saprouttab config for multiple public IPs

[Former Member]

Hi experts,

I have installed saprouter on system which is having public ip registered with sap. For another system the public ip is different from the first system.

My queryy is how to config this second system in routtab.

Thanks & regards

Anil

[Nibu]

Hi

Please elaborate the requirement,

1) You need saprouter to be configured for two public IPS?

Register the IP with SAP and go ahead saprouter installation on the other server

2) You need change the initially registred public IP ?

Raise the concern to SAP to change the first public IP registered with them, they can change it .

3) You need to add an SAP system whose public IP is different from SAP router

Not an issue, you can just add the systems IP in routtab, and restart the router .

[Former Member]

Hi Antony,

Sorry for confusion in my question. my question is point no 3 in your reply

I already installed saprouter on system1 which is working well.

but the public ip of system2 is different from system1.

When i try to access the system2 is gives route permission denied.

Please tell me what lines i have to add in saprouttab file.

If possible give some example.

Thanks in advance

Anil

[Nibu]

Hi Anil,

Have you added like below?

#R3 COnnection

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"   <IP>   32<inst no>

# WTS Connection.

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"    <IP>    3389

#Http

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"    <IP>  5<inst no>00

and check if any internal firewall blocks if still issue persists .

Regards,

Nibu Antony

[Former Member]

Hi Antony,

I added all the lines you mentioned.

I removed firewall as well. i am getting route permission denied error.

Thanks in advance

[Nibu]

Hello

Please add below in  ur routab and verify whether still issue persists

# All other connections will be permitted

P * * *

Restart router after change .

Lets see if issue resolved , just add above temporarily .

If works , then try with below options

P 194.39.131.34  <ur public Ip>  32*

P  <ur public Ip>  194.39.131.34 32*

add same for local ip too

Restart router after the change

And meanwhile raise an OSS under  XX-SER-NET-RCSC component to check any suggestions from SAP end .

[AtulKumarJain]

Hi Anil,

Please check

http://scn.sap.com/thread/1364397

BR

Atul

[Former Member]

Hello,

Please do the following:

- Go to the http://service.sap.com/saprouter-sncadd

- Click on "Apply Now!"

- Follow the steps detailed in the documentation

- More details can be found on the following page:

  >>>   http://service.sap.com/saprouter-sncdoc   <<<

You can test the connection with the following parameter:

Destination IP address at SAP side:     194.39.131.34

Hostname of this machine          :     sapserv2

Customer data

Hostname SAProuter     :     solman

IP address SAProuter   :    

Your Distinguished Name:

"CN=solman, OU=0001034785, OU=SAProuter, O=SAP, C=DE"

1.  SAPRouter

Use the latest SAProuter version according to SAP Note 799428.

You can get the file sapcar.exe, which is necessary to unpack the

archive from any Installation Kernel CD.

Executing the command sapcar.exe -xvf saprouter.SAR will unpack the

following files:

saprouter[.exe]

niping[.exe]

2.  SAPROUTTAB

Following is an example of the saprouttab for SNC connection to

sapserv2:

# SNC connection to and from SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

# SNC connection to local system for R/3-Support

# R/3 Server: 192.168.1.1

# R/3 Instance: 00

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.1 3200

# SNC connection to local WINDOWS system for WTS, if applicable

# Windows server: 192.168.1.2

# Default WTS port: 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.2 3389

# SNC connection to local UNIX system for SAPtelnet, if applicable

# UNIX server: 192.168.1.3

# Default Telnet port: 23

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.3 23

# SNC connection to local Portal system for URL access, if applicable

# Portal server: myserver.mydomain

# Port number: 50003

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" myserver.mydomain 50003

# Access from local network to SAP

P 192.168.*.* 194.39.131.34 3299

# deny all other connections

D * * *

3.  Test of the IP connection by the customer

o Integrating SAProuter into a firewall see note 48243

o Ping from SAProuter server to sapserv2 (194.39.131.34)

o SAP Remote Services: Technical preparation (see SAP Note 812386)

o niping.exe -c -H /H/<local_SR>/H/194.39.131.34/H/localhost

The application to display and maintain the system data can be found

under the following URL:

http://service.sap.com/system-data

In order to maintain and open the service connection for SAP Support to

access your systems, please use the following link in the SAP Support

Portal:

http://service.sap.com/access-support -> Maintain Connections

For further informations please view the following SAP Notes on SAP

Service Marketplace (http://service.sap.com/notes):

  note 30289 :  SAProuter documentation

  note 525751:  Installation of the SNC-SAPRouter as NT Service

  note 46902 :  Security aspects in remote access

  note 48243 :  Integrating SAProuter into a firewall

  note 33135 :  Guidelines for OSS1 (Version for SAPSERV3).

  note 35010 :  Service connections: Composite note (overview)

WR,

PHB