cancel
Showing results for 
Search instead for 
Did you mean: 

SAP router strange issue

Former Member
0 Kudos

Hi Experts,

Our saprouter is installed on solman windows host and its running fine with valid maintenance certificate.

We have maintained valid parameters in OSS1. But SAPOSS RFC giving error as below.

Please suggest the cause for the issue and solution. Point will be awarded.

RFC :

Connection Error

Error when opening an RFC connection (LB: Hostname or service of the message ser

ERROR: The connection to the specified message server (/H/194.154.123.87/S/sa

LOCATION: SAP-Server <hostname_SID_00 on host <hostname> (wp 4)

COMPONENT: MS (message handling interface, multithreaded)

COUNTER: 100

MODULE: msxxi.c

LINE: 2783

RETURN CODE: -35

SUBRC: 0

RELEASE: 720

TIME: Tue Feb 03 16:17:06 2015

VERSION: 4

dev_rout log containing the below error.

******* NI-ROUTER LOOP ********

NiICheckPendConnection: connection of hdl 17 to 169.145.197.110:3299 established

NiICheckPendConnection: state of hdl 17 NI_CONNECTED

NiISetSockOpt: set option SOL_SOCKET-SO_KEEPALIVE of hdl 17 to TRUE

NiIWrite: hdl 17 sent data (wrt=1859,pac=1,MESG_IO)

NiIRead: hdl 17 recv would block (errno=EAGAIN)

NiIRead: read for hdl 17 timed out (0ms)

Tue Feb 03 13:24:43 2015

NiSelISelectInt: 0 handles selected (0 buffered)

NiBufCheckPendingConn: connection established for hdl 17

RTPENDLIST::timeoutPend: timeout of client C11/17 (ID 4, STAT ROUTED)

NiBufISendErr: send ni-error rc -5 to hdl 11

NiIWrite: hdl 11 sent data (wrt=262,pac=1,MESG_IO)

NiRCloseConn: closing S11/17

NiICloseHandle: shutdown and close hdl 17/sock 376

<<- SncSessionDone()==SAP_O_K

NiBufIClose: freed out-queue (hdl 17, heap 0)

NiICloseHandle: shutdown and close hdl 11/sock 208

lgtst output giving as error below.

[Thr 6680] *

[Thr 6680] *  ERROR       The connection to the specified message server

[Thr 6680] *              (/H/194.154.123.87/S/sapdp99/H/169.145.197.110/S/sapd

99/H/oss

[Thr 6680] *              001/S/sapmsO01 / x) failed. Please check the trace fi

e

[Thr 6680] *              of the message server. If a network filter has

[Thr 6680] *              been activated (see message server parameters

[Thr 6680] *              ms/acl_file_...) please check the configuration

[Thr 6680] *

[Thr 6680] *  TIME        Tue Feb 03 13:24:43 2015

[Thr 6680] *  RELEASE     720

[Thr 6680] *  COMPONENT   MS (message handling interface, multithreaded)

[Thr 6680] *  VERSION     4

[Thr 6680] *  RC          -35

[Thr 6680] *  MODULE      msxxi.c

[Thr 6680] *  LINE        2783

[Thr 6680] *  COUNTER     1

Thanks & Regards,

Manoj

Accepted Solutions (1)

Accepted Solutions (1)

former_member182657
Active Contributor
0 Kudos

Hi Manoj,

I don't think it's only related with windows firewall,as per me it's completely related with correct IP or correct host name usage which you registered with SAP.

Try to involve network as well as UTM specialists to maintain NAT between the IP's as the issue


SAP analysed the issue and said that SAP system is sending timeout message to saprouter.

only happens if IP or host name configurations have issues.Also could you specify from which end you're getting timeout issue (If SAP support getting timeout on your public IP than i strongly recommend to check with ISP as well UTM team.

Regards,

Former Member
0 Kudos

Hi Gaurav,

Can I raise OSS message to check with SAP, which IP is registered with SAP for SAProuter.

Also can you please let me know the abbreviations for ISP,UTM and NAT aswell

BR - Manj

former_member182657
Active Contributor
0 Kudos

Hi Manoj,

Yes you can raise OSS message.Please find below required abbreviations

ISP - Internet service provider

UTM - unified threat management or firewall

NAT - Network address translation

Regards,

Former Member
0 Kudos

Thanks for letting me know and your help

Answers (17)

Answers (17)

former_member182657
Active Contributor
0 Kudos

Hi Manoj,

Really nice to work with you on your issue & thanks for the revert,i would request you to kindly update us after getting revert from SAP support end as 'm more anxious to know the recommendations from SAP.

Regards,

Gaurav

Former Member
0 Kudos

Hi Gaurav,

SAP asked us to check with the network team. but as we dont have network team seperately, we are trying to resolve.

Once we resolve, surely update this post with resolution.


