SAProuter problem

[ganesh_borase2]

Hello everybody

I had install the SAprouter successfully, but my system is not access from outside

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Sat Apr 04 14:29:23 2009

SAP Network Interface Router, Version 38.10

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -K

command line arg 3: p:CN=univep, OU=0000772340, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "C:\usr\sap\saprouter\ntintel\sapcrypto.dll".

File "C:\usr\sap\saprouter\ntintel\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 316, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

I cant understand what is the problem

saprouttab file entries is as follows

#SNC connection from & to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.8 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.12 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.7 5631

p * 194.39.131.34 3299

p * * *

192.168.1.8 IP 3200 <-- for development server int. no .00

192.168.1.12 3201 Instance no 01

so please verify the same, suggest me where i made a mistake

error is as like that 194.39.131.34 3299

Thanks

[Mpaakhawa]

I have the same problem too. Please assist.

saprouter 192.168.100.15

sapce0 192.168.100.45

niping to sapce0 on port 3200 returns connection refused.

can not telnet 192.168.100.15 3200 from sapce0,

but can telnet 192.168.100.15 3299 from sapce0

please assist

[former_member208679]

Hi ,

Add ip in the routetab file .i hope this will work.

Regards

Chetan Anguralia

[markus_doehr2]

>

> Hello everybody

> I had install the SAprouter successfully, but my system is not access from outside

Is the saprouter accessible from the outside (can the machine be pinged)?

Markus

[ganesh_borase2]

Thanks, but I can't understand

*main: pid = 316, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)*

reading routtab: './saprouttab'

Trace File

-

---

trc file: "c:\usr\sap\saprouter\saprouter.trc", trc level: 3, release: "700"

-

---

Sat Apr 04 16:32:29 2009

NiHsLInit: alloc host/serv bufs (200/200 entries)

NiIInit: allocated nitab (811 at 00290048)

NiIInit: host/serv bufs already initialized

NiPGetNodeAddrList: got 4 interface(s) from operating system

[0] IP-Address: 192.168.1.100

[1] IP-Address: 192.168.1.2

[2] IP-Address: 59.90.170.102

[3] IP-Address: 192.168.100.151

SAP Network Interface Router, Version 38.10

Compiled Sep 27 2007 01:16:41

command line arg 0: c:\usr\sap\saprouter\saprouter.exe

command line arg 1: -r

command line arg 2: -R

command line arg 3: c:\usr\sap\saprouter\saprouttab

command line arg 4: -G

command line arg 5: c:\usr\sap\saprouter\saprouter.log

command line arg 6: -T

command line arg 7: c:\usr\sap\saprouter\saprouter.trc

command line arg 8: -V

command line arg 9: 3

command line arg 10: -K

command line arg 11: p:CN=univep, OU=0000772340, OU=SAProuter, O=SAP, C=DE

command line arg 12: -W

command line arg 13: 20000

service : 3299

routtab : c:\usr\sap\saprouter\saprouttab

plug-in : no plug-in

-argument: 'no argument'

clients : 800

max servers : 1

quelength : 1

maxheap : 20000000

timeoutL : 20000

tracefile : c:\usr\sap\saprouter\saprouter.trc

logfile : c:\usr\sap\saprouter\saprouter.log

filelimit : off

portrange : no portrange active

local address : default address

->> SncInit(prg=0, ini_fname=(NULL), &sec_avail=00D1FACF)

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "C:\usr\sap\saprouter\ntintel\sapcrypto.dll".

load shared library (C:\usr\sap\saprouter\ntintel\sapcrypto.dll), hdl 0

using "C:\usr\sap\saprouter\ntintel\sapcrypto.dll"

