Permission denied in sap router

[ganesh_borase2]

Hello everybody,

I have installed the SAPROUTER.

when our remote user login by SAPSTRING 114.240.174.28 then user can login without any problem

but when the user used the /H/114.240.174.28/H/192.168.0.170/S/3299/H/

then they can not able to login, get error

router permission denied 115.240.50.30 to 192.168.0.170, 3299

I have check the saposs RFC from sap its work fine.

In my SAP routtab file I maintain the entries as follows

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.0.180 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.0.185 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.0.186 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.0.180 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.0.185 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.0.186 *

P * 194.39.131.34 3299

P * * *

Please suggest where is wrong.

Thanks

Ganesh

[sunny_pahuja2]

Hi,

> when our remote user login by SAPSTRING 114.240.174.28 then user can login without any problem

> but when the user used the /H/114.240.174.28/H/192.168.0.170/S/3299/H/

> then they can not able to login, get error

>

Why are you using Router string as /H/114.240.174.28/H/192.168.0.170/S/3299/H/ ?? You should give only router IP in SAP GUI to access it remotely.

Thanks

Sunny

[ganesh_borase2]

Hi,

because many remote used has previous this string that why

please suggest where is wrong?

Thanks

Ganesh

[Former Member]

Hi,

saprouter string /H/114.240.174.28/H/192.168.0.170/S/3299/H/ can be workable only if 192.168.0.170 - is another saprouter.

Check role of 192.168.0.170 in your landscape.

Best Regards,

Aleh

[ganesh_borase2]

Hi,

192.168.0.170 is our local IP where router is installed (no any SAP application running, only OS + saprouter).

previously, it working fine with SAPRouter verrsion 34.

Now I have installed version is 37.11.

Please suggest where is wrong.....

Thanks

[Former Member]

Hi,

for remote access to internal SAP systems you must use saprouter string:

/H/external_IP_of_saprouter/H/ or /H/external_IP_of_saprouter/S/3299/H/

You do not need to use saprouter string like /H/external_IP_of_saprouter/H/internal_IP_of_saprouter/H/ if these IP addresses belong to the same server with saprouter.

Best Regards,

Aleh

[ganesh_borase2]

HI,

Our remote user can access with the /H/external_IP_of_saprouter/H/internal_IP_of_saprouter/H/ this string

but now they are not able to access by using above said string , when they tired to access they got message

like

router permission denied 115.240.50.30 to 192.168.0.170, 3299

actually, in saprouttab I mention P * * * .

Thanks

Ganesh