Saprouter installation

hi
Can SAProuter be installed on WindowsXP operating systemm
please let me know.
REgards
Prasanna.B.S

Hi! Manoj,
Follow the steps :
1) Create a folder saprouter in c:\usr\sap\saprouter
2) copy niping.exe and saprouter.exe from kernel or sap marketplace
3) Create a folder saprouttab. Create a text file in notepad without any ext .
File name saprouttab.
Contant looks like :
P * 194.117.106.129 3299
P 194.117.106.129 10.20.2.157 3389
P 194.117.106.129 10.20.2.143 3389
P 194.117.106.129 10.20.2.115 3389
P 194.117.106.129 10.20.8.8 3389
P 194.117.106.129 10.20.2.143 *
P 194.117.106.129 10.20.2.157 *
P 194.117.106.129 10.20.2.115 *
P 194.117.106.129 10.20.8.8 *
D * * *
4) Install the saprouter as servece and start it.
For more details pl. consult Saprouter installation guide.
regards,
Pratip

Similar Messages

SAProuter Installation on iSystem

Hello,
We are planning to install SAProuter on our iSystem. I refer the SAP Note: 567853 - iSeries: Installing sapcrypto library with SAProuter. But the SAP Note is confusing me. Pease take a look at the following information which I copied from the SAP Note. The SAP note says download th crypto s/w and save it as a save file to move to iSystem. But when we refer SAP Note: 758667 for installing SAPCrypto library on iSystem fo Kernel 700, the instllation proceure is different. The save file concept seems is for 620/640 versions.
And then under the "Restoring the contents on the iSeries system" in the SAP Note: 567853 has a statement
    - RSTOBJ OBJ(ALL) SAVLIB(SAPCRYPTO) DEV(SAVF) SAVF(QGPL/CRYPTO)
                MBROPT(ALL) ALWOBJDIF(ALL) RSTLIB(SAPROUTER)
But we don't have any SAPCRYPTO library exists on the system.
Its very confusing me. Could anybody help me?
SAP Note: 567853
Solution
    o Downloading necessary software components from SAP Service Marketplace
         Please have a look at the following document on the Service Marketplace before
         downloading the sapcrypto library for OS/400:
              - http://service.sap.com/saprouter-sncdoc
               (This is the generic documentation for the installation of the sapcrypto Library,
                 which doesn't include the AS/400 specifics. The links and general information may,
                 however, still be of interest for you.)
             - You can then download the software at => http://service.sap.com/tcs => Download
                Area => SAP Cryptographic Software (see note 758667 for details).
              - The downloaded file is a CAR file which you can unpack with SAPCAR on your PC
                and then upload to the iSeries with binary FTP into the *SAVF QGPL/CRYPTO.
     o Restoring the contents on the iSeries system
              - Logon with QSECOFR
              - CRTLIB LIB(SAPROUTER)
              - RSTOBJ OBJ(ALL) SAVLIB(SAPCRYPTO) DEV(SAVF) SAVF(QGPL/CRYPTO)
                MBROPT(ALL) ALWOBJDIF(ALL) RSTLIB(SAPROUTER)
                If the message CPF3848 "4 security or data format changes occurred" is displayed,
                it can be ignored.
              - GRTOBJAUT OBJ(SAPROUTER/ALL) OBJTYPE(ALL) USER(PUBLIC) AUT(ALL)
              - MKDIR DIR('/secude')
              - MKDIR DIR('/secude/etc')
              - RST DEV('/qsys.lib/saprouter.lib/secude_etc.file') OBJ(('/*') ('/QSYS.LIB' *OMIT)
                ('/QDLS' OMIT)) ALWOBJDIF(ALL)
                If the message CPD377B "Security changes occurred for 4 objects" is displayed, it
                can be ignored.
             - CHGPGP OBJ('/secude/etc') NEWPGP(R3GROUP) DTAAUT(RWX) OBJAUT(ALL)
             - CHGPGP OBJ('/secude/etc/') NEWPGP(R3GROUP) DTAAUT(RWX) OBJAUT
               (*ALL)
Best Regars,
Kris