*DlLoadFunc: GetProcAddress(sapsnc_init_adapter) Error 127*

*Error 127 = "The specified procedure could not be found."*

load shared func (gss_acquire_cred) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_release_cred) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_init_sec_context) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_accept_sec_context) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_process_context_token) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_delete_sec_context) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_context_time) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_get_mic) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_verify_mic) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_wrap) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_unwrap) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_display_status) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_indicate_mechs) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_compare_name) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_display_name) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_import_name) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_release_name) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_release_buffer) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_release_oid_set) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_inquire_cred) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_add_cred) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_inquire_cred_by_mech) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_inquire_context) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_wrap_size_limit) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_export_sec_context) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_import_sec_context) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_create_empty_oid_set) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_add_oid_set_member) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_test_oid_set_member) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_inquire_names_for_mech) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_inquire_mechs_for_name) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_canonicalize_name) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_export_name) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

load shared func (gss_duplicate_name) from C:\usr\sap\saprouter\ntintel\sapcrypto.dll

File "C:\usr\sap\saprouter\ntintel\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

<<- SncPDLInit()==SAP_O_K

<<- SncInit()==SAP_O_K

sec_avail = "true"

->> SncSetMyName(snc_hdl=00000000, myname="p:CN=univep, OU=0000772340, OU=SAProuter, O=SAP, C=DE")

<<- SncSetMyName()==SAP_O_K

in: myname = "p:CN=univep, OU=0000772340, OU=SAProuter, O=SAP, C=DE"

NiBufISetParam: set max heap to 20000000

NiSetParamEx: switch NIP_CONNLOCAL off (not supported by platform)

NiIMyHostName: hostname = 'univep'

main: pid = 308, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

NiICreateHandle: hdl 0 state NI_INITIAL

NiIInitSocket: set default settings for new hdl 0 / sock 1944 (I4; ST)

NiITraceByteOrder: CPU byte order: little endian, reverse network, low val .. high val

NiIBind: hdl 0 bound to 3299 (IP only)

NiIBlockMode: set blockmode for hdl 0 FALSE

NiIListen: state of hdl 0 NI_LISTEN

NiIListen: listen for client requests on hdl 0

NiSelICreateSet: new set0

SiSelNInit: allocate 134544 bytes for FI (811)

NiSelIInit: size of set0 is 811

SiSelNSet: sock 1944 added to set pos 0

NiSelIAddMsg: added hdl 0 to set0

SiSelNSet: set events of sock 1944 to: rp-

reading routtab: 'c:\usr\sap\saprouter\saprouttab'

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0022FD30, len=86) full hexdump

NiStrToAddrMask: '194.39.131.34' -> 194.39.131.34 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0022FD30, len=86) full hexdump

NiStrToAddrMask: '192.168.1.10' -> 192.168.1.10 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0022FD30, len=86) full hexdump

NiStrToAddrMask: '192.168.1.7' -> 192.168.1.7 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0022FD30, len=86) full hexdump

NiStrToAddrMask: '192.168.0.3' -> 192.168.0.3 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0022FD30, len=86) full hexdump

NiStrToAddrMask: '192.168.1.10' -> 192.168.1.10 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

NiIGetServNo: servicename '3389' = port 0D.3D/3389

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0022FD30, len=86) full hexdump

NiStrToAddrMask: '192.168.1.10' -> 192.168.1.10 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

NiIGetServNo: servicename '3299' = port 0C.E3/3299

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0022FD30, len=86) full hexdump

NiStrToAddrMask: '192.168.1.7' -> 192.168.1.7 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

NiIGetServNo: servicename '3299' = port 0C.E3/3299

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0022FD30, len=86) full hexdump

NiStrToAddrMask: '192.168.1.3' -> 192.168.1.3 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

NiIGetServNo: servicename '3299' = port 0C.E3/3299

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0022FD30, len=86) full hexdump

NiStrToAddrMask: '192.168.1.5' -> 192.168.1.5 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

NiIGetServNo: servicename '3299' = port 0C.E3/3299

contents of routtab ('c:\usr\sap\saprouter\saprouttab', 13 entries):

KT,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002EE398, len=86) full hexdump

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 194.39.131.34 ffff:ffff:ffff: * *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002EE800, len=86) full hexdump

