Renew SAPRouter Public IP

[Former Member]

Dear All;

We changed the location of the sap router server and for that the public IP was changed.

I opened a ticket with SAP, and informed them that my public ip was changed. They updated it on their side.

I went to saprouttab file and changed the old public IP with the new one, and changed my sap router string on GUI, but still unable to connect.

when I run telnet 194.39.131.34  3299 i get the following error:

When I run SAPOSS in SM59 I get the following error:

Kindly how can I be able to connect to SAP through the router same as before changing the public IP.

Best Regards

~Amal Aloun

[former_member182657 · Accepted solution]

Hi Amal,

It's great for

Using the link you gave me I was able to fix the error "No certficate with your public key found", and I have till 2038 expiration date

Have you performed the settings for instance no with 99 under OSS1 as i mentioned earlier and also attached screenshot for your ref.Hope you'll perform these & try to test the connection first.It would be great if you provide screenshot for same.

Regards,

Gaurav

[Former Member · Accepted solution]

Dear Gaurav;

OSS1 is as the follwoing with 99 instance number:

I am configuring the message server parameter in SM59 as the following:

/H/my-ip/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

Best Regards

~Amal Aloun

[former_member182657 · Accepted solution]

Hi Amal,

It's fine.Now on test connection are you getting any error message.Also make sure you maintained entry for sapdp99 3299 under services at OS level.

Please share the issue if any.

Regards,

Gaurav

[Former Member · Accepted solution]

Dear All;

The issue is fixed

I found out that the port 3299 is closed in the new network. After opening port 3299 SAP Router started to work as usual.

Thank you for all the help you provided me with.

Best Regards

~Amal Aloun

[former_member182657]

Hi,

Please refer SAP Note 846813.

Regards,

Gaurav

[former_member182657]

Hi Amal,

Have you moved old local.pse,cert & srcert files to some other location before renew of certificate,if not first move these old files & try to generate & do the steps again.

Also take care while copying of certificate it should be copied from line BEGIN to END certificate.

Regards,

Gaurav

[former_member182657]

Hi Amal,

Try to use command as below:

sapgenpse import_own_cert -p <pse_file> -c <cert_file> -r <root_cert> -r <intermediate_cert> -x <password>

and follow SCN link

Regrads,

Gaurav

[Former Member]

Dear Gaurav;

Using the link you gave me I was able to fix the error "No certficate with your public key found", and I have till 2038 expiration date

However I am still unable to connect to the routerstring although I renewed my saprouter certificate.

Best Regards

~Amal Aloun

[former_member182657]

Hi,

Validity  -  NotBefore:   Sun Sep 02 10:02:04 2012 (120902070204Z)
 NotAfter:   Mon Sep 02 10:02:04 2013 (130902070204Z)

Yes you'll need to renew the expired certificate for the resolution .

Regards,

[Former Member]

Dear Gaurav;

While I was trying to upload my new generated certificate I got the error: ERROR in ssf_install_CA_response: (1280/0x0500) No certficate with your public key found

Could this be related to the public IP issue?

Best Regards

~Amal Aloun

[former_member182657]

Hi Amal,

Please share OSS1 screenshot,refer below image

Regards,

[Former Member]

Dear Gaurav;

This is the current status of my OSS1:

Best Regards

~Amal Aloun

[former_member182657]

Hi,

In OSS1 sap configuration side is also configured correctly with the sapserv2 194.39.131.34 and instance 00

Correct instance number with 99 instead of 00 & save the OSS1 configuration & then test the connection.Hope this will help you.

Regards,

Gaurav

[Former Member]

Hay;

I replaced 99 with 00 as suggested, but I am still getting the same error.

