Access SAP through SAPRouter from outside of Network

Hello All,
As my SAPRouter cerificate got expired  i genrated new certificate & import same into SAProuter. And this time my router is working fine.
But this time i want to access from outside of network so added this entries in my SAProutab as follow:
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Public ip>
P <Public ip> 194.39.131.34 3299
P <my router ip> 194.39.131.34 3299
P 172.16.. 194.39.131.34 3299
P 194.39.131.34 172.16..
P 194.39.131.34 <Public ip> 3299
S * <my SAP ip> 3200
P <Public ip> <my SAP ip> 3200
Note:
SAP System No: 00
DEV_Rout
trc file: "dev_rout", trc level: 1, release: "700"
Thu Sep 30 11:38:25 2010
SAP Network Interface Router, Version 38.10
command line arg 0: F:\usr\sap\saprouter\saprouter.exe
command line arg 1: -r
command line arg 2: -W
command line arg 3: 60000
command line arg 4: -R
command line arg 5: F:\usr\sap\saprouter\saprouttab
command line arg 6: -K
command line arg 7: p:CN=<HOSTNAME>,OU=0000*****,OU=SAProuter,O=SAP,C=DE
SncInit(): Initializing Secure Network Communication (SNC)
PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 16/64/64)
SncInit(): Trying environment variable SNC_LIB as a
gssapi library name: "F:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll".
File "F:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
main: pid = 2028, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: 'F:\usr\sap\saprouter\saprouttab'
I am not able to access my sap from outside of network.
SAP Router String: /H/<PUBLIC IP>/S/3299/H
Any idea. Thnaks in advance
Regards.

Hi,
Hope you have private external IP than dynamic which changes every now and then you can this:
P <Public ip> * 3299 or P <Public ip> SID_IP 3299
Also look for your the logs for saprouter and your router logs if this not works.
Regards;

Similar Messages

  • With Mountain Lion Server, can users access the Messages Server from outside your network?

    I would like to setup a new messaging service between my employees because we have issues with most online services. I'm thinking of getting a Mac Mini Server, so I can run Messages Server, but I have an employee outside my network. Can they login to the server remotely to use the Messages Server?
    Thanks

    If you're talking about setting up and using the Jabber messaging service provided by OS X server then yes, it's really easy to set up and use in and out of the office. The only trick it is, and also most other services, is a correct DNS setup so you're able to connect and use the server from the "outside".
    I use this myself (via Lion server rather than Moutain Lion server) from behind a dynamic IP addressed ADSL line and have no problems whatsoever.

  • Open Directory access from outside of network / internet

    Hello all,
    Got a question I'd love to get some help on, I have some users who are outside of my network and I'd like them to connect into the open directory on our leopard server so they can use the Shared iCal calendars, addresses, etc.
    So my questions are A) Is it possible to connect in from outside the network and get access to the directory without having to have a seperate user account and use our VPN every time you want to connect? - if not is this the only way to do it (would you have to connect via the Mac VPN and then connect to the directory?)
    B) is it possible to do this "seamlessly" so that you don't have to change any settings, login details each time you switch between your local user from outside the network and your directory access. (so basically if you are in iCal if you have internet access it will connect you to the directory, without you doing anything extra?)
    Hope that makes sense, I can't seem to find the answers I need in the manuals, if I knew how this was meant to work I could probably have a fair go at figuring out how to actually do it (firewall changes etc)
    Thanks in advance for the help
    Martin

    So my questions are A) Is it possible to connect in from outside the network and get access to the directory without having to have a seperate user account and use our VPN every time you want to connect? - if not is this the only way to do it (would you have to connect via the Mac VPN and then connect to the directory?)
    If your OD server is visible from the internet -- i.e., it has a public address -- then you can do this without the VPN. However, it's not advisable to have a server exposed in that fashion.
    You would be better off doing this through the VPN:
    - Remote user connects to internet at hotel, for example.
    - Remote user initiates VPN connection.
    - Remote user now has access to iCal server and directory information.
    Explain to the users that this information is private to the company, and private company resources are only available through the VPN. Allowing access without the VPN would be similar to the company posting its Employee roster and meeting calendars on the face of the building where any person (or competitor) could see them.
    B) is it possible to do this "seamlessly" so that you don't have to change any settings, login details each time you switch between your local user from outside the network and your directory access. (so basically if you are in iCal if you have internet access it will connect you to the directory, without you doing anything extra?)
    It's just one extra step: Connect to VPN. You're still the same local user on the computer.
    If you're talking about laptop users needing directory access to authenticate when logging into their computers, well...That sounds like a whole other situation.
    Hopefully this helps.
    Bryan Vines

