Saprouter configuration

Hi,
I am getting follwing error
C:\saprouter\ntintel>sapgenpse get_pse -v -r certreq -p local.pse "CN=solman, OU
=0000731019, OU=SAProuter, O=SAP,C=DE"
Got absolute PSE path "C:/saprouter/ \local.pse".
Please enter PIN:
Please reenter PIN:
Supplied distinguished name: "CN=solman, OU=0000731019, OU=SAProuter, O=SAP,C=D
E"
Creating PSE with format v2 (default)
get_pse: Can't create PSE.
ERROR in af_create: (4352/0x1100) could not flush : "SW-PSE"
ERROR in create_PSE: (4352/0x1100) could not flush : "SW-PSE"
ERROR in modified_PSEFile: (4352/0x1100) could not flush : "SW-PSE"
ERROR in flush_PSEFile: (1283/0x0503) Can't write file : "C:/saprouter/ \local.p
se"
ERROR in aux_OctetString2file: (1283/0x0503) Can't write file : "C:/saprouter/ \
local.pse"
Please help me on this
Regards
Siva

Hi,
Thanks for your reply,
I am geeting diffrent error. When iam applying certificate in service market place it is giving follwing error.
The submitted Distiguished Name (DN) does not match the DN contained in the request for the SAProuter certificate.
Regards
Siva

Similar Messages

SNC with SAPRouter configuration for Third party company

Hi expers,
Need your advise for my below scenario.
We are running SAP on IBM i. My question is about outside world connectivity with encryption mechanism to SAP AS.
As of now , we are not using SNC either for internal / external network connectivity with SAP apps server. But we are going to allow third party company to connect for one of the payment processing takes place. Since the third party company not accepting VPN connectivity, we are planning to implement Separate SAPRouter configured with SNC, (encryption option), and open the firewall port for them. How much secured it is ? we are in the process of installaing and configuring windows server for SNC & SAPRouter installation. What are all the required configuration in SAP Application server level & new SNC server, for this ? How exactly SAPGui ( from third party company) to SAP Apps Server will go through the traffic ? Need experts advise on this ?
Basically I want to make sure, once it is configured, trafic will go through encrypted way outside of our network. Thanks in advance for all your valuable reply !

Hi mgrant,
The information at the bottem of the article in in Keith_Beddoe's personal website may help. Link: Using your own router for Infinity
The MTU Size needs to be set as 1492
Cheers
jac_95 | BT.com Help Site | BT Service Status
Someone Solved Your Question?
Please let other members know by clicking on ’Mark as Accepted Solution’
Try a Search
See if someone in the community had the same problem and how they got it resolved.

SAProuter configuration error

Hello Experts,
I have installed SAP ERP 6.0 SR3 on windows server 2003 64bit and done post installation steps.
For SAProuter configuration, I have followed below steps.
1. Downloaded .CAR file and extract into "user/sap/saprouter/ " folder.
2. Created SAProuter services and create same forlder in registry.
Only below link steps I have followed.
http://help.sap.com/saphelp_nw04/helpdata/en/4f/992dab446d11d189700000e8322d00/content.htm
Error / question.
1. SAProuter server will not running.
2. error in DEV_ROUT file i,e ./SAPROUTTAB file is not open.
3. Confused about CRYPROGHAPHY library.
4. Is there any version issue ?
Please suggest me for configuraing SAProuter in system.
Thanks & regards,
Rahul S.

Hello Chris,
There is no saprouttab file created in system.
For creating saprouttab file which command I have to follow ?
At the time of starting SAProuter below error in dev_rout file.
Sat Mar 05 15:36:07 2011
SAP Network Interface Router, Version 38.10
command line arg 0:     saprouter
command line arg 1:     -r
main: pid = 2272, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
ERROR => fopen './saprouttab' (2: No such file or directory) [nirout.cpp   7611]
**LOG Q0I=> NiRRouttab: fopen (2: ENOENT: No such file or directory OR: The system cannot find the file specified. ) [nirout.cpp 7613]
cannot open './saprouttab': all routing disabled!!!
Could not open permission table
for starting which steps I have to follow ?
Thanks for replay,