Kris wrote:
And then under the "Restoring the contents on the iSeries system" in the SAP Note: 567853 has a statement
- RSTOBJ OBJ(ALL) SAVLIB(SAPCRYPTO) DEV(SAVF) SAVF(QGPL/CRYPTO)
MBROPT(ALL) ALWOBJDIF(ALL) RSTLIB(SAPROUTER)
But we don't have any SAPCRYPTO library exists on the system.
Its very confusing me. Could anybody help me?
This statement doesn't require that SAPCRYPTO library exists on your system.
The SAVLIB parameter on the RSTOBJ command indicates the name of the library that was saved on the original system where the savf was created.
The library that it is restoring it to is specified in the RSTLIB Parameter, which is SAPROUTER.
SAPROUTER library needs to exist on your system, but not SAPCRYPTO.
This usage of SAVLIB and RSTLIB is standard AS400 / iSeries / System i functionality.
Good luck
Brian

Error in SAProuter installation

Hi to all,
I have followed all step for install a saprouter, but i have the follow error message:
(when i start the service in "Computer Management")
"Could not start saprouter service on local computer
Error 14001: This application has failed to start because the application configuration is incorrect. Reinstalling application may fix the problem."
(in cmd)
C:\>saprouter -r
trcfile dev_rout
no logging active
ERROR => invalid lines in ./saprouttab, see dev_rout [nirout.cpp   8009]
WARNING: wildcard character used in route target
C:\>saprouter -l
Tue Dec 04 10:18:40 2007
SAP Network Interface Router, Version 37.12
Tue Dec 04 10:18:41 2007
***LOG Q0I=> NiPConnect2: SiPeekPendConn (10061: WSAECONNREFUSED: Connection ref
used) [nixxi.cpp 8724]
ERROR => RTADMINREQ::execClientReq: NiBufConnect (rc=-10) [nirout.cpp   6713
ERROR       partner not reached (host 127.0.0.1, service 3299)
TIME        Tue Dec 04 10:18:41 2007
RELEASE     640
COMPONENT   NI (network interface)
VERSION     37
RC          -10
MODULE      nixxi.cpp
LINE        8724
DETAIL      NiPConnect2
SYSTEM CALL SiPeekPendConn
ERRNO       10061
ERRNO TEXT WSAECONNREFUSED: Connection refused
COUNTER     1
the saprouttab file is in the same foleder of saprouter and there is only a line (ex."P 10.0.1.132 10.0.1.211 3299")
Where is the problem?

hi franco,
please check your network card. It seems that you have problem with your network card since it's only show loopback address.
ardhian
http://sapbasis.wordpress.com

Is Saprouter installation on windows 2008 64 bit x86_64 suppoted?

Hi,
Please guide me.I could see saprouter.exe for windows server 2008 64 bit x86_64.But I cant see cryptographic file for windows 2008 64 bit x86_64.
Thanks

I have the same queston concerning WIndows 2008 as a platform.
At the ../swdc I see following download option but does not tell me if 2008 is supported.
SAPROUTER 7.10 -> Windows Server on x64 64bit
Again is Windows 2008 supported.
Thank you in advance.

Error on saprouter installation (Windows 2003 server)

Hi everyone,
We are setting up our SAProuter server specifically for our SAP remote connection and Solution Manager setup but encountered an error. I am using Windows 2003. I've already acquired certificate by issuing command sapgenpse get_pse -v -r certreq -p local.pse. I have no idea what the error is all about. Unfortunately, I am no Network Admin expert if this is about network issues. Would very much appreciate some enlightenment and help from you guys. Thanks!
Error details from dev_rout log and SM59:
dev_rout log:
ERROR => SncPAcquireCred()==SNCERR_GSSAPI [sncxxall.c 1510]
      GSS-API(maj): No credentials were supplied
      GSS-API(min): File is not existing
    Could't acquire INITIATING credentials for
from SM59 of one of our SAP systems
Logon     Connection Error
Error Details     Error when opening an RFC connection
Error Details     ERROR: GSS-API(maj): No credentials were supplied GSS-API(min): File is not e
Error Details     LOCATION: SAProuter 37.8 on ....
Error Details     DETAIL: SncPAcquireCred
Error Details     CALL: gss_acquire_cred
Error Details     COMPONENT: NI (network interface)
Error Details     COUNTER: 7
Error Details     MODULE: sncxxall.c
Error Details     LINE: 1510
Error Details     RETURN CODE: -104
Error Details     SUBRC: 0
Error Details     RELEASE: 640
Error Details     TIME: Fri Oct 26 17:40:02 2007
Error Details     VERSION: 5

