SAP Router service issue

[rahul_yedapally]

Hello All,

Registered new SAP Router IP  with SAP last week , As we are aware about the changes of NEW SAP Router by referring below note

525751 - Installation of the SNC SAPRouter as NT Service

All the configuration are done has per the note , When we are Trying to install the service , below is the error screen image

[former_member182657]

From you previous shared snap shots,could you share the start command of router as i've some doubts on it ?

Try to start the router by following sample command

saprouter -r -K "p:CN=<hostname>, OU=000076562, OU=SAProuter, O=SAP, C=DE"

In your dev_rout log file snap shot you've provided CN value with sapserv2 & O value with Sap.Please verify for these entries first or generate a valid cert for valid host name.

Hope you & others will find it relevant here.

Regards,

[former_member182657]

Hi,

when i test SAPoss RFC from Sm59 ,below is error screen

Could you share dev_w9.log file,OSS1 screen settings with system host file entries ?

Regards,

[rahul_yedapally]

Sorry Anand , i have add below entries even same issue

I have Permitted all the connections dont know where is the problem

[rahul_yedapally]

Hello Anand,

I have added below entry but still same  issue

P * 194.39.131.34 3299

Below is my sap routtab entries

[Former Member]

Rahul,

# Access from local network to SAP

P 192.168.0.*  192.168.*.* 3200

P 192.168.0.13    194.39.131.34 3299

P 192.168.0.13  192.168.0.* sapdp00

P * 194.39.131.34 3299

If this does not work

Put P * * *

and try.

Regards

Anand

[rahul_yedapally]

Addition to above error screen i have attached dev_rout logs

Thanks,

Rahul yedapally

[Former Member]

Rahul,

the line previously added ... has spaces in between..

P

192.168.0.13

192.168.0.*

sapdp00----right one

P192.168.0.13192.168.0.*sapdp00----wrong

Can you add this entry in saprouttab and refresh with command saprouter -n

# Access from local network to SAP

P * 194.39.131.34 3299

and test connect RFC SAPOSS in SM59

Regards

Anand

[rahul_yedapally]

Hello Anand,

sorry , I am not aware about oss1 test has been disabled , we have few old saprouter there oss1 connections are working

As per your suggestions i have add below entry in saprouttab

P192.168.0.13192.168.0.*sapdp00

and Restarted the saprouter

when i test SAPoss RFC from Sm59 ,below is error screen

[rahul_yedapally]

Thanks for your quick Reply anand

Please check below outputs and let me know if corrections

Thanks,

Rahul

[Former Member]

Rahul,

Please add following line in saprouttab.

P

192.168.0.13

192.168.0.*

sapdp00

After that refresh with command saprouter -n

check SM59 SAPOSS RFC connection.

Connection test should be successful.

OSS1 test connection has been disabled since sometime by SAP.

Regards

Anand

[rahul_yedapally]

Thanks Steve, I have give same entires in Routtab but issue remains same

Service started , but oss1 not working

I have checked the validity of SAP Router its Good dont whats happening Related ports are opened 

Thanks,

Rahul

[Former Member]

Hello Rahul,

Can you please perform followings test commands and paste the output.

SAProuter -V'

sapgenpse'

sapgenpse get_my_name -n all'

sapgenpse seclogin -l'

niping -c -O -H 194.39.131.34 -S sapdp99'

niping -c -O -H /H/<internal IP SAProuter>/H/194.39.131.34/H/localhost'

Regards

Anand

[rahul_yedapally]

Did any one face this issue , Please guide me

[former_member182307]

Hi,

Your saproutab seems wrong : sapserv2 public IP is 194.39.131.34 not 147.204.2.5.

nor 194.117.106.129 ( which is the one for VPN connection to SAP ( sapserv1 )

That said, your saprouttab should look as follows :

#SNC connection to SAP

KT "P:CN=sapserv2, OU=SAProuter, o=Sap, C=DE" 194.39.131.34 *

# inbound connections MUST use SNC

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.0.13 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.0.13 8100

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.0.13 3299

# Connection from sap to internal system

P    194.39.131.34    192.168.0.13    3200

# Access from the local network to SAP

p    192.168.0.13    194.39.131.34    3299

# all other connections will be denied

D  * * *

HTH, Best regards,

Steve.

[rahul_yedapally]

Thanks Steve SOUMAH

As per the Recommendation  i have followed below document

https://websmp109.sap-ag.de/saprouter

-> How to establish Internet Connections

     -> SNC: Installing crypto functions

Attached SAP Routertab file for your Reference

[patelyogesh]

This might help you

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c06c8846-c160-2d10-d18e-d9961e9c7...

Thanks

Yogesh

[rahul_yedapally]

Hello Anand,

SAP Router service is working and i have checked all the validity its correct

when we check an OSS1 connection its failed , below attached screen image for your Reference

[former_member182307]

Hello,

If you try to reach sapserv2 then you're using the SNC connection way to connect to SAP.

Have you performed the PSE file generation and the configuration as stated here :

https://websmp109.sap-ag.de/saprouter

-> How to establish Internet Connections

     -> SNC: Installing crypto functions

It looks like this part is not working on your set up .

Your service start command should look like :

saprouter -b PATH_TO_SAPROUTER_EXE –p "service -r -W 60000 -S 3299 –R PATH_TO_SAPROUTAB –K p:SNC_STRING"

Best regards,

Steve.

[rahul_yedapally]

can someone help me

[former_member182307]

Hello Rahul,

Can you open a CMD prompt and start the saprouter command exectuted by the service manually.

This will give you some extra info as to why the service is not starting.

Also, have a look at your windows event viewer for errors on saproutrer servuice startup.

You can then post these here.

Thanks and BR,

Steve.

[Former Member]

Hello Rahul,

Can you please check following SAP note :-

41054 - Installation of SAProuter as Windows service

If the above mentioned Note did not resolve.

Try to set environment variables

SECUDIR=X:\Saprouter

SNC_LIB=X:\Saprouter\sapcrypto.dll

and check again.

Regards

Anand