SAPRouter configuration: ping to sapserv3 time out

Hello!!!
Could you please help me?
I try to configure RFC connection SAPOSS.
I need it to install ST-A/PI and use SAP Maintanence optimizer...
On saprouter host command
ping sapserv3
is time out...
Error message from sap system:
trc file: "dev_lg", trc level: 1, release: "700"
Tue Dec 2 16:14:58 2008
ERROR => NiBufIProcMsg: hdl 0 received rc=-5 (NIETIMEOUT) from peer [nibuf.cpp    2120]
ERROR => MsINiWrite: NiBufSend (rc=NIETIMEOUT) [msxxi.c      2476]
ERROR => MsIAttachEx: MsINiWrite (rc=NIETIMEOUT) [msxxi.c      731]
ERROR => LgIAttach: MsAttach (rc=NIETIMEOUT) [lgxx.c       3978]
ERROR => LgApplSrvInfo: LgIAttach(rc=LGEMSLAYER) [lgxx.c       1271]
LOCATION    SAProuter 38.10 on 'sap-router-01'
ERROR       connection to 147.204.2.5:sapdp99 timed out
TIME        Tue Dec 02 16:03:17 2008
RELEASE     700
COMPONENT   NI (network interface)
VERSION     38
RC          -5
MODULE      nirout.cpp
LINE        5441
DETAIL      RTPENDLIST::timeoutPend: ROUTED timeout
COUNTER     41
Reason is in sapserv3 firewall?
TIA!
Regards,
Tonya

Hi.
Try to connect to sapserv2 instead, with IP address 194.39.131.34, port 99.
You can change these settings in t-code OSS1 -> Parameter -> Techincal settings.
Also, are you sure that the necessary ports are open in your firewall:
<Customer SAProuter> -> 194.39.131.34:3299/tcp
194.39.131.34 -> <Customer SAProuter>:3299/tcp
<Customer SAProuter> -> 194.39.131.34:icmp (echo-reply, type 0)
194.39.131.34 -> <Customer SAProuter>:icmp (echo-request, type 8)
See SAP Note 48243 for details.
Regards,
Thomas
Edited by: Thomas Kjelsrud on Dec 2, 2008 3:45 PM

SAProuter configuration on LAN

How to configure SAProuter, the connectivity with external World is through Hardware Firewall and IP address is configured on Firewall, the Servers are on static IP 192.168.xx.xx Additional IP is on the extra LAN card of Solution Manager. Firewall is not allowing to ping the additional IP which is on the Server.

Hi Hari,
Have you enable NAT in your firewall ? If not then you have to enable the NAT between the Public IP & the static IP on which you want to configure the SAP router.
Secondly you need to make policy to allow the traffic of SAP on this SAP ROUTER system which will be on port 3200 to 3299 as per your config.
Regards
Virendra
Edited by: Virendra Pandya on Jun 27, 2008 2:51 PM

Can you help us improve our SAProuter configuration process?

Have you recently discussed installing SAProuter in order to enable remote connectivity to your SAP BusinessObjects systems with an SAP Support Consultant?
Perhaps you have watch a video or read some of the material at http://service.sap.com/remote-supportability ?
If so we would like to hear from you! Please have a look at my recent blog post for more details: Interested in SAProuter? Please let us know.
Thanks!

Alexey Lukin wrote:
That's a good attempt, Steve! You can do even better if you complement Denoiser with Decrackler to reduce that residual buzz, esp. at higher frequencies.
Alexey, I only spent a few minutes on it! The NR really didn't take too long to set up, and I didn't investigate it any further - this was merely an attempt to find out how possible it would be at all, rather than perfection. .
The link you gave appears to have an extra http:// on the end of it which has to be removed before the file will download. Now I've listened to it, I think that a combination of both approaches is the real answer to cleaning it up - that way you get just about zero crackle and less pumping artefacts on the voice. I still think you need the advanced version to get rid of the pumping though, although I agree that you don't for the rest of it.
And for everybody else who's wondering where Alexey has suddenly popped up from - well, basically iZotope, but he also created the RightMark analyser and ExtraBit, and deserves much kudos for everything he's touched! He does a lot of iZotope's DSP and yes, there's some of his stuff in Audition (the radius time and pitch algorithm is his, and obviously there's more in the rest of the iZotope-based plugins).

