Error while starting SAPRouter with SNC

[former_member599794]

Dear All Guru,

i'm  having a problem due to configuration SAPRouter, when i'm trying to start SAPRouter with command

c:\usr\sap\saprouter>saprouter.exe -r -S 3299 -V 3 -K "p:CN=WINDOWS-RF5AN42, OU=0001339748, OU=SAProuter, O=SAP, C=DE"

it Resulting error

trcfile  dev_rout
no logging active
*** ERROR => invalid lines in './saprouttab', see 'dev_rout' [nirout.cpp   9591]
check dev_rout filestrace
ERROR => host myserver.mydomain unknown, skip line 21 [nirout.cpp   10155]

the steps i have been done is :

1. Installing saprouter under C:\usr\sap\saprouter

2. setup environment variable

     SNC_LIB = c:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll

     SECURDIR = c:\usr\sap\saprouter

3. Generate certificate request

4. Requesting SAPRouter Certificate

5. Importing SAPRouter certificate

6. Creating credential for user responsible to Start SAPRouter

7. Verifying the configuration

sapgenpse get_my_name -v -n Issuer

8. Create saprouttab file

# SNC connection to and from SAP
KT "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 169.145.197.110 *
# SNC connection to local system for R/3-Support
# R/3 Server: 192.168.1.14
# R/3 Instance: 01
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 192.168.1.10 3200
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 192.168.1.11 3200
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 192.168.1.14 3201
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 192.168.1.12 3200
# SNC connection to local WINDOWS system for WTS, if applicable
# Windows server: 192.168.1.2
# Default WTS port: 3389
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.2 3389
# SNC connection to local UNIX system for SAPtelnet, if applicable
# UNIX server: 192.168.1.3
# Default Telnet port: 23
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 192.168.1.3 23
# SNC connection to local Portal system for URL access, if applicable
# Portal server: myserver.mydomain
# Port number: 50003
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" myserver.mydomain 50003
# Access from local network to SAP
P * 169.145.197.110 3299
# deny all other connections
D * * *

8.     Adding all local SAP Hostname and SAP Remote support to SAPROUTER hosts files

9.     Starting SAPRouter with command below :

c:\usr\sap\saprouter>saprouter.exe -r -S 3299 -V 3 -K "p:CN=WINDOWS-RF5AN42, OU=0001339748, OU=SAProuter, O=SAP, C=DE"

But it Resulting error :

 trcfile  dev_rout
no logging active
*** ERROR => invalid lines in './saprouttab', see 'dev_rout' [nirout.cpp   9591]
check dev_rout filestrace
ERROR => host myserver.mydomain unknown, skip line 21 [nirout.cpp   10155]

if i change the saprouttab file content to (P     *     *     *), and starting the SAPRouter , it working fine.

could you guys advise me, where did i miss the configuration?

and if you need to see the dev_rout file, i already attached it.

thanks & regards,

FS

[mvoros]

Hi,

I think the problem is here.

NiStrToAddrMask: '192.168.1.10' -> 192.168.1.10/32 (0/0)

NiIGetServNo: servicename '3300' = port 3300

NiSncGetPeer: hdl 8 not SNC enabled

route   [ 0,0 hops, 180.243.75.156 to 192.168.1.10, 3300 ]

matches [  D255,255  ::/0 ::/0 * ]

checkRoute: route not permitted (8)

*** ERROR => NiRClientHandle: NiRExRouteCon for C8/-1 '180.243.75.156' failed (rc=-94) [nirout.cpp   2653]

So router is trying to connect  from 192.168.1.10 to 192.168.1.10. That connection is not allowed by your config. Not sure why router is trying to open that connection.

Cheers