SAP ROUTER STARTING ERROR

[Former Member]

Dear Team,

we have finished the SNC certification & Try to start same account

where

we installed SNC. & Set the environmental variables as per the same.

But we are again facing the issue while router starting.

Pl find the error details.

*************************************************************************

****

*

* LOCATION SAProuter 40.4 on 'solman157'

* ERROR service '0.0.0.0:3299' in use

*

* TIME Mon Aug 18 16:18:35 2014

* RELEASE 720

* COMPONENT NI (network interface)

* VERSION 40

* RC -4

* MODULE nixxi.cpp

* LINE 3740

* DETAIL NiIBindSocket

* SYSTEM CALL bind

* ERRNO 98

* ERRNO TEXT Address already in use

* COUNTER 2

*

*************************************************************************

****

edmadm> saprouter -l

Mon Aug 18 16:18:47 2014

SAP Network Interface Router, Version 40.4

Mon Aug 18 16:18:48 2014

*** ERROR => NiIRead: invalid data (0xfffd18ff;mode=0;hdl

1;peer=127.0.0.1:3299;local=38800) [nixxi.cpp 4906]

*** ERROR => NiGetPeerVersion: NiRead failed for hdl 1 (rc=-1) [nixx.c

5144]

*** WARNING => RTADMINREQ::sendAdminReq: NiGetPeerVersion failed

(rc=-1)

[nirout.cpp 6970]

send info-request to running SAProuter ...

*** ERROR => NiBufIIn: invalid data

(len=-190209;0xfffd18ff;max=8388608;hdl

1;peer=127.0.0.1:3299;local=38800) [nibuf.cpp 3090]

*************************************************************************

****

*

* LOCATION SAProuter 40.4 on 'solman157'

* ERROR Network packet too big

*

* TIME Mon Aug 18 16:18:48 2014

* RELEASE 720

* COMPONENT NI (network interface)

* VERSION 40

* RC -20

* MODULE nibuf.cpp

* LINE 3084

* DETAIL NiBufIIn: message length -190209 exceeds max (8388608)

* COUNTER 4

*

*************************************************************************

****

[divyanshu_srivastava3 · Accepted solution]

Hi Kishore,

Start using - saprouter -r -S 3299 -V 3 -K "p:CN=<saprouter hostname>, OU=< Customer number >, OU=SAProuter,O=SAP, C=DE"

Then share the trace file.

Divyanshu

[Former Member · Accepted solution]

Dear Srivastava,

Thanks for your Prompt Support,

I try as the same you mentioned but issue still comes,

Pl find the Dev_rout log file info.

---------------------------------------------------

trc file: "dev_rout", trc level: 3, release: "720"

---------------------------------------------------

Tue Aug 19 15:27:03 2014

NiIHSBufInit: initialize hostname buffer (IPv4)

NiHLInit: alloc host buf (200 entries)

NiSrvLInit: alloc serv bufs (200 entries)

NiIInit: allocated nitab (811 at 7ffff7fcc010)

NiIInit: host/serv bufs already initialized

NiPGetNodeAddrList: got 3 interface(s) from operating system

        [ 0-lo      ] IPv4-Address: 127.0.0.1 UP

        [ 1-lo      ] IPv4-Address: 127.0.0.2 UP

        [ 2-eth0    ] IPv4-Address: 192.168.168.157 UP

NiIGetServNo: servicename '3299' = port 3299

SAP Network Interface Router, Version 40.4

Compiled Jul  6 2012 23:13:35

command line arg 0:    saprouter

command line arg 1:    -r

command line arg 2:    -S

command line arg 3:    3299

command line arg 4:    -V

command line arg 5:    3

command line arg 6:    -K

command line arg 7:    p:CN=solman157, OU=0000994568, OU=SAProuter,O=SAP, C=DE

service   : 3299

routtab   : ./saprouttab

plug-in   : no plug-in

-argument: 'no argument'

clients   : 800

max servers  : 1

quelength : 1

maxheap   : 20000000

timeoutL  : 5000

tracefile : dev_rout

logfile   : no logging active

portrange : no portrange active

local address : default address

->> SncInit(prg=0, ini_fname=(NULL), &sec_avail=0x7fffffffbb9f)

SncInit(): Initializing Secure Network Communication (SNC)

      AMD/Intel x86_64 with Linux (st,ascii,SAP_UC/size_t/void* = 16/64/64)

SncInit(): Trying environment variable SNC_LIB as a

      gssapi library name: "/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so".