  • Blocking access to file sharing (AFP/SMB) from outside of network

    Hello all,
    Is there a way to block access to file shares from outside of our LAN? I have a machine that has some sharing turned on (it is also my email server) and I can reach it across the internet and mount shares as if I was in the office.
    How can I block this access? Both SMB and AFP?
    Thank you,
    -John

    Justin, thank you for your reply. The machine is on a public ip address and is not behind a NAT router. I've turned on the software firewall and that is working now. However, I imagine it would be better to use a hardware firewall. Any suggestions on a good one? Thank you.

  • Do I need a domain name in order to connect to my Mini Server 10.8.2 from outside my network?

    I am working on setting up my mac mini server. Aside from in home file sharing I want ot be able to connect to some files remotely and even upload files, say pictures from my camera, to my server from outside my network. I am only looking to have maybe 2 users that have access. Should I get a domain name from a place like GoDaddy? in order to set up server to use domain in initial setup? I have 2 Drobos connected with my music, videos and pictures and I wat to access them from an Android, Windows and iPod device when away from home. Any how-tos out there or good step by step guides?
    Thanks for any information.
    -Peace
    -Dave

    A normal address like www.domain.com is intended to work with static IP addresses, DynDNS is a service specifically intended for dynamic addresses and it will therefore automatically update the address e.g. name.dyndns.org to match the dynamic IP address each time it changes.
    Some home broadband routers have built-in support to act as a DynDNS client but if yours does not then you can run the DynDNS software on your Mac server. This will then tell the DynDNS servers what your current dynamic IP address is so they can map it to your host name.
    The result will be that your users can use a name like yourname.dyndns.org to access your server and not have to worry about the fact your IP address may change.
    You would still need to run a VPN server to allow your remote users to connect to your network but OS X Server can do this. You could also run a website but depending on your needs that might be better done by using a web hosting service.

  • How to access Oracle Enterpise Manager from outside my VM

    Hi,
    I've Oracle VM VirtualBox version 4.1.2 installed on the host Windows XP and pre-built Database App Development VM (Updated Nov. 2011) worked on it.
    Everything is OK, I have NAT network and can run Enterprise manager inside my VM on URL https://127.0.0.1:1158/em
    Pleas, describe shortly:
    1.How I can access enterpise manager from outside VM ?
    2.What I have to write (HOST, PORT etc) in my tnsnames.ora file on the host system for the VM Oracle server to connect it from the host system ?
    Sincerely,
    Alex
    Edited by: AlexR on Dec 31, 2011 5:24 PM

    Hi Alex,
    the host and port depends on your network setup of your VM.
    Do an ifconfig -a and see what IP adress your guest has.
    With this IP address you should be able to access EM from outside your VM (but on the VM host, not from outside the network) with the same port.
    Regards
    Sebastian

  • I have connected an AirPlay enabled device to iphone4s. I started palying songs. I was able to access internet through 3G from iphone.After few seconds 3G symbol disappears and WiFi symbol appears. After that I'm not able to access internet. Why is it so?

    I have connected an AirPlay enabled device to iphone4s. I started palying songs. I was able to access internet through 3G from iphone.After few seconds 3G symbol disappears and WiFi symbol appears. After that I'm not able to access internet. Why is it so?

