sapruter: route permision denied

[Former Member]

Dear all,

I need to test my conection with SAP GUI throught the sapruter.

I've set the item in the GUI for the connection:

Application server 10.8.9.35

System Number 30

System ID PRP

Saprouter string /H/10.8.9.82/S/3299/H/

In the routtab file I've enter the following lines and then restart the saprouter:

1. from sap server to saprouter

P * 10.8.9.82 3230

P * 10.8.9.82 3299

P * 10.8.9.35 3230

P * 10.8.9.35 3299

P * * *

Saprouter started:

C:\Documents and Settings\Administrator\Desktop\saprouter\saprouter>saprouter -r

-S 3299 -K "p:CN=ossr1, OU=0000524296, OU=SAProuter, O=SAP, C=DE"

trcfile dev_rout

no logging active

When I try to connect to the production instance 10.8.9.35 PRP I get the error:

sapruter: route permision denied (my_PC to 10.8.9.35 , sapdp)

Can anyone knows what should I change?

thanks in advance,

BR,

Ruzica

[Former Member · Accepted solution]

There should not be any issues with you rout permission as you have allowed all.

>P * * *

Looks like network issues do following testing.

from you desktop

telnet <saprouter_server> <saprouter_port>

from saprouter

telnet <sap_server> <ms_port>

and see where its blocking.

[Former Member · Accepted solution]

I've tried

telnet 10.8.9.82 3299 from my PC

and

telnet 10.8.9.35 3230 from saprouter machine

everything works fine

any other suggestions, please?

BR,

Ruzica

[Former Member · Accepted solution]

enable the tracing form SAPGUI logon pad try again, check the error logs under your workdir.

[Former Member · Accepted solution]

I've enabled tracing form SAPGUI logon pad

where can I find the logs C:\Program Files\SAP\FrontEnd\SAPgui ?

[Former Member · Accepted solution]

the logs are generally C:\Documents and Settings\<your_userID>\SapWorkDir

[Former Member · Accepted solution]

Thanks I found the trace files:

Here are some lines but I coudn't find any usefull .

CComContext::Connect: connect string '/H/10.8.9.82/S/3299/H/10.8.9.35/S/sapdp30', timeout 10000

CComContext::CreateConnectData:

CComContext::CreateConnectData: buffer size = 110

error in network layer: sapruter: route permission denied (sk-it-ruzicakn.mt.com.mk to 10.8.9.35, sapdp30)

Location SapRouter on sapruter

Time Tue Dec 21 11:55:07 2010

Component NI (network interface)

Release 46D

Version 34

Return Code -94

Counter 32

CComContext::Connect: Connect failed, error: -100time stamp: Date: 12/21/10 Time: 12:15:24 (StopWatch: 00:00:016)

CDwsGui::vMsgBox: Message box for thread 1968

CDwsGui::vMsgBox: message box: sapruter: route permission denied (sk-it-ruzicakn.mt.com.mk to 10.8.9.35, sapdp30)

Do you want to see the detailed error description?

Tue Dec 21 12:15:25 2010

CComContext::GetProperty: extended error information: sapruter: route permission denied (sk-it-ruzicakn.mt.com.mk to 10.8.9.35, sapdp30)

Location SapRouter on sapruter

Time Tue Dec 21 11:55:07 2010

Component NI (network interface)

Release 46D

Version 34

Return Code -94

Counter 32

Tue Dec 21 12:15:25 2010

CDwsGui::vMsgBox: Message box for thread 1968

CDwsGui::vMsgBox: message box: sapruter: route permission denied (sk-it-ruzicakn.mt.com.mk to 10.8.9.35, sapdp30)

Location SapRouter on sapruter

Time Tue Dec 21 11:55:07 2010

Component NI (network interface)