DlLoadLib() success: dlopen("/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so"), hdl 0

DlLoadFunc: dlsym(sapsnc_init_adapter)= /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so: undefined symbol: sapsnc_init_adapter -> DLENOACCESS

DlLoadFunc (gss_acquire_cred) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_release_cred) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_init_sec_context) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_accept_sec_context) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_process_context_token) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_delete_sec_context) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_context_time) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_get_mic) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_verify_mic) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_wrap) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_unwrap) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_display_status) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_indicate_mechs) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_compare_name) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_display_name) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_import_name) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_release_name) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_release_buffer) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_release_oid_set) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_inquire_cred) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_inquire_cred_by_mech) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_inquire_context) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_wrap_size_limit) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_export_sec_context) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_import_sec_context) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_inquire_names_for_mech) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_inquire_mechs_for_name) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_canonicalize_name) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

DlLoadFunc (gss_export_name) from /usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so

  File "/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so" dynamically loaded as GSS-API v2 library.

  The internal Adapter for the loaded GSS-API mechanism identifies as:

  Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

  <<- SncPDLInit()==SAP_O_K

<<- SncInit()==SAP_O_K

         sec_avail = "true"

->> SncSetMyName(snc_hdl=(nil), myname="p:CN=solman157, OU=0000994568, OU=SAProuter,O=SAP, C=DE")

<<- SncSetMyName()==SAP_O_K

     in: myname = "p:CN=solman157, OU=0000994568, OU=SAProuter,O=SAP, C=DE"

NiBufISetParam: set max heap to 20000000

NiSetParamEx: switch NIP_CONNLOCAL off

NiMyHostName: hostname = 'solman157'

main: pid = 19243, ppid = 19065, port = 3299, parent port = 0 (0 = parent is not a saprouter)

NiSelICreateSet: new set0

SiSelPInit: allocate 147960 bytes for FI (811)

NiSelIInit: size of set0 is 811

NiICreateHandle: hdl 1 state NI_INITIAL_LIS

NiIInitSocket: set default settings for new hdl 1/sock 4 (I4; ST)

NiITraceByteOrder: CPU byte order: little endian, reverse network, low val .. high val

***LOG Q0I=> NiIBindSocket: bind (98: Address already in use) [nixxi.cpp 3740]

*** ERROR => NiIBindSocket: SiBind failed for hdl 1/sock 4

    (SI_EPORT_INUSE/98; I4; ST; 0.0.0.0:3299) [nixxi.cpp    3740]

NiICloseHandle: closing initial hdl 1

*** ERROR => main: NiBufServerHandleForAddr failed (rc=-4) [nirout.cpp   1550]

*****************************************************************************

*

*  LOCATION    SAProuter 40.4 on 'solman157'

*  ERROR       service '0.0.0.0:3299' in use

*

*  TIME        Tue Aug 19 15:27:03 2014

*  RELEASE     720

*  COMPONENT   NI (network interface)

*  VERSION     40

*  RC          -4

*  MODULE      nixxi.cpp

*  LINE        3740

*  DETAIL      NiIBindSocket

*  SYSTEM CALL bind

*  ERRNO       98

*  ERRNO TEXT  Address already in use

*  COUNTER     2

*

*****************************************************************************

SiSelPRemoveAll: removed all sockets

->> SncDone()

DlUnloadLib shared library ("/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so"), hdl 0

<<- SncDone()==SAP_O_K

NiIExit: free nitab 7ffff7fcc010

[divyanshu_srivastava3 · Accepted solution]

Hi Kishore,

ERROR       service '0.0.0.0:3299' in use

Is there any thing else running on port 3299 ? if yes, stop or kill it and restart router.

