Public-real IP changed for SAP Router

Hello,
The real IP for SAP Router system has changed, therefore I would need to re configure the same.
I have gone through existing threads, but not throwing much light related to my query.
I tried to reconfigure, but when generating the certificate I get below error. The /usr folder is the old folder of the router and am trying to reconfigure in folder is /newrouter. The OS is windows server 2008.
D:\NewRouter\ntintel>sapgenpse get_pse -v -r certreq -p local.pse "CN=<hostname>,
OU=0000872340, OU=SAProuter, O=SAP, C=D"
Got absolute PSE path "D:/usr\local.pse".
get_pse ERROR: PSE already exists "D:/usr\local.pse"
I have already changed the environment variables for SECU_DIR and LIB one.
My questions are :
1) Is there any way to just update the ip address on the market place by just opening the ticket at XX-SER-NET OR do I need to perform the whole procedure after uninstalling previous configuration.
2) What is the method for uninstallation of SAP Router?
Thanks.
Sat

Hi,
Thanks for your reply.
Actually I changed the env variables and after restarting the sapgenpse command worked.
But I did not proceed further.
I have informed SAP to update the new ip address.
My query is what action should I perform at my end instead of reconfiguring the router again.
Thanks.
Sat

Similar Messages

Wrong Distinguished Name for SAP-Router

Hello Everybody,
I have a Problem about the Distinguish name of my sap router.
The Problem, when I go to sap to look for my Distinguish name and therefore to generate the saprouter certificat.
I found something totally wrong :
e.g. CN=SAProuter, OU=0000755120, OU=SAProuter, O=SAP, C=DE
but it muss be like this e.g. CN=Routi, OU=0003380660, OU=SAProuter, O=SAP, C=DE
How can I change this, I don't want to start my saprouter with the wrong Distinguish name.
Thanks in Advance.
Best Regards,
Kais

Hello,
Is your SAPRouter in the DMZ ?
In that case, you have to open the firewall port.
Regards,
Abhilash

Font and font color are getting changed for SAP R/3 report in portal

Hai,
We are using ITS 6.2 patch 26 and EP 6.0.
When i run a SAP R/3 4.6C report in ITS 6.2, the report content are shown in Courier New font with blue color.
When i run the same report from portal, the report content are shown in Arial font with blackish blue color.
Can anyone tell why in portal the font attributes are getting changed and how to have the same font attributes in portal also.
Regards,
H.K.Hayath Basha.

Hi
Please go to System Administration -> Portal Display -> Themes.
You can change the font type , color and size from here and have to properly assign it to the Desktop for the users for which these font should be displayed .
Please check the following links :
http://help.sap.com/saphelp_nw04/helpdata/en/26/3df46c0584cd4eb31e91aa7bcf1893/frameset.htm
Edited by: purav mehta on Dec 16, 2007 6:01 PM

Naming changes for SAP business systems

Hello
I have developed my interfaces in which most of them are from SAP to third party. We have SAP configured with its SID as the business system (e.g. DC1). Now we are planning to change the name of all the business systems in SLD. I deleted the previous business system from the SLD and created the new one according to newer standard and configured receivers based on it.
My problem is when I am posting the message through ABAP proxy its still taking the SID as the sender. As a result its not finding the receiver. Do I need to configure the sender in my source ECC system?
Thanks in advance.
Regards
Rajeev Patkie

Hi Rajeev,
The Business system details like the client and logical system etc, help the proxy to know where it has to go.
Not for the sender system from where you are executing the PRoxy will have a Business system .Please check if the information is for the Business system can be seen correctly in the ID>BS>service-->Adpater specific identifiers.
Also you sender XI adapter is attched to this Business system.
No what is your receiver? You haven't specified that?
Also, you can just reactivate the PROXY once.
Cache refresh??
Regards
Vijaya

Need guidance on program changes for SAP Archivelink 4.5

We are upgrading SAP Archivelink from 3.1 to 4.5. We need to determine what types of changes we need to make to our custom archiving and retrieval programs so they will work with SAP Archivelink 4.5. based on reading the SAP Archivelink 4.5 implementation guide, it appers the programs will need to be re-written in HTML. Has anyone worked on making changes to archiving programs used with SAP Archiveline 3.1 which will be used with 4.5?
Please let me know the major types of changes you needed to make, and the level of effort involved.
Thank you for your assistance.

