SAProuter Issue Please help

[Former Member]

Dear experts ,

im trying to install the SAProuter for the solution manager, i did everything and imported my certificate and started the service but im facing this Error when im trying to start the router

C:\SAProuter>saprouter -r -K "p:CN=saprouter, OU=0001070654, OU=SAProuter, O=SAP

, C=DE"

trcfile dev_rout

no logging active

the dev_rout has the follwing:

-

---

trc file: "dev_rout", trc level: 1, release: "710"

-

---

Tue Dec 01 19:17:15 2009

SAP Network Interface Router, Version 39.3 (SP4)

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -K

command line arg 3: p:CN=saprouter, OU=0001070456, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "C:\SAProuter\sapcrypto.dll".

File "C:\SAProuter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 1756, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

the saprouttab file has NO Data at all !!

please advice me how can i start the router

[former_member906139]

Hello Sameth,

Follow below link, it contain exact procedure.

https://websmp109.sap-ag.de/saprouter-sncdoc

Regards,

Abhay

[Former Member]

i've done this issues

Ask your IT Team to apply the below rules in the system.

Your Public IP --> 194.39.131.34 port 3299

194.39.131.34 -->Your Public IP port 3299

inbound and outbound

but im haveing the same (sapserv2a route permission denied (196.221.150.233 to 147.204.100.49 sapdb01)

i dont know if its an IT issue or a saprouter configuration.

all this just for solution manager maintenance optimizer to download SPS

thanks for all who replied me hope i can slove this

[Former Member]

In oss1 select SAPRouter at SAP as sapserv2 and IP address as 194.39.131.34 & port no 99.

I hope you are using SNC for SAP Router

Please maintain entries in saprouttab file as

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 196.221.150.233 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 196.221.150.233 (IP is the Solution manager ) 3389

P * 194.39.131.34 3299

P * 194.39.131.34 23

P 194.39.131.34 192.221.150.233 3202

P 194.39.131.34 192.221.150.233 3399

Once you maintain the above entries restart the SAPRouter.

Please try to ping 194.39.131.34 server from the SAP Router server.

For further information please check SAP Note 169924. This notes will gives you complete information how to troubleshoot.

[Former Member]

DO you mean that the saprouttab file will contain the data you gave me

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 196.221.150.233 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 196.221.150.233 (IP is the Solution manager ) 3389

P * 194.39.131.34 3299

P * 194.39.131.34 23

P 194.39.131.34 192.221.150.233 3202

P 194.39.131.34 192.221.150.233 3399

the IP 196.221.150.233 is the Real IP of the ISA (firewall server) my local IP is 192.168.2.200

when i did that the RFC connection SAPOSS was no longer working my current saprouttab data is

1. SNC-connection to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

1. SNC-connection from SAP to local R/3-System for Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" sap

1. SNC-connection from SAP to local R/3-System for pcANYWHERE, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 196.221.150.233 5631

1. SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 196.221.150.233 1503

1. SNC-connection from SAP to local R/3-System for saptelnet, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 196.221.150.233 23

1. Access from the local Network to SAPNet - R/3 Frontend (OSS)

P 192.168.2.200 194.39.131.34 3299

1. deny all other connections

D * * *

with this route the RFC is working fine but the OSS1 gets Route permission denied (196.221.150.233 to 147.204.148, sapdb01)

i just want to activate the SNC what should i do now ive tried everything. i checked the Note 169924 and my service file is just fine and has the sapdb01 and sapdb00.

thanks

Edited by: Sameh Essa on Dec 3, 2009 5:18 PM

[Former Member]

Hi Sameh,

Connection to SAPnet is closed long back. So don't worry about the error you are getting.

This error also indicates that your SAprouter is configured correctly & you can now configure Maintainance Optimizer to download the saupport packages.

Thanks,

Sachin

[Former Member]

NOW the SAPOSS test working but the logon to sapnet giving me error..

after i chose public option ( sapserv2a route permission denied (196.221.150.233 to 147.204.100.49 sapdb01)

any advice here.

[markus_doehr2]

> NOW the SAPOSS test working but the logon to sapnet giving me error..

> after i chose public option ( sapserv2a route permission denied (196.221.150.233 to 147.204.100.49 sapdb01)

Since several years it's no more possible to logon to the SAP backend systems. They are used for RFCs only.

Markus

[former_member204746]

file c:\saprouter\saprouttab is empty

[Former Member]

yess exactly .. any ideas of what can i do?

[former_member204746]

enter this line in the file:

P * * *

(press enter)

save file.

restart saprouter.

search google with keywords: install SAPROUTER windows

[Former Member]

i did what you told me and i still got the error message

C:\SAProuter>saprouter -r -K "p:CN=saprouter, OU=0001070654, OU=SAProuter, O=SAP

, C=DE"

trcfile dev_rout

no logging active

WARNING: wildcard character used in route target

i already have the guide and i did the steps one by one , any comments please how can i troubleshoot this issue.

[Former Member]

Its not error. SAPRouter is running . You can check this by configuring in OSS1 T code and check the connectivity connection in SM59 of SAPOSS RFC.

[Former Member]

Logon Connection Error

Error Details Error when opening an RFC connection

Error Details ERROR: partner '196.221.150.233:sapdp99' not reached

Error Details LOCATION: SAP-Server sap_SOL_00 on host sap (wp 0)

Error Details DETAIL: NiPConnect2

Error Details CALL: connect

Error Details COMPONENT: NI (network interface)

Error Details COUNTER: 7

Error Details ERROR NUMBER: 10061

Error Details ERROR TEXT: WSAECONNREFUSED: Connection refused

Error Details MODULE: nixxi.cpp

Error Details LINE: 2835

Error Details RETURN CODE: -10

Error Details SUBRC: 0

Error Details RELEASE: 701

Error Details TIME: Wed Dec 02 11:08:58 2009

Error Details VERSION: 38

this is the result of the SAPOSS connection test

[Former Member]

Is SAP Router is installed in a DMZ and natted with the local IP?

Are you able to ping the SAP Router server?

[Former Member]

there is no DMZ, my server is in our internal network

My firewall will is an edge firewall (ISA 2006), And it performs natting from internal network to the internet, it also performs stateful filtering and opens a session bet. Internal client ad the external web host each time it the internal client connects to any the internet web server.

Our internal sap server IP is 192.168.2.200

Our external ISA IP is 196.221.150.233 my request was with this IP

and i also filled the SAPROUTTAB file with the the example

1. SNC-connection to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

1. SNC-connection from SAP to local R/3-System for Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" sap

1. SNC-connection from SAP to local R/3-System for pcANYWHERE, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.2.200 5631

1. SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.2.200 1503

1. SNC-connection from SAP to local R/3-System for saptelnet, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.2.200 23

1. Access from the local Network to SAPNet - R/3 Frontend (OSS)

P 192.168.2.200 194.39.131.34 3299

1. deny all other connections

D * * *

and yes i can ping the saprouter server

thanks for your reply

Edited by: Sameh Essa on Dec 2, 2009 10:58 AM

[Former Member]

Is ther any firewall settings, can you check with your network team. And also is that ping is enabled?

Are you able to ping the 194.39.131.34 SAP server?

[Former Member]

Our IT team asks if it's necessary to put a real internet IP to the Network card (NIC) for the SAP router server, and let the ISA server route any connection to this IP

and yes i can ping the 194.39.131.34

[Former Member]

Hi,

Ask your IT Team to apply the below rules in the system.

Your Public IP --> 194.39.131.34 port 3299

194.39.131.34 -->Your Public IP port 3299

Thanks,

Sachin