    SMS. Deggie, had them check that.  After a lengthy discussion with Senior Tech advisor, it appears it is iMessage/Face Time server (they are the same) issue, which will strong arm those into purchasing Data if they use iMessage over multiple devices, as the server registers the phone number associated with apple ID.  Not impressed. I put what I've learned here in a simliar thread
    https://discussions.apple.com/message/17416082#17416082
    and this is what I've put in apple.com/feedback
    "iMessage requires internet.  SMS does not.  iMessage/FaceTime auto logs phone numbers to the iMessage/Facetime  server (it's the same server as I've come to learn), this means that when iMessage/Face Time is turned on anyone sending a message through the server to me will only be sent as an iMessage- not when I'm not connected to internet, meaning I will not receive the message as an SMS by default, when I have another device using iMessage (such as MacBook) logged in.
    This feature is a problem for me, bottom line, in that iMessage strong arms the consumer (me) into having to buy a data plan that they either do not want, or do not need."

  • Unable to access hosts from outside local network

    I have set up a few different name-based virtual hosts for a small client. DNS is set up correctly; sites can be accessed internally; everything is working OK.
    However, none of the virtual hosts can be accessed from outside their internal network. I know for a fact that DNS is set up correctly as dig tells me so. Firewall port 80 is open and everything (mail, vpn, etc.) else is working fine.
    I've looked over the httpd config files many times and just can't seem to find anything wrong. Any suggestions on where to look for problems?
    Xserve   Mac OS X (10.4.5)  

    What if you swap out your Apache config for a moment with the default one? Do you have reason to think that it's something in your name-based virtual host settings?
    Can you access a web site from the outside if you only have the default config on there, accessing it maybe via IP address?
    If so, we'll probably need to know more about your virtual host setup in order to troubleshoot this any further, considering you have other services running and accessible on the machine.
    Are you getting any errors? What happens when you try to reach one of the websites? Have you looked at your error log for any of the sites?

  • Accessing Release Strategy defintion from outside SAP

    Hi !
    I'm trying to integrate SAP MM with other 3rd party application. We want to access and read SAP's release strategy definitions and also document classes, to avoid having to maintain that information from the 3rd party too.
    Is there any standard approach to access this info ? a BAPI maybe ? or do we have to access the data tables from a custom made RFC that reads specific tables ?
    Thanks.
    Regards,
    Matias

    Hi Rajoo,
    As per I know, in standard sap, you can achieve this requirement.
    Just make sure you have the characteristic for Total net value (CEKKO-GNETW) , and maintain the currency to USD. As long as you have USD to INR conversion in OB08, the system will able to fetch the correct release strategy for the PO based on the amount you set in the Release strategy.
    Regards,
    w1n

  • SMB not working from outside local network

    Hello,
    On my old MacBook I installed OS X Server to create a file sharing server.  I set it up using my public IP address so that I could access my files from outside the local network.  I don't have an Apple router, but I found the port number for SMB and AFP and did the port forwarding.  My issue is that smb stopped working.  It used to work out side the network because it tested it.  My Mac can still connect though outside the local network using my public IP.  I have no clue why SMB is not working as it was working recently.  My only idea is that I got a new modem from my ISP.  Could that make a difference?  I don't get it because AFP still works fine.  File sharing using SMB is checked in the server app and file sharing preferences so it is not that.  I am using OS X 10.8.4 on a MacBook running OS X Server version 2.2.1.  Any help would be appreciated. 
    Thanks,
    Michael

    Is it a modem only, or is it a modem/router that might be creating a double-NAT on your network?
    Incidentally, since you're running Server, you might want to use the built-in VPN gateway to give yourself better security - tunneling AFP/SMB through a router/firewall is pretty insecure.
    Matt

  • How do I set up a static IP on Airport Express so I can activate the Connet my Mac App from outside my network?

    How do I set up a static IP on Airport Express so I can activate and use the Connect My Mac app from outside my home network?

    You will need to enable file sharing in System Preferences
    as well as setting up sharing and permissions for the
    directories that you want shared.  You may also want to
    setup a non-administrative user or allow limited guest
    access.  The user would require entering a user name and
    password to make the connection, but would allow remotes
    to change files, if set up tat way.
    As for serving iTunes media, better to post in the iTunes forum.

