SAP router installation for VPN method

Hi All,
Can any one share me the steps to perform SAP Router Configuration with VPN method.
Also what are changes i need to make in saproutab file.
Appreciate your inputs.
Thanks
Pradeep.

There is paperwork that you need to fill out with IPSec information, once its filled out you fax it over to SAP.
Not entirely sure what changes need to be made in saprouttab? Are you changing SAPRouter to no longer perform SNC to SAP?
Here is the doco I used for my company - https://support.sap.com/content/dam/library/SAP%20Support%20Portal/remote-support/RemoteSupport.pdf

Similar Messages

What's SAP Router String for?

Hi,
I can not find proper module for me to post this message, so I post it here.
When we create a new item in the SAP logon screen , we need to specify the following parameters:
1) System description
2) Message server
3) SAP Router String (optional)
4) System ID
5) System Number
4) Group
My question is, what's SAP router string for? How to define a new SAP router string?
Because sometimes we don't need to input SAP router string, and we can still logon to the system successfully.
So, If I need to create a new SAP router string, where to define?
Thanks.

Hi
A route string describes the stations of a connection required between two hosts. A route string has the syntax
(/H/host/S/service/W/pass)*
It consists of any number of substrings in the form /H/host/S/service/W/pass .
A route string contains a substring for each SAProuter and for the target server.
Each substring contains the information required by SAProuter to set up a connection in the route: the host name, the port name, and the password, if one was given.
Syntax for substrings:
· /H / indicates the host name‑{}‑
Note that the host name must be at least two characters long.
· /S/ is used for specifying the service (port); it is an optional entry, the default value is 3299
· /W/ indicates the password for the connection between the predecessor and successor on the route and is also optional (default is u201Cu201D, no password)
In earlier Releases (<4.0A), the password entry was made one substring later and with the letter /P/.
New: /H/saprouter/W/pass/H/targetserver
Old: /H/saprouter/H/targetserver/P/pass
(Here pass is the password which is checked by the SAProuter on host saprouter to set up or prohibit the connection from the source host to the target host.)
Due to downward compatibility, the old password entry form is still possible.
Thenaks & Regards
Kishore

SAP Router Installation

Hi,
We are trying to implement SAP Router in our current landscape . Can you please guide me how to configure and install sap router.I knew that we can download saprouter_12-10003208.SAR file from market place. What are other files need to download .
After download how to install , please suggest.
- Cheers

HI
GOOD
GO THROUGH THE FOLLOWING LINKS,WHICH WILL GIVE YOU IDEA TO SOLVE YOUR PROBLEM.
http://help.sap.com/saphelp_nw04/helpdata/en/4f/992dab446d11d189700000e8322d00/content.htm
http://help.sap.com/saphelp_nw04/helpdata/en/4f/992d91446d11d189700000e8322d00/content.htm
http://www.easymarketplace.de/saprouter.php
THANKS
MRUTYUN

Pre requisites for installing SAP Router

Hi Friends,
As i am going through the implementation phase, I have to install sap router which i am new at. Also i am doing it because i have to connect Maintenance Optimizer to Sap service Market place for which Router would be essentially required.
I have some questions to put forth.
1. what are the pre requisites for SAP Router
2. Do we require Public IP and what would be the use of this ip
3. how to configure the SAP Router
4. Can i install the SAP router on the same host on which we have Solution manager, is it advisable. or we should go for a seperate host.
Regards
Aayush

