Interface Routing

Im using 2 Presonus Firestudio Intefaces with Logic Express and want to route 8 outs of each interface to my mixing console for a total of at least 16 outs.
My problem is, i cant seem to route the tracks within Logic as single outs. Its either 1-2, 3-4, 5-6, etc.. I would like to route them as 1, 2, 3, etc..
Can this be done within Logic and if so, how?

Found it:
same-security-traffic
To permit communication between interfaces with equal security levels, or to allow traffic to enter and exit the same interface, use the same-security-traffic command in global configuration mode. To disable the same-security traffic, use the no form of this command.
same-security-traffic permit {inter-interface | intra-interface}
no same-security-traffic permit {inter-interface | intra-interface}
Syntax Description
inter-interface
Permits communication between different interfaces that have the same security level.
intra-interface
Permits communication in and out of the same interface.
Defaults
This command is disabled by default.
Command Modes
The following table shows the modes in which you can enter the command:
Command Mode Firewall Mode Security Context
Routed Transparent Single Multiple
Context System
Global configuration
•
•
•
•
Command History
Release Modification
7.0(1)
This command was introduced.
7.2(1)
The intra-interface keyword now allows all traffic to enter and exit the same interface, and not just IPSec traffic

Similar Messages

  • [Solved] Default interface routing issues

    I have two network interfaces connected to my newly installed ArchLinux server,  one LAN and one WAN connection.  The trouble is that all traffic that is trying to connect to the wan interface gets no response, while the LAN connection work without any issue.
    I am using udev to change my interfaces to lan0 and wan0, and i use netcfg to load the diffrent profiles.
    Lan0 uses a static local ip 192.168.0.118  with 192.168.0.2 as gateway
    Wan0 uses dhcp  with dynamic ip from my ISP.
    When i manually bring down my lan0 interface all my traffic goes through wan0 correctly, and it even responds to external calls.
    So i belive the issue lies somewhere in the local routing?
    I am trying to post all config files needed directly.
    /etc/rc.conf
    # /etc/rc.conf - Main Configuration for Arch Linux
    # LOCALIZATION
    # LOCALE: available languages can be listed with the 'locale -a' command
    # LANG in /etc/locale.conf takes precedence
    # DAEMON_LOCALE: If set to 'yes', use $LOCALE as the locale during daemon
    # startup and during the boot process. If set to 'no', the C locale is used.
    # HARDWARECLOCK: set to "", "UTC" or "localtime", any other value will result
    # in the hardware clock being left untouched (useful for virtualization)
    # Note: Using "localtime" is discouraged, using "" makes hwclock fall back
    # to the value in /var/lib/hwclock/adjfile
    # TIMEZONE: timezones are found in /usr/share/zoneinfo
    # Note: if unset, the value in /etc/localtime is used unchanged
    # KEYMAP: keymaps are found in /usr/share/kbd/keymaps
    # CONSOLEFONT: found in /usr/share/kbd/consolefonts (only needed for non-US)
    # CONSOLEMAP: found in /usr/share/kbd/consoletrans
    # USECOLOR: use ANSI color sequences in startup messages
    LOCALE="sv_SE.UTF-8"
    DAEMON_LOCALE="no"
    HARDWARECLOCK="UTC"
    TIMEZONE="Europe/Stockholm"
    KEYMAP="sv-latin1"
    CONSOLEFONT=
    CONSOLEMAP=
    USECOLOR="yes"
    # HARDWARE
    # MODULES: Modules to load at boot-up. Blacklisting is no longer supported.
    # Replace every !module by an entry as on the following line in a file in
    # /etc/modprobe.d:
    # blacklist module
    # See "man modprobe.conf" for details.
    MODULES=()
    # Udev settle timeout (default to 30)
    UDEV_TIMEOUT=30
    # Scan for FakeRAID (dmraid) Volumes at startup
    USEDMRAID="no"
    # Scan for BTRFS volumes at startup
    USEBTRFS="no"
    # Scan for LVM volume groups at startup, required if you use LVM
    USELVM="yes"
    # NETWORKING
    # HOSTNAME: Hostname of machine. Should also be put in /etc/hosts
    HOSTNAME="weed-devil"
    # Use 'ip addr' or 'ls /sys/class/net/' to see all available interfaces.
    # Wired network setup
    # - interface: name of device (required)
    # - address: IP address (leave blank for DHCP)
    # - netmask: subnet mask (ignored for DHCP) (optional, defaults to 255.255.255.0)
    # - broadcast: broadcast address (ignored for DHCP) (optional)
    # - gateway: default route (ignored for DHCP)
    # Static IP example
    # interface=eth0
    # address=192.168.0.2
    # netmask=255.255.255.0
    # broadcast=192.168.0.255
    # gateway=192.168.0.1
    # DHCP example
    # interface=eth0
    # address=
    # netmask=
    # gateway=
    #interface=eth0
    #address=
    #netmask=
    #broadcast=
    #gateway=
    # Setting this to "yes" will skip network shutdown.
    # This is required if your root device is on NFS.
    NETWORK_PERSIST="no"
    # Enable these netcfg profiles at boot-up. These are useful if you happen to
    # need more advanced network features than the simple network service
    # supports, such as multiple network configurations (ie, laptop users)
    # - set to 'menu' to present a menu during boot-up (dialog package required)
    # - prefix an entry with a ! to disable it
    # Network profiles are found in /etc/network.d
    # This requires the netcfg package
    NETWORKS=(sluggy local)
    # DAEMONS
    # Daemons to start at boot-up (in this order)
    # - prefix a daemon with a ! to disable it
    # - prefix a daemon with a @ to start it up in the background
    # If you are sure nothing else touches your hardware clock (such as ntpd or
    # a dual-boot), you might want to enable 'hwclock'. Note that this will only
    # make a difference if the hwclock program has been calibrated correctly.
    # If you use a network filesystem you should enable 'netfs'.
    DAEMONS=(syslog-ng !ufw !network net-profiles @alsa crond dbus sshd lircd sensors mysqld @ddclient @hddtemp httpd samba stunnel sabnzbd sickbeard)
    /etc/network.d/sluggy
    CONNECTION='ethernet'
    DESCRIPTION='A basic dhcp ethernet connection using iproute'
    INTERFACE='wan0'
    IP='dhcp'
    ## for DHCPv6
    #IP6='dhcp'
    ## for IPv6 autoconfiguration
    #IP6='stateless'
    /etc/network.d/local
    CONNECTION='ethernet'
    DESCRIPTION='A basic static ethernet connection using iproute'
    INTERFACE='lan0'
    IP='static'
    ADDR='192.168.0.118'
    GATEWAY='192.168.0.2'
    output of route -nl
    Destination Gateway Genmask Flags Metric Ref Use Iface
    0.0.0.0 192.168.0.2 0.0.0.0 UG 0 0 0 lan0
    0.0.0.0 85.24.137.1 0.0.0.0 UG 203 0 0 wan0
    85.24.137.0 0.0.0.0 255.255.255.0 U 203 0 0 wan0
    192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 lan0
    I have had this server running Ubuntu for the past 2 years with the same setup on the NIC's and there everything worked, so I guess i have become a little lazy.
    *EDIT* Updated my post with "code" block instead of quote
    Last edited by kurri (2011-11-01 22:07:14)