Also, Update your host and service file correctly.

Divyanshu

[Reagan · Accepted solution]

*** ERROR => NiIBindSocket: SiBind failed for hdl 1/sock 4
    (SI_EPORT_INUSE/98; I4; ST; 0.0.0.0:3299) [nixxi.cpp    3740]
NiICloseHandle: closing initial hdl 1
*** ERROR => main: NiBufServerHandleForAddr failed (rc=-4) [nirout.cpp   1550]

*****************************************************************************
*
*  LOCATION    SAProuter 40.4 on 'solman157'
*  ERROR       service '0.0.0.0:3299' in use

The port is in use.

Check what is using port 3299

lsof -i tcp:3299

Regards

RB

[divyanshu_srivastava3 · Accepted solution]

HI Kishore,

1845121 - Address already in use - how to find the process listening on port ...

Find out the process and related application.

You can stop it of kill it depending on it's practicality and criticality.

Regards,

Divyanshu

[Former Member · Accepted solution]

Dear Srivastava,

I found 5 entries in Service file under the port 3299.

#sapdp99    3299/tcp    # SAP System Dispatcher Port

pdrncs             3299/tcp     # pdrncs  [Paul_Wissenbach]

pdrncs             3299/udp     # pdrncs  [Paul_Wissenbach]

telnet             3299/tcp       # Telnet  [Jon_Postel] [RFC854]

telnet             3299/udp       # Telnet  [Jon_Postel] [RFC854]

Could you pl which entire we can change.

Give a example line.

[Former Member · Accepted solution]

Dear Reagan,

Pl find the lsof -i tcp:3299 command O/P

Pl suggest us

 

[divyanshu_srivastava3 · Accepted solution]

That is OK..

Check with OS team for what I have posted before.

[Former Member · Accepted solution]

Dear Divyanshu,

OS team telling like that its a TELNET service,

we Don't kill the service , once we kill 3299 port is closed automatically.

Pl suggest us

[divyanshu_srivastava3 · Accepted solution]

But that port is used by your router.

[Reagan · Accepted solution]

I would stop that process and start the saprouter and then start the xinetd process and see if that helps. For sure the saprouter is more important than the other process.

To stop and start the xinetd process

/etc/init.d/xinetd stop

/etc/init.d/xinetd start

Regards

RB

[former_member188883 · Accepted solution]

Hi Kishore,

pdrncs             3299/tcp     # pdrncs  [Paul_Wissenbach]
pdrncs             3299/udp     # pdrncs  [Paul_Wissenbach]
telnet             3299/tcp       # Telnet  [Jon_Postel] [RFC854]
telnet             3299/udp       # Telnet  [Jon_Postel] [RFC854]

Explain to OS team that 3299 port is meant for SAP application. They can configure different port for Telnet service and pdrncs service.

Regards,

Deepak Kori

[divyanshu_srivastava3 · Accepted solution]

You should ask your OS team to read notes and manuals for setting up OS and services for SAP router.

Else, ask them to change ports.

[Former Member · Accepted solution]

Dear Reagan,

as per we stop the service : /etc/init.d/xinetd stop.

Try to start sap router we get this error. port 3299 is closing.

[divyanshu_srivastava3 · Accepted solution]

Port is binded to that service. Ask you OS team to change the port.

[Reagan · Accepted solution]

After stopping the process check whether the port is free.

Start the saprouter and provide the dev_rout file.

How is your saprouttab configured ?