Installing the sapcrypto library and starting the SAProuter
Contents
u2022 Downloading necessary software components from SAP Service Marketplace
u2022 Creating the certificate request
u2022 Additional actions necessary before you can start saprouter
This section describes the necessary steps to download and install the sapcrypto library for use with saprouter. The saprouter must be started with the options described later in this section.
The license for the sapcrypto library covers saprouter connections between saprouters at SAP and the first saprouter on customer sites and backend connections within the customer`s network. For all other purposes the library CANNOT be used!
Downloading necessary software components from SAP Service Marketplace
1. Login to the SAP Service Marketplace with the Service Marketplace USERID which is assigned to your installation.
2. Change to the alias SAPROUTER-SNCADD. Before you can download the software components two preconditions must be met.
 a. You must have been allowed to download the software. This authorization is added as soon as SAP has received a positive statement from the "Bundesausfuhramt". This procedure is necessary since the software falls under EU regulations.
 b. For more information on how to obtain authorization if download is not possible see note 397175.
 c. You must accept that you must follow the regulations imposed by the EU on the use and distribution of the cryptographic software components downloaded from the SAP Service Marketplace.
3. The acceptance of the terms and conditions is logged with your USERID and stored for reporting purposes to the "Bundesausfuhramt".
4. Accepting with the button on the web-based form takes you to the folder where you can download the Software components.
These are packed into a single CAR file sapcrypto.car
5. Copy the file to the direcory where the saprouter executable is located
6. You can get the file car.exe/sapcar.exe, which is necessary to unpack the archive from any Installation Kernel CD.
Executing the command car -xvf SAPCRYPTO.CAR will unpack the following files:
[lib]sapcrypto.[dll|so|sl]
sapgenpse[.exe]
ticket
Creating the certificate request
1. As user <snc>adm set the environment variables
SECUDIR = <directory_of_saprouter>
2. Change to the Shortlink SAPROUTER-SNCADD. From the list of SAProuters registered to your installation, choose the relevant "Distinguished Name"
3. Generate the certificate Request with the command
sapgenpse get_pse -v -r certreq -p local.pse "<Your Distinguished Name>"
4. Alternatively use the two commands:
sapgenpse get_pse -v -noreq -p local.pse "<Your Distinguished Name>"
sapgenpse get_pse -v -onlyreq -r certreq -p local.pse
5. Display the output file "certreq" and with copy&paste insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name
6. In response you will receive the certificate signed by the CA in the Service Marketplace, cut&paste the text to a local file named srcert
7. With this in turn you can install the certificate in your saprouter by calling
sapgenpse import_own_cert -c srcert -p local.pse
8. now you will have to create the credentials for the SAProuter with the same program (if you omit -O <user>, the credentials are created for the logged in user account)
sapgenpse seclogin -p local.pse -O <user_for _saprouter>
9. This will create a file called cred_v2 in the same directory.
For increased security please check that the file can only be accessed by the user running the SAProuter.
Do not allow any other access (not even from the same group)!
On UNIX this will mean permissions being set to 600 or even 400!
On NT check that the permissions are granted only to the user the service is running as!
1. Check if the certificate has been imported correctly
sapgenpse get_my_name -v -n Issuer
The name of the Issuer should be: CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
2. If this is not the case, delete the files cred_v2, local.pse and start over at Item 4. If the output still does not match please open a customer message in component XX-SER-NET-OSS stating the actions you have taken so far and the output of the commands
4.,7.,8. and 10.
Additional actions necessary before you can start saprouter
1. The environment variable SNC_LIB needs to be set for the user account SAProuter is running under.
SNC_LIB has the form
UNIX <path_to_libsecude>/<name_of_sapcrypto_library>
Windows NT, Windows 2000 <drive>:\<path_to_libsecude>\<name_of_sapcrypto_library>
2. Check if the environment of the user running saprouter contains the environment variable SNC_LIB
UNIX printenv
Windows NT System environment variable
3. start the saprouter with the following command line:
saprouter -r -S <port> -K "p:<Your Distingushed Name>"
-K tells the saprouter to start with loading the SNC library
the corresponding file ./saprouttab should contain at least the following entries
inbound connections MUST use SNC
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <your_server1> <port_number>
repeat this for the servers and port_numbers you will need to allow,
please make sure that all explicit ports are inserted in front of a
generic entry '*' for port_number
outbound connections to <sapservX> will use SNC
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sapservX> <sapservX_inbound_port>
permission entries to check if connection is allowed at all
P <IP address of a local host> <IP address of sapserv2>
all other connections will be denied
D * * *
Example
For a SNC encrypted connection to the SAPRouter on sapserv2 (194.39.131.34), the saprouttab should contain the following entries:
SNC-connection from and to SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
SNC-connection from SAP to local R/3-System for Support
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <R/3-Instance>
SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503
SNC-connection from SAP to local R/3-System for saptelnet, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23
Access from the local Network to SAPNet - R/3 Frontend (OSS)
P <IP-addess of a local PC> 194.39.131.34 3299
deny all other connections
D * * *
Lalit Kumar