    kurri, please edit your post.
    When pasting code, please use [ code ] tags https://bbs.archlinux.org/help.php#bbcode
    like this
    It makes the code more readable and more convenient to scroll through.

  • Put same ip on 2 interfaces (router)

    Hello. I would like to configure my C2911 router with 2 C2960 switch. And is it possible to put same ip on 2 interfaces of C2911? One for active and another one or standby. Topology was attached. Is it possible?
    thankyou

    Yes you can!
    interface FastEthernet0/0
     ip address 10.10.10.1 255.255.255.0
     speed 100
     full-duplex
    interface FastEthernet0/1
     backup interface FastEthernet0/0
     ip address 10.10.10.1 255.255.255.0
     speed 100
     full-duplex
    Cheers!

  • Can not enter interface router.

    Cisco modem with Sitecom router and MacBook pro laptop and HP laptop
    IP router 192.168.0.1
    Can not enter interface and change SSID, code, etc. with the Apple mac.
    It works with the HP laptop.
    I just want the MAc to do that.
    What is there to be changed.

    Launch the Terminal application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, press the key combination shift-command-U. The application is in the folder that opens.
    ☞ If you’re running Mac OS X 10.7 or later, open LaunchPad. Click Utilities, then Terminal in the page that opens.
    Drag or copy – do not type – the following line into the Terminal window:
    curl -I http://192.168.0.1
    Press return. Post any lines of output that appear below what you entered. If there's no output within ten seconds, consider that a failure. You can then quit Terminal.

  • Logical ethernet interface routing

    Is there a way to configure a default route to a logical ethernet interface, another one that isn't of the physical unit? I.e., to have different default routes to hme0 and hme0:1?

    Hi radhika,
    Logical routing determines the logical receiver(s) for a given logical sender.
    Logical routing comprises the following two steps:
    Receiver determination during which you assign a receiver system to the sender interface of a sender.
    Interface determination during which you specify a receiver interface in the receiver system.
    Technical Routing is a Processing step of the Integration Engine that determines physical addresses of logical receivers.
    The physical address (end point) of the required receiver is retrieved from the Integration Directory.
    Both can be monitored in IE(ABAP) - SXMB_MONI.
    Thanks,
    Shweta

  • Plumb Interface Routes

    Hello,
    I'm having difficulty with the plumb interface and specifying traffic to route through a specific interface. Any help would be greatly appreciated!
    Below is sample example and the result on a Solaris 9 SPARC system:
    Create a virtual interface:
    /sbin/ifconfig bge0:2 192.168.10.10 netmask 255.255.255.0
    Add a route:
    /usr/sbin/route add 192.168.10.0 -netmask 255.255.252.0 192.168.10.130 -ifp bge:02
    Print routes:
    netstat -rn
    192.168.10.0 192.168.10.130 UG 1 0 bge0
    (The interface defaults to bge0)
    Attempt a traceroute:
    traceroute 192.168.11.22
    traceroute: Warning: Multiple interfaces found; using 141.168.172.175 @ bge0
    traceroute to 192.168.11.22 (192.168.11.22), 30 hops max, 40 byte packets
    Does anyone have any suggestions to get traffic to route through bge0:2?
    Cheers,
    Dan.

    yes i do have /dev/bnx
    i also have /dev/bnx0
    i also have /dev/bnx1
    i did the following but it says "Can't Load module: No such file or directory"
    modload -p bnx
    modload bnx
    modload -p bnx0
    modload bnx0
    i check the svcs -l physical. the dependencies are online. its just the state that is in maintenance.
    while the log says the follwing.
    " Executing start method ("/lib/svc/method/net-physical")
    timeout override by svc.startd. Using infinite timeout
    ifconfig: cannot open link bnx0: No such device or address
    moving address from failed IPv4 interfaces: bnx0 ( Couldnt move, no alternative interface).
    add net default gateway : Network unreachable.
    Method "start: exited with status 96."
    any other suggestion.

  • Routing Issue Accessing Inside Interface of ASA

    Ok so I'm making this more complex than it needs to be and can't see the forest for the trees. I'm setting up an ASA 5510 with multiple contexts. I'm working with my main internal context for my internal traffic. I have created interfaces on this context as follows:
    interface Ethernet0/0.1
    description outside interface
    nameif outside
    security-level 0
    ip address 1.1.1.2 255.255.255.252
    interface Ethernet0/1.1
    description inside interface for internal context
    nameif inside
    security-level 100
    ip address 10.10.50.150 255.255.0.0
    same-security-traffic permit intra-interface
    route outside 0.0.0.0 0.0.0.0 1.1.1.1
    NOTE: Also has ssh configuration but can't document that here.
    My workstation has an IP 10.10.30.20 255.255.0.0 with a default gateway that points to my core switch (10.10.50.151).
    When I try to access the inside interface of the ASA via ssh from my workstation I can't connect. I tried to ping the inside interface IP address of the ASA from my workstation and it doesn't reply. I can however ping anything on my internal network from the ASA through the inside interface. What am I missing on this?
    Thanks.