  • Cannot remote into server from outside the network

    I have two laptops that all I want is to have them able to VPN to my server.  When the laptops are on my network, they are able to network in and see the server.   But when I go to Starbucks or McD's, I can connect to their network but I cannot VPN into my server.  I am getting a message that LT2?? - VPN, of course I cannot remember exactly what the message said but, it does not work.  I have changed the ports on the time capsule to 80, 1723 and something that is 4500.  As you can tell I am NO expert but would like to understand what I am doing wrong.
    I have CenturyLink and a time capsule that I have to pass through just to get to the server.  What else am I missing?

    Good advice from ebrind
    I'll add to it:
    - what IP address does your time capsule have?
         If your CenturyLink provides NAT and your Time Capsule is also setup for NAT, you will need to reconfigure either the TC or the CenturyLink to bridge mode and set the port forwarding in the device providing NAT.
    - do you see any activity in the VPN Log?
    - Your VPN server address which you set in your laptop should be the public address of your network, not the LAN address
    - If you do make a successful VPN connection, don't expect to see the server like you do when you are on the LAN. If the LAN address of your server is 10.1.10.2, you'll need to connect to:   afp://10.1.10.2  (after a successful VPN connection)
    - Lastly, do you need VPN? If you just need access to your files from the server, you can do this without VPN. Depending on your security requirements, you can simply map port 548 and access with:  afp://[public-ip]   or use webdav with SSL.

  • How can I access my Call Handlers from outside line (outside district)

    CISCO VoIP System Info:
    Cisco Unity Connection version: 8.6.2ES25.21900-25
    CM Admin System version: 8.6.2.21900-5 on C200M2 Servers
    Our engineer setup our Call Handlers so that in our to change the recordings on them, you diall 7800 from a phone inside the office, or as he put it in the procedures, from within the district.  Once you dial, you need to enter the user code, password, then the extension of the Call Handler, and we have no problems recording/changing any Call Handlers.  However, due to possible inclement weather approaching in the next few weeks, I was asked how we cna change them from an outside line (manager's home, etc.).  We cannot access from an outside line.  7800 is not a DID, it is simply the extension he assigned to access the call handlers.  I even went so far as to setup a dummy phone and forward it to 7800, but this does not work either.  It forwards to the extension's voicemail.  Is there a way we can access the Call Handlers from an outside line?  Any help would be gretaly appreciated.  Thank you in advance.

    Hey Joseph,
    Go Flames ....errrrrrrrrrrrrrrrrrr maybe not so much
    What you are trying to get to is really just the Greetings Administrator
    conversation and there are multiple ways to get there.
    For example, you can set up a Caller Input off any mailbox (Press 1-9) let's say 7 to
    go to Conversation> Greetings Administrator. So you could set this on the managers mailbox
    and when he calls his own number from home once his greeting
    kicks in he can press 7 to link to the Greetings Administrator conversation
    or
    You could set up a DID DN xxx-xxx-2345 as a CTI-RP and set Call Forward All to reach Unity Connection.
    In this case you will need to use the Forwarded Routing Rules = xxx-xxx-2345 route to
    Greetings Administrator. Make sure to move this rule to the bottom of the list!!
    Cheers!
    Rob
    "Why do the best things always disappear " 
    - The Band

  • Remote access VPN to server from outside and server reach internet on the same time

    Dear,
    I have problem in my ASA 5515-X , when i make Remote access VPN to servers in inside zone the internet connection disconnected in the servers, or when i have internet in servers, the remote access cant reach servers.
    the configuration for server as static NAT for each server, and the connection of VPN is to another public IP but in the same subnet of NAT ip.
    server1 : 10.10.10.2 nat to 5.6.7.8
    server2: 10.10.10.3 nat to 5.6.7.9
    server3: 10.10.10.4 nat to 5.6.7.10
    VPN connection to 5.6.7.12
    is there any solution for this senario, remote vpn to servers and the same time the servers have internet readability for download updates .. etc