Public-real IP changed for SAP Router

Hello,
The real IP for SAP Router system has changed, therefore I would need to re configure the same.
I have gone through existing threads, but not throwing much light related to my query.
I tried to reconfigure, but when generating the certificate I get below error. The /usr folder is the old folder of the router and am trying to reconfigure in folder is /newrouter. The OS is windows server 2008.
D:\NewRouter\ntintel>sapgenpse get_pse -v -r certreq -p local.pse "CN=<hostname>,
OU=0000872340, OU=SAProuter, O=SAP, C=D"
Got absolute PSE path "D:/usr\local.pse".
get_pse ERROR: PSE already exists "D:/usr\local.pse"
I have already changed the environment variables for SECU_DIR and LIB one.
My questions are :
1) Is there any way to just update the ip address on the market place by just opening the ticket at XX-SER-NET OR do I need to perform the whole procedure after uninstalling previous configuration.
2) What is the method for uninstallation of SAP Router?
Thanks.
Sat

Hi,
Thanks for your reply.
Actually I changed the env variables and after restarting the sapgenpse command worked.
But I did not proceed further.
I have informed SAP to update the new ip address.
My query is what action should I perform at my end instead of reconfiguring the router again.
Thanks.
Sat

Which CD contains the EP Installation for SAP R/3 470-620 ?

Hi,
I want to know which CD contains the EP installation for SAP R/3 47- 620, windows ,MS SQL server ?
I have gone through SAP documentation for EP 6.0 installation.
According to it, says that
1. To navigate to the J2EE Engine folder, on NetWeaver DVD, choose SAPINST > NT > I386.
Double-click sapinst.exe.
2. Navigate to SAP NetWeaver 04 Java System (J2EE only) > MS SQL Server > Central System > Custom Installation Java System and choose Next.
But I am unable to find the directory J2EE on my CD ?
Further my CD does have SAPINST.EXE, after excuting it the installation does not show option for Central System > Custom Installation Java System only matching option available is Central Instance .
If you have any experience , please share .
Regards
Gurpreet Singh Sidhu

Hello Gurpreet,
For JAVA installationyou need to use Netweaver DVDs and not 4.7 CDs. You need to install JAVA through Master Installation DVD ( in which you will find SAPINST.exe) and also make use of the JAVA DVD. Further for EP installation you will have to again make use of Master Installation DVD as well as JAVA DVD since the JAVA DVD has Netweaver Components also in it. Check you collection. You must have these DVDs in order to install EP 6.0. I hope you already have required JDK version on your installation machine.
Regards.
Ruchit.

Post Installation for SAP PI 7.0

I have done installation and post installation for SAP XI 3.0. Now I am trying to do the same with SAP PI 7.0. I am done with the installation. Presently working on Postinstallation. I believe this is not similar to SAP XI 3.0 ? Please let me know what are the difference in the Postinstallation between these two and also any links or documents for SAP PI 7.0 will be appreciated. Thank you.

Hello Akella,
You can view the Post Installation steps involved in PI 7.0 in the template installer under
http://servername:50xx0/nwa
Also refer this
PI(XI 7.0) configuration guides
Regarding SAP PI 7.0 Configuration
Just Installed PI
http://help.sap.com/saphelp_nw2004s/helpdata/en/14/39084136b5f423e10000000a155106/frameset.htm
regards,
Anandh

AddOn installer for C# in SAP 2004

Hi,
I have a question. Is there an AddOn Installer for C# in SAP 2004? Or do I have to write it by myself?
Regards,
Hmg

Hi Szymon,
You can use B1DE package you can donwload for free from SDN. It will create an installer in Vb.NET but it is very easy to adapt the code to C#.
Regards
Trinidad.

SAP EHP 1 for PI 7.1 Installer failed: runing 2 upgrades parallely

Hi Friends
I am doing an SAP EHPI Installer upgrade on one host machine from PI 7.1 to EHPi 1 PI 7.1
while on the same host machine another upgrade is running 4.6 C to ECC 6.0.
while i try to open my ehpi installer it opens the upgrade one with the bellow command.
http://<host name>:4239
can you help em out how can i run my ehpi installe without disturbing the other one.
Regards
Pooja