    I figured out this issue but now have a new issue. The problem I had accessing the internal network from the ASA was due to the core switch I was being routed through. After looking at the core I saw that the default route was redirecting all traffic to the IP address of the inside interface on the production ASA. I have since pulled a spare switch and created an isolated network with a laptop and the inside interface on the new ASA. This worked great.
    Now to my new problem. I am trying to access our ISPs external address from the ASA. The ISP has provided us with two vlans (100 and 101) on one connection and has given us two public IPs (one is the IP for the router on their end and the second is the IP I am supposed to use on my outside interface for vlan 100). I have created sub-interfaces on my outside interface and defined 0/0.1 as vlan 100 and 0/0.2 as vlan 101. VLAN 101 will go to our rack at our disaster recovery site so it will just be an extension of our existing network.
    My network is as follows:
                                   ISP (IP 2.2.2.1)
                                            |
                                            |
                                   3560-CG switch (both ports -- to ISP and ASA outside interface are configured as trunk ports)
                                            |
                                            |
                                   ASA (outside 2.2.2.2 vlan 100)
    When I try to ping the 2.2.2.1 address from the ASA it doesn't work. If both my ASA outside port and the port to the ISP are both trunk ports shouldn't it route both VLANs (100 and 101) without any issue or am I missing something in my thinking?
    Thanks.

  • Applying "route-map" in interfaces with encapsulation dot1q

    Hello,
    I would like to ask you if there were some trouble  in applying route-maps in a interface and its subinterfaces, as it is shown:
    interface GigabitEthernet0/2
     ip address 11.0.9.26 255.255.255.252
     ip policy route-map GestionRadios
    interface GigabitEthernet0/2.11
     encapsulation dot1Q 11
     ip address 11.0.9.18 255.255.255.252
     ip policy route-map RedOperativaA
    interface GigabitEthernet0/2.12
     encapsulation dot1Q 12
     ip address 11.0.9.22 255.255.255.252
     ip policy route-map RedOperativaB
    I am not sure if it is correct totally. Besides I get this informacion doing "show ip  policy" and it seems to be right.
    Router#show ip policy
    Interface      Route map
    Gi0/2          GestionRadios
    Gi0/2.11       RedOperativaA
    Gi0/2.12       RedOperativaB
    I would be very grateful for your help.
    Thanks in advance
    Regards,
    Sandro

    Sandro
    We do not have much to work with in your post so giving you really good answers is difficult. You do not tell us what type of device this is (I assume probably a router, but perhaps it is a layer 3 switch?) or what version of code it is running. These things make a difference sometimes in what is supported or is not supported. But since you get output in show ip policy then I assume that the device does support configuration of this feature.
    You show us the configuration of the interfaces but not the configuration of the route maps or the access lists which the route maps probably use. So we can not form an opinion of the validity of the route maps or the access lists.
    And you do not tell us whether the Policy Based Routing is working or not (and in fact you do not tell us for sure that you are doing PBR - though that is generally what route maps on the interfaces are doing) so we are not clear whether there is a problem here or not.
    But based on what you show us in this post I do not see any particular problems with the route maps and the way that you have applied them to interfaces (assuming that your goal is really to do PBR).
    HTH
    Rick

  • PAT between 2 networks on same interface

    Hi,
    I'm using asa 5505 with 8.4(2) and have the following problem.
    I have 2 Networks. each Network has it's own externel Internet-Ip and also Mail-Server.
    Here is the example:
    Network1:
    192.168.1.0/24
    Mail-Server: 192.168.1.10
    External: 1.1.1.1
    Network2:
    192.168.2.0/24
    Mail-Server: 192.168.2.10
    External: 2.2.2.2
    Both Networks are connectet through a routing-network to the asa
    interface: routed
    net: 10.10.10.0/24
    Now I want a communication between the two Mailservers with their external Ip-Address.
    I did a static NAT from ipnt any to int any or also from int routed to int routed, but nothing worked.
    Packet tracer showed at NAT-Lookup where the externel adress of the second Mailserver is passed:
    Info
    Static translate Network1 to Network1
    But it should show a translation from network1 to network1-external
    Due to Security reasons, I cannot paste the whole config. I hope the example tells enough about my Problem.
    Under 8.0 I did the same configuration with Policy-Nat and it worked.
    Thanks for help
    Sent from Cisco Technical Support iPad App

    Hello Roman,
    1-Are they behind the same interface?
    2-Can you explain a little bit better your network? A diagram would be great
    Can you try this:
    Object network Server-inside
    host: 192.168.1.10
    Object network: Server-secondary
    host: 192.168.2.10
    Object network Natted-inside
    host 1.1.1.1
    Object network Natted-secondary_server
    host 2.2.2.2
    Same-security permit intra-interface
    nat (routed,routed) source static Server-inside  Natted-inside destination static Server-secondary Natted-secondary_server
    nat (routed,routed) source static Server-secondary Natted-secondary_server destination static Server-inside  Natted-inside
    Regards,
    Julio