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 192.168.1.10 ffff:ffff:ffff: * *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002EEC68, len=86) full hexdump

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 192.168.1.7 ffff:ffff:ffff: * *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002EF0D0, len=86) full hexdump

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 192.168.0.3 ffff:ffff:ffff: * *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002EF538, len=86) full hexdump

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 192.168.1.10 ffff:ffff:ffff: 3389 *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002EF9A0, len=86) full hexdump

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 192.168.1.10 ffff:ffff:ffff: 3299 *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002EFE08, len=86) full hexdump

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 192.168.1.7 ffff:ffff:ffff: 3299 *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002F0270, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 192.168.1.3 ffff:ffff:ffff: 3299 *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002F06D8, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 192.168.1.5 ffff:ffff:ffff: 3299 *

P, 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 * *

P, 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 * *

P, 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 * *

P, 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 * *

• NI-ROUTER LOOP ********

SiSelNSelect: start select (timeout=-1)

Thanks

Edited by: ganesh borase on Apr 4, 2009 8:32 PM

[markus_doehr2]

Ganesh,

if you post text files, put code tags around them (it's the << >> sign next to the underline sign). Otherwise nobody can read your posts (see yourself).

I don't see an error in the logfiles, looks fine.

You say you can't reach the saprouter from the outside, yes? If it can't be reached then your problem is a network problem and not a saprouter problem.

I asked if you can

ping <ip-addresse-from-saprouter>

Markus

[ganesh_borase2]

Hello

When i connect from SAP by using OSS1 then i get following message

partner '59.90.170.102:sapdp99' not reached

WSAEHOSTUNDER: No router to host

Do you want to see the detailed error description?

but when i ping 194.39.131.34 then it is replied

so please suggest how to solve this problem?

Thanks

[former_member187565]

Hi Ganesh,

Have you change your saphost name?If yes then send a message to SAP that you change your SAPhost name or thier IP.

The type of concern you find comes when a wrong saprouter ip or saprouter host name registered on SAP side.

If this is fine in your case then surely its a network issue.Solve this issue with the help of network team.

check by ping,

use telnet command,

check the services,whether all are present or not.

check the host file

use tracert command to see the route of your ip

[markus_doehr2]

> partner '59.90.170.102:sapdp99' not reached

> WSAEHOSTUNDER: No router to host

Your SAP system (not your client/SAPGUI) can't reach that IP addresse because there is no route defined in the routing table of your SAP system.

Markus

[ganesh_borase2]

Hello

Following is the My saprouttab entries

1. SNC-connection to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

1. SNC-connection from SAP to local R/3-System for Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.10 3200

1. SNC-connection from SAP to local R/3-System for saptelnet, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.10 23

1. Access from the local Network to SAPNet - R/3 Frontend (OSS)

P * 194.39.131.34 3299

P * * * *

1. deny all other connections

D * * *

here 192.168.1.10 is the Dev system IP 00 is instance

is the above entries is correct?

Please suggest me is this entries is correct

[Former Member]

Hi Ganesh,

Please maintain

1. SNC-connection from SAP to local R/3-System for pcAnywhere

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" Your desination IP 5631

NOTE : If 192.168.1.10 is your DEV SYSTEM and you are trying to maintain connection fro same then include DEV entry as well

1. SNC-connection from SAP to local R/3-System for Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" YOUR DEV ENTRY 3200

1. SNC-connection from SAP to local R/3-System for Netmeeting

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" Your desination IP 1503

Hope this helps.

Cheers

Deepanshu

[Former Member]

could you clear something... you posted

partner '59.90.170.102:sapdp99' not reached
WSAEHOSTUNDER: No router to host
Do you want to see the detailed error description?
but when i ping 194.39.131.34 then it is replied

what IP is 59.90.170.102 and what is IP 194.39.131.34....

What is the OSS1 configuration you have?

Do you have a Firewall in your network before or after the Saprouter server?

