SAPOSS connection Failed (saprouter)

[former_member217141]

Dear Gurus,

- We have already registered our public ip to SAP.

- Saprouter certificate renewed.

- Telnet functions ok

- Saprouttab ok

Saprouter String : /H/xxxxxx/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001

Sm59 error =

Connection Error

Error when opening an RFC connection (LB: Hostname or service of the message ser

ERROR: The connection to the specified message server (? / ?) failed. Please

LOCATION: SAP-Server xxxxxx_00 on host xxxxxx (wp 10)

COMPONENT: MS (message handling interface, multithreaded)

Dev_rout file=

NiBufIProcMsg: hdl 1 received rc=-94 (NIEROUT_PERM_DENIED) from peer

What could be the problem ?

Best Regards

[divyanshu_srivastava3]

hi Kemal,

In your routtab, give * * * and restart your router.

Now, check if this is working or not.

Since rx=-94 means "Connect from source to destination not allowed"

You should do a network test.

Check using telnet and niping.

If all is fine and still getting the error, patch your router to higher level.

Divyanshu

[former_member217141]

Hi Mate,

I have already give P * * * , not working same result

Telnet : from saprouter to server 3300 3600 3200 telnet is ok

            from server to saprouter 3299 telnet is ok

            from saprouter to SAP 3299 telnet is ok

Should i do niping test ? could you please give some more information about it ?

if all is fail, maybe reinstall with last patch will be good idea

Regards

[divyanshu_srivastava3]

Hi,

Refer:

2023501 - When using niping to test a SAPRouter, SAPRouter trace shows error "route from XXX expected...

Divyanshu

[divyanshu_srivastava3]

Also,

Note 500235, Network diagnosis with NIPING

Note 155147, WinNT: Connection reset by peer

[former_member182657]

Hi Kemal,

Also have a look for SAP Note   1009304 - No SNC connection set up by SAProuter despite 'KT' entry

Hope this will be helpful for you.

Regards,

Gaurav

[former_member182657]

Hi Kemal,

Please share connection SAPOSS test result from SM59.In addition try to insert entry

P * 194.39.131.34 3299

under saprouttab file and restart the router .After that kindly share the dev_rout log file for analysis.

Regards,

Gaurav

[former_member217141]

Hi mate

There is already P * * * , same error (restarted saprouter service)

*** ERROR => NiBufIProcMsg: hdl 22 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp    2123]

Regards

[Former Member]

Hi Kermal,

In SAProuter at custmer site

Maintain Hostname and IP address of your system and check SAPOSS connection.

Regards,

Visu

[former_member217141]

Hi Visu,

Yes it is customer saprouter. I have already maintained  hostname(hostfile) and saposs connection gives error.

Regards

[former_member185239]

Hi Kemal,

check the port 3299 and 3289. It should be opened on the firewall side.

With Regards

Ashutosh Chaturvedi

[former_member217141]

Dear Ashutosh,

3299 port is already opened. What is 3289 port for ? by the way there is saprouttab informations. Also there is 3389 for something. Do you mean that 3289 port should be opened in saprouter machine in firewall ?

----------------------------------

# SNC connection to and from SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

# SNC connection to local system for R/3-Support

# R/3 Server: xxxxxxx

# R/3 Instance: 00

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" xxxxxx 3200    

# SNC connection to local WINDOWS system for WTS, if applicable

# Windows server:xxxxxx

# Default WTS port: 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" xxxxxxx 3389    

# SNC connection to local UNIX system for SAPtelnet, if applicable

# UNIX server: xxxxx

# Default Telnet port: 23

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" xxxxxx 23 

----------------------------

[former_member185239]

Dear Kemal,

Kindly check the sapnote 24177 - OSS1: Message S1452: Connection to Message Server

Can you please paste the screenshot of OSS1->Technical Parameter

With Regaards

Ashutosh Chaturvedi

[former_member217141]

here is OSS1 ss

[former_member185239]

Hi Kemal,

Try to maintain the below string saprouttab

P <IP server 1> 194.39.131.34 *

is 10.10.10.10 is the public ip.

With Regards

Ashutosh Chaturvedi

[former_member217141]

It is already added mate but no chance

10.10.10.10 is internal saprouter ip

[Former Member]

Hi Kemal,

See this links are usefully

Regards,

Visu