[Former Member · Accepted solution]

Dear Reagan,

After stopping the Xineted service the port is free but try to start the router no logging active error is occurred.

here the dev_rout log file info & saprouttab entries

---------------------------------------------------

trc file: "dev_rout", trc level: 2, release: "720"

---------------------------------------------------

Wed Aug 20 08:55:39 2014

NiIHSBufInit: initialize hostname buffer (IPv4)

NiHLInit: alloc host buf (200 entries)

NiSrvLInit: alloc serv bufs (200 entries)

NiIInit: allocated nitab (811 at 7ffff7fcc010)

NiIInit: host/serv bufs already initialized

SAP Network Interface Router, Version 40.4

Compiled Jul  6 2012 23:13:35

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -V

command line arg 3: 2

command line arg 4: -K

command line arg 5: p:CN=solman157, OU=0000994568, OU=SAProuter, O=SAP, C=DE

service   : 3299

routtab   : ./saprouttab

plug-in   : no plug-in

-argument: 'no argument'

clients   : 800

max servers  : 1

quelength : 1

maxheap   : 20000000

timeoutL  : 5000

tracefile : dev_rout

logfile   : no logging active

portrange : no portrange active

local address : default address

SncInit(): Initializing Secure Network Communication (SNC)

      AMD/Intel x86_64 with Linux (st,ascii,SAP_UC/size_t/void* = 16/64/64)

SncInit(): Trying environment variable SNC_LIB as a

      gssapi library name: "/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so".

DlLoadLib() success: dlopen("/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so"), hdl 0

  File "/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so" dynamically loaded as GSS-API v2 library.

  The internal Adapter for the loaded GSS-API mechanism identifies as:

  Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

<<- SncInit()==SAP_O_K

         sec_avail = "true"

<<- SncSetMyName()==SAP_O_K

     in: myname = "p:CN=solman157, OU=0000994568, OU=SAProuter, O=SAP, C=DE"

NiBufISetParam: set max heap to 20000000

NiSetParamEx: switch NIP_CONNLOCAL off

NiMyHostName: hostname = 'solman157'

main: pid = 28048, ppid = 27735, port = 3299, parent port = 0 (0 = parent is not a saprouter)

NiICreateHandle: hdl 1 state NI_INITIAL_LIS

NiIInitSocket: set default settings for new hdl 1/sock 4 (I4; ST)

NiITraceByteOrder: CPU byte order: little endian, reverse network, low val .. high val

NiIBind: hdl 1 bound to 3299 (IP only)

NiIBlockMode: set blockmode for hdl 1 FALSE

NiIListen: state of hdl 1 NI_LISTEN

reading routtab: './saprouttab'

NiIGetServNo: servicename '3200' = port 3200

NiIGetServNo: servicename '3212' = port 3212

NiIGetServNo: servicename '3200' = port 3200

NiIGetServNo: servicename '3210' = port 3210

NiIGetServNo: servicename '23' = port 23

NiIGetServNo: servicename '23' = port 23

NiIGetServNo: servicename '50000' = port 50000

NiIGetServNo: servicename '3299' = port 3299

contents of routtab ('./saprouttab', 10 entries):

KT*,*  p:CN=sapserv2, OU=SAProuter, O=  194.39.131.34/32                *         *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.157/32              3200      *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.157/32              3212      *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.158/32              3200      *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.158/32              3210      *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.157/32              23        *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.158/32              23        *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.157/32              50000     *

P*,*  192.168.168.157/32               194.39.131.34/32                3299      *

D*,*  ::/0                             ::/0                            *         *

******* NI-ROUTER LOOP ********

saprouttab entries.

# SNC connection to and from SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

# SNC connection to local system for R/3-Support

# R/3 Server: 192.168.168.157

# R/3 Instance: 00

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.168.157 3200

# SNC connection to local system for R/3-Support

# R/3 Server: 192.168.168.157

# R/3 Instance: 12

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.168.157 3212

# SNC connection to local system for R/3-Support

# R/3 Server: 192.168.168.158

# R/3 Instance: 00

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.168.158 3200

# SNC connection to local system for R/3-Support

# R/3 Server: 192.168.168.158

# R/3 Instance: 10

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.168.158 3210

# SNC connection to local UNIX system for SAPtelnet, if applicable

# UNIX server: 192.168.168.157

# Default Telnet port: 23

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.168.157 23

# SNC connection to local UNIX system for SAPtelnet, if applicable

# UNIX server: 192.168.168.158

# Default Telnet port: 23

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.168.158 23

# SNC connection to local Portal system for URL access, if applicable

# Portal server: 192.168.168.157

# Port number: 50000

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.168.157 50000

# Access from the local Network to SAP

P 192.168.168.157 194.39.131.34 3299

# deny all other connections

D * * *

[divyanshu_srivastava3 · Accepted solution]

Hi Kishore,

No logging active - is not an error. Try to check oss destination from remote system. You router is up and running.