Hi Markus, yes .pse file is located in the same directory as the saprouter executables.
Also, when I tried to execute sapgenpse get_my_name -p local.pse I got the ff. error:
D:\SAProuter>sapgenpse get_my_name -p local.pse
get_my_name: Couldn't open PSE "D:\SAProuter\local.pse"
ERROR in af_open: (1824/0x0720) Wrong PIN for PSE : "D:\SAProuter\local.pse"
ERROR in secsw_open: (1824/0x0720) Wrong PIN for PSE : "D:\SAProuter\local.pse"
ERROR in sec_parse_PSEInfo_cont: (1824/0x0720) Wrong PIN for PSE : "D:\SAProuter
\local.pse"
ERROR in aux_get_credentials: (17665/0x4501) Requested credentials not found
ERROR in des_decrypt_end: (1792/0x0700) wrong or inconsistent padding decrypted
And then tried running sapgenpse get_my_name -v -n Issuer and got the ff:
D:\SAProuter>sapgenpse get_my_name -v -n Issuer
get_my_name: no PSE name supplied, SSO credentials not readable for you!
running seclogin with USER="XXXXXX"
0: CN=OURSERVER, OU=0000123456, OU=SAProuter, O=SAP, C=DE
         D:\SAProuter\local.pse
      NOT readable for XXXXXX
NO readable SSO-Credentials available (total 1)
I really am so confused as to what is happening here since it seems I successfully acquired the certificate and when I run sapgenpse seclogin -p local.pse -O administrator I got the ff. message which seems successfully completed:
D:\SAProuter>sapgenpse seclogin -p local.pse -O administrator
running seclogin with USER="XXXXXX"
creating credentials for user "OURSERVER\Administrator"...
Please enter PIN:
Adjusting credentials and PSE ACLs to include "OURSERVER\Administrator"...
   D:\SAProuter\cred_v2 ... ok.
   D:\SAProuter\local.pse ... ok.
Added SSO-credentials for PSE "D:\SAProuter\local.pse"
   "CN=OURSERVER, OU=0000123456, OU=SAProuter, O=SAP, C=DE"
Thanks for helping out!

SAPCAR error for saprouter installation

Error message when uncar Saprouter package
csppsm01:ssmadm 4> SAPCAR -xvf saprouter_1-20002350.sar
SAPCAR: processing archive saprouter_1-20002350.sar (version 2.01)
x niping
SAPCAR: could not open for writing niping (error 28). Permission denied
csppsm01:ssmadm 15> SAPCAR -tvf saprouter_1-20002350.sar
SAPCAR: processing archive saprouter_1-20002350.sar (version 2.01)
-rwxrwxr-x 5509492 05 Aug 2007 21:03 niping
-rwxrwxr-x 6119281 09 Aug 2007 20:47 saprouter
Thanks
Eric
Eric

Hello Eric,
Please refer to SAP Note 130683.
Make sure the sidadm has rwx persmissions on the file being uncarred and all the files in the directory where SAPCAR resides including . and .. (. & .. are usually hidden)
Hope that helps.
Regards,
Snehal