Error in saprouter configuration

hi
I am trying to configure sap router but when i am tring to import the received certificate sapgenpse import_own_cert -c srcert -p local.pse i get this error
C:\sap_oss\ntintel>sapgenpse import_own_cert -c srcert -p local.pse
import_own_cert: Installation of certificate failed
ERROR in ssf_install_CA_response: (1281/0x0501) aux_file2OctetString failed : "
o such file or directory"
ERROR in ssf_read_certs_from_file: (1281/0x0501) aux_file2OctetString failed :
No such file or directory"
ERROR in aux_file2OctetString: (1281/0x0501) stat("srcert") returned : "No such
file or directory"
C:\sap_oss\ntintel>
pls help me with an solution
regards
senthil

Hi,
you are not able to download the newer version?
try following link ( Note 455033 - SAPCRYPTOLIB versions, bugs and fixes )
SAPCRYPTOLIB software download:
http://service.sap.com/TCS
Download Area -> SAP Cryptographic Software
for 32 bit windows use following
https://websmp104.sap-ag.de/~sapidb/011000358700001216242007E/90000101.SAR
for 64 bit windows use following
https://websmp104.sap-ag.de/~sapidb/011000358700001218362007E/90000114.SAR
regards,
kaushal

Help required related to solman 7.0 configuration

Dear all,
I am installed solution manager 7 , then download solution manager patches stack 7.0 initial to 26 and apply .SCA in java instance but unfortunately some patches required approval , then I restart server and after startup unable to connect in
http://host:port/nwa and SOLMAN_STEUP web page but I am able to connect config tool, now I am confused that what is the process to configure solman or which steps I follow for example
saprouter configuration ( connect to sap )
Maintenance optimizer
or else
plz guide me and if possible then provide configuration related to solman 7.0
regards
Rayyan Shahid

Hello,
You can follow the SPRO, it has information for every activity that has to be run.
You can also have a look at the Solution Manager 7 EHP1 configuration guide at
https://websmp105.sap-ag.de/~sapidb/011000358700000308502009E.PDF
There are also tutorial documents to configure Solution Manager at
http://service.sap.com/rkt-solman , you can download the ones you need at https://websmp206.sap-ag.de/~sapidb/011000358700001991742008E.zip
Please ask questions related to the content of the guides if needed.
Best regards,
Miguel Ariñ

SNC Configuration

Hi Gurus,
I am working on the Contract Manufacturing Scenario for SNC. The system landscape is ECC-XI-APO-ICH.
When Purchase Order is created idoc is sent out to XI already but having problems with sending XI to APO.
Do you know if there are SNC Configurations to be done in SCM as the receiver of the XML Message.
Thanks a lot for your answers.
Regards,
Armi