Hi Senthil,
Can you tell me which functional module your worked as "Analyst"?
Job market: New Dimensional products are picking up largely in US like SAP EWM, SAP EM, SAP TM, SAP CRM Sales and Service, SAP IS-Utilities, SAP IS-Retail etc.
SAP ECC - SAP SD, MM, FI and HR are always have market in US but competition little bit high if you go for an interview.
Simple way is to go to top 5 job portals in US, prepare excel sheet which areas have been posted in last 6 to 12 months. Take analytical report which one seems picked up and largely asked.
You will come to know at least 3 or 4 modules currently hot in US market. Also, talk to 5 to 10 outsourcing companies friendly then request them which one they are not getting candidates and which module is very niche in market. They will you guide to arrive one or two modules in the last.
Now you have narrow down to choose the option .
Best of Luck.
Regards
GGOPII

Custom change document is not tracking changes for SAP tables

Hi gurus,
I have created a custom change document for tables EKBE and KONV. But the change document is not tracking changes in BDCP table for changes in EKBE or KONV.
Please help me out.........

HI,
Use this link for change pointers concept.
change pointers
let me know if u have any issue.
~linganna

Pre requisites for installing SAP Router

Hi Friends,
As i am going through the implementation phase, I have to install sap router which i am new at. Also i am doing it because i have to connect Maintenance Optimizer to Sap service Market place for which Router would be essentially required.
I have some questions to put forth.
1. what are the pre requisites for SAP Router
2. Do we require Public IP and what would be the use of this ip
3. how to configure the SAP Router
4. Can i install the SAP router on the same host on which we have Solution manager, is it advisable. or we should go for a seperate host.
Regards
Aayush

