cancel
Showing results for 
Search instead for 
Did you mean: 

SAProuter connection configuaration

Former Member
0 Kudos

Hi Expert,

I am going to configure saprouter to my sap system.

But it not working.

RFC connection SAPOSS gives error that partner '10.0.0.50:sapdp99' not reached and Tcode OSS1 gives unable to connect to SAPNet message server and gives error that WSAECONNREFUSED connection Refused. Even though I use command saprouter -l command on the command prompt

it gives error that partner '127.0.0.1 3299 not reached' .

Telnet 194.39.131.34 3299     also gives error.

How can I resolve this issue?

Thanks in advance.......!!!

Regards,
Parag.

Accepted Solutions (0)

Answers (7)

Answers (7)

Former Member
0 Kudos

Hi Parag,

Please check your saprouter system date.

Regards,

Subhash

Former Member
0 Kudos

Hi Parag,

I would suggest you to perform your SAP router configuration from starting. Uninstall and delete the corresponding install-able files and clean the registry and all. Take a restart of server and get set go ...

=> Register SAP router certificate through http://service.sap.com/saprouter-sncadd link.

=> Useful commands-

sapgenpse get_pse -v -r certreq1 -p local.pse "CN=<host name>, OU=<as per registration>, OU=SAProuter, O=SAP, C=DE"   -> It will generate certreq1 as an input for generating certificate.

After getting certificate , save it as srcert .

sapgenpse import_own_cert -c srcert -p local.pse

 

sapgenpse seclogin –p local.pse –O saprouter

sapgenpse get_pse -v -noreq -p local.pse "CN=<host name>, OU=<as per registration>, OU=SAProuter, O=SAP, C=DE"

ntscmgr install saprouter -b <drive name>:\usr\sap\SAPROUTER\saprouter.exe -p "service -r -W 60000 -R <drive name>:\usr\sap\SAPROUTER\saprouttab -K ^p:CN=<host name>, OU=<as per registration>, OU=SAProuter, O=SAP, C=DE^”

It will create a windows service in sap router.

You can use following command to start sap router service :-

saprouter -r -K "p:CN=<host name>, OU=<as per registration>, OU=SAProuter, O=SAP, C=DE"

Regards,

Nilutpal.

Former Member
0 Kudos

hi expert,

SAProuttab File:-

Kindly suggest me if any change require in this file.

# SNC connection to and from SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

# SNC connection to local system for R/3-Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.0.0.15 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.0.0.16 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.0.0.24 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.0.0.13 3200

# SNC connection to local WINDOWS system for WTS, if applicable

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.0.0.50 3389

# SNC connection to local UNIX system for SAPtelnet, if applicable

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.0.0.15 23

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.0.0.16 23

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.0.0.24 23

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.0.0.13 23

# Access from local network to SAP

  P 192.168.*.* 194.39.131.34 3299

  P * 194.39.131.34 3299

# Access from local network to sap

P 10.0.0.24 194.39.131.34 3299

P 10.0.0.50 194.39.131.34 3299

P 10.0.0.15 194.39.131.34 3299

P 10.0.0.16 194.39.131.34 3299

P 10.0.0.13 194.39.131.34 3299

P * 194.39.131.34 3299

P * * *

# Connection from SAP to Production Server for R/3 Support

# P 194.39.131.34 10.0.0.24 3200

# P 194.39.131.34 10.0.0.24 3201

P 194.39.131.34 10.0.0.50 3200

P 194.39.131.34 10.0.0.50 3201

P sapserv2 10.0.0.50 3200

P sapserv2 10.0.0.50 3201

# Deny any other connection

# D * * *

Regards,
Parag.

former_member219338
Participant
0 Kudos

Please post the trace log of the saprouter when you make a connection.

Regards,

Damian

Former Member
0 Kudos

Hi,

Please check the entry of the sap router in the guide on page 31 for SNC.

https://websmp106.sap-ag.de/~sapidb/012006153200000314592011E/SAProuter720_en.pdf

Thanks

Rishi Abrol

Former Member
0 Kudos

Hi Rishi,

  All the configuration done in the SAProuter Host.

Saprouter is in Start mode.

I have done service file entry like

sapdp99 3299/tcp   

# SAP System Dispatcher Port

Maintain Connection Data in TX OSS1.

But I am unable to connect to SAPOSS.

RFC connection test gives error 'Partner Not Reached'.

After Tracing log with ST11 it shows that hostname or service of the message server unknown.

Kindly provide me the solution.......

Regards,
Parag.

former_member219338
Participant
0 Kudos

Do you use in the RFC connection hostnames or IP address of the OSS?

If hostname then change it to the IP address. Please don´t forget, that if you change it, change all hostnames to IP adresses.

If this is the solution your DNS file on the saprouter must be modified.

Regards,

Damian

Former Member
0 Kudos

Hi Damian,

   Thanks for your reply.

Yes I am using Ip address not host name in OSS connection.

I have already done entry in the Host file entry on the saprouter  .

Waiting for your Valuable reply........!!!

Regards,

Parag.

former_member219338
Participant
0 Kudos

Please make a trace in the saprouter with trace level 3.

Then make a RFC call on the OSS and post the file of the trace.