  • ASA rpf-check DROP, ASA checking NAT in the incorrect interface

    Hi
    My current architecture is :
    Internet <--> FW <--> ASA <--> LAN
                          FW <--> ASA
    we have two links between ASA and the FW, the corresponding ASA interfaces are "outside" and "vpn"
    the "outside" interface is used for browsing Internet, also for making some services accessible to our partners by doing NAT to our servers
    the "vpn" interface is used to grant access to our LANs from remote Offices
    let say that firewall rules are OK and the remote offices have access to the whole LAN by port 80
    below the current configuration :
    interface GigabitEthernet0/0
      nameif inside
     security-level 100
     ip address 192.168.1.2 255.255.255.0
    interface GigabitEthernet0/1
     nameif outside
     security-level 0
     ip address 192.168.11.2 255.255.255.0
    interface GigabitEthernet0/2
     nameif vpn
     security-level 0
     ip address 192.168.12.2 255.255.255.0
    object-group network Inside_LANs
     network-object 192.168.3.0 255.255.255.0
     network-object 192.168.4.0 255.255.255.0
     network-object 192.168.5.0 255.255.255.0
    access-list Inside-to-outside extended permit icmp object-group Inside_LANs any echo 
    access-list Inside-to-outside extended permit udp any host TimeServer eq ntp 
    access-list Inside-to-outside extended permit ip object-group Inside_LANs any 
    global (outside) 1 interface
    global (outside) 2 192.168.11.60 netmask 255.255.255.255
    nat (inside) 1 access-list Inside-to-outside
    nat (inside) 2 192.168.6.0 255.255.255.0
    static (inside,outside) 192.168.11.10 192.168.2.10 netmask 255.255.255.255 
    static (inside,outside) 192.168.11.11 192.168.2.11 netmask 255.255.255.255 
    static (inside,outside) 192.168.11.12 192.168.2.12 netmask 255.255.255.255 
    route inside 192.168.2.0 255.255.255.0 192.168.1.1 1
    route inside 192.168.3.0 255.255.255.0 192.168.1.1 1
    route inside 192.168.4.0 255.255.255.0 192.168.1.1 1
    route inside 192.168.5.0 255.255.255.0 192.168.1.1 1
    route inside 192.168.6.0 255.255.255.0 192.168.1.1 1
    route vpn 192.168.20.0 255.255.255.0 192.168.12.1 1
    our problem is that packets are dropped from remote office to LAN, we are getting the rpf-check drop in packet tracer
    example 1 (to a server without NAT 192.168.2.13) ---> connection OK (not dropped)
    remote office 192.168.20.55 to 192.168.2.13
    Phase: 5
    Type: NAT
    Subtype: host-limits
    Result: ALLOW
    Config:
    nat (inside) 1 access-list Inside-to-outside
      match udp inside any inside host TimeServer eq 123
        dynamic translation to pool 1 (No matching global)
        translate_hits = 0, untranslate_hits = 0
    Additional Information:
    example 2 (to a server with static NAT 192.168.2.10) ---> connection OK (not dropped)
    remote office 192.168.20.55 to 192.168.2.10
    Phase: 6
    Type: NAT
    Subtype: host-limits
    Result: ALLOW
    Config:
    static (inside,outside) 192.168.11.10 192.168.2.10 netmask 255.255.255.255 
      match ip inside host 192.168.2.10 outside any
        static translation to 192.168.11.10
        translate_hits = 76643, untranslate_hits = 188597
    Additional Information:
    example 3 (to a host with dynamic ACL NAT 192.168.4.40) ---> connection NOK (dropped)
    remote office 192.168.20.55 to 192.168.4.40
    Phase: 5
    Type: NAT
    Subtype: rpf-check
    Result: DROP
    Config:
    nat (inside) 1 access-list Inside-to-outside
      match ip inside 192.168.4.0 255.255.255.0 vpn any
        dynamic translation to pool 1 (No matching global)
        translate_hits = 1, untranslate_hits = 0
    Additional Information:
    example 4 (to a host with dynamic Network NAT 192.168.6.30) ---> connection NOK (dropped)
    remote office 192.168.20.55 to 192.168.6.30
    Phase: 5
    Type: NAT
    Subtype: rpf-check
    Result: DROP
    Config:
    nat (inside) 2 192.168.6.0 255.255.255.0
      match ip inside 192.168.6.0 255.255.255.0 vpn any
        dynamic translation to pool 2 (No matching global)
        translate_hits = 117, untranslate_hits = 0
    Additional Information:
    our questions :
    1) why ASA don't check the reverse path route before checking the NAT ?
     if it does, the route back to the office is set to the "vpn" interface (route vpn 192.168.20.0 255.255.255.0 192.168.12.1 1), so ASA don't have to check NAT in other interface, currently it's checking the NAT in the "outside" interface even if it's not the route back to the office
    2) why it's working for static NAT servers and Not working for the dynamic NAT ones ?
    when ASA check a server with static NAT it find  a match in the outside interface but even so it discard it and the connection Work. (example 2)
    when ASA check a server/host with dynamic NAT (ACL or Network) if find a match in the outside interface but drop the connection
    3) we know that this behavior can be solved by adding a NAT exception for the dynamic NAT in the "outside" interface (nat (inside) 0 access-list Inside-NAT-Exceptions) but :
    why ASA checking the global NAT even if it's not the correct interface ?
    Why it's working for static NAT and not working for the dynamic one ?
    Thanks a lot

    Hi,
    It would be easier to troubleshoot if you shared the complete "packet-tracer" command you used and the full output of the command.
    But to me the situation in its current form looks the following.
    Example 1
    To me it seems this is working as it should. Connection is coming from "vpn" to "inside". There is no "static" configurations between "vpn" and "inside" and there is no "nat" command for "vpn" interface so the traffic should pass normally without any NAT related conflicts/problems as the traffic does not match any NAT configuration.
    Notice that the ASA might show some unrelated NAT information in the output of the "packet-tracer" command (commands related to other interfaces). In those NAT Phase sections there is a section saying "Additional Information:" If there is no text after this text that means that this NAT has not been applied. I am not sure why the ASA lists some NAT configurations in the output that are not related. I have seen this in many occasions and do not know the reason and I have not really put any time/effort into understanding why it shows the unrelated information in the output.
    Example 2
    This seems to be working as expected also.
    According to the configuration provided there is no existing NAT configurations related to either the source or destination IP address on the ASA between "vpn" and "inside" interface so the traffic passes through the ASA without facing any conflicts with NAT configurations.
    Again, the "packet-tracer" shows NAT information unrelated to this situation. And again the "Additional Information:" section lists no additional information so the NAT listed is not applied.
    Example 3 and 4
    These tests fail as expected since there is a Dynamic Policy PAT configuration for both internal destination hosts that the remote users are trying to connect to. The problem comes from the fact that the initial direction from remote to internal does not match any NAT configuration and the reverse direction from internal to remote matches the Dynamic Policy PAT and therefore the connection attempt is dropped. The connection must match the same NAT configuration on both directions.
    In this situation you would either have to configure NAT0, Static NAT , Static PAT or Static Policy NAT/PAT which all would prevent the connection from matching to the Dynamic Policy PAT (But would match the mentioned type of NAT in both directions as they have higher priority than Dynamic Policy PAT). Typically the prefererred solution would be to use NAT0 though you naturally have the option to use a NAT address if there is any overlap.
    Hope this helps :)
    - Jouni