Installing the sapcrypto library and starting the SAProuter
Contents
u2022     Downloading necessary software components from SAP Service Marketplace
u2022     Creating the certificate request
u2022     Additional actions necessary before you can start saprouter
This section describes the necessary steps to download and install the sapcrypto library for use with saprouter. The saprouter must be started with the options described later in this section.
The license for the sapcrypto library covers saprouter connections between saprouters at SAP and the first saprouter on customer sites and backend connections within the customer`s network. For all other purposes the library CANNOT be used!
Downloading necessary software components from SAP Service Marketplace
1.     Login to the SAP Service Marketplace with the Service Marketplace USERID which is assigned to your installation.
2.     Change to the alias SAPROUTER-SNCADD. Before you can download the software components two preconditions must be met.
     a.     You must have been allowed to download the software. This authorization is added as soon as SAP has received a positive statement from the "Bundesausfuhramt". This procedure is necessary since the software falls under EU regulations.
     b.     For more information on how to obtain authorization if download is not possible see note 397175.
     c.     You must accept that you must follow the regulations imposed by the EU on the use and distribution of the cryptographic software components downloaded from the SAP Service Marketplace.
3.     The acceptance of the terms and conditions is logged with your USERID and stored for reporting purposes to the "Bundesausfuhramt".
4.     Accepting with the button on the web-based form takes you to the folder where you can download the Software components.
These are packed into a single CAR file sapcrypto.car
5.     Copy the file to the direcory where the saprouter executable is located
6.     You can get the file car.exe/sapcar.exe, which is necessary to unpack the archive from any Installation Kernel CD.
Executing the command car -xvf SAPCRYPTO.CAR will unpack the following files:
[lib]sapcrypto.[dll|so|sl]
sapgenpse[.exe]
ticket
Creating the certificate request
1.     As user <snc>adm set the environment variables
SECUDIR = <directory_of_saprouter>
2.     Change to the Shortlink SAPROUTER-SNCADD. From the list of SAProuters registered to your installation, choose the relevant "Distinguished Name"
3.     Generate the certificate Request with the command
sapgenpse get_pse -v -r certreq -p local.pse "<Your Distinguished Name>"
4.     Alternatively use the two commands:
sapgenpse get_pse -v -noreq -p local.pse "<Your Distinguished Name>"
sapgenpse get_pse -v -onlyreq -r certreq -p local.pse
5.     Display the output file "certreq" and with copy&paste insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name
6.     In response you will receive the certificate signed by the CA in the Service Marketplace, cut&paste the text to a local file named srcert
7.     With this in turn you can install the certificate in your saprouter by calling
sapgenpse import_own_cert -c srcert -p local.pse
8.     now you will have to create the credentials for the SAProuter with the same program (if you omit -O <user>, the credentials are created for the logged in user account)
sapgenpse seclogin -p local.pse -O <user_for _saprouter>
9.     This will create a file called cred_v2 in the same directory.
For increased security please check that the file can only be accessed by the user running the SAProuter.
Do not allow any other access (not even from the same group)!
On UNIX this will mean permissions being set to 600 or even 400!
On NT check that the permissions are granted only to the user the service is running as!
1.     Check if the certificate has been imported correctly
sapgenpse get_my_name -v -n Issuer
The name of the Issuer should be: CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
2.     If this is not the case, delete the files cred_v2, local.pse and start over at Item 4. If the output still does not match please open a customer message in component XX-SER-NET-OSS stating the actions you have taken so far and the output of the commands
4.,7.,8. and 10.
Additional actions necessary before you can start saprouter
1.     The environment variable SNC_LIB needs to be set for the user account SAProuter is running under.
SNC_LIB has the form
UNIX      <path_to_libsecude>/<name_of_sapcrypto_library>
Windows NT, Windows 2000     <drive>:\<path_to_libsecude>\<name_of_sapcrypto_library>
2.     Check if the environment of the user running saprouter contains the environment variable SNC_LIB
UNIX     printenv
Windows NT     System environment variable
3.     start the saprouter with the following command line:
saprouter -r -S <port> -K "p:<Your Distingushed Name>"
-K tells the saprouter to start with loading the SNC library
the corresponding file ./saprouttab should contain at least the following entries
inbound connections MUST use SNC
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <your_server1> <port_number>
repeat this for the servers and port_numbers you will need to allow,
please make sure that all explicit ports are inserted in front of a
generic entry '*' for port_number
outbound connections to <sapservX> will use SNC
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sapservX> <sapservX_inbound_port>
permission entries to check if connection is allowed at all
P <IP address of a local host> <IP address of sapserv2>
all other connections will be denied
D * * *
Example
For a SNC encrypted connection to the SAPRouter on sapserv2 (194.39.131.34), the saprouttab should contain the following entries:
SNC-connection from and to SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
SNC-connection from SAP to local R/3-System for Support
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <R/3-Instance>
SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503
SNC-connection from SAP to local R/3-System for saptelnet, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23
Access from the local Network to SAPNet - R/3 Frontend (OSS)
P <IP-addess of a local PC> 194.39.131.34 3299
deny all other connections
D * * *
Lalit Kumar

Changing SAP Router to different System

HI Experts,
                SAP Router is installed in our Develpoment system can it be possible for us to install this on the solution manager System. Is this advisable to change the SAP router to a different machine. If so How is that possible?
Regards,
Vamshi.

