saprouter connection failed.

[Former Member]

Dear All,

I have configured the saprouter with SNC on solution manager.

on our solution manager server we have used on network card and done NATING ,

so we have two ip address assigned on one card, one is public and other is local.

from solman i can ping to sapserver 194.39.xx.xx ,

through internet i can login to solman server using saprouter string. which works absolutely fine.

Now the problem is when i execute the Tcode OSS1, i am getting the error message.

" sapserv2a router permission denied (212.93.XX.XX to oss001,sapdp01) "

the strange thing for me is that i have defined local ip which is 10.128.XX.XX in Tcode OSS1 parameter setting. but the error shows the public ip 212.93.xx.xx.

please suggest your inputs.

=============================

dev_rout file

=============================

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Sun Jan 27 08:58:47 2008

SAP Network Interface Router, Version 38.0

command line arg 0: saprouter

command line arg 1: -r

main: pid = 5676, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

• ERROR => SNC field without SNC active, skip line 2 [nirout.cpp 7739]

• ERROR => SNC field without SNC active, skip line 8 [nirout.cpp 7739]

Sun Jan 27 08:59:07 2008

• ERROR => NiBufIProcMsg: hdl 2 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

Sun Jan 27 08:59:09 2008

• ERROR => NiBufIProcMsg: hdl 2 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

-

---

Regards,

SM

[Former Member]

Dear SharkMachine

I got this same error as yours:

ERROR => NiBufIProcMsg: hdl 2 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

Could you please tell me how you resolve this issue? If convenient please keep me notice at this thread

Thanks,

Effan

[Former Member]

Hi

One quick question

1)Where Did you configure NATTING i.e Is it hardware or sofware based ?

Basically,You need to check the privilage of the user through which you are running the service,check the all entries in that file are okay?

We faced similar issue and it resolved after checking the service file.

Regards

Sukrut S

Edited by: sukrut sardeshpande on Feb 2, 2008 6:16 AM

[Former Member]

Can you give me some details on how this was solved... ??

[Former Member]

we "solved" this by going from the VPN solution to the SNC solution of the SapRouter

HTH

[Former Member]

Hi

Please clear the following points

1. Do u have public ip configured on NIC or Router using port routing

2. Do u have 2 NIC on the system

3. Please let me forward the public ip and local ip to the any of your servers to my email id n.rameshkarthik@gmail.com

With regards

N.Rameshkarthik

[Former Member]

Hi

we have a similar problem

We have the scenario:

LAN <> SAPROUTER (in DMZ with internal IP) <-> Firewall (external IP) <---> SAPROuter from SAP

The external IP is routed from the FW to the SAPRouter in the DMZ.

The strange thing is I can telnet to port 3299 from the Internet to our external-SAP Router IP but I cant connect with the SAP Service Connector to one of the SAPSERVx at SAP.

When I telnet to the "external-IP":3299 from the Internet I do reach the SAPRouter in the DMZ.

I am getting:

• ERROR file opened at 20080201 144635 Romance Standard Time, SAP-REL 710,0,81 RFC-VER 3 944123 MT-SL

T:3992 Error in program 'SAPServiceConnector': ======> SAP_CMINIT3 : rc=20 > Connect to SAP gateway failed

Connect_PM DEST=o01, GWHOST=/H/external-IP/S/3299/H/147.204.2.5/S/3299/H/oss001.wdf.sap-ag.de/S/3301, GWSERV=sapgw01, SYSNR=01

LOCATION CPIC (TCP/IP) on local host

ERROR partner 'external-IP:3299' not reached

TIME Fri Feb 01 14:46:35 2008

RELEASE 710

COMPONENT NI (network interface)

VERSION 39

RC -10

MODULE nixxi.cpp

LINE 3133

DETAIL NiPConnect2: external-IP:3299

SYSTEM CALL connect

ERRNO 10060

ERRNO TEXT WSAETIMEDOUT: Connection timed out

COUNTER 1

Should I expect this behaviour that I cant connect to sapservx from my SAPROUTER?!

Thanks

regards

Nesimi

Edited by: Nesimi Buelbuel on Feb 1, 2008 3:04 PM