[ganesh_borase2]

Hi,

In my saproutab file the entry,

*p * * * * 192.168.1.10 ***

*p * * **

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.10 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.10 3300

Will anybody please explain me meaning of this, bcz. 192.168.1.10 is I.P of DEV server,

Thanks

Ganesh

[former_member187565]

Dear Ganesh,

In saprouttab

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Windows server IP> 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3 Server IP>3200

But in your case windows server ip & r/3 server ip both same.

Is ur saprouter working??

[ganesh_borase2]

HI

I just want to know

In saprouttab

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Windows server IP> 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3 Server IP>3200

Port 3389 and 3200 what is use of this

Thanks

[former_member187565]

> Port 3389 and 3200 what is use of this

Hi,

Read the following

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/4e515a43-0e01-0010-2da1-9bcc452c...

Here see the ranges of different ports used for...

[Former Member]

In my local network I can ping my ip-addresse from saprouter.

C:\Documents and Settings\Administrator>ping 10.15.111.9
Pinging 10.15.111.9 with 32 bytes of data:
Reply from 10.15.111.9: bytes=32 time=1ms TTL=63
Reply from 10.15.111.9: bytes=32 time<1ms TTL=63
Reply from 10.15.111.9: bytes=32 time=1ms TTL=63
Reply from 10.15.111.9: bytes=32 time<1ms TTL=63
Ping statistics for 10.15.111.9:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 1ms, Average = 0ms

I had installed in this host Solution Manager in server redhat linux with oracle, and I also installed saprouter at the same host.

My saprouttab is :

# SNC connection to local system for R/3-Support
# R/3 Server: 10.15.111.9
# SNC connection to and from SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3299
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.15.111.9 *
P * * * <my SAP system's password>
# SNC connection to local system for R/3-Support
# R/3 Server: 10.15.111.9
# R/3 Instance: 00
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.15.111.9  3200 #( sometimes i choose 3600)
# SNC connection to local UNIX system for SAPtelnet, if applicable
# UNIX server: 10.15.111.9
# Default Telnet port: 23
KP "p:CN=sapserv3, OU=SAProuter, O=SAP, C=DE" 10.15.111.9  23
# Access from the local Network to SAP
P 10.15.*.* 194.39.131.34  3299
# Deny all other connections
D * * *

I also has just known that if I setup Sap system and saprouter in the same may be cause port conflict :u201DTCP/IP Ports Used by SAP Applicationsu201D. When I see in /ect/services : cat /etc/services | grep SAP

sapdp00 3200/tcp        # SAP System Dispatcher Port
sapdp99 3299/tcp        # SAP System Dispatcher Port
sapmsSOL        3600/tcp        # SAP System Messaging Service Port

My server is connect to a modem for connecting internet, add route for local network access, I set its IP is 10.15.111.9 open port modem from 3200 to 3299. So I dont startsap and try to start saprouter.

[root@myhost saprouter]# export SECUDIR=/usr/sap/saprouter/
[root@myhost saprouter]# export SNC_LIB=/usr/sap/saprouter/linux-glibc2.3/libsapcrypto.so
[root@myhost saprouter]# ./saprouter -r -K  "p:CN=sapserver2,OU=0000673643,OU=SAProuter,O=SAP,C=DE
"trcfile  dev_rout
no logging active
WARNING: wildcard character used in route target

After the start command the display will show as above. And if I nipping :

# ./niping -c -H 194.39.131.34  -S 3299

Wed Jun  3 09:31:08 2009
connect to server o.k.

Wed Jun  3 09:31:09 2009
*** ERROR => NiBufIProcMsg: hdl 0 received rc=-93 (NIEROUT_INTERN) from peer [nibuf.cpp    2125]
*** ERROR => NiTClientLoop: NiTReadLoop (rc=-93) [nixxtst.cpp  2839]

*****************************************************************************
*
*  LOCATION    SAProuter 39.2 (SP4) on 'sapserv2a'
*  ERROR       internal error
*
*  TIME        Wed Jun  3 04:31:40 2009
*  RELEASE     710
*  COMPONENT   NI (network interface)
*  VERSION     39
*  RC          -93
*  MODULE      nirout.cpp
*  LINE        2683
*  DETAIL      NiRClientHandle: route expected
*  COUNTER     1264085
*
*****************************************************************************

Please tell me how can I do to start SAProuter.