Cheers,

Divyanshu

[Former Member · Accepted solution]

Hi Divnanshu,

saposs (RFC) & oss1 connections are getting error.

my oss1  screen shot is.

pl suggest.

[former_member182657 · Accepted solution]

Hi,

Share the error details for saposs (RFC) & oss1 connections

Regards,

Gaurav

[divyanshu_srivastava3 · Accepted solution]

HI Kishore,

What are the errors ?

Also, refer this note: http://service.sap.com/sap/support/notes/2000132

Regards,

Divyanshu

[Former Member · Accepted solution]

Hi Rana,

Pl find the error details.

pl suggest us.

[divyanshu_srivastava3 · Accepted solution]

Did you check above note ?

Are the ports open and working ?

Delete old RFC and try again with saving entries in OSS1.

Also, then share router logs.

Regards,

Divyanshu

[former_member182657]

Hi Kishore,

I would recommend you to once check for standard SNC connections registered to sapserv2 in Germany at SMP and try to connect again.

Regards,

Gaurav

[former_member182657]

Hi Kishore,

D*,*

Could you please share the saprouttab file,issue could be realted with above entry.

For once can you add P * * *  instead od D * under the saprouttab file and retry to connect.

Hope this will resolve your issue.

Regards,

Gaurav

[former_member182657]

Dear Kishore,

Please follow SAP Note   48243 - Integrating the SAProuter software into a firewall environment

Hope this will help you .

Regards,

Gaurav

[former_member182657]

Hi Kishore,

Kindly share the dev_rout file from the solman system for analysis.

Regards,

Gaurav

[Former Member]

Dear Gaurav,

pl

---------------------------------------------------

trc file: "dev_rout", trc level: 2, release: "720"

---------------------------------------------------

Thu Aug 21 11:28:11 2014

NiIHSBufInit: initialize hostname buffer (IPv4)

NiHLInit: alloc host buf (200 entries)

NiSrvLInit: alloc serv bufs (200 entries)

NiIInit: allocated nitab (811 at 7ffff7fcc010)

NiIInit: host/serv bufs already initialized

SAP Network Interface Router, Version 40.4

Compiled Jul  6 2012 23:13:35

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -V

command line arg 3: 2

command line arg 4: -K

command line arg 5: p:CN=solman157, OU=0000994568, OU=SAProuter, O=SAP, C=DE

service   : 3299

routtab   : ./saprouttab

plug-in   : no plug-in

-argument: 'no argument'

clients   : 800

max servers  : 1

quelength : 1

maxheap   : 20000000

timeoutL  : 5000

tracefile : dev_rout

logfile   : no logging active

portrange : no portrange active

local address : default address

SncInit(): Initializing Secure Network Communication (SNC)

      AMD/Intel x86_64 with Linux (st,ascii,SAP_UC/size_t/void* = 16/64/64)

SncInit(): Trying environment variable SNC_LIB as a

      gssapi library name: "/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so".

DlLoadLib() success: dlopen("/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so"), hdl 0

  File "/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so" dynamically loaded as GSS-API v2 library.

  The internal Adapter for the loaded GSS-API mechanism identifies as:

  Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

<<- SncInit()==SAP_O_K

         sec_avail = "true"

<<- SncSetMyName()==SAP_O_K

     in: myname = "p:CN=solman157, OU=0000994568, OU=SAProuter, O=SAP, C=DE"

NiBufISetParam: set max heap to 20000000

NiSetParamEx: switch NIP_CONNLOCAL off

NiMyHostName: hostname = 'solman157'

main: pid = 12147, ppid = 11972, port = 3299, parent port = 0 (0 = parent is not a saprouter)

NiICreateHandle: hdl 1 state NI_INITIAL_LIS

NiIInitSocket: set default settings for new hdl 1/sock 4 (I4; ST)

