cancel
Showing results for 
Search instead for 
Did you mean: 

SAP router IP

Former Member
0 Kudos

Hi Guys,

I just installing and configured the saprouter in our system, when I'd registered the server SID in OSS, they gave me this IP which is not our internal or external IP.What's this IP for actually? Do I need to put it in my saprouttab coz right now I open the connection from OSS (Host did not respond X times).

TQ

Accepted Solutions (0)

Answers (3)

Answers (3)

Former Member
0 Kudos

Hi,

I just configured my saprouter and everything went okay, even the OSS1 is working but when i open the connection in the OSS (service.sap.com), the connection is open for about 8 minutes but then its lost connection (yellow).Was there something missing here? I already put the outbound connection (KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *) and our server (KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <my SAP router> *) in my saprouttab. Here the recent log from devrout :

-


trc file: "dev_rout", trc level: 3, release: "700"

-


Tue Jan 15 11:33:53 2008

NiHsLInit: alloc host/serv bufs (200/200 entries)

NiIInit: allocated nitab (811 at 00280048)

NiIInit: host/serv bufs already initialized

NiPGetNodeAddrList: got 1 interface(s) from operating system

[0] IP-Address: 192.168.1.220

NiIGetServNo: servicename '3299' = port 0C.E3/3299

SAP Network Interface Router, Version 38.10

Compiled Sep 27 2007 01:16:41

command line arg 0: d:\usr\sap\saprouter\saprouter.exe

command line arg 1: -r

command line arg 2: -R

command line arg 3: d:\usr\sap\saprouter\saprouttab

command line arg 4: -S

command line arg 5: 3299

command line arg 6: -K

command line arg 7: p:CN=vantage01, OU=0000336743, OU=SAProuter, O=SAP, C=DE

command line arg 8: -V3

service : 3299

routtab : d:\usr\sap\saprouter\saprouttab

plug-in : no plug-in

-argument: 'no argument'

clients : 800

max servers : 1

quelength : 1

maxheap : 20000000

timeoutL : 5000

tracefile : dev_rout

logfile : no logging active

portrange : no portrange active

local address : default address

->> SncInit(prg=0, ini_fname=(NULL), &sec_avail=01D1FF1B)

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll".

load shared library (D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll), hdl 0

using "D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll"

DlLoadFunc: GetProcAddress(sapsnc_init_adapter) Error 127

Error 127 = "The specified procedure could not be found."

load shared func (gss_acquire_cred) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_release_cred) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_init_sec_context) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_accept_sec_context) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_process_context_token) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_delete_sec_context) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_context_time) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_get_mic) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_verify_mic) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_wrap) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_unwrap) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_display_status) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_indicate_mechs) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_compare_name) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_display_name) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_import_name) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_release_name) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_release_buffer) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_release_oid_set) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_inquire_cred) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_add_cred) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_inquire_cred_by_mech) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_inquire_context) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_wrap_size_limit) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_export_sec_context) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_import_sec_context) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_create_empty_oid_set) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_add_oid_set_member) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_test_oid_set_member) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_inquire_names_for_mech) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_inquire_mechs_for_name) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_canonicalize_name) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_export_name) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

load shared func (gss_duplicate_name) from D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll

File "D:\usr\sap\PD1\SYS\exe\nuc\NTI386\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

<<- SncPDLInit()==SAP_O_K

<<- SncInit()==SAP_O_K

sec_avail = "true"

->> SncSetMyName(snc_hdl=00000000, myname="p:CN=vantage01, OU=0000336743, OU=SAProuter, O=SAP, C=DE")

<<- SncSetMyName()==SAP_O_K

in: myname = "p:CN=vantage01, OU=0000336743, OU=SAProuter, O=SAP, C=DE"

NiBufISetParam: set max heap to 20000000

NiSetParamEx: switch NIP_CONNLOCAL off (not supported by platform)

NiIMyHostName: hostname = 'vantage01'

main: pid = 5072, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

NiICreateHandle: hdl 0 state NI_INITIAL

NiIInitSocket: set default settings for new hdl 0 / sock 180 (I4; ST)

NiITraceByteOrder: CPU byte order: little endian, reverse network, low val .. high val

NiIBind: hdl 0 bound to 3299 (IP only)

NiIBlockMode: set blockmode for hdl 0 FALSE

NiIListen: state of hdl 0 NI_LISTEN

NiIListen: listen for client requests on hdl 0

NiSelICreateSet: new set0

SiSelNInit: allocate 134544 bytes for FI (811)