SNC with SAPRouter configuration for Third party company

Hi expers,
Need your advise for my below scenario.
We are running SAP on IBM i. My question is about outside world connectivity with encryption mechanism to SAP AS.
As of now , we are not using SNC either for internal / external network connectivity with SAP apps server. But we are going to allow third party company to connect for one of the payment processing takes place. Since the third party company not accepting VPN connectivity, we are planning to implement Separate SAPRouter configured with SNC, (encryption option), and open the firewall port for them. How much secured it is ? we are in the process of installaing and configuring windows server for SNC & SAPRouter installation. What are all the required configuration in SAP Application server level & new SNC server, for this ? How exactly SAPGui ( from third party company) to SAP Apps Server will go through the traffic ? Need experts advise on this ?
Basically I want to make sure, once it is configured, trafic will go through encrypted way outside of our network. Thanks in advance for all your valuable reply !

Hi mgrant,
The information at the bottem of the article in in Keith_Beddoe's personal website may help. Link: Using your own router for Infinity
The MTU Size needs to be set as 1492
Cheers
jac_95 | BT.com Help Site | BT Service Status
Someone Solved Your Question?
Please let other members know by clicking on ’Mark as Accepted Solution’
Try a Search
See if someone in the community had the same problem and how they got it resolved.

Saprouter could not start "Error:1053"

Hi!
I have installed the SAP-Router service and cannot start it from "SERVICES".
I get the error "Could not start the saprouter on the Local machine".
I also implemented the recommendation from microsoft ot apply the new package
from http://support.microsoft.com/kb/839174/en-us
. But If I try to apply it, the popup tells me "no new packages found that are newer than on my OS".
<b>How should I proceed?
Is it possible to deinstall the service from "services"?</b>
Thank you!
regards

Hello Peter,
We started a survey to change our SAProuter acrhitecture to SAProuter
7.0 version.
As we overviewed all prerequisites, we require from SAP support
confirmation on the 2 following points :
1. As saprouter program will be installed on host which already exists
and is located in DMZ, the existing Windows operating system version is
W2003 Server Standard Edition in french version.
Thus, we would like SAP support to confirm that SAProuter program can
be installed and will run correctly on Windows 2003 Standard Edition in
french version as SAP note 690432 'Windows 2003 Support' mentions that
SAP supports such an hardware configuration if Windows Multilanguage
User Interface (MUI) kit is installed and that W2003 Standard Edition
is supported for 'test or small systems only' (only saprouter program
will run on this host)
2. One of the requirements of saprouter installation is to provide
public @IP to SAP.
As we get such an IP adress, we require SAP support to confirm that
this IP adress will work properly as below :
Saprouter will be installed on host which is located in DMZ (SAP
requirement) what does mean 'between our 2 firewalls'
Thus, connection from sap will be translated by first firewall which
will redirect to public adress provided
Question : Must the host on which saprouter will run have one and only
one IP adress?
As mentionned previously, host already exists and has already an IP
adress : then, public @IP provided will have to be translated by
firewall.
Thanks for your response as my colleagues and I noted that you are 'reference guru' on several topics (you answered to us for customer message open ofr inquiry on ECC 6.0 upgrade with OS/DB migration)
Rgds,
Zulain

New SAProuter with VPN to setup

Hello Gurus,
I have been requested to setup new SAProuter 7.00 in our SAP environment through VPN to be created.
Existing environment is as below :
SAP systems : R/3 4.6C
SAProuter release : v34
SAProuter host configuration : Windows 2003 (US) Entreprise Edition
SAProuter runs through router ISDN line 128KBits connected to our LAN...
As I already checked 'SAProuter 7.00 - Documentation' from http://service.sap.com/patches, I would like to know the 'step-by-step' procedure to proceed :
1. Can I setup new SAProuter even if we currently use existing SAProuter?
2. If NO, what is the procedure for testing my new SAProuter when installed?
3. Plus, can I 'upgrade' existing SAPRouter release to 7.00 then 'only' modify the network configuration? (note that I am checking documentation 'Remote Connectivity for mySAP.com Solutions over the Internet' from march 2001 to find solution : where finding newest release of this documentation?)
Thanks in advance for your insight!
Rgds,
zulain