the EHP folder creates and picks the port the one i will specify in the command line.
Correct me if i understood you wrong.
once i enter it that port entry will automatically get reflected in the
D:\SP09\EHPI\sdt\htdoc\sdtdsu.jnlp
do we have a note which says this.
Currently it picks the default entry as shown below;
<?xml version="1.0"?>
<jnlp href="/sdtdsu.jnlp" codebase="http://HOSTEST.bcone.com:4239/" spec="0.2 1.0">
<information>
 <title>SDTGui for EHPInstaller</title>
 <vendor>SAP AG</vendor>
 <description kind="short">SDTGui for EHPInstaller</description>
 <icon href="/pics/sdtgui_big.gif"/>
</information>
<security>
 <all-permissions/>
</security>
<resources>
 <j2se version="1.5+"/>
 <jar download="eager" href="/lib/sdt_compatibility.jar"/>
 <jar download="eager" href="/lib/sdt_engine.jar"/>
 <jar download="eager" href="/lib/sdt_gui.jar"/>
 <jar download="eager" href="/lib/sdt_util.jar"/>
 <jar download="eager" href="/lib/sdt_trace.jar"/>
</resources>
<application-desc main-class="SDTGui">
 <argument>host=HOSTEST.bcone.com</argument>
 <argument>port=4241</argument>
 <argument>service=DSUService</argument>
</application-desc>
</jnlp>
Regards
Pooja

Setting up SAP Router for SNC ... error...

Hi,
My SAP Router is installed on a server that is Linux based. (IP address is 10.11.0.24)
I'm not sure if is saprouttab or saprouter itself having issue.
I started the saprouter via this command: saprouter -r -G routerlog -W 60000 -S 3299 -K "p:CN=XXXXXXXX, OU=ZZZZZZZZZZ, OU=SAProuter, O=SAP, C=DE"
saprouttab
# SNC connection to and from SAP
KT "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 169.145.197.110 *
KT "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 10.11.0.24 3200
# SNC connection to local system for R/3-Support for support
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 10.11.0.24 3200
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 10.11.0.24 3201
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 10.11.0.23 3200
# Access from local network to SAPNet (OSS)
P 10.11.0.* 169.145.197.110 3299
P * 10.11.0.* * *
# deny all other connections
D * * *
Troubleshooting steps taken:
Running niping -s on SAP Router Server & niping.exe -c -H 10.11.0.24 is successful, self-test is okay but... when running both niping -s & saprouter -r on SAP Router Server is giving me the following error:
C:\test>niping.exe -c -S 3299 -H 10.11.0.24
Wed Feb 05 14:51:29 2014
connect to server o.k.
Wed Feb 05 14:51:30 2014
*** ERROR => NiBufIProcMsg: hdl 1 received rc=-93 (NIEROUT_INTERN) from peer [nibuf.cpp    2146]
*** ERROR => NiTClientLoop: NiTReadLoop (rc=-93) [nixxtst.cpp 2590]
* LOCATION    SAProuter 40.4 on 'XXXXXXXX'
* ERROR       internal error
* TIME        Wed Feb 5 14:51:29 2014
* RELEASE     720
* COMPONENT   NI (network interface)
* VERSION     40
* RC          -93
* MODULE      nirout.cpp
* LINE        2698
* DETAIL      NiRClientHandle: route expected
* COUNTER     2
C:\Users\tohcy\Desktop\test>niping.exe -c -S 3299 -H /H/10.11.0.24/H/10.11.0.24
Wed Feb 05 15:01:00 2014
*** ERROR => NiBufIProcMsg: hdl 1 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp    2146]
*** ERROR => NiBufIConnect: route connect for non-buffered hdl 1 failed (rc=-94;/H/10.11.0.24/H/10.11.0.24); pong not received [nibuf.cpp    4801]
*** ERROR => NiTClientLoop: NiHandle (rc=-94) [nixxtst.cpp 2590]
* LOCATION    SAProuter 40.4 on 'XXXXXXXX'
* ERROR       XXXXXXXX: route permission denied (YYY to 10.11.0.24, 3299)
* TIME        Wed Feb 5 15:00:59 2014
* RELEASE     720
* COMPONENT   NI (network interface)
* VERSION     40
* RC          -94
* COUNTER     7