NiSelIInit: size of set0 is 811

SiSelNSet: sock 180 added to set pos 0

NiSelIAddMsg: added hdl 0 to set0

SiSelNSet: set events of sock 180 to: rp-

reading routtab: 'd:\usr\sap\saprouter\saprouttab'

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0023F9E8, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

NiStrToAddrMask: '194.39.131.34' -> 194.39.131.34 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0023F9E8, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

NiStrToAddrMask: '210.19.199.62' -> 210.19.199.62 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0023F9E8, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

NiStrToAddrMask: '210.19.199.62' -> 210.19.199.62 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

NiIGetServNo: servicename '3200' = port 0C.80/3200

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0023F9E8, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

NiStrToAddrMask: '210.19.199.62' -> 210.19.199.62 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

NiIGetServNo: servicename '3299' = port 0C.E3/3299

<<- SncNameToAclKey_r()==SAP_O_K

in: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

'aclkey ' (addr=0023F9E8, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

NiStrToAddrMask: '210.19.199.62' -> 210.19.199.62 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

NiIGetServNo: servicename '3201' = port 0C.81/3201

NiStrToAddrMask: '194.39.131.34' -> 194.39.131.34 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]

NiIGetServNo: servicename '3299' = port 0C.E3/3299

contents of routtab ('d:\usr\sap\saprouter\saprouttab', 7 entries):

KT,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002DD8E0, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 194.39.131.34 ffff:ffff:ffff: * *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002DDD48, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 210.19.199.62 ffff:ffff:ffff: * *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002DE1B0, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 210.19.199.62 ffff:ffff:ffff: 3200 *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002DE618, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 210.19.199.62 ffff:ffff:ffff: 3299 *

KP,<<- SncAclKeyToName()==SAP_O_K

'aclkey ' (addr=002DEA80, len=86) full hexdump

0x00000 00030401 00080606 2b240301 25010000 ........ +$..%...

0x00010 00443042 310b3009 06035504 06130244 .D0B1.0. ..U....D

0x00020 45310c30 0a060355 040a1303 53415031 E1.0...U ....SAP1

0x00030 12301006 0355040b 13095341 50726f75 .0...U.. ..SAProu

0x00040 74657231 11300f06 03550403 13087361 ter1.0.. .U....sa

0x00050 70736572 7632 pserv2

out: name = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"

p:CN=sapserv2, OU=SAProuter, O= 210.19.199.62 ffff:ffff:ffff: 3201 *

P, 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 194.39.131.34 ffff:ffff:ffff: 3299 *

D, 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 * *

              • NI-ROUTER LOOP ********

SiSelNSelect: start select (timeout=-1)

markus_doehr2
Active Contributor
0 Kudos

-

-


trc file: "dev_rout", trc level: 3, release: "700"

-

-


Tue Jan 15 11:33:53 2008

NiHsLInit: alloc host/serv bufs (200/200 entries)

NiIInit: allocated nitab (811 at 00280048)

NiIInit: host/serv bufs already initialized

NiPGetNodeAddrList: got 1 interface(s) from operating system

IP-Address: 192.168.1.220

NiIGetServNo: servicename '3299' = port 0C.E3/3299

Is the IP of the machine 192.168.1.220? If yes, then this won´t work. The network 192.168.* is a network, that is used internally and is not routed across the internet. The machine need to have an official external IP, that can be reached from the outside.

Markus

Former Member
0 Kudos

Hi,

the 192.168.* is our internal IP, but in the saprouttab I already put the IP that I received from SAP which also give me the same results.I also change it using hostname. No luck.

markus_doehr2
Active Contributor
0 Kudos

Your saprouter must be reachable from the outside world, this can´t and won´t work with an 192.168.* IP. The machines must listen on the external IP which you usually get from your internet provider.

Markus

Former Member
0 Kudos

Hello

Ok, but may a private IP address be translated into a public IP so as from the SAP point of view their destination is a globally-valid IP? I mean. Is there any restriction why a SAPRouter cannot be assigned a private IP address? Can a NAT, whether inside or outside an IPSec VPN, do the trick? With this feature anabled on the VPN concentrator we have IP reachability but I need to be sure that having IP visibility is all I need because some other issues arose which I think are application-layer related. Again, the SAP subnet can reach our SAPRouter through a VPN+NAT tunnel but no SAP connection can be established.

Is it possible?

SAPRouter rules miss configuration?

Thanks

Guido

Former Member
0 Kudos

Hi also use T-code OSS1 Parameter--->Technical settings

In that following screen you will idea of giving inputs (IP) provide by SAP.

Rahul

markus_doehr2
Active Contributor
0 Kudos

That is the saprouter at the SAP site. you will need to make sure both saprouters can reach each other.

Markus