Hello Hari,
As mentionned previously, we started a survey to change our SAProuter acrhitecture to SAProuter 7.0 version.
As we overviewed all prerequisites, I do require confirmation on the 2 following points :
1. As saprouter program will be installed on host which already exists
and is located in DMZ, the existing Windows operating system version is
W2003 Server Standard Edition in french version.
Thus, we would like SAP support to confirm that SAProuter program can
be installed and will run correctly on Windows 2003 Standard Edition in
french version as SAP note 690432 'Windows 2003 Support' mentions that
SAP supports such an hardware configuration if Windows Multilanguage
User Interface (MUI) kit is installed and that W2003 Standard Edition
is supported for 'test or small systems only' (only saprouter program
will run on this host)
2. One of the requirements of saprouter installation is to provide
public @IP to SAP.
As we get such an IP adress, we require SAP support to confirm that
this IP adress will work properly as below :
Saprouter will be installed on host which is located in DMZ (SAP
requirement) what does mean 'between our 2 firewalls'
Thus, connection from sap will be translated by first firewall which
will redirect to public adress provided
Question : Must the host on which saprouter will run have one and only
one IP adress?
As mentionned previously, host already exists and has already an IP
adress : then, public @IP provided will have to be translated by
firewall. Will such a configuration work fine?
Thanks in advance for your support.
Rgds,
Zulain

SAProuter inquiry : Microsoft MUI & IP public

Hello gurus,
We started a survey to change our SAProuter acrhitecture to SAProuter 7.0 version.
As we overviewed all prerequisites, I do require confirmation on the 2 following points :
1. As saprouter program will be installed on host which already exists
and is located in DMZ, the existing Windows operating system version is
W2003 Server Standard Edition in french version.
Thus, we would like SAP support to confirm that SAProuter program can
be installed and will run correctly on Windows 2003 Standard Edition in
french version as SAP note 690432 'Windows 2003 Support' mentions that
SAP supports such an hardware configuration if Windows Multilanguage
User Interface (MUI) kit is installed and that W2003 Standard Edition
is supported for 'test or small systems only' (only saprouter program
will run on this host)
2. One of the requirements of saprouter installation is to provide
public @IP to SAP.
As we get such an IP adress, we require SAP support to confirm that
this IP adress will work properly as below :
Saprouter will be installed on host which is located in DMZ (SAP
requirement) what does mean 'between our 2 firewalls'
Thus, connection from sap will be translated by first firewall which
will redirect to public adress provided
Question : Must the host on which saprouter will run have one and only
one IP adress?
As mentionned previously, host already exists and has already an IP
adress : then, public @IP provided will have to be translated by
firewall.
Then, will such a configuration work fine?
Thanks in advance for your help.
Rgds,
Zulain

> 1. As saprouter program will be installed on host
> which already exists
> and is located in DMZ, the existing Windows operating
> system version is
> W2003 Server Standard Edition in french version.
For just saprouter this will work, it does nothing but handling network connection.
> Question : Must the host on which saprouter will run
> have one and only
> one IP adress?
> As mentionned previously, host already exists and has
> already an IP
> adress : then, public @IP provided will have to be
> translated by
> firewall.
The saprouter must be reachable from the inside (to make e. g. transaction SNOTE to work) and from the outside so that the support can access your systems in case of a problem.
The IP adresse visisible to the inside of your network doesn't care, you just need to make sure the routing settings are correctly set up on your firewall.
Markus

SAProuter and SAP services

Hi All.
Does SAPROUTER is a mandatory tool that must be configure to enable any SAP service, like SLM, EWA or SNOTE?
Does every customer need to have a SAPROUTER installation on their network?
What are the most important services SAPROUTER cannot provide to a customer if the security network team doesn't allow SAPROUTER use?
Can someone help me to provide some good reasons to ensure SAPROUTER is important to every SAP system installation, and most important to Solution Manager?
Kind regards.

