Access SAP through SAPRouter from outside of Network

[manoj_nayak2]

Hello All,

As my SAPRouter cerificate got expired i genrated new certificate & import same into SAProuter. And this time my router is working fine.

But this time i want to access from outside of network so added this entries in my SAProutab as follow:

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Public ip>

P <Public ip> 194.39.131.34 3299

P <my router ip> 194.39.131.34 3299

P 172.16.. 194.39.131.34 3299

P 194.39.131.34 172.16..

P 194.39.131.34 <Public ip> 3299

S * <my SAP ip> 3200

P <Public ip> <my SAP ip> 3200

Note:

SAP System No: 00

DEV_Rout

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Thu Sep 30 11:38:25 2010

SAP Network Interface Router, Version 38.10

command line arg 0: F:\usr\sap\saprouter\saprouter.exe

command line arg 1: -r

command line arg 2: -W

command line arg 3: 60000

command line arg 4: -R

command line arg 5: F:\usr\sap\saprouter\saprouttab

command line arg 6: -K

command line arg 7: p:CN=<HOSTNAME>,OU=0000*****,OU=SAProuter,O=SAP,C=DE

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 16/64/64)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "F:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll".

File "F:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 2028, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: 'F:\usr\sap\saprouter\saprouttab'

I am not able to access my sap from outside of network.

SAP Router String: /H/<PUBLIC IP>/S/3299/H

Any idea. Thnaks in advance

Regards.

[Former Member]

I suggest you must read saprouter details from http://help.sap.com/saphelp_nw70ehp1/helpdata/en/4f/992ce8446d11d189700000e8322d00/content.htm

[manoj_nayak2]

it resolved by simple public ip routed

[shishirh_dongaonkar]

Hello Manoj,

To access you SAP system outside from your network you need to contact you NW administrators. They will open ports for the outside IP.

[manoj_nayak2]

But port is already opend.

One more thing have you find any worng entries in saprouttab file.

Regards

[Former Member]

Hi,

Hope you have private external IP than dynamic which changes every now and then you can this:

P <Public ip> * 3299 or P <Public ip> SID_IP 3299

Also look for your the logs for saprouter and your router logs if this not works.

Regards;