OU=SAProuter, O=SAP, C=DEu201D

4:- Enter PIN:-

Re Enter PIN:-

5.The "certreq" file is created in the /saprouter/ntintel directory.

5:-File cretreq is created in the /usr/sap/saprouter/ntintel directory.

6:- Open u201Ccertrequ201D file in text editor

Copy the text of certreq & paste in the space provided in sapmarket place .This space

Is available after step 1: under certificate for saprouter section.

7:-After that please click on u201C Request Certificateu201D anew screen will be displaying your

Certificate issued by SAP Certification Authority.

8:-Now using text editor copy the contect (from start to end) & save it as u201Csrcertu201D in to

usr/sap/saprouter/ntintel .(without any extension ex .txt).

IMPORTING THE CERTIFICATE

1:-To import the certificate into SAProuter execute the following command in /saprouter

/ntintel directory.

sapgenpse import_own_cert u2013c srcert u2013p local.pse

And enter PIN (same as 4 point of section certificate for saprouter)

2:- This will create a file u201Ccred_v2u201D in the same directory.

3:- Check whether the certificate has been import correctly. Execute the following

Command in saprouter/ntintel directory.

sapgenpse get_my_name u2013v u2013n Issuser

The result should be u201CCN=XXXX CA=XXXXX, OU=SAProuter, O=SAP, C=DEu201D

ROUTE PERMISSION TABLE

1:- Create a text file using text editor under usr/sap/saprouter & save it as saprouttab

Without any extension.

2:- Example of saprouttab file

#SNC-connection from and to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

SNC-connection from SAP to local R/3-system for Support SID DEV

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 102.108.70.10 3200

SNC - connection from SAP to local R/3 - system for Support SID PRD

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 102.108.70.9 3200

SNC - connection from SAP to local R/3 - system for Support SID QAS

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 102.108.70.2 3210

SNC - connection from SAP to local R/3-System for SAPtelnet

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 102.108.70.1 23

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 102.108.70.4 *

#Access from the local Network to SAPnet - R/3 Frontend (OSS)

P 102.108.70.1 194.39.131.34 3299

P * 194.39.131.34 3299

Deny all other connections

D * * *

3:- Start the SAProuter with the following command:-

Saprouter u2013r u2013S <port> -K u201Cp:CN=XXXX,OU= XXXX0,OU=SAProuter,O=SAP,

C=DEu201D

MAINTAIN SYSTEM DATA ON SAPMARKETPLACE

1:- Login on service.sap.com/access-support.

2:- Click on the Maintain Connection as you see in the following screen.

3:-Select your system (Ex:- PRD or DEV)

4:-Click on connection type.

5:- after select connection type click on System data. Maintain the date.

Now you can start sap router.

let me know If you have any other query regarding SAP router

karan

Karan

[Former Member · Accepted solution]

Hi Karan,

Can you brief more in details about:

4:-Set the environment variable for SECUDIR & SNC_LIB

Now im stuck on SAProuter certificate , when i click Apply Now on the certificate the message below came out :

There are no SAProuters registered to the company BP Petronas Acetyls Sdn Bhd , which are configured or registered to support SNC (Secure Network Communication).

To register a SAProuter for SNC please:

• Contact your System Administrator.

• Open a customer message under the component XX-SER-NET.

[Former Member · Accepted solution]

Hi,

You have to open an OSS message under XX-SER-NET to let them know about the server you want to set up as a saprouter.

Give them the hostname and public IP address.

[Former Member]

Hi,

Check SAP Note 30289 - SAProuter documentation

regards,

kaushal

[Former Member]

Hi,

Use "sapcar" to uncar the .sar file to get the saprouter.exe and niping.exe executables.

sapcar -xvf <sar file>

For more information,see

http://help.sap.com/saphelp_nw04/helpdata/en/17/b0fe3954a97223e10000000a114084/frameset.htm

For more information in installing and configuring the saprouter see the link below

http://help.sap.com/saphelp_nw04/helpdata/en/4f/992dbd446d11d189700000e8322d00/frameset.htm

Rgds

Radhakrishna D S

[Former Member]

thanks radha, now i can extract the car file. there are 2 files, one is nipping.exe and saprouter.exe.