> Can someone help me to provide some good reasons to ensure SAPROUTER is important to every SAP system installation, and most important to Solution Manager?
SAProuter is necessary to enable the SAP support connect to your systems. Without an installed saprouter (one is enough, not one for each system) the support can't connect to your systems and hence can't help.
If you read your SAP support contract (you signed) you will see that an installed and working saprouter is part of it.
Markus

SNC Configuration

Hi Gurus,
I am working on the Contract Manufacturing Scenario for SNC. The system landscape is ECC-XI-APO-ICH.
When Purchase Order is created idoc is sent out to XI already but having problems with sending XI to APO.
Do you know if there are SNC Configurations to be done in SCM as the receiver of the XML Message.
Thanks a lot for your answers.
Regards,
Armi

Hi Armi,
Hi,
SAProuter/SNC via Internet
u2022 SNC secured SAProuter u2013 SAProuter connections are established between SAP and the customeru2019s SAProuter to provide data confidentiality and integrity services. These SNC connections complement the leased lines in the current SAPNet R/3 Frontend environment. State-of-the-art encryption, authentication, and access control technology will be employed. No additional hardware compared to a leased-line setup is required at either end of the connection. (See diagram below).
u2022 Customers are required to install a SAProuter with an official, static IP address (DHCP Addresses will not work) running SNC inbound and outbound connection to SAP at their end of the connection in a Demilitarized Zone. This SAProuter must be accessible from the Internet. All service connections between SAP and the customer must be made over the respective SAProuters.
u2022 Certificates needed are available on the SAP Service Marketplace.
Requirement:-
Internet connection: recommended
minimum bandwidth = 64 kbps
SAProuter machine
Official IP address (static) for the SAProuter host.
SAProuter installation package
SAP SNC libraries and executables.
These may be downloaded from the SAP Service Marketplace.
A Demilitarized Zone at the customer site with a minimal setup as described in the networking section at: http://service.sap.com/SYSTEMMANAGEMENT Choose: Security > Technical Track
SAP Security Guide.
More information on SNC connections is also available in the SAP Service Marketplace.
Since the host running the SAProuter software is a full computer with operating system, the security at the operating system level must be hardened in order to minimise the risk of the machine being hacked from the Internet. One recommendation will be for example to run a C2 security level compliant operating system. SAP takes no liability if the security of the companyu2019s network is compromised.
Other networking equipment (routers and hubs) needed to form the network at the customeru2019s premises
Comparisions
Property SAProuter / SNC via Internet
Hardware requirements Firewall + SAProuter host in DMZ
Software SAProuter starting from NI version 35
SAPSECULIB can be obtained from the Service Marketplace
Network addresses (besides address of Internet router, firewall, u2026) 1 official static IP address for SAProuter
Configuration issues Careful setup of saprouttab necessary for security. Saprouttab influences security strongly as access is controlled via saprouttab and firewall.
Encryption By software
Encrypted data TCP packets
Only the data stream between SAProuters is encrypted
Encryption is handled on Application layer (OSI network layer 7)
Minimum required free bandwidth 64 kbit/s but may work also with
32 kbit/s
Supported services on SAP side All except FTP (files download)
Key management Digital certificates being requested via Service Marketplace Public Key Infrastructure (PKI)
Key storage In file system
Operating system SAProuter resides on a computer
therefore it is necessary to harden the security at the operating system level (for example, C2 level OS) to minimize the risk of the machine being hacked from the Internet
Additional expertise SAProuter knowledge usually available, SNC configuration requires additional knowledge
Standards Based on SNC, SAP proprietary standard
Contributing to costs u2022 Firewall hardware and software
u2022 Firewall administration costs
u2022 No additional license fee for security library based on SECUDE
Hope this helps.,
Thanks,
Naga

Resume for Freshers in SAP Basis

Dear Friends,
I Fresher in SAB Basis. I was finished the course in june 2010. I am doing the practices from june to till date on SAP IDES 4.7 and ECC6.0.
Please send the resume format for fresher.
Regards
akhilesh

Akhil,
I dont think so you will get an answer here .... but at the same time all I can say you can add those activities which you have learnt and mastered the Basis Activities.
Batch Job Creation
Checking System Logs
Analyzing Ssytem Dumps
Back up/Archive logs Monitoring
Configuration of SAProuter
Installation of ECC and other SAP Components
Configuring SMSY and LMDB (Solution Manager)
thats the way you create your CV and dont put anything which you have not done...
Hope it will help you.

