Reg : SAP Router Configuration

[Former Member]

Dear Friends,

How to configure the SAP router? If anybody have configuration details pls help me.

Our System is ECC 6.0

OS - 2003 Server

DB : MS SQL Server

Then How to Communicate to SAP.

Regards

kesav

[Former Member]

I have prepare documention thru SAP OSS notes. i solved

[former_member187565]

Hi,

> How to configure the SAP router? If anybody have configuration details pls help me.

1) Download the latest SAP Router files (saprouter.car, nipping, cryptographic library) from SAP Service Market Place --- Patches.

2)Create a user called sncadm as a member of Administrator. Log off administrator and login as sncadm. Create the following environment variables for this user.

SECUDIR = c:\usr\sap\saprouter

SNC_LIB = c:\usr\sap\saprouter\sapcrypto.dll

3) Create folder c:\usr\sap\saprouter and copy the downloaded files into that folder. Extract all the compressed files. Now typically this folder will have the following files.

Sapcrypto.dll

Sapgenpse.exe

Ticket

Ntscmgr.exe

Nipping.exe

Saprouter.exe

(other required files can be copied from kernel directory of other SAP Systems)

4) Go to http://service.sap.com/saprouter-sncadd. Click on u201CApply Nowu201D

You will get information like this (on first screen):

Click on Continue. Now we have to create the request for SAProuter which is to be given as input in the next screen u201CRequest Certificate for SAProuteru201D.

5)Open a command prompt and execute the following commands.

Cd \usr\sap\saprouter

sapgenpse get_pse u2013r sap-router.p10 u2013p sap-router.pse u201CCN=SAP-ROUTER, OU=0000733879, OU=SAProuter, O=SAP, C=DEu201D

You will be asked for a PIN: input any (but do not forget!!!!!) No Password is given in this installation.

This command will create the file sap-router.p10 and sap-router.pse.

Open the file sap-router.p10 with notepad, copy & paste this certificate request to the text area of the u201CRequest Certificate for SAProuteru201D page.

Click on Request Certificate

In response you will get certificate signed by CA.

Copy & paste the text into a text file including the header & footer (saprt.txt is the file created here)

6)Now install the certificate as follows

Sapgenpse import_own_cert u2013c saprt.txt u2013p sap-router.pse

7)Now create credentials for saprouter

Sapgenpse seclogin u2013p sap-router.pse u2013O sncadm

This will create a file called cred_v2 in c:\usr\sap\saprouter

8)Now Check whether certificate has been imported correctly or not

Sapgenpse get_my_name u2013v u2013n Issuer

The name of issuer should be: CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE. If the name is not correct, then delete the file cred_v2 and start all over again from Step u2013 4.

9)Now create a file u201Csaprouttabu201D in the folder c:\usr\sap\saprouter and make the following entries in that.

1. SNC connection to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

1. Access from your local Network to SAPNet - R/3 Frontend

P 172.16.. 194.39.131.34 3299

P 172.17.. 194.39.131.34 3299

P 172.18.. 194.39.131.34 3299

P 172.19.. 194.39.131.34 3299

D * * *

Save the file and close

10) Make the following changes in the hosts file and services file (under windows\system32\drivers\etc folder ) SAP-ROUTER system

hosts file:

172.18.9.8 SAP-ROUTER

194.39.131.34 sapserv2

services file:

sapdp99 3299/tcp

sapgw99 3399/tcp

sapmsO01 3601/tcp

11) Now check the entry in the services files for all servers and all front-end PCs under %winnt%/system32/drivers/etc/ there should have:

sapdp99 3299/tcp

sapmsO01 3601/tcp

12) Now start the sap router using the command (from the saprouter directory)

Saprouter u2013r u2013V 3 u2013K u201Cp:CN=SAP-ROUTER,OU=0000733879,OU=SAProuter,O=SAP,C=DEu201D

13)Connection to SAP can tested using the command

lgtst u2013H /H/172.18.9.8//H/194.39.131.34/S/sapdp99/H/oss001/S/sapmsO01 u2013S x u2013W 30000

Note : The file lgtst.exe can be copied from other SAP systemu2019s kernel directory.

The output should look like these:

Using trcfile: dev_lg

List of reachable application servers

-

---

.

u2026.

u2026..

u2026u2026.

u2026u2026u2026.

If the lgtst command does not display the list of reachable application servers, then the connection to SAP could not be established. Troubleshoot the error and rectify.

For more info see the following sapnote

note 30289 : SAProuter documentation

note 525751: Installation of the SNC-SAPRouter as NT Service

note 46902 : Security aspects in remote access

note 48243 : Integrating SAProuter into a firewall

note 33135 : Guidelines for OSS1 (Version for SAPSERV3).

note 35010 : Service connections: Composite note (overview)

[Former Member]

Thanks Hussain and Rohith

[Former Member]

refer to http://www.saptechies.com/sap-router-configuration/

Rohit