Installing SAPROUTER 7.00

[Former Member]

Hi Experts,

I have downloaded the SAPROUTER.SAR file from service market place

and uncared it. There was only one file which was uncared that is

SAPROUTER.EXE. When i doubled clicked on it, it is not getting

installed.It doesn't show me any screens.Just a command prompt

window opens and gets closed.Is there any other way installing router.

Regards,

Vamshi.

[Former Member]

Dear Friend,

               I have downloaded sapcar and sapcrypolib from sap market place.

but I am not able to uncar SAPCRYPTOLIB.

when I run sapcar -xvf <sSAPCRYPTOLIB>.sar

It says sapcar: command not found

can anyone help me in this

thanks in advance

Regards

Aditya Asati

[Former Member]

Hi

You have to use <Sid>adm to uncar the files or you can download the sap car file at the same location where the files are or give the fun path of sapcar.

Regards

Vamshi

[Former Member]

Thanks All!!!

Router has been configured successfully

[Former Member]

Dear Vamshi,

since you have installed sap router sucessfully , I needed a document regarding the installation of sap router.

If you have created a document. please do send to my ID ganesh.nag@bcone .com..

Please help me out..

Regards,

Ganesh Nag

[Former Member]

Hi,

Please use the following step.

Installation Steps

1.1 Downloading necessary software components from SAP Service Marketplace:

1. SAProuter

Use the latest SAProuter version (37.x), which can be downloaded from

SAP Service Marketplace under the following link.

http://service.sap.com/swdc

&#61614; Download

&#61614; Support Packages and Patches

&#61614; Entry by Application Group

&#61614; Additional Components

&#61614; SAPROUTER

&#61614; SAPROUTER 6.40

SAPROUTER 6.40

From the available list of SAProuters, select the SAProuter for your OS platform.

2. SNC Libraries (SAPcryptolib) download:

http://service.sap.com/swdc

&#61614; Download

&#61614; SAP Cryptographic Software

Select the SAPcrytoLib libraries compatible with your Operating System.

Note: Please also download the SAPCAR.exe file from the above location to extract the SAProuter archive files.

3. Create a folder in /usr/sap with the name as: saprouter.

4. Extract both the files i.e. SAProuter.SAR and Cryptolib.CAR files into saprouter folder using the command:

SAPCAR -xvf SAProuterxxx.SAR

SAPCAR -xvf CRYPTOLIBxxx.CAR

1.2 Creating the certificate request

1. As user <snc>adm set the environment variables:

SECUDIR = /usr/sap/saprouter

SNC_LIB = /usr/sap/saprouter/libsapcrypto.so

2. Go to the Trust Center Service - Download Area and get the "Distinguished Name" for your SAProuter from the list of SAProuters registered for your installation.

3. Generate the certificate Request with the command:

1. ./sapgenpse get_pse -v -r certreq -p local.pse "<Your Distinguished Name>"

P.S: We can also get the distinguished name from SAP itself when we register for the remote service connection.

4. Display the output file "certreq" using the command:

1. cat certreq

and with copy & paste insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name.

1.3 Importing the certificate request

1. With this in turn you can install the certificate in your saprouter by calling

1. ./sapgenpse import_own_cert -c srcert -p local.pse

1.4 Setting secured login to SAProuter

1. Now you will have to create the credentials for the SAProuter with the same program (if you omit -O <user>, the credentials are created for the logged in user account)

sapgenpse seclogin -p local.pse -O <user_for _saprouter>

2. This will create a file called cred_v2 in the same directory.

3. Check if the certificate has been imported correctly

1. ./sapgenpse get_my_name -v -n Issuer

4. If this is not the case, delete the files cred_v2, local.pse and start over at Item 3 of 4.2 . If the output still does not match please open a customer message in component XX-SER-NET-OSS stating the actions you have taken so far and the output of the commands 3 of 4.2, 4.3, and 4.4.

1.5 Additional actions necessary before you can start saprouter

1. Logon to the system as <sid>adm, here sa1adm.

2. The environment variables SECUDIR, SNC_LIB and USER needs to be set for the user account SAProuter is running under using the commands:

setenv SECUDIR <path_to_libsecude>

i.e. setenv SECUDIR /usr/sap/saprouter

setenv SNC_LIB <path_to_libsecude>/<name_of_sapcrypto_library>

i.e. setenv SNC_LIB /usr/sap/saprouter/libsapcrypto.so

setenv USER sa1adm

3. Check if the environment of the user running saprouter contains the environment variable SECUDIR, SNC_LIB and USER using : printenv

4. Start the saprouter with the following command line:

#./saprouter -r -S <port> -K "p:<Your Distingushed Name>"