Hi Armi,
Hi,
SAProuter/SNC via Internet
u2022 SNC secured SAProuter u2013 SAProuter connections are established between SAP and the customeru2019s SAProuter to provide data confidentiality and integrity services. These SNC connections complement the leased lines in the current SAPNet R/3 Frontend environment. State-of-the-art encryption, authentication, and access control technology will be employed. No additional hardware compared to a leased-line setup is required at either end of the connection. (See diagram below).
u2022 Customers are required to install a SAProuter with an official, static IP address (DHCP Addresses will not work) running SNC inbound and outbound connection to SAP at their end of the connection in a Demilitarized Zone. This SAProuter must be accessible from the Internet. All service connections between SAP and the customer must be made over the respective SAProuters.
u2022 Certificates needed are available on the SAP Service Marketplace.
Requirement:-
Internet connection: recommended
minimum bandwidth = 64 kbps
SAProuter machine
Official IP address (static) for the SAProuter host.
SAProuter installation package
SAP SNC libraries and executables.
These may be downloaded from the SAP Service Marketplace.
A Demilitarized Zone at the customer site with a minimal setup as described in the networking section at: http://service.sap.com/SYSTEMMANAGEMENT Choose: Security > Technical Track
SAP Security Guide.
More information on SNC connections is also available in the SAP Service Marketplace.
Since the host running the SAProuter software is a full computer with operating system, the security at the operating system level must be hardened in order to minimise the risk of the machine being hacked from the Internet. One recommendation will be for example to run a C2 security level compliant operating system. SAP takes no liability if the security of the companyu2019s network is compromised.
Other networking equipment (routers and hubs) needed to form the network at the customeru2019s premises
Comparisions
Property SAProuter / SNC via Internet
Hardware requirements Firewall + SAProuter host in DMZ
Software SAProuter starting from NI version 35
SAPSECULIB can be obtained from the Service Marketplace
Network addresses (besides address of Internet router, firewall, u2026) 1 official static IP address for SAProuter
Configuration issues Careful setup of saprouttab necessary for security. Saprouttab influences security strongly as access is controlled via saprouttab and firewall.
Encryption By software
Encrypted data TCP packets
Only the data stream between SAProuters is encrypted
Encryption is handled on Application layer (OSI network layer 7)
Minimum required free bandwidth 64 kbit/s but may work also with
32 kbit/s
Supported services on SAP side All except FTP (files download)
Key management Digital certificates being requested via Service Marketplace Public Key Infrastructure (PKI)
Key storage In file system
Operating system SAProuter resides on a computer
therefore it is necessary to harden the security at the operating system level (for example, C2 level OS) to minimize the risk of the machine being hacked from the Internet
Additional expertise SAProuter knowledge usually available, SNC configuration requires additional knowledge
Standards Based on SNC, SAP proprietary standard
Contributing to costs u2022 Firewall hardware and software
u2022 Firewall administration costs
u2022 No additional license fee for security library based on SECUDE
Hope this helps.,
Thanks,
Naga

Configure maintenance optimizer

Hi,
I am configuring "Configure Maintenance Optimizer" and I get the following error when I use T-code SM_MOPZ.
SAP MOPZ auto-configuration warnings
Message no. IMG_FASTCONF030
What's happen with my SOLMAN system?
Please advise!!
Thanks
Duypm

Hi Duypm,
Its a long process to go.
First, Raise a message with SAP for SAPROUTER certificate if you are planning to use SNC. You need to provide a public IP of your SAPRouter machine in the message.
Second, Send the filled form to SAP
Configure SNC on SAPRouter
Configure OSS1 and SAPOSS rfc destination.
Then configure Maintenance Optimizer.
Cheers.....,
Raghu

SAPRouter SNC connection.

Hi,
I am using SAP 4.6c on Iseries.
I have SAPRouter configured on a windows system for my Iseries. It was functional 2 months ago.
Suddenly, I realised that when i am executing any saprouter command (e.g saprouter -l ), I am getting the following error:
=====================================================
ERROR       partner not reached (host localhost, service 3299)
TIME        Thu May 17 17:11:58 2007
RELEASE     46D
COMPONENT   NI (network interface)
VERSION     34
RC          -10
MODULE      ninti.c
LINE        1011
DETAIL      NiPConnect2
SYSTEM CALL SO_ERROR
ERRNO       10061
ERRNO TEXT WSAECONNREFUSED: Connection refused
COUNTER     1
========================================================
Even, I cant see any SAPRouter service in services.msc
Do I need to check / change anything on the Iseries server?
Please advise.
Regards,
Sai

Hello Sai,
you can run the SAProuter on the Server/OS of your choice. So, it is fully OK, to run it on Windows and the SAP system on iSeries.
The iSeries system doesn't need any changes - "just" a running SAProuter.
But, at the moment, your SAProuter doesn't seem to run (at least if you ran "saprouter -l" on Windows and not on iSeries).
As you describe that the service is not installed, it is "just" a wrong installation on your site. Either it ran never or you configured to run it in a DOS box and this is closed now - perhaps because of a reboot.
The following web-site describes a bit what to do and obviously partly you didn't do this by now:
http://www.easymarketplace.de/saprouter.php
Regards
Volker Gueldenpfennig, consolut.gmbh
http://www.consolut.de - http://www.4soi.de - http://www.easymarketplace.de

Saprouter not starting

Hi guys,
Im trying to setup an saprouter for my solution manager system, my solution manager is not yet ready but im through with the saprouter configuration.
When i try to start the saprouter, this is the error i got
"trcfile dev_rout
logfile routerlog
routtab cannot open './saprouttab': EXIT PROGRAM !!!
(running without saproutab is no longer supported for security reasons)
Could not open permission table"
I would appreciate any help you can offer.
Regards.