  • SAP Router start issue

    Hello All
    We are facing the following issue while starting the SAP router. The router just hangs with the following statement in the command prompt.
    trcfile dev_rout
    no logging active
    upon providing trace level 3 and looking into the dev_route file, the following information is found.
    Please help in suggesting possible resolution.
    trc file: "dev_rout", trc level: 3, release: "742"
    Thu Apr 23 19:06:49 2015
    NiIHSBufInit: initialize hostname buffer (IPv4)
    NiHLInit: alloc host buf (200 entries)
    NiSrvLInit: alloc serv bufs (200 entries)
    NiIInit: allocated nitab (811 at 00000000041A2610)
    NiIInit: host/serv bufs already initialized
    SAP Network Interface Router, Version 40.4
    Compiled Mar 30 2015 18:27:50
    command line arg 0: saprouter
    command line arg 1: -r
    command line arg 2: -V
    command line arg 3: 3
    command line arg 4: -K
    command line arg 5: p:CN=USCINSAPSVR10, OU=0000454027, OU=SAProuter,O=SAP, C=DE
    service   : 3299
    routtab   : ./saprouttab
    plug-in   : no plug-in
    -argument: 'no argument'
    clients   : 800
    max servers  : 1
    quelength : 1
    maxheap   : 20000000
    timeoutL  : 5000
    tracefile : dev_rout
    tracefile limit : 0 byte
    tracefile maxcnt : 0
    socket buffer size : 32768
    logfile   : no logging active
    portrange : no portrange active
    local address : default address
    ->> SncInit(prg=0, ini_fname=(NULL), &sec_avail=000000000213F148)
    SncInit(): Initializing Secure Network Communication (SNC)
          PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)
          GetUserName()="um1adm"  NetWkstaUser="um1adm"
    SncInit(): Trying environment variable SNC_LIB as a
          gssapi library name: "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll".
    DlLoadLib success: LoadLibrary("E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"), hdl 0, count 1, addr 0000000010000000
        using "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): failed GetProcAddress("sapsnc_init_adapter") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
            with error 127 = "The specified procedure could not be found."
    DlLoadFunc(): successful GetProcAddress("gss_acquire_cred") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_release_cred") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    Thu Apr 23 19:06:49 2015
    DlLoadFunc(): successful GetProcAddress("gss_init_sec_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_accept_sec_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_process_context_token") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_delete_sec_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_context_time") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_get_mic") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_verify_mic") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_wrap") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_unwrap") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_display_status") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_indicate_mechs") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_compare_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_display_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_import_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_release_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_release_buffer") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_release_oid_set") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_inquire_cred") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_inquire_cred_by_mech") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_inquire_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_wrap_size_limit") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_export_sec_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_import_sec_context") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_inquire_names_for_mech") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_inquire_mechs_for_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_canonicalize_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("gss_export_name") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
      File "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
    DlLoadFunc(): successful GetProcAddress("sapcr_get_version") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
    DlLoadFunc(): successful GetProcAddress("sapcr_get_secudir") from "E:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll"
      SECUDIR="E:\usr\sap\saprouter" (from $SECUDIR)
      The internal Adapter for the loaded GSS-API mechanism identifies as:
      Internal SNC-Adapter (Rev 1.1) to SAPCRYPTOLIB 5.x
      Product Version = SAPCRYPTOLIB  5.5.5C pl38  (Oct  7 2014) MT,AESNI,NB
      <<- SncPDLInit()==SAP_O_K
    <<- SncInit()==SAP_O_K
             sec_avail = "true"
    ->> SncSetMyName(snc_hdl=0000000000000000, myname="p:CN=USCINSAPSVR10, OU=0000454027, OU=SAProuter,O=SAP, C=DE")
    <<- SncSetMyName()==SAP_O_K
         in: myname = "p:CN=USCINSAPSVR10, OU=0000454027, OU=SAProuter,O=SAP, C=DE"
    NiBufISetParam: set max heap to 20000000
    Thu Apr 23 19:06:49 2015
    NiSetParamEx: switch NIP_CONNLOCAL off (not supported by platform)
    NiSetParamEx: set NIP_SOCK_BUFFER_SIZE 32768
    NiMyHostName: hostname = 'USCINSAPSVR10'
    main: pid = 13232, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
    NiSelICreateSet: new set0
    SiSelNInit: allocate 172528 bytes for FI (811)
    NiSelIInit: size of set0 is 811
    NiICreateHandle: hdl 1 state NI_INITIAL_LIS
    NiIInitSocket: set default settings for new hdl 1/sock 508 (I4; ST)
    Windows Version 6.1, Build 7601
    Running on Windows Vista
    NiITraceByteOrder: CPU byte order: little endian, reverse network, low val .. high val
    NiIBind: hdl 1 bound to 3299 (IP only)
    NiIBlockMode: set blockmode for hdl 1 FALSE
    NiIListen: state of hdl 1 NI_LISTEN
    SiSelNSet: sock 508 added to set pos 0
    NiSelIAddMsg: added hdl 1 to set0
    SiSelNSet: set events of sock 508 to: rp-
    reading routtab: './saprouttab'
    <<- SncNameToAclKey_r()==SAP_O_K
         in: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"
      'aclkey ' (addr=0000000003E5FF60, len=86) full hexdump
      0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...
      0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D
      0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1
      0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu
      0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa
      0x00050  70736572 7632                        pserv2          
    NiStrToAddrMask: '194.39.131.34' -> 194.39.131.34/32 (0/0)
    <<- SncNameToAclKey_r()==SAP_O_K
         in: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"
      'aclkey ' (addr=0000000003E5FF60, len=86) full hexdump
      0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...
      0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D
      0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1
      0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu
      0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa
      0x00050  70736572 7632                        pserv2          
    addrinfo of 'USCINSAPSVR09':
    0: 192.168.120.19:0 Thu Apr 23 19:06:49 2015
    'USCINSAPSVR09' <unknown socket type 0> (0-2-0-0-16)
    1: 192.168.120.19:0 <unknown socket type 0> (0-2-0-0-16)
    NiHLGetNodeAddr: got hostname 'USCINSAPSVR09' from operating system
    NiIGetNodeAddr: hostname 'USCINSAPSVR09' = addr 192.168.120.19
    NiIGetServNo: servicename '3200' = port 3200
    NiStrToAddrMask: '192.168.*.*' -> 192.168.0.0/16 (0/1)
    NiStrToAddrMask: '194.39.131.34' -> 194.39.131.34/32 (0/0)
    contents of routtab ('./saprouttab', 3 entries):
    KT*,*<<- SncAclKeyToName()==SAP_O_K
      'aclkey ' (addr=00000000042354D4, len=86) full hexdump
      0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...
      0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D
      0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1
      0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu
      0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa
      0x00050  70736572 7632                        pserv2          
        out: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"
      p:CN=sapserv2, OU=SAProuter, O=  194.39.131.34/32                *         *
    KP*,*<<- SncAclKeyToName()==SAP_O_K
      'aclkey ' (addr=000000000423599C, len=86) full hexdump
      0x00000  00030401 00080606 2b240301 25010000  ........ +$..%...
      0x00010  00443042 310b3009 06035504 06130244  .D0B1.0. ..U....D
      0x00020  45310c30 0a060355 040a1303 53415031  E1.0...U ....SAP1
      0x00030  12301006 0355040b 13095341 50726f75  .0...U.. ..SAProu
      0x00040  74657231 11300f06 03550403 13087361  ter1.0.. .U....sa
      0x00050  70736572 7632                        pserv2          
        out: name    = "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"
    Thu Apr 23 19:06:49 2015
      p:CN=sapserv2, OU=SAProuter, O=  192.168.120.19/32               3200      p
    P*,*  192.168.0.0/16                   194.39.131.34/32                *         *
    ******* NI-ROUTER LOOP ********
    SiSelNSelect: start select (timeout=-1)