-K tells the saprouter to start with loading the SNC library

Eg. ./saprouter -r -S 3299 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"

./saprouter -r -V 2 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"

./saprouter -r -R /usr/sap/saprouter/saprouttab -G log.txt -V 2 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"

5. The corresponding file ./saprouttab should contain at least the following entries

1. inbound connections MUST use SNC

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <your_server1> <port_number>

1. repeat this for the servers and port_numbers you will need to allow,

2. please make sure that all explicit ports are inserted in front of a

3. generic entry '*' for port_number

1. outbound connections to <sapservX> will use SNC

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sapservX> <sapservX_inbound_port>

1. permission entries to check if connection is allowed at all

P <IP address of a local host> <IP address of sapserv2>

1. all other connections will be denied

D * * *

6. Example: For a SNC encrypted connection to the SAPRouter on sapserv2 (194.39.131.34), the saprouttab should contain the following entries:

1. SNC-connection from and to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

1. SNC-connection from SAP to local R/3-System for Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <R/3-Instance>

1. SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503

1. SNC-connection from SAP to local R/3-System for saptelnet, if it is needed

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23

1. Access from the local Network to SAPNet - R/3 Frontend (OSS)

P <IP-addess of a local PC> 194.39.131.34 3299

1. deny all other connections

D * * *

Regards,

Vamshi.

[JPReyes]

Hi Vamshi,

Try executing the SAPROUTER.EXE from a command prompt so you can read the error message.

Regards

Juan

[Former Member]

Hi Juan,

Yeah is there any command to install router using command prompt

eg:- saprouter -k or -r are there any commands like that.

Thanks for your help.

Regards,

Vamshi

[Former Member]

You need to start the saprouter from the command prompt. Make sure that you have a SAPROUTTAB file in the same directory with the permissions for the systems that you want to route connections to.

To start the saprouter, go to the command prompt and type "saprouter -r". To stop it, open another command prompt, navigate to the saprouter directory and type "saprouter -s". You can find more parameters for the saprouter by simply typing "saprouter" and hitting the enter key.

Bye,

Sameer

[Former Member]

Hi Sameer,

I have not installed SAP Router. Canu say me how to install it not how to

start it.

Thanks for your reply,

Regards,

Vamshi.

[Former Member]

Hi Vamshi,

There really isn't anything to install. You need the saprouter.exe and your saprouttab file. When you uncar the archive, you should be able to see atleast saprouter.exe if not two other dlls and niping.exe.

In any case, saprouter.exe is all you basically need. Niping.exe is used to check if the saprouter is running and can be reached.

Try the commands I mentioned before. If you see any errors, post them here.

Bye,

Sameer

[Former Member]

Hi Sameer,

Thanks for your help!!!

I have started the router with the following option saprouter -r

In the routtab i have entered p * * *.

I want to generate the certificate for snc i have uncared the sapcryptolib

and then have set the path for snc_lib and other variable.

when i execute the # ./sapgenpse ....... then i got the error ticket file

not found. I have tried it when router was stopped.

How is it possible to generate the certificate, Is this to be done after the

router is started or will it do even when router is stopped.

Regards,

Vamshi.

[Former Member]

HI All,

Where should be the ticket file located which is generated after

uncaring the SAPCRYPTOLIB.

Regards,

Vamshi.

[Former Member]

Hi,

glad I could be of some help. I don't really know about certificates because I haven't worked with them. But in case, you have generated a ticket, it should be somewhere under C:\. I seem to remember it was Documents and Settings and then your user...maybe I am wrong though.

Bye,

Sameer

[Former Member]

ticket should be in C:\usr\sap\saprouter

[Former Member]

Vamsee,

when u uncar the saprouter.car it should generate two files

1) saprouter.exe

2) niping.exe

chk it and then reply back.....

Rgds,

Vishal Ranadive

[Former Member]

Hi Vishal,

Thanks for your reply.

I am have uncared the following SAP Router file saprouter_9-10004305.sar

with the following option SAPCAR -XVF saprouter_9-10004305.sar

then it returned me that only one file extracted i.e is saprouter.exe.

I have checked the file size it is 386 KB only in both the places that is

in market place and on my disk.My OS is 64 bit windows.

Regards,

Vamshi.

[Former Member]

then its ok i think.... go ahead with coping files in usr/sap/saprouter and try with crypto and all... I think it should work....

and also tell me if u get use of LOP, becoz still i dont understand the use of LOP!!!

[ChrisGela]

Hi,

Have you read the documentation?

Try this: <a href="http://help.sap.com/saphelp_nw70/helpdata/en/4f/992d91446d11d189700000e8322d00/frameset.htm">Installing SAProuter</a>

Kind Regards,

chris