Hi,
You need to create the saprouttab file which I think is missing. Please go throuhg the below threads which will help you in resolving the issue.
SAP Router error
error while configuring saprouter
configure maintenance optimizer
Unable to start SAProuter
Regards,
Sharath

Connection to host service 3299 timed out

Hi all,
When SAP tries for logging in to our quality servers SAP is having timed out issue.
"Connection to host 204.103.218.70 service 3299 timed out".
But our quality ip address is 204.103.218.73.
Please help me out as we need to perform critical tests.
Thanks in advance,
chandu

> "Connection to host 204.103.218.70 service 3299 timed out".> But our quality ip address is 204.103.218.73.
Hi,
It seems the IP which is registered in SAP is 204.103.218.70 as host.Have you change the host of saprouter recently.
Check your SAProuter configuration.
At the same time check the saprouttab
Make the following changes in the hosts file and services file (under windows\system32\drivers\etc folder ) SAP-ROUTER system
hosts file:
<what ip here maintain whether its 204.103.218.70 or 204.103.218.73> SAP-ROUTER
194.39.131.34 sapserv2
services file:
sapdp99 3299/tcp
sapgw99 3399/tcp
sapmsO01 3601/tcp

Change hostname on SAP Content Server

Hi Gurus,
I'm investigating the effort required to change the hostname on a SAP content server. I'm well aware that with a SAP ABAP or Java instance we must use system copy tools to achieve this but with SAP Content server is there an easier way?
It is simply running MAXDB and IIS and so I think with careful planning it might be possible to change the hostname and keep things moving without a system copy.
Has anybody any experience to share?

Hi,
The main areas that you need to look at when making the changes are:
1/ Landscape :
Hostname files and profile parameters need to be updated.
RFC destination need to be modified ( see note 88346 )
TA SM59 , check/update the table RFCDES...
2/ OSS and SAProuter configuration
3/ SAPLOGON/SAPGUI configurations
4/ Database configuration..
96317 Host names during R/3 upgrade, tips & tricks
8307 Changing host name on R/3 host: What do you do?
Regards,
Naveen.

READ RFC to managed system could not be found

I am trying to run the managed system configuration in Solution Manager for NetWeaver CE (Java) system. The step "Configure Diagnostics" fails with 1 error and 2 warnings:
[SSO] SSO setup OK
[Roles] At least one support role assignment did not succed, check details below and logs for more info
[SAPRouter] 2 entries for SapRouter configuration were added or updated to table AIDIAGPORTS
[Wilyhost Agent] Wilyhost Agent setup finished successfully with limitations. Data of at least one action is not available in Enterprise Manager(sapmd1ci.itg.ti.com:6001).
[E2E RFC] The definition of the READ RFC to the managed system could not be found. Please make sure to run the RFC creation assistant in SMSY, as described in setup documentation
[E2E RFC] The E2E Extractors Batchs were succesfully started for sapdsbxci/XD1/00 (sapdsbxci)
I have done RFC definitions for ABAP systems in SMSY transaction but this system is NW CE 7.11 (Java) only system. How do I define READ RFC for JAVA system? What do I need to do to get rid of this error above?
Regards,
Asif

Hello,
The documentation is located at [Help|http://help.sap.com/saphelp_smehp1/helpdata/en/b3/64c33af662c514e10000000a114084/frameset.htm]
Then navigate Basic Settings > Solution Manager System Landscape > Create Systems > Generate RFC Connections
You can:
Assign an existing RFC destination to a client with Assign and Check RFC Destinations.
Generate RFC destinations for your managed systems
Change existing RFC connections.
Delete RFC destinations.
Resolve RFC Generation Errors
I hope you find this information helpful.
Regards,
Paul

Saprouter configuration

Similar Messages

Maybe you are looking for