NiITraceByteOrder: CPU byte order: little endian, reverse network, low val .. high val

NiIBind: hdl 1 bound to 3299 (IP only)

NiIBlockMode: set blockmode for hdl 1 FALSE

NiIListen: state of hdl 1 NI_LISTEN

reading routtab: './saprouttab'

NiIGetServNo: servicename '3200' = port 3200

NiIGetServNo: servicename '3212' = port 3212

NiIGetServNo: servicename '3200' = port 3200

NiIGetServNo: servicename '3210' = port 3210

NiIGetServNo: servicename '23' = port 23

NiIGetServNo: servicename '23' = port 23

NiIGetServNo: servicename '50000' = port 50000

NiIGetServNo: servicename '3299' = port 3299

contents of routtab ('./saprouttab', 10 entries):

KT*,*  p:CN=sapserv2, OU=SAProuter, O=  194.39.131.34/32                *         *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.157/32              3200      *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.157/32              3212      *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.158/32              3200      *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.158/32              3210      *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.157/32              23        *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.158/32              23        *

KP*,*  p:CN=sapserv2, OU=SAProuter, O=  192.168.168.157/32              50000     *

P*,*  192.168.168.157/32               194.39.131.34/32                3299      *

D*,*  ::/0                             ::/0                            *         *

******* NI-ROUTER LOOP ********

[Former Member]

Dear

Try to change sapserv2 to sapserv7 and make necessary changes it will work

sapserv2 (194.39.131.34)  connection via Internet SNC

sapserv7 (194.39.134.35)   for customers in Asia

sapserv9 (169.145.197.110) for customers in Asia.

you need change ip to sapserv7 that server is also for asia

Regards

[former_member182657]

Hi,

change the

127.0.0.1 solman157.estuate solman157

with 127.0.0.1 localhost.localdomain  localhost

and remove

108.92.23.178 3299

3299 entry should be under services file as like sapdp99 3299

Regards,

Gaurav

[former_member182657]

Hi Kishore,

Share the host entry details,your issue could be related with host entries.Try to follow as like

127.0.0.1  localhost.localdomain  localhost

<IP Address>  <hostname>

after saving try to reconnect the system.

Regards,

Gaurav

[Former Member]

Dear Gaurav,

here my host entries,

#

# hosts         This file describes a number of hostname-to-address

#               mappings for the TCP/IP subsystem.  It is mostly

#               used at boot time, when no name servers are running.

#               On small systems, this file can be used instead of a

#               "named" name server.

# Syntax:

#   

# IP-Address  Full-Qualified-Hostname  Short-Hostname

#

127.0.0.1 solman157.estuate solman157

192.168.168.157 solman157

# special IPv6 addresses

::1             localhost ipv6-localhost ipv6-loopback

fe00::0         ipv6-localnet

ff00::0         ipv6-mcastprefix

ff02::1         ipv6-allnodes

ff02::2         ipv6-allrouters

ff02::3         ipv6-allhosts

192.168.168.157 solman157.estuate solman157

192.168.168.158 Netweaver158.estuate  Netweaver158

108.92.23.178 3299

[divyanshu_srivastava3]

"108.92.23.178 3299"

What is this ?

[divyanshu_srivastava3]

Hi,

Goto and other system that you have in your landscape and look at the host file.

The entries should be like this:

IP address      FQDN      hostanme

127.0.0.1 is loopback address is used with localhost.

For eg 127.0.0.1      localhost

Add IP addresses and Host name of all system in host file.

Have you performed Natting of IPs for SAP router ?

You Public and private(VLAN) IPs should be binded together.

In services file, you maintain name of service with port number.

Regards,

Divyanshu

[Former Member]

Hi Kishore,

Please see below link this might help you

Close unneeded ports on Unix/Linux systems - TechRepublic

Regards

Dharmendra

[Former Member]

Dear Dharmendra,

we are changing the telnet port from 3299 to some other port,

and also stop the service xinetd.

try to the command  telnet <ip> 3299. the following error is occurred.

pl suggest us,

which port we need to use for telnet.