Hi,
Please use the following step.
Installation Steps
1.1     Downloading necessary software components from SAP Service Marketplace:
1.     SAProuter
Use the latest SAProuter version (37.x), which can be downloaded from
SAP Service Marketplace under the following link.
http://service.sap.com/swdc
     Download
     Support Packages and Patches
     Entry by Application Group
     Additional Components
     SAPROUTER
     SAPROUTER 6.40
SAPROUTER 6.40
From the available list of SAProuters, select the SAProuter for your OS platform.
2.     SNC Libraries (SAPcryptolib) download:
http://service.sap.com/swdc
     Download
     SAP Cryptographic Software
Select the SAPcrytoLib libraries compatible with your Operating System.
Note: Please also download the SAPCAR.exe file from the above location to extract the SAProuter archive files.
3.     Create a folder in /usr/sap with the name as: saprouter.
4.     Extract both the files i.e. SAProuter.SAR and Cryptolib.CAR files into saprouter folder using the command:
SAPCAR -xvf SAProuterxxx.SAR
SAPCAR -xvf CRYPTOLIBxxx.CAR
1.2     Creating the certificate request
1.     As user <snc>adm set the environment variables:
SECUDIR = /usr/sap/saprouter
SNC_LIB = /usr/sap/saprouter/libsapcrypto.so
2.     Go to the Trust Center Service - Download Area and get the "Distinguished Name" for your SAProuter from the list of SAProuters registered for your installation.
3.     Generate the certificate Request with the command:
./sapgenpse get_pse -v -r certreq -p local.pse "<Your Distinguished Name>"
P.S: We can also get the distinguished name from SAP itself when we register for the remote service connection.
4.     Display the output file "certreq" using the command:
cat certreq
and with copy & paste insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name.
1.3     Importing the certificate request
1.     With this in turn you can install the certificate in your saprouter by calling
./sapgenpse import_own_cert -c srcert -p local.pse
1.4     Setting secured login to SAProuter
1.     Now you will have to create the credentials for the SAProuter with the same program (if you omit -O <user>, the credentials are created for the logged in user account)
sapgenpse seclogin -p local.pse -O <user_for _saprouter>
2.     This will create a file called cred_v2 in the same directory.
3.     Check if the certificate has been imported correctly
./sapgenpse get_my_name -v -n Issuer
4.     If this is not the case, delete the files cred_v2, local.pse and start over at Item 3 of 4.2 . If the output still does not match please open a customer message in component XX-SER-NET-OSS stating the actions you have taken so far and the output of the commands 3 of 4.2, 4.3, and 4.4.
1.5     Additional actions necessary before you can start saprouter
1.     Logon to the system as <sid>adm, here sa1adm.
2.     The environment variables SECUDIR, SNC_LIB and USER needs to be set for the user account SAProuter is running under using the commands:
setenv SECUDIR <path_to_libsecude>
i.e. setenv SECUDIR /usr/sap/saprouter
setenv SNC_LIB <path_to_libsecude>/<name_of_sapcrypto_library>
i.e. setenv SNC_LIB /usr/sap/saprouter/libsapcrypto.so
setenv USER sa1adm
3.     Check if the environment of the user running saprouter contains the environment variable SECUDIR, SNC_LIB and USER using : printenv
4.     Start the saprouter with the following command line:
#./saprouter -r -S <port> -K "p:<Your Distingushed Name>"
-K tells the saprouter to start with loading the SNC library
Eg. ./saprouter -r -S 3299 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"
./saprouter -r -V 2 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"
./saprouter -r -R /usr/sap/saprouter/saprouttab -G log.txt -V 2 -K "p:CN=nradev, OU=0000759188, OU=SAProuter, O=SAP, C=DE"
5.     The corresponding file ./saprouttab should contain at least the following entries
inbound connections MUST use SNC
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <your_server1> <port_number>
repeat this for the servers and port_numbers you will need to allow,
please make sure that all explicit ports are inserted in front of a
generic entry '*' for port_number
outbound connections to <sapservX> will use SNC
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sapservX> <sapservX_inbound_port>
permission entries to check if connection is allowed at all
P <IP address of a local host> <IP address of sapserv2>
all other connections will be denied
D * * *
6.     Example: For a SNC encrypted connection to the SAPRouter on sapserv2 (194.39.131.34), the saprouttab should contain the following entries:
SNC-connection from and to SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
SNC-connection from SAP to local R/3-System for Support
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <R/3-Instance>
SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503
SNC-connection from SAP to local R/3-System for saptelnet, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23
Access from the local Network to SAPNet - R/3 Frontend (OSS)
P <IP-addess of a local PC> 194.39.131.34 3299
deny all other connections
D * * *
Thanks,
Harshal

Why the public IP is used in SAP Landscape

Hi All,
I need information about public IP is used in SAP landscape.
I searched in google and sap forums, but it gives how to public IP change in SAP system.
It didn't give reason.
Can you help in this.
Regards,
jhansi.
Edited by: gajula jhansi on Mar 29, 2011 9:18 AM
Edited by: gajula jhansi on Mar 29, 2011 9:22 AM

Hi,
The public ip is used in sap router configuration, so to configure sap router we have to give ip address.
Thanks
Srikanth

Creating model + SAP Router

Hello, i'm trying to develop the Flights Example fron help.sap.com but at home i have access to sap system via SAP Router. In the step where i tell the application the R/3 connection parameters (adaptative RFC model) there's no option for SAP Router.
Does Anyone know how can i accomplish this?
Thanks in advance.