Regards,

Damian

Former Member
0 Kudos

Hi,

Can you please get the below command check done on the router Because most of the case the issue is because of the certificates.

sapgenpse get_my_name -n validity

this will tell that the cert are valid.

Have you started the router with the below command.

saprouter -r -K "p:CN=<name of the server>, OU=<>, OU=SAProuter, O=SAP, C=DE" -R /<directory where saprouttab is kept>/saprouttab -G /<directory where saprouttab is kept>/saprout.log -T /<directory where saprouttab is kept>/saprout.trc -W 60000 &

Thanks

Rishi Abrol


Former Member
0 Kudos

Hi Rishi,

Thanks for reply.....!!!


sapgenpse get_my_name -n validity this command gives status

SSO for user with pse file & validity period.

I have started Saprouter using

saprouter -r -G dev_rout -S 3299 -K "P:CN=<Server Name>, OU=<>,OU=SAProuter, O=SAP, C=DE"

Issue present yet...


Kindly help me.

Regards,

Parag.

Former Member
0 Kudos

Hi,

I dont see that router process is running in background.

as you dint use & option.

Thanks

Rishi Abrol

Former Member
0 Kudos

Hi Rishi,

Could you please elaborate your valuable reply?

Regards,

Parag.

Former Member
0 Kudos

Hi,

Please use the below command.

saprouter -r -G dev_rout -S 3299 -K "P:CN=<Server Name>, OU=<>,OU=SAProuter, O=SAP, C=DE" &

"&" symbol will help you to run the commnad in background even you are out of the shell.

Thanks

Rishi Abrol

Former Member
0 Kudos

Hi Rishi,

   

     Thanks once again............

  I have used your command with & (for background processing).

Sorry to say but  it gives same error in SM59 and OSS1 that Partner not reached.

Kindly help me to solve the issue..!!!

Regards,

Parag.

former_member219338
Participant
0 Kudos

Ask your network team if they can see what in the firewall.

If all parameters are correct it can be that in the firewall of your company network is a rule that says that the router don´t have permissions to get out to OSS.

Regards,

Damian

Former Member
0 Kudos

Hi,

I think that you would have already done it but just wanted to go through.

on the router that you have installed do this .

telnet 194.39.131.34 3299

host file enter on the router.

194.39.131.34   sapserv2

and the entry of the server where you are doing  SAPOSS test.

services file of sap router.

sapdp99         3299/tcp                # saprouter

Now come to the server where we were we have SAPOSS RFC.

add the entry of your router in the host file.

Please also send me the connection details that you see in SAPOSS.

Thanks

Rishi Abrol

Former Member
0 Kudos

Hi,

As per the Note 33135 - Guidelines for OSS1

Replace sapservX with the following values:

sapserv1 (194.117.106.129) connection via Internet VPN

sapserv2 (194.39.131.34)  connection via Internet SNC

sapserv3 (147.204.2.5)    for customers with connection to Germany

sapserv4 (204.79.199.2)    for customers in America

sapserv5 (194.39.138.2)    for customers with connection to Japan

sapserv7 (194.39.134.35)   for customers in Asia

sapserv9 (169.145.197.110) for customers in Asia.

So you are using ip for SNC configuration for the router.Check that the certificate have been generated correctly.

http://service.sap.com/saprouter-sncdoc

Please check that certificate are valid for user.

Thanks

Rishi Abrol

Reagan
Advisor
Advisor
0 Kudos

So if you are configuring an SAP system to an existing saprouter then check whether the OSS1 - Technical Settings are correct.

How to check SNC connection to SAP?

You can check the saprouttab if you are using the SNC cnfiguration.

Check the SNC configuration examples in the saprouttab here.

http://help.sap.com/saphelp_nwmobile71/helpdata/en/65/8d09ab5c7e46028f633bb01a09b380/content.htm

Regards

RB

former_member219338
Participant
0 Kudos

Please check the SNC Connection to SAP, Firewall, SAPROUTTAB and make a detailed trace with trace level 3 on the saprouter for details.

Regards,

Damian

Former Member
0 Kudos

Hi Damian,

  Thanks for reply..!!!

How to check SNC connection to SAP?

Firewall is off.

Regards,
parag.

former_member219338
Participant
0 Kudos

Do you have registered your sap system on the SAP Service Marketplace as Secure System Connection?

Please make a trace on the saprouter and pic a capture of your saprouttab.

Regards,

Damian

Reagan
Advisor
Advisor
0 Kudos

Hello

If this is a newly installed saprouter then is it registered with SAP ?

Secondly make sure the saprouttab file is properly configured.

Regards

RB

Former Member
0 Kudos

Hi Reagan,

   Thanks for quick reply...!!!

Its not newly installed saprouter .It have validity up to 4th oct.

Saprouttab file also properly configured P * * * given in it.

dev_rout file:-

---------------------------------------------------

trc file: "dev_rout", trc level: 1, release: "700"

---------------------------------------------------

Thu Sep 12 14:58:01 2013

SAP Network Interface Router, Version 38.10

command line arg 0:    saprouter

command line arg 1:    -r

main: pid = 4804, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

*** ERROR => SNC field without SNC active, skip line 2 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 5 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 6 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 7 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 8 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 11 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 14 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 15 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 16 [nirout.cpp   7775]

*** ERROR => SNC field without SNC active, skip line 17 [nirout.cpp   7775]

Regards,
parag.