    ** Trace file opened at 20150417 112112 Eastern Daylight Time, by disp+work
    ** Versions SAP-REL 721,0,201 RFC-VER U 3 1459980 MT-SL
    ror RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825
    : Hostname or service of the message server unknown
    ST =CONNECTION_PING
    HOST =H/192.168.152.50/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001
    NAME =OSS
    OUP =1_PUBLIC
    AP Programm: CL_DSMOP_RFC_WATCHER==========CP (Transaction: )
    er: SOLMAN_BTC (Client: 100)
    stination: SAP-OSS (Handle: 1, DtConId: 00000000000000000000000000000000, DtConCnt: 0, ConvId: ,)
    P RootContextId: 74D4356C5F6B1ED4B6E3593B0548B699, ConnectionId: 74D4356C5F6B1ED4B6E35960B5B7D699, ConnectionCnt: 1
    P TransactionId: 5B15E5E476B3F1738EAD74D4356C5F6B
    ** Trace file opened at 20150417 112113 Eastern Daylight Time, by disp+work
    ** Versions SAP-REL 721,0,201 RFC-VER U 3 1459980 MT-SL
    ror RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825
    : Hostname or service of the message server unknown
    ST =SAP-OSS
    HOST =H/192.168.152.50/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001
    NAME =OSS
    OUP =1_PUBLIC
    AP Programm: CL_SM_DATA_SENDER_RFC=========CP (Transaction: )
    er: SOLMAN_BTC (Client: 100)
    stination: SAP-OSS (Handle: 2, DtConId: 00000000000000000000000000000000, DtConCnt: 0, ConvId: ,)
    P RootContextId: 74D4356C5F6B1ED4B6E3593B0548B699, ConnectionId: 74D4356C5F6B1ED4B6E35960B5B7D699, ConnectionCnt: 1
    P TransactionId: 5B15E5E476B3F1738EAD74D4356C5F6B
    ** Trace file opened at 20150417 112113 Eastern Daylight Time, by disp+work
    ** Versions SAP-REL 721,0,201 RFC-VER U 3 1459980 MT-SL
    ror RFCIO_ERROR_SYSERROR in abrfcpic.c : 2825
    : Hostname or service of the message server unknown
    ST =SAP-OSS
    HOST =H/192.168.152.50/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001
    NAME =OSS
    OUP =1_PUBLIC
    AP Programm: CL_SM_DATA_SENDER_RFC=========CP (Transaction: )

  • Is it better to use router port versus vlan member port?

    Hi CSC,
    This is more of a philosophical or "best practices" question.
    I have a Cisco 3550 at the home office. Connected to the 3550 is a number of branch offices by way of T1 circuits or VDSL modems. They all come to the home office, where we have a central internet connection and server farm for our entire organization.
    Except for one special case branch office, we don't forsee the need for appearances of the  home office vlan at the branch office sites. In that case, we bring it  into a trunk port at the home office, and at the special case branch office we have a dell 3024  switch and tag some ports as vlan 18 (the home office) or vlan 27 (the  special case branch office).
    We also do not forsee a need for the vlan from one branch office to appear at another branch office.
    They are all (except for the special case mentioned above) currently configured something like this:
    interface FastEthernet0/1
    description home office
    switchport access vlan 18
    switchport mode access
    interface FastEthernet0/2
    description t1 to branch office 1
    switchport access vlan 19
    switchport mode access
    interface Vlan18
    description subnet for home office
    ip address 192.168.18.1 255.255.255.0
    interface Vlan19
    description subnet for branch office 1
    ip address 192.168.19.1 255.255.255.0
    Is it better, in terms of reduced network complexity or performance on my 3550, to do something like this instead?
    That is, to make the interfaces router ports as opposed to vlan member ports?
    Of course, if we ever DID need to have appearances of the home office vlan at branch office sites, or appearances of one branch office's vlan at another branch office, we would lose that flexibility.
    interface FastEthernet0/1
    description home office
    switchport access vlan 18
      switchport mode access
    interface FastEthernet0/2
    description t1 to branch office 1
    ip address 192.168.19.1 255.255.255.0
    interface Vlan18
    description subnet for home office
    ip address 192.168.18.1 255.255.255.0
    no vlan 19

