SAPROUTER

[former_member657020]

Here iam trying to configure SAPROUTER.I have done all the steps and just when trying to start saprouter,it is giving me an error:

no logging active.

error : invalid lines in ' saproutab' see dev_rout.

my dev_rout is :

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Fri Jul 04 18:52:18 2008

SAP Network Interface Router, Version 38.10

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -S

command line arg 3: 3299

command line arg 4: -K

command line arg 5: p:CN=kancorRouter.KFE, OU=0000894211, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "C:/saprouter/ntintel/sapcrypto.dll".

File "C:/saprouter/ntintel/sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 904, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

Fri Jul 04 18:52:20 2008

***LOG Q0I=> NiPGetHostByName: hostname '<IP-address>' not found: gethostbyname [ninti.c 320]

NiHsLGetNodeAddr: to get '<IP-address>' failed in 2239ms (tl=2000ms)

• ERROR => host <IP-address> unknown, skip line 3 [nirout.cpp 8569]

• ERROR => host <IP-address> unknown, skip line 5 [nirout.cpp 8569]

• ERROR => host <IP-address> unknown, skip line 7 [nirout.cpp 8569]

• ERROR => host <IP-address> unknown, skip line 9 [nirout.cpp 8569]

Iam trying to start my saprouter with command :

saprouter -r -S 3299 u2013K "p:CN=JPL50020586, OU=0000036946 OU=SAProuter, O=SAP, C=DE"

Can some one provide me their valuable suggestions.

Thanks in advance.

[Former Member]

It seems that your command line argument to the SAPRouter is wrong:

command line arg 5: CN=kancorRouter.KFE, OU=0000894211, OU=SAProuter, O=SAP, C=DE

You must always use the p: prefix before SNC names as you did in in your first message. So it should be

saprouter .... -K "p:CN=kancorRouter.KFE, OU=0000894211, OU=SAProuter, O=SAP, C=DE" ....

Best regards,

Tobias Waldvogel

Edited by: Tobias Waldvogel on Jul 10, 2008 11:16 AM

[former_member657020]

Iam using the command

saprouter -r -S 3299 u2013K "p:CN=JPL50020586, OU=0000036946 OU=SAProuter, O=SAP, C=DE".

I do not think there is problem with the command. I think there is some prblem with saprouttab file.can you provide me some sample accurate saprouttab file. This isse is really urgent. Kindly co-operate.

[Former Member]

Hi,

The problem is Host name or IP address for your saprouter, Make sure correct it.

u2022 Internet connection: recommended minimum bandwidth = 64 kbps

u2022 SAProuter machine

u2022 Official IP address (static) for the SAProuter host.

u2022 SAProuter installation package

u2022 SAP SNC libraries and executables.

These may be downloaded from the SAP Service Marketplace.

u2022 A Demilitarized Zone at the customer site with a minimal setup as described in the networking section of the SAP Security Guide, Parts 1-3 available in the Service Marketplace at: http://service.sap.com/SYSTEMMANAGEMENT Choose: Security > Technical Track

> SAP Security Guide.

More information on SNC connections is also available in the SAP Service Marketplace.

u2022 Since the host running the SAProuter software is a full computer with operating system, the security at the operating system level must be hardened in order to minimise the risk of the machine being hacked from the Internet. One recommendation will be for example to run a C2 security level compliant operating system. SAP takes no liability if the security of the companyu2019s network is compromised.

Regards,

Srini Nookala

[former_member657020]

i tried starting saprouter by changing the saprouttab . My saprouttab is :

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

1. SNC-connection from SAP to local system for R/3 Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <public i.p> 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <public i.p> 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <private i.p> 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <private i.p> 3389

1. SNC-connection from SAP to local system for pcAnywhere, if applicable

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <IP-address> 5631

1. SNC-connection from SAP to local system for SAPtelnet, if applicable

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <IP-address> 23

1. SNC-connection from SAP to local system for WTS, if applicable

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <IP-address> 3389

1. Access from local network to SAP

P * 194.39.131.34 3299

1. All other connections will be denied

D * * *

But now it is giving a new error dev_rout file saying :

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Sat Jul 05 11:00:21 2008

SAP Network Interface Router, Version 38.10

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -S

command line arg 3: 3299

command line arg 4: -K

command line arg 5: CN=kancorRouter.KFE, OU=0000894211, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "C:/saprouter/ntintel/sapcrypto.dll".

File "C:/saprouter/ntintel/sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

• ERROR => SncPSetNewName()==SNCERR_BAD_NT_PREFIX [sncxxall.c 2200]

SncPImportPrName() parsing error

name="CN=kancorRouter.KFE, OU=0000894211, OU=SAProuter, O=SAP, C=DE"

<<- SncSetMyName()==SNCERR_BAD_NT_PREFIX

in: myname = "CN=kancorRouter.KFE, OU=0000894211, OU=SAProuter, O=SAP, C=DE"

• ERROR => NiSncInit: SncSetMyNameU failed (rc=-35;'CN=kancorRouter.KFE, OU=0000894211, OU=SAProuter, O=SAP, C=DE') [nisnc.c 663]

• ERROR => main: NiSncInit failed (rc=-17) [nirout.cpp 1219]

*****************************************************************************

*

• ERROR SNC processing failed:

• SncSetMyNameU

*

• TIME Sat Jul 05 11:00:21 2008

• RELEASE 700

• COMPONENT NI (network interface)

• VERSION 38

• RC -17

• MODULE nisnc.c

• LINE 661

• DETAIL NiSncInit: sncrc=-35

• COUNTER 3

*

*****************************************************************************

Can someone give their valuable suggestions. can some one tell me where iam missing. Instant reply is really appreciable.

Thank you.