sap router problem

[former_member182505]

hi experts

i am facing a big trable .

i have config sap router successfully . its connected to SAPOSS thru sm59.

and my ip is pinging well. but when i started SAProuter at the cmd and after that i ping my IP its droping packet that y i m unable to connect thru router string. kindly help me out asap.

i m waiting for ur great reply.

thanks / regards

[former_member182505]

nice help from the forum.

[Former Member]

its connected to SAPOSS thru sm59.
and my ip is pinging well

What IP do you mean here, your server IP or your Public IP?

when i started SAProuter at the cmd and after that i ping my IP its droping packet 

What IP are you trying to do a Ping, Server IP or Public IP?, are you trying to ping from internal network (LAN) or from external network like Internet (WAN)?

If you are connecting to SAPOSS using your Saprouter then could you paste your saprouttab file here?

[Former Member]

Hi Sadiq,

Looks like a network problem.

Cheers

Deepanshu

[markus_doehr2]

If there's packet loss it's either a firewall in between or you have network problems.

What do you see in the dev_rout tracefile?

Markus

[former_member182505]

hi

this is my dev_rout file detail

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Mon Apr 06 18:53:03 2009

SAP Network Interface Router, Version 38.10

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -S

command line arg 3: 3299

command line arg 4: -K

command line arg 5: p:CN=TANSAPSC, OU=0000749427, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "C:\usr\sap\saprouter\sapcrypto.dll".

File "C:\usr\sap\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 2068, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

Mon Apr 06 19:10:33 2009

NiHsLGetHostName: to get 124.247.203.218 failed in 19502ms (tl=2000ms)

Tue Apr 07 09:15:45 2009

shutdown message received, good bye ...

[former_member182505]

hi

i m pinging my public ip from WAN as well as LAN .

[Former Member]

Ok, from your dev_rout file your saprouter is not receiving anything so this looks like a firewall problem. what kind of configuration you have with your saprouter?:

WAN----

---

>firewall----

---

>saprouter----

-

---

>sapserver

or your configuration is:

WAN----

---

>saprouter----

---

>firewall----

-

---

>sapserver

Or you don´t use firewall at all?

If your case is the first, then firewall must be configured so all trafic coming from WAN using 3299 port should be routed to saprouter IP.

In the second case then your firewall must allow comunication from saprouter IP to sapserver IP's specifically 32xx, 33xx where xx is the system number for your systems and the saprouter port 3299.

I prefer the first option when installing because Firewall is going to stop attacks without affecting saprouter, in the second option saprouter could be hacked.

About pinging from the WAN to your saprouter public IP not responding this is not unusual as most ISP´s dont allow pings to their IP's, If your saprouter IP is not responding pings from the LAN and it is allowed to do that then all problem resides in firewall configuration.

You could try conecting using route string in your sapgui from the LAN to try to connect to your servers using saprouter but it will only works if saprouter is allowed to be connected from the LAN.

[former_member182505]

hi

i m not using nay firewall. packet is still droping i m using 2 LAN card one for ADSL moden Another for connecting server. and both has a internet connection.

thanks