    Hello,
    In my opinion there is no 100% right answer here. I think it depends also about network forecast. I'll try to add here some thoughts:
    - if you use trunk interfaces from home to branch and SVI for L3 connection, in terms of scalability is much easier to expand (you have now only one p2p L3 link, but in future you'll need another one; if the port is a trunk one, you just configure another SVI interface, allow vlan on trunk and your good to go)
    - trunk interfaces involve more configuration (L2 interface and SVI L3 interface)
    - if you add in the home office another switch to existing one, and for some reason you have misconfiguration in STP / VTP, then you can run into problems like loops, vlan database modification (e.g. VTP server mode and the new added switch has a higher revision number than existing one)
    - L3 physical interfaces are easier to configure and less complex, but in case you want to scale to additional p2p link will be harder
    - L3 configuration is easier to troubleshoot as you avoid the L2 complexity
    - in terms of packet exchange a L3 interface will exchange less packets than a L2 trunk with SVI (I'm talking here about control traffic, not user traffic)
    - with L2 trunk you can have other problems like if somebody is "smart enough" to add a new switch into the existing switch (if you have a switch there) at the branch location; imagine that the new switch due to misconfigurated STP became root bridge; you have a large STP domain.
    As I said, there is no good or bad approach. You have to guide yourself about forecasts in your network. For example if you know that a branch location will not be extended in the next 2 years, then go ahead with L3 interface and that's it. On the other hands if you have doubts you can add for another location L2 trunk with SVI. You can mix this two solution to obtain the best results for your network characteristics.
    Cheers,
    Calin

  • Problem with routing - Need help

    Hello,
    I need a little direction with what I think is a routing problem. Any help will be appreciated. My setup is as follows:
    Cable Modem
    27.177.21.9
    WAN - Gi0/0
    27.177.21.10
    Cisco 2901
    LAN - Gi0/1
    192.168.1.250
    Client
    192.168.1.10
    The Problem
    Router can ping LAN interface
    Router cannot ping WAN interface -X
    Router can ping Cable Modem
    Client
    Client can ping LAN interface
    Client can ping WAN interface
    Client cannot ping Cable Modem -X
    Here is my routing table:
    Gateway of last resort is 27.177.21.9 to network 0.0.0.0 (this is my cable modem)
    S*    0.0.0.0/0 [1/0] via 27.177.21.9
                    is directly connected, GigabitEthernet0/0
          27.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
    C        27.177.21.8/30 is directly connected, GigabitEthernet0/0
    L        27.177.21.10/32 is directly connected, GigabitEthernet0/0
          192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
    C        192.168.1.0/24 is directly connected, GigabitEthernet0/1
    L        192.168.1.250/32 is directly connected, GigabitEthernet0/1
    Here is a portion of my configuration:
    interface GigabitEthernet0/0
     description Cable Internet$FW_OUTSIDE$$ETH-WAN$
     ip address 27.177.21.10 255.255.255.252
     zone-member security out-zone
     duplex auto
     speed auto
    interface GigabitEthernet0/1
     description hbc_staff$FW_INSIDE$$ETH-LAN$
     ip address 192.168.1.250 255.255.255.0
     zone-member security in-zone
     duplex auto
     speed auto
     no mop enabled
    ip default-gateway 27.177.21.9
    ip forward-protocol nd
    ip http server
    ip http access-class 23
    ip http authentication local
    ip http secure-server
    ip http timeout-policy idle 600 life 86400 requests 10000
    ip route 0.0.0.0 0.0.0.0 27.177.21.9
    ip route 192.168.1.0 255.255.255.0 27.177.21.9
     Thanks in advance

    Hello Jon,
    I continue to try different configurations to get my router to connect without success. I am now trying NAT and this is where we stand now. Any help will be much appreciated.
    The problem
    Router now pings everything by ip address or name
    Client PC from inside the LAN cannot ping modem or Internet
    Relevant parts of configuration:
    ip domain name mydomain.org
    ip name-server 24.247.15.53
    ip name-server 66.189.0.100
    interface GigabitEthernet0/0
     description Internet$FW_OUTSIDE$ETH-WAN$
     ip address 27.177.21.10 255.255.255.252
     ip nat outside
     ip virtual-reassembly in
     duplex auto
     speed auto
    interface GigabitEthernet0/1
     description hbc_staff$FW_INSIDE$$ETH-LAN$
     ip address 192.168.1.250 255.255.255.0
     ip nat inside
     ip virtual-reassembly in
     zone-member security in-zone
     duplex auto
     speed auto
     no mop enabled
    ip nat pool HBC-I 27.177.21.10 27.177.21.10 prefix-length 24
    ip nat inside source list 7 pool HBC-I overload
    ip route 0.0.0.0 0.0.0.0 27.177.21.9
    ip route 192.168.1.0 255.255.255.0 GigabitEthernet0/1
    access-list 7 permit 192.168.1.0 0.0.0.255
    #show ip route
    Gateway of last resort is 27.177.21.9 to network 0.0.0.0
    S*    0.0.0.0/0 [1/0] via 27.177.21.9
          27.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
    C        27.177.21.8/30 is directly connected, GigabitEthernet0/0
    L        27.177.21.10/32 is directly connected, GigabitEthernet0/0
          192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
    C        192.168.1.0/24 is directly connected, GigabitEthernet0/1
    L        192.168.1.250/32 is directly connected, GigabitEthernet0/1
    When pinging the modem from a client inside the LAN this is what I get from NAT translations and statistics:
    #sho ip nat translations ver
    Pro Inside global         Inside local          Outside local         Outside global
    icmp 27.177.21.10:40709   192.168.1.8:40709     27.177.21.9:40709     27.177.21.9:40709
        create 00:00:05, use 00:00:00 timeout:60000, left 00:00:59, Map-Id(In): 1, 
        flags: 
    extended, use_count: 0, entry-id: 4, lc_entries: 0
    #sho ip nat statistics
    Total active translations: 2 (0 static, 2 dynamic; 2 extended)
    Peak translations: 2, occurred 00:00:04 ago
    Outside interfaces:
      GigabitEthernet0/0
    Inside interfaces: 
      GigabitEthernet0/1
    Hits: 104  Misses: 0
    CEF Translated packets: 104, CEF Punted packets: 0
    Expired translations: 7
    Dynamic mappings:
    -- Inside Source
    [Id: 1] access-list 7 pool HBC-I refcount 2
     pool HBC-I: netmask 255.255.255.0
        start 27.177.21.10 end 27.177.21.10
        type generic, total addresses 1, allocated 1 (100%), misses 0
    Total doors: 0
    Appl doors: 0
    Normal doors: 0
    Queued Packets: 0