BR-Manoj

Former Member
0 Kudos

Checked the windows firewall with the help of OS admin, he is saying that windows firewall is in ON status but its nt blocking any incoming connections.

We are successfully able to telnet and ping the sapserv9.

I am not able to find the root cause for this..

BR-Manoj

Former Member
0 Kudos

Yes Manuel. thanks for the syntax, we are mentioned the same.

former_member182657
Active Contributor
0 Kudos

Thanks for the update.Let's see !!

Regards,

Former Member
0 Kudos

SAP analysed the issue and said that SAP system is sending timeout message to saprouter..

former_member182657
Active Contributor
0 Kudos

Hi Manoj,

One thing more have you checked entries under host file of your system & changed accordingly.Kindly confirm.

Regards,

Gaurav

Former Member
0 Kudos

Hi Gaurav,

I forget to confirm the host file entry. IP entry is already maintained with hostname and with domain name as you advised.

But in services file there is no sapmsOSS  36<instance number>/tcp entry.

We have installed saprouter on solution manager host and we are trying SAPOSS RFC in Solution manager.

Kindly suggest whether we need to maintain this entry for all.

BR - Manoj

Former Member
0 Kudos

Hi Gaurav,

We found that already one entry is there with 36<instance number> , our instance number 00

sapms<SID> 3600/tcp   # SAP system message server port.

is it ok, if we give the same port number i.e 3600 for sapmsOSS service also.

BR - Manoj

former_member182657
Active Contributor
0 Kudos

Hi Manoj,

Entry is fine here.Have you retest the connection ? Share the results again if any.

Regards,

Former Member
0 Kudos

Hi Gaurav,

I didn't added the entry sapmsOSS 36<instance no>/tcp and maintained only sapms<SID> 3600/tcp   # SAP system message server port. entry

I tested the RFC connection but no luck giving the error as below

--------------------------------------------------------------------

SAPOSS RFC error :

---------------------------------------------------------------------

Connection Error

Error when opening an RFC connection (LB: Hostname or service of the message ser

ERROR: The connection to the specified message server (/H/192.168.100.92/S/sa

LOCATION: SAP-Server <hostname>_SOL_00 on host <hostname> (wp 5)

COMPONENT: MS (message handling interface, multithreaded)

COUNTER: 96

MODULE: msxxi.c

LINE: 2783

RETURN CODE: -35

SUBRC: 0

RELEASE: 720

TIME: Wed Feb 04 15:45:54 2015

VERSION: 4

BR-Manoj

former_member182657
Active Contributor
0 Kudos

Hi Manoj,

On re check your issue/query i found


Thr 6680] *  ERROR       The connection to the specified message server

[Thr 6680] *              (/H/194.154.123.87/S/sapdp99/H/169.145.197.110/S/sapd

99/H/oss

Here you're using ip 194.154.123.87 ( as your SAP server IP) and in your latest revert you're specifying different IP i.e 192.168.100.92 (as your SAP Server IP).

Now here question arises for me

As per my understandings IP 192.168.100.92 is your internal network IP and 194.154.123.87 is your public one.Please correct me if 'm wrong here.


ERROR: The connection to the specified message server (/H/192.168.100.92/S/sa

LOCATION: SAP-Server <hostname>_SOL_00 on host <hostname> (wp 5)

So here first you need to define correct IP address which you registered with SAP .I'm assuming both IP's are NAT with each other.If not than confirm NAT of correct public IP and make sure required ports are not blocked at firewall end if using.

Hope you're getting me.

Regards,

Gaurav

Former Member
0 Kudos

Hi Gaurav,

You are right, second one is solution manager's SAPOSS RFC error. I have maintained the correct IP in OSS1 parameters.

I am checking the firewall update you soon.

BR - venkat

mamartins
Active Contributor
0 Kudos

Hi,

The correct format of the OSS connection is:

/H/[SAPROUTER_INTERNAL_IPADDRESS]/S/sapdp99/H/[SAP_SAPROUTER_PUBLIC_IPADDRESS]/S/sapdp99/H/oss001

The SAP SAPROUTER public address depends on your geographic zone.

M

former_member182657
Active Contributor
0 Kudos

Hi Manoj,

Thanks for the results,could you confirm for entry sapmsOSS under services file.


sapmsOSS 36<instance no>/tcp

After that retry and test SAPOSS connection.

Regards,

Gaurav

former_member182657
Active Contributor
0 Kudos

Hi Manoj,

If possible could you check your system host entries,should be similar as like


127.0.0.1 localhost.localdomain localhost

<IP of system>   <Hostname>

After making changes to host entries could you try once again to test SAPOSS connection.Addition to it could you share dev_w5 log file for analysis.

Regards,

Former Member
0 Kudos

Dear Gaurav,

Thanks for helping.

