Issue with saprouter connection.

[Former Member]

Hi,

We have installed new saprouter to allow connection for sap. We are using VPN for security. We have followed below process for this.

1. IP 140.X.X.X is registered with SAP according to note 28976 (Remote Connection Data Sheet). This is the IP which is NAT to our router host IP.

2. We have installed saprouter & started it. For a time being I have maintained entry P * * * in routtab to test connections.

3. I have maintained router host/IP at market place for SAP system to which sap want to connect.

4. I have made OSS1 configurations in target SAP system.

Now my problem is If I try to open connection, my saprouter is not getting connected & it shows status 'cancelled' after some time. I have checked RFC saposs then it gives error. If I maintain our NAT IP 140.X in oss1 then it gives error "Error Details     ERROR: partner '140.X.X.X.X:3299' not reached"

If I maintain host IP(10.X..) of my router server in OSS1 then saposs test gives error. "Error Details     ERROR: <router host name>: route permission denied

(<target server> to 10.136.

If I maintain host IP in oss1 & test connection few errors occuring in dev_route on router server. Those are as below.

*** ERROR => NiRClientHandle: NiRExRouteCon for C15/-1 '<target host>' failed (rc=-94) [nirout.cpp   2650]

I have tested below connectivity.

from router server to target server telnet to 3299 is working.

from target server to router server telnet 32<nn> is working.

from router server to sap server telnet 3299 is working.

telnet to NAT IP 140.X... is not working but according to our network team if we are able to telnet sap server from our router server there should not be any problem with NAT configurations.

Can you please suggest on my problem.

Thanks

Amar

[Former Member · Accepted solution]

You need to set host IP (10.X.) in RFC connection through OSS1 tcode. Also adjust saprouttab file to allow connections between your target server and sap server. After that check connection. If errors occurred please paste it here.

[Former Member · Accepted solution]

Hi Roman,

I have maintained host IP in OSS1. I have added entry to routtab file as adviced by you so my routtab file now look as below.

P * * *

194.117.106.129 10.136.33.30 *

10.136.33.30 194.117.106.129 *

I have restarted my saprouter but still saposs test is giving same error.

"Error Details     ERROR: <router host name>: route permission denied

(<target server> to 10.136.

[Former Member · Accepted solution]

I have corrected entries again to below & tested.

P * * *

P 194.117.106.129 10.136.33.30 *

P 10.136.33.30 194.117.106.129 *

Still no luck

Thanks

Amar

[Former Member · Accepted solution]

The lines in saprouttab must looks like

P 194.117.106.129 10.136.33.30 *

P 10.136.33.30 194.117.106.129 *

10.136.33.30 - is this address of your target host?

Please paste full error you received.

[Former Member · Accepted solution]

Hi Roman,

Yes 10.136.33.30 is our target host. As already replied above, I have corrected routtab entries & tested again but result is same. Also I can see following entries in file dev_rfc.

Destination: SAPOSS (handle: 2, , )

**** Trace file opened at 20130416 054709 EDT SAP-REL 700,0,185 RFC-VER nU 3 1025834

Error RFCIO_ERROR_SYSERROR in abrfcpic.c : 2517

LB: Hostname or service of the message server unknown

DEST =SAPOSS

MSHOST =/H/10.136.33.26/S/3299/H/10.136.33.26/S/3299/H/194.117.106.129/S/3299/H/147.204.100.8

R3NAME =OSS

GROUP =EWA

ABAP Programm: RSRFCPIN (Transaction: SM59)

User: SY11237 (Client: 010)

Destination: SAPOSS (handle: 2, , )

Thanks

Amar

[Former Member · Accepted solution]

Have you reloaded new saprouttab? You can do this either with saprouer -n command or restart saprouter service.

[Former Member · Accepted solution]

Yes I have restarted saprouter & also tried saprouter -n. Still RFC saposs is failing.

Thanks

Amar

[MichaelTe · Accepted solution]

Hello Amar,

I think your problem is the line:

MSHOST =/H/10.136.33.26/S/3299/H/10.136.33.26/S/3299/H/194.117.106.129/S/3299/H/147.204.100.8

Your host IP and Service is here twice. It should rather look like:

MSHOST =/H/10.136.33.26/S/3299/H/194.117.106.129/S/3299/H/147.204.100.8

Can you post your entry of the transaction OSS1 (technical settings)?

Regards, Michael

[Former Member · Accepted solution]

Check technical settings in OSS1 tcode.

[Former Member · Accepted solution]

Yes you are right. After changing settings in OSS1 my route string got corrected & it is working fine now. Thanks for your help.

Thanks

Amar