I found:
Define the message server, system name and the logon group used by the JCO connection.
Message Server L01_lab4
System Name L01
Logon Group PUBLIC
Use SAP Router (UNCHECKED)
SAP Router String BLANK
on this link
Re: Issue with Adaptive RFC Configuration in SLD
but i don't know where to set that... can anyone help please?
Thanks in advance.

SAP Router timeouts

Hi Team,
We have installed a new sap router in our landscape, Now across all the systems SAP is getting timeout issue from our router.
If i am changing it to old router everything works fine.
My query is what all commands need to check for network timeout issue, then is there any timeout parameter need to set after installation of new router in windows server 2008 for SAP Router.
Kindly suggest on this .
Thanks,
Pradeep.

Hi Nirav,
Verify if saprouter.exe and niping.exe is placed under directory E:USRSAPSAPROUTER and same path is mentioned in windows services.
If path is correct one then you need to modify registry
Under HKEY_LOCAL_MACHINE ® SYSTEM ® CurrentControlSet ® Services ® Event Log ® Application enter the key saprouter and define the following values for it:
EventMessageFile (REG_SZ): ....saproutersaprouter.exe
TypesSupported (REG_DWORD): 0x7
I hope this will help you.
Regards,
Rupali Bajpai

Training and certification for SAP cloud for customer

Hi,
I want to know if there are any professional training and certification available for SAP C4C.
Thanks

Hi Shweta,
yes there are professional Training for SAP C4C. For example following courses are advisable.
C4C50 SAP Cloud for Customer – Integration with On-premise SAP Solutions
C4C30 SAP Cloud Applications Studio
C4C10 SAP Cloud for Customer - Project Implementation No rating available
Goto Site: https://training.sap.com/shop/sap-search/scheduled-courses?q=c4c
At the Moment SAP finish the C4C Certification Program. So they say it will come in Q1/2015.
You can watch the Progress for the Cloud certification program on SCN in this post:
http://scn.sap.com/community/training-and-education/certification/blog/2014/12/18/exciting-upcoming-changes-for-sap-cloud-certification
I hope this Information helps you
Kind regards
Carola

Managed System Setup: SAP Router

Hello!
We are trying to execute managed system configuration for some sattelite system that we access over SAP Router.
Which ports (inbound/outound) do we need to open in order to install Diagnostic Agent and connect it to Solution Manager?
Thank you!

Hello Alex,
Please check this conversation External diagnostic agent and note 1886060 - System Monitoring Setup for SAP Router.
BR,

Sap router renewal

Hi,
i have executed the following command for sap router renewval
"sapgenpse get_pse -v -r certreq1 -p local.pse"
After that it asking please enter PIN:I gave the enter,
Reenter PIN:again i gave the enter.
get_pse:Distinguished name of PSE owner: gave the enter
get_pse:an empty subject distinguished name is not supported..
Finally certreq1 fine not created..
Please help me..
Regrads,
Manjini

after this enter any PIN too, following may help
http://sapgoogle.blogspot.com/2008/12/sap-router.html

SAP router ports on firewall

Is it required to open all the ports in firewall which are mentioned in SAProuter saproutab file. and RDP port

Hello Hardeep,
These 16 Servers needs to be accessed through the SAP Router machine or from SAP Router Machine and the ports for these servers should be opened in such a way. Its not necessary to access this servers directly from other network whereas the port for SAP Router machine should be accessed directly form outside network.
regards,
Anand

Public-real IP changed for SAP Router

Similar Messages

Maybe you are looking for