Logon Groups acess via Router

[sandeep_kumar60]

Dear all

I have an issue acessing the System via logongroups through sap router.

i had gone though sdn and other blogs , but no result.

i don't have msn messenger and my registry is as per the SAP Note.

I am able to access the same system with the Physical Ip from router , but not able to login via logon groups through router.

i have entry of sapmsSID 3600/tcp in my services file,even though

i get the below error,

Can any one pls guide me in acessing the Logongroup via saprouter.

Regards

Sandeep

[Former Member]

H Sandeep,

an entry in saplogon using a saprouter connection to your SAP System (using logon groups) should look like this:

Connection Type:      Group/Server Selection

System ID:                  <Your System ID>

Message Server:       <hostname of your message Server>
SAProuter:                  /H/<hostname of your saprouter>/S/<port no.>/H/

Group/Server:             <will be filled automatically if the above config was correct>

Instance number:        <will be filled automatically>

Additional prerequisites:

Your saprouter needs to allow the requested route (saproutetab)

A valid Logon Group must be defined in your SAP System (SMLG)

The service sapms<SID> 36<inst.no> tcp  must be defined in the etc/services file of the PC where saplogon is started.

Let me know if this works for you.

Regards, Martin

[Former Member]

Hi Sandeep,

one more thing, I forgot...   Check if you saprouter has the sapmsSID service defined as well. This is the server which needs to connect via Port 3600.

Good luck.

Martin

[Former Member]

Hi Sandeep,

You need not even mention group/server, u can directly use as following:

Regards,

Raghuram

[sandeep_kumar60]

HI raghuram ,

I dont want to use any Custom application server over there

i had given connection type as  Group/server selection

and provide my Logon group over there and also the router string,

I NEED TO ACESS THIS SYSTEM USING LOGON GROUPS ONLY, NOT BY ANY CUSTOM APP SERVER.

pls help me

[sandeep_kumar60]

Hi martin

I had already done the same already, iam able to use the logon group internally , but not able to acess it over sap router .

pls guide

[Former Member]

Hi Sandeep,

To use group server you need to have a published domain for the message server IP. Only then you can access over internet.

Regards,

Raghuram

[Former Member]

Hi Sandeep,

I assume you have access to the saprouter as well. Please check logfiles on the saprouter if there is any issue with the connection to the target system via hostname and port. hostname resolution, port reachable, Route permission denied and stuff like this.

Regards, Martin

[sandeep_kumar60]

HI martin

below is the error in dev_rout file  of saprouter

no match for [14.97.105.28 to 10.5.10.152, 3600] found

*** ERROR => NiRClientHandle: NiRExRouteCon for C19/-1 'static-28.105.97.14-tataidc.co.in' failed (rc=-94) [nirout.cpp   2243]

Regards

Sandeep

[Former Member]

Hi Sandeep,

as I mentioned before. You need to permit the route in saprouttab.

Depending on your needs for security you should define the rules in saprouttab.
For a short description of syntax I found this SCN Blog: http://scn.sap.com/people/vishal.ranadive/blog/2008/03/26/accessing-sap-system-via-saprouter

S kumar wrote:


no match for [14.97.105.28 to 10.5.10.152, 3600] found
*** ERROR => NiRClientHandle: NiRExRouteCon for C19/-1 'static-28.105.97.14-

Your error message indicates that for the given IP adresses and port number no route was found in saprouttab. For testing you could easily permit all routes and see if your logon works.

But keep in mind to change that according to your security requirements.

Regards, Martin

[Former Member]

Sandeep,

You can update your SAP Logon Pad with the CI (Where the Message Server is running) and do a load balancing at Message server lever using SMLG.

Now u can use your GUI logon with central instance details which works absolutely fine over internet using a Router string with Ports properly updated.

Regards,

Raghuram