  • Error with SAP Router

    Hello Experts,
    I Paste my dev_route error here
    trc file: "dev_rout", trc level: 2, release: "700"
    Wed Dec 29 12:17:32 2010
    NiHsLInit: alloc host/serv bufs (200/200 entries)
    NiIInit: allocated nitab (811 at 000000000026B140)
    NiIInit: host/serv bufs already initialized
    SAP Network Interface Router, Version 38.10
    Compiled Feb 28 2010 21:11:42
    command line arg 0:     saprouter
    command line arg 1:     -r
    command line arg 2:     -V
    command line arg 3:     2
    command line arg 4:     -K
    command line arg 5:     p:CN=fghsrv016, OU=0000885529, OU=SAProuter, O=
    service   : 3299
    routtab   : ./saprouttab
    plug-in   : no plug-in
    -argument: 'no argument'
    clients   : 800
    max servers  : 1
    quelength : 1
    maxheap   : 20000000
    timeoutL  : 5000
    tracefile : dev_rout
    logfile   : no logging active
    portrange : no portrange active
    local address : default address
    SncInit(): Initializing Secure Network Communication (SNC)
          PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)
    SncInit(): Trying environment variable SNC_LIB as a
          gssapi library name: "J:\saprouter\nt-x86_64\ sapcrypto.dll".
    ERROR => DlLoadLib()==DLENOACCESS - LoadLibrary("J:\saprouter\nt-x86_64\ sapcrypto.dll")
      Error 126 = "The specified module could not be found." [dlnt.c       255]
    ERROR => SncPDLInit()==SNCERR_INIT, Adapter #1 (J:\saprouter\nt-x86_64\ sapcrypto.dll) not loaded [sncxxdl.c  640]
    <<- SncInit()==SNCERR_INIT
             sec_avail = "false"
    ERROR => NiSncInit: SncInit failed (rc=-1) [nisnc.c      647]
    ERROR => main: NiSncInit failed (rc=-17) [nirout.cpp   1227]
    ERROR       SNC processing failed:
                 SncInit
    TIME        Wed Dec 29 12:17:32 2010
    RELEASE     700
    COMPONENT   NI (network interface)
    VERSION     38
    RC          -17
    MODULE      nisnc.c
    LINE        646
    DETAIL      NiSncInit: sncrc=-1
    COUNTER     4
    <<- ERROR: SncDone()==SNCERR_INIT_FIRST
    NiIExit: free nitab 000000000026B140
    please try to solve it guys
    Thanks and regards

    Hi,
    At first login with the user and start the router the same user id from where you have installed the router and define the parameters etc., the error looks generic with many possibilities to answer have a look on below thread which is already solved:
    SAProuter error: SNC processing failed:        SncInit
    "ERROR: SNC processing failed: SncSessionInitiatorAK"
    Thanks,
    Salim

  • Router could not start

    Hello Experts,
    I reconfigured router and try to start but i got en error....... I paste dev_rout Ststus here
    trc file: "dev_rout", trc level: 1, release: "700"
    Wed Jan 05 02:20:50 2011
    SAP Network Interface Router, Version 38.10
    command line arg 0:     Saprouter
    command line arg 1:     -r
    command line arg 2:     -R
    command line arg 3:     saprouttab.ini
    command line arg 4:     -K
    command line arg 5:     p:CN=FGHSRV002, OU=0000885529, OU=SAProuter, O=SAP, C=DE
    SncInit(): Initializing Secure Network Communication (SNC)
          PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)
    SncInit(): Trying environment variable SNC_LIB as a
          gssapi library name: "C:\saprouter\nt-x86_64\sapcrypto.dll".
      File "C:\saprouter\nt-x86_64\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
      The internal Adapter for the loaded GSS-API mechanism identifies as:
      Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
    main: pid = 1196, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
    ERROR => fopen 'saprouttab.ini' (2: No such file or directory) [nirout.cpp   7619]
    **LOG Q0I=> NiRRouttab: fopen (2: ENOENT: No such file or directory OR: The system cannot find the file specified.  ) [nirout.cpp 7621]
    cannot open 'saprouttab.ini': all routing disabled!!!
    Could not open permission table
    Please check and try to solve it

    Hi,
    Reconfigured means what you have done ? the error message shows saprouttab file is not exits in C:\saprouter\nt-x86_64\
    Also please check environmental variables SNC_LIB & secudir having correct path. Check the entries are correct in saproutab file too.
    Regards,
    Kiron.

Maybe you are looking for

  • IPhoto files vs. Photoshop Elements files

    I am confused by what appears to be two different but related filing systems in these two programs. When I open PSE and browse it goes to date files, (e.g. johnhendrie>pictures>iphotolibrary>2005>11>29>filename). When in iPhoto the same file exists i

  • Oracle BI Publisher Custom Report Error: emsg:was terminated by signal 6

    Oracle BI Publisher Custom Report throws a strange error. Error log below. Forcing NLS_NUMERIC_CHARACTERS to: '.,' for XDO processing Current NLS_LANG and NLS_NUMERIC_CHARACTERS Environment Variables are : American_America.US7ASCII stat_low = 6 stat_

  • Default background color and Focuslistener disapair on table?

    When I imp. TableCellRenderer on my table the default background color and Focuslistener disapair. What can I do to get it back and still keep TableCellRenderer on my table? This is how my TableCellRenderer looks:     public Component getTableCellRen

  • How to delete uploaded invoices in ap?

    Hi We have a situation to delete the uploaded invoices in ap, got the api namely ap_purge_pkg But there is no documentation and examples how to use it. Can you provide some examples? Thanks Rajesh.

  • Use of custom primary key using OSM Activation Tasks

    Hi, We are using OSM Activations Task to interact with ASAP. By default it uses OSM_ORDER_ID.HIST_ID as the corelation key and same as primary key while sending the request to ASAP. Is there a way we can customize this logic so as to send a custom va