Wed Feb 04 14:57:56 2015

M  *****************************************************************************

M  *

M  *  LOCATION    SAP-Server <host>_<SID>_00 on host <hostname> (wp 5)

M  *  ERROR       The connection to the specified message server

M  *              (/H/<Host IP> /S/sapdp99/H/169.145.197.110/S/sapdp99/H/oss

M  *              001 / sapmsOSS) failed. Please check the trace file

M  *              of the message server. If a network filter has

M  *              been activated (see message server parameters

M  *              ms/acl_file_...) please check the configuration

M  *

M  *  TIME        Wed Feb 04 14:57:56 2015

M  *  RELEASE     720

M  *  COMPONENT   MS (message handling interface, multithreaded)

M  *  VERSION     4

M  *  RC          -35

M  *  MODULE      msxxi.c

M  *  LINE        2783

M  *  COUNTER     85

M  *

M  *****************************************************************************

M  *** ERROR => MsIAttachEx: MsINiWrite (rc=-35) [msxxi.c      884]

M  {root-id=00505683254F1ED4AB871507E726C5CE}_{conn-id=00000000000000000000000000000000}_0

M  *** ERROR => LgIAttach: MsAttach (rc=-35) [lgxx.c       4221]

M  {root-id=00505683254F1ED4AB871507E726C5CE}_{conn-id=00000000000000000000000000000000}_0

M  *** ERROR => LgIGroupX: LgIAttach(rc=-101) [lgxx.c       4563]

M  {root-id=00505683254F1ED4AB871507E726C5CE}_{conn-id=00000000000000000000000000000000}_0

A  TH VERBOSE LEVEL FULL

A  ** RABAX: end RX_GET_MESSAGE

BR- Manoj

Former Member
0 Kudos

Hi Gaurav,

I have gone through the SAP Note : 33135 and as of my knowledge I didn't found any issues concern to this note.

Pls check RFC error and OSS1 parameters

BR - Manoj

former_member182657
Active Contributor
0 Kudos

Additionally you could refer SAP KBA  33135 - Guide for OSS1

& reconfirm router data entry from the same.

Regards,

former_member182657
Active Contributor
0 Kudos

Hi Manoj,

If telnet is successful from your end,than could you send what error you're getting on testing SAPOSS


SAPOSS RFC connection is giving error.

Regards,

Gaurav

divyanshu_srivastava3
Active Contributor
0 Kudos

Hi Manoj,

To be precise, saprouter is rejecting connection and this is what the error is all about.

Delete the RFC and recreate with correct process using OSS1.

Make sure the places from packet size to routtab to NATting, everthing is done correctly.

Refer -

2000132 - Configuring RFC connections to the SAPNet R/3 front end (OSS) correctly

766505 - OSS1: Changes to RFC connection SAPOSS

Regards,

divyanshu_srivastava3
Active Contributor
0 Kudos

Can you look into what was stated above ?

Former Member
0 Kudos

Are you able to resolve router IP at end of SAP from your end


Can you please let me know in detail,


I am able to ping the windows host on which the saprouter installed and also able to ping and telnet sapserv9 successfully from my saprouter host


Is there any changes need to be maintained in windows firewall.


BR- Manoj



former_member182657
Active Contributor
0 Kudos

Hi Manoj,


We have checked with SAP and SAP replied that R/3 system is sending a timeout message to our saprouter. Ask us to check with network team to do packet sniffing for more details.

Are you able to resolve router IP at end of SAP from your end & are you using firewall in your network ?

Packet sniffing means monitoring of your network,SAP suggested same because of there may be possibilities of network break or high network traffic on your router connection which causing the issue.

If possible try to take help from your firewall support team to analyze network traffic on the connection.


Also there may be possibilities of DDoS attacks on the specific IP of router.So you need to look after all these things.


Hope this will help you.


Regards,


Former Member
0 Kudos

Hi Experts,

Our saprouter was running fine. But SAPOSS RFC connection is giving error.

We have checked with SAP and SAP replied that R/3 system is sending a timeout message to our saprouter. Ask us to check with network team to do packet sniffing for more details.


We dont have separate network team and we have to resolve ourselves.


Kindly help me to check and resolve the issue.


Meanwhile we will try to upgrade the kernel to its latest patch

BR - Venkat

mamartins
Active Contributor
0 Kudos

Hi,

Please post the result of the following command: sapgenpse get_my_name -v.

To avoid privacy/security issues, please dark the private information before post.

Regards,

M

Former Member
0 Kudos
mamartins
Active Contributor
0 Kudos

I noticed on another thread that SAP is making changes to certificates.

Do you have the last version of the SAPROUTER kernel? If not, upgrade it.

Regards,

M

Former Member
0 Kudos

have you registered your SAProuter with SAP as per note 28976 - Remote connection data sheet

also follow the installation guide https://support.sap.com/content/dam/library/SAP%20Support%20Portal/remote-support/saprouter/Remote-S...

Former Member
0 Kudos

Yes sunil, we have recently renewed the maintenance certificate with the help of service market place.