[Former Member]

Hi Kishore,

Which is OS you are using for Solman and is router running on Solman.?

You need to open port 3299 on the Solman where router is running.

Regards

Dharmendra

[Former Member]

Dear Dharmendra

SOLAMN & one pi system running on single node (VM ware)

we are configuring router on solman system : host name : solman157.

and OS is : Suse 11 linux.

in 3299 telnet service is running now ie:XINETD

we to stop the xinted service using the command /etc/init.d/xinetd stop

after try to ping telnet <ip> 3299 the above screen shot error is occurs.

pl suggest us

[Former Member]

hi kishore,

can you share result for

ps -ef | grep saprouter

And Have you done technical configuration in t-code OSS1 ?

You need to mention your SAP router and SAP OSS router details there.

Regards

Dharmendra

Message was edited by: Dharmendra Koli

[Former Member]

Dear Dharmendra,

pl find the my oss1 entries & ps -ef | grep saprouter   result

[Former Member]

hi

check ip address given there 108.92.23.178

Please give correct ip address of solman

Regards

Dharmendra

[Former Member]

Hi Dharmendra ,

That is 108.92.23.178 public ip.

my solman157 private ip : 192.168.168.157

[former_member182657]

Hi Kishore,

You need to NAT your public IP with private IP under your firewall,after that you'll be able to connect your system .

Regards,

Gaurav

[Former Member]

Dear Gaurav,

my network team is telling private ip : 192.168.168.157  mapped to  public ip 108.92.23.178

but i try to the following commands its shows 108.92.23.177 (firewall ip)

pl suggest

[Former Member]

hi Kishore,

give your Solman private ip not your firewalls ip here, since your network team has already done NAT of ip addresses.

The problem is when you are giving firewall ip address it is looking for port 3299 on firewall. So change it to private ip.

Regards

Dharmendra

[Former Member]

Dear Dharmendra,

which ip i can maintain in oss1 177 or 178.

[divyanshu_srivastava3]

Hi Kishore,

As I have told you yesterday, please ask your OS/Network team to prepare network infra as per SAP's standard for router. Then you setup router with standard process.

Please refer the standard guides and notes and you issue will be resolved once you consider the standard practice.

Always better to use a router on a different box as the cost of running is not high.

Regards,

Divyanshu

[Former Member]

Dear Divyanshu,

could you please give me a clarify on this,

in my landscape firewall is stopped now, when we start the firewall we are unable to connect the sap in GUI level,

here my public & private ips are nated under centralized firewall only.

we try to start the router when firewall is off state only is it effects the router starting ?

[Former Member]

Hi Kishore,

Add your local private ip address to SAProuters at customer site ie 192.168. 168.157

Also make entry of it in your host file on OS.

Eg:   IP address      FQDN      hostanme

Regards

Dharmendra

[divyanshu_srivastava3]

Hi Kishore,

Did you follow the recommendations that I have asked ?

Regards,

Divyanshu

[Former Member]

Dear Divyanshu,

here the OS guys not ready to give a new box to router configuration,

the guys always telling my end firewall is of your landscape every port is ready to use, no firewall restrictions.

the port 3299 is opened & telnet is pinging in port 3299.

as per my first post they tells network packet size is too big is your router configuration error only.

requested to share have you any documents regarding to network setup as per SAP's standard for router.

[divyanshu_srivastava3]

Hi Kishore,

Please read this note and setup as suggested:

48243 - Integrating the SAProuter software into a firewall environment

Regards,

Divyanshu

[Reagan]

If the port 3299 is occupied by an other process then find that process and terminate it.

Start the saprouter with the full SNC string.

[Former Member]

Dear Reagan,

I check the port 3299 using the following commands.

If i try to kill the process the port 3299 also closing.

pl suggest.

[divyanshu_srivastava3]

Hi Kishore,

This process is a Linux Internet service deamon for binding IP with services.

You can check /etc/xinetd.d for it's configuration.

Don't kill it. Check with your OS team

Regards,

Divyanshu