Hi Deepak,
I've changed to the P * * *
I run the command: niping.exe -c -S 3299 -H /H/10.11.0.24/H/10.11.0.23
Can I check if this command is correct?
Router is 10.11.0.24 trying to reach sap server 10.11.0.23.
Error:
Thu Feb 06 09:20:17 2014
*** ERROR => NiBufIProcMsg: hdl 1 received rc=-5 (NIETIMEOUT) from peer [nibuf.cpp    2146]
NiBufIConnect: route connect of non-buffered hdl 1 to '/H/10.11.0.24/H/10.11.0.23' timeout
*** ERROR => NiTClientLoop: NiHandle (rc=-5) [nixxtst.cpp 2590]
* ERROR       timeout occured
* TIME        Thu Feb 06 09:20:17 2014
* RELEASE     720
* COMPONENT   NI (network interface)
* VERSION     40
* RC          -5
* MODULE      nibuf.cpp
* LINE        4795
* DETAIL      NiBufIConnect: route connect '/H/10.11.0.24/H/10.11.0.23'
*              timeout
* COUNTER     1
routerlog:
Thu Feb 6 09:27:21 2014 CONNECT FROM C19/- host 10.11.0.181/50107
Thu Feb 6 09:27:21 2014 CONNECT TO   S19/12 host 10.11.0.23/3299
Thu Feb 6 09:28:21 2014 CONNECT ERR S19/12 could not establish connection within 60s
Thu Feb 6 09:28:21 2014 DISCONNECT   S19/12 host 10.11.0.23/3299
10.11.0.181 is my computer current IP address.
Any other clues/hint?

Wrong Distinguished Name for SAP-Router

Hello Everybody,
I have a Problem about the Distinguish name of my sap router.
The Problem, when I go to sap to look for my Distinguish name and therefore to generate the saprouter certificat.
I found something totally wrong :
e.g. CN=SAProuter, OU=0000755120, OU=SAProuter, O=SAP, C=DE
but it muss be like this e.g. CN=Routi, OU=0003380660, OU=SAProuter, O=SAP, C=DE
How can I change this, I don't want to start my saprouter with the wrong Distinguish name.
Thanks in Advance.
Best Regards,
Kais

Hello,
Is your SAPRouter in the DMZ ?
In that case, you have to open the firewall port.
Regards,
Abhilash

SAP installation manual for SAP 4.7 for abap module

SAP installation manual for SAP 4.7 for abap module

You can find the install guide in the SAP Marketplace:
service.sap.com/instguides
(logon is required)
You have to navigate deeper depends on your platform and exact release.
ABAP is not a module, it's a stack.
Peter

We looking for sap xi installation in our office, how to approach with SAP

we looking for sap xi installation in our office, how to approach with SAP Services.
What are the uses of SAP Netweaver Platform Integration,can you give me the details of this and , from where i can get this one.
And what are the components i need to buy ,plz any one of you send it to me.
Thanks & Regards,
priya reddy

Hi barry,
Thank you very much for u r reply
Thanks & Regards,
priya reddy

Prerequisites for SAP XI installation?

Hi,
Could any one help me out to know the prerequisite for SAP XI installation?
Thanks & Regards,
Yaseen Mahammad.

HI Yaseen,
The prerequisite for SAP XI installation are
1> You just require to have a WAS (WEB APPLICATION SERVER 6.40 ) installed with a ABAP stack as well as java stack.
2> You need to have a SLD installed.It can be on same or different system.
Its better if you follow the Master installable.
If you are installing XI 2004s it asks you for all the options in a sequence , for which all components you wish to install(eg. XI or MI etc) on your WAS.
Regards,
Yomesh

Prerequisites for SNC SAP router

I want to configure SAP router in my system (intranet) which is not having any pubic ip. What are the Prerequisites for configuring SNC SAP router.

HI
There are many pre requisite for sap snc router
1) one system with Winwods
2) one Public IP I.e compulsary
after public IP U have to fill DATA Sheet and sent TO sap
With ur system name And Public ip
after that u have to download
sacar file for installed SAP router ( letest version )
And
Ond OSS User ID And Password
for cripto file just to below link
https://websmp210.sap-ag.de/~form/handler?_APP=00200682500000000917&_EVENT=DISPLAY
download letedst version according ur opration system
and make directory
e.g -. drive://usr/sap/saprouter
uncar ur letes version here and sart to sap router installtion
best of luck

SAP router installation for VPN method

Similar Messages

Maybe you are looking for