I got the following output when I tried the suggested in sap note 1178684:

C:\SAPRouter>sapgenpse seclogin -l

running seclogin with USER="snc_adm"

0: CN=my-Router, OU=xxxxxxx, OU=SAProuter, O=SAP, C=DE

C:\SAPRouter\local.pse

Options:  LIFETIME= Mon,  2 Sep 2013 07:02:04 (GMT)

DIRACCESS=FALSE

CRLCHECK=FALSE

1 readable SSO-Credentials available

C:\SAPRouter>sapgenpse get_my_name -n validity

SSO for USER "snc_adm"

with PSE file "C:\SAPRouter\local.pse"

Validity  -  NotBefore:   Sun Sep 02 10:02:04 2012 (120902070204Z)

NotAfter:   Mon Sep 02 10:02:04 2013 (130902070204Z)

I will renew my saprouter now to see if this has to do with my expired certificate.

Best Regards

~Amal Aloun

[Former Member]

Hello All;

I was at the last phase of uploading the certificate I requested from SAP, but I got the following error:

C:\SAPRouter>sapgenpse.exe import_own_cert -c srcert -p local-amal.pse

Please enter PIN:

import_own_cert: Installation of certificate failed

ERROR in ssf_install_CA_response: (1280/0x0500) No certficate with your public key found

Any help will be appreciated.

Best Regards

~Amal Aloun

[former_member182657]

Hi,

Please consider SCN link

Regards,

Gaurav

[Reagan]

I believe 194.39.131.34 is the new IP address of the saprouter. In that case what is the IP address 192.168.7.21 ?

Check Tx OSS1 - Parameter - Technical Settings whether the new IP address is used there.

Regards

RB

[Former Member]

Dear Reagan;

194.39.131.34 is SAP IP for sapserver2

192.168.7.21 is the ip inside the network for the sap router.

I will check now the Tx OSS1 parameter.

Best Regards

~Amal Aloun

[Reagan]

Ah yes. Drats.

Check the OSS1 configuration and see if that is correctly set.

Regards

RB

[Former Member]

dear Reagan;

I went to transaction OSS1 and it has the name of the saprouter server name along with it's server ip with the instance number.

In OSS1 sap configuration side is also configured correctly with the sapserv2 194.39.131.34 and instance 00

Best Regards

~Amal Aloun

[Sriram2009]

Hi Amal

Could you refer the SAP Note 33135 - Guidelines for OSS1

Regards

Sriram

[Former Member]

Hi Regan;

I run C:\SAPRouter>niping -c -B 10 -L 100 -H /H/myrouter/H/194.39.131.34/H/localhost

and got the following error:

Sun Apr 13 15:29:25 2014

*** ERROR => NiBufIProcMsg: hdl 1 received rc=-104 (NIEROUT_SNC_FAILURE) from pe

er [nibuf.cpp    2146]

*** ERROR => NiBufIConnect: route connect for non-buffered hdl 1 failed (rc=-104

;/H/myRouter/H/194.39.131.34/H/localhost); pong not received [nibuf.cpp    4

801]

*** ERROR => NiTClientLoop: NiHandle (rc=-104) [nixxtst.cpp  2590]

*****************************************************************************

*

*  LOCATION    SAProuter 40.4 on 'AmCan-Router'

*  ERROR       SNC processing failed:

*              SncProcessOutput

*

*  TIME        Sun Apr 13 15:29:25 2014

*  RELEASE     720

*  COMPONENT   NI (network interface)

*  VERSION     40

*  RC          -104

*  MODULE      nisnc.c

*  LINE        1199

*  DETAIL      NiSncIInitHdlSecurity: sncrc=-4;00000000025BFAD0

*  COUNTER     4

*

*****************************************************************************

Do you have any suggestion on how to fix the above error?

Best Regards

~Amal Alou

[Sriram2009]

Hi

Could you check with this SAP Note

1178684 - No service connection:"SNC processing failed"

BR

SS

[Reagan]

Hello Amal

Have you restarted the saprouter address after updating the IP address in the saprouttab file ?

There should be a trace file in the saprouter directory called dev_rout.

Does it contain any information?

Regards

RB