Release 46D

Version 34

Return Code -94

Counter 32

Tue Dec 21 12:15:27 2010

error in CDwsGui::SapguiRun: connect failed

error in CDwsGui::SapguiRun: connect failed

CDwsGui::SapguiRun: Posting MYWM_SAPGUI_STOP for thread 1968

CDwsGui::OnReceiveMessage: message WM_SAPGUI_STOP received -> removing clients

CDwsGui::OnReceiveMessage: sapgui exit code: 0

CDwsGui::RemoveClients: Removing clients for thread 1968

error in CDwsGui::RemoveClients: invalid client array pointer

CDwsGui::OnReceiveMessage: Posting quit message for thread 1968 after receiving MYWM_SAPGUI_STOP

WndThread: WM_QUIT message received

time stamp CDwsGui::Sapgui: Date: 12/21/10 Time: 12:15:27 (StopWatch: 00:03:390)

CDwsGui::SapguiExit: reader thread shutdown in progress

CDwsGui::SapguiExit: set reader thread termination event

Tue Dec 21 12:15:27 2010

CComContext::GetProperty: datagram service number could not be determined

CDwsGui::SapguiExit: sent reader thread termination message

error in CDwsGui::SapguiExit: reader thread shutdown -> synchronization failed (rc=6)

CDwsGui::SapguiExit: unloading text file

CDwsGui::SapguiExit: close compression handle

CDwsGui::SapguiExit: close decompression handle

CDwsGui::SapguiExit: time stamp exit: Date: 12/21/10 Time: 12:15:27 (StopWatch: 00:03:406)

close sessions

close network

WndThread: sapgui thread terminated successfully

error in Logging::RawRecord: no logging file handle(file '')

-

---

trc file: "C:\Documents and Settings\ruzicap\SapWorkDir\sapguidll_01_ni.trc", trc level: 3, release: "710"

-

---

Login data: client >< language >< SSO2 > ...< okcode >< desc ><

CNetwork::CNetwork:: connect to '/H/10.8.9.82/S/3299/H/10.8.9.35/S/sapdp30'Login data: client >< language >< SSO2 > ...< okcode >< desc ><

CNetwork::CNetwork:: connect to '/H/10.8.9.82/S/3299/H/10.8.9.35/S/sapdp30'Login data: client >< language >< SSO2 > ...< okcode >< desc ><

CNetwork::CNetwork:: connect to '/H/10.8.9.82/S/3299/H/10.8.9.35/S/sapdp30'Login data: client >< language >< SSO2 > ...< okcode >< desc ><

CNetwork::CNetwork:: connect to '/H/10.8.9.82/S/3299/H/10.8.9.35/S/sapdp30'Login data: client >< language >< SSO2 > ...< okcode >< desc ><

[Former Member · Accepted solution]

Hi

Check in your firewall that ports are open.

For me your issue is saprouttab file, check the entries

Put the follow entries in saprouttab file and restart saprouter, try logon again.

P 10.8.. * 3299

P 10.8.. * 3230

P <publicipaddress> * * *

P * 194.39.131.34 3299

<publicaddress>=your public ip addres of saprouter string.

If don't work please paste DEV_ROUTE log file here.

Regards

William Neira

[Former Member · Accepted solution]

Hello William

firewall ports are all opened, I'm inside the firewall and also the sap server and the sapruter server.

I've put entries in the saprouttab file,like ypur suggestions and then restarted the saprouter. Again the same error route permision denied.

When I start suppruter I get also the following info:

trcfile dev_rout

no logging active

Maybe that's why file dev_rout has old information few monts ago.

How can I start logging with sapruter and get inputs in trcfile?

Tnx,

Ruzica

[Former Member · Accepted solution]

Dear all,

I've solved the problem.

My mistake I was using some ols routetab file. Now I changed everythinhg in saprouttab and get successfuly logon.

BR and thanks to all,

Ruzica

[ImtiazKaredia]

Can you check if you can

telnet 10.8.9.82 3299

using command prompt from your PC

[Former Member]

I've checked

telent 10.8.9.82 3299

It's working