    Hi,
    So it seems that the problem is with lacking a NAT0 configuration
    You could modify the below configuration to match your networks/IP addresses used. In the below configuration I presume that you have interfaces "inside" and "outside".
    object network SERVER-NETWORK
     subnet <server network address> <network mask>
    object network VPN-POOL
     subnet <vpn pool network address> <network mask>
    nat (inside,outside) 1 source static SERVER-NETWORK SERVER-NETWORK destination static VPN-POOL VPN-POOL
    Just insert the correct address related information and change the "object" and interface names if required.
    This configuration will tell the ASA that no NAT will be performed for traffic between the VPN-POOL and SERVER-NETWORK. The NAT configuration is bidirectional. With this configuration the Static NAT configurations will continue to work for the servers Internet traffic and this NAT0 configuration will be applied only to the VPN Client traffic.
    Hope this helps :)
    - Jouni

  • Can't access iPhoto 09 library from outside iPhoto

    Since upgrading to iLife 09 I can't access my iPhoto library from anywhere BUT iPhoto. I use Photoshop CS2 and open my photos directly from that application. But now when the directory actually appears, it is greyed-out and inaccessible.

    Yes you can do this
    In Finder you can right click the iPhoto library and choose 'show package contents'.
    but you shouldn't.
    With iPhoto 7 (iLife 08) the old iPhoto Library Folder is now a Package File. This is simply a folder that looks like a file in the Finder. The change was made to the format of the iPhoto library because many users were inadvertently corrupting their library by browsing through it with other software or making changes in it themselves.
    There are many, many ways to access your files in iPhoto:
    *For Users of 10.5 and later*
    You can use any Open / Attach / Browse dialogue. On the left there's a Media heading, your pics can be accessed there. Command-Click for selecting multiple pics.
    Uploaded with plasq's Skitch!
    (Note the above illustration is not a Finder Window. It's the dialogue you get when you go File -> Open)
    You can access the Library from the New Message Window in Mail:
    Uploaded with plasq's Skitch!
    *For users of 10.4 and later* ...
    Many internet sites such as Flickr and SmugMug have plug-ins for accessing the iPhoto Library. If the site you want to use doesn’t then some, one or any of these will also work:
    To upload to a site that does not have an iPhoto Export Plug-in the recommended way is to Select the Pic in the iPhoto Window and go File -> Export and export the pic to the desktop, then upload from there. After the upload you can trash the pic on the desktop. It's only a copy and your original is safe in iPhoto.
    This is also true for emailing with Web-based services. However, if you're using Gmail you can use iPhoto2GMail
    If you use Apple's Mail, Entourage, AOL or Eudora you can email from within iPhoto.
    If you use a Cocoa-based Browser such as Safari, you can drag the pics from the iPhoto Window to the Attach window in the browser.
    *If you want to access the files with iPhoto not running*:
    For users of 10.6 and later:
    You can download a free Services component from MacOSXAutomation which will give you access to the iPhoto Library from your Services Menu. Using the Services Preference Pane you can even create a keyboard shortcut for it.
    For Users of 10.4 and later:
    Create a Media Browser using Automator (takes about 10 seconds) or use this free utility Karelia iMedia Browser
    Other options include:
    1. *Drag and Drop*: Drag a photo from the iPhoto Window to the desktop, there iPhoto will make a full-sized copy of the pic.
    2. *File -> Export*: Select the files in the iPhoto Window and go File -> Export. The dialogue will give you various options, including altering the format, naming the files and changing the size. Again, producing a copy.
    3. *Show File*: Right- (or Control-) Click on a pic and in the resulting dialogue choose 'Show File'. A Finder window will pop open with the file already selected.
    You can set Photoshop (or any image editor) as an external editor in iPhoto. (Preferences -> General -> Edit Photo: Choose from the Drop Down Menu.) This way, when you double click a pic to edit in iPhoto it will open automatically in Photoshop or your Image Editor, and when you save it it's sent back to iPhoto automatically. This is the only way that edits made in another application will be displayed in iPhoto.
    All of these are a: faster and b: safer than rooting around in the folders of the Library package
    Regards
    TD

Maybe you are looking for