Edited by: Linh Tran Manh on Jun 3, 2009 4:39 AM

Edited by: Linh Tran Manh on Jun 3, 2009 4:56 AM

[Former Member]

In my local network I can ping my ip-addresse from saprouter.

C:\Documents and Settings\Administrator>ping 10.15.111.9

Pinging 10.15.111.9 with 32 bytes of data:

Reply from 10.15.111.9: bytes=32 time=1ms TTL=63

Reply from 10.15.111.9: bytes=32 time<1ms TTL=63

Reply from 10.15.111.9: bytes=32 time=1ms TTL=63

Reply from 10.15.111.9: bytes=32 time<1ms TTL=63

Ping statistics for 10.15.111.9:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

Minimum = 0ms, Maximum = 1ms, Average = 0ms

I had installed in this host Solution Manager in server redhat linux with oracle, and I also installed saprouter at the same host.

My saprouttab is :

1. SNC connection to local system for R/3-Support

1. R/3 Server: 10.15.111.9

1. SNC connection to and from SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3299

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.15.111.9 *

P * * * <my SAP system's password>

1. SNC connection to local system for R/3-Support

1. R/3 Server: 10.15.111.9

1. R/3 Instance: 00

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.15.111.9 3200 #( sometimes i choose 3600)

1. SNC connection to local UNIX system for SAPtelnet, if applicable

1. UNIX server: 10.15.111.9

1. Default Telnet port: 23

KP "p:CN=sapserv3, OU=SAProuter, O=SAP, C=DE" 10.15.111.9 23

1. Access from the local Network to SAP

P 10.15.. 194.39.131.34 3299

1. Deny all other connections

D * * *

I also has just known that if I setup Sap system and saprouter in the same may be cause port conflict :u201DTCP/IP Ports Used by SAP Applicationsu201D. When I see in /ect/services : cat /etc/services | grep SAP

sapdp00 3200/tcp # SAP System Dispatcher Port

sapdp99 3299/tcp # SAP System Dispatcher Port

sapmsSOL 3600/tcp # SAP System Messaging Service Port

My server is connect to a modem for connecting internet, add route for local network access, I set its IP is 10.15.111.9 open port modem from 3200 to 3299.

[root@myhost saprouter]# export SECUDIR=/usr/sap/saprouter/

[root@myhost saprouter]# export SNC_LIB=/usr/sap/saprouter/linux-glibc2.3/libsapcrypto.so

[root@myhost saprouter]# ./saprouter -r -K "p:CN=sapserver2,OU=0000673643,OU=SAProuter,O=SAP,C=DE

"trcfile dev_rout

no logging active

WARNING: wildcard character used in route target

After the start command the display will show as above. And if I nipping :

1. ./niping -c -H 194.39.131.34 -S 3299

Wed Jun 3 09:31:08 2009

connect to server o.k.

Wed Jun 3 09:31:09 2009

• ERROR => NiBufIProcMsg: hdl 0 received rc=-93 (NIEROUT_INTERN) from peer [nibuf.cpp 2125]

• ERROR => NiTClientLoop: NiTReadLoop (rc=-93) [nixxtst.cpp 2839]

*****************************************************************************

*

• LOCATION SAProuter 39.2 (SP4) on 'sapserv2a'

• ERROR internal error

*

• TIME Wed Jun 3 04:31:40 2009

• RELEASE 710

• COMPONENT NI (network interface)

• VERSION 39

• RC -93

• MODULE nirout.cpp

• LINE 2683

• DETAIL NiRClientHandle: route expected

• COUNTER 1264085

*

*****************************************************************************

Please tell me how can I do to start SAProuter.