SAPOSS connection

I have to open OSS conection to SAP..Please let me know which sapserver I should choose and what to be done at saprouttab file ...I tried with sapserver2 but It would not work..
unable to connect SAPnet message server
Error :
partner sapdp99 not reached
error no :81
no route to host.
I would appreciate your steps and procedure to be done for each Production server

Hi,
SAProuter/SNC via Internet
u2022     SNC secured SAProuter u2013 SAProuter connections are established between SAP and the customeru2019s SAProuter to provide data confidentiality and integrity services. These SNC connections complement the leased lines in the current SAPNet R/3 Frontend environment. State-of-the-art encryption, authentication, and access control technology will be employed. No additional hardware compared to a leased-line setup is required at either end of the connection. (See diagram below).
u2022     Customers are required to install a SAProuter with an official, static IP address (DHCP Addresses will not work) running SNC inbound and outbound connection to SAP at their end of the connection in a Demilitarized Zone. This SAProuter must be accessible from the Internet. All service connections between SAP and the customer must be made over the respective SAProuters.
u2022     Certificates needed are available on the SAP Service Marketplace.
Requirement:-
Internet connection: recommended
minimum bandwidth = 64 kbps
SAProuter machine
Official IP address (static) for the SAProuter host.
SAProuter installation package
SAP SNC libraries and executables.
These may be downloaded from the SAP Service Marketplace.
A Demilitarized Zone at the customer site with a minimal setup as described in the networking section at: http://service.sap.com/SYSTEMMANAGEMENT Choose: Security > Technical Track
SAP Security Guide.
More information on SNC connections is also available in the SAP Service Marketplace.
Since the host running the SAProuter software is a full computer with operating system, the security at the operating system level must be hardened in order to minimise the risk of the machine being hacked from the Internet. One recommendation will be for example to run a C2 security level compliant operating system. SAP takes no liability if the security of the companyu2019s network is compromised.
Other networking equipment (routers and hubs) needed to form the network at the customeru2019s premises
Comparisions
Property     SAProuter / SNC via Internet
Hardware requirements     Firewall + SAProuter host in DMZ
Software     SAProuter starting from NI version 35
SAPSECULIB can be obtained from the Service Marketplace
Network addresses (besides address of Internet router, firewall, u2026)     1 official static IP address for SAProuter
Configuration issues     Careful setup of saprouttab necessary for security. Saprouttab influences security strongly as access is controlled via saprouttab and firewall.
Encryption      By software
Encrypted data     TCP packets
Only the data stream between SAProuters is encrypted
Encryption is handled on Application layer (OSI network layer 7)
Minimum required free bandwidth     64 kbit/s but may work also with
32 kbit/s
Supported services on SAP side     All except FTP (files download)
Key management     Digital certificates being requested via Service Marketplace Public Key Infrastructure (PKI)
Key storage     In file system
Operating system     SAProuter resides on a computer
therefore it is necessary to harden the security at the operating system level (for example, C2 level OS) to minimize the risk of the machine being hacked from the Internet
Additional expertise     SAProuter knowledge usually available, SNC configuration requires additional knowledge
Standards     Based on SNC, SAP proprietary standard
Contributing to costs     u2022     Firewall hardware and software
u2022     Firewall administration costs
u2022     No additional license fee for security library based on SECUDE
Regards,
Srini Nookala

Using SAPRouter for multiple customer installations

Hello,
can anyone point me in the right direction to find documentation on how I go about connecting all of my companies SAP installations to one central SAPRouter? At the moment we have two SAPRouters, one in Europe and the other here in the US, and I want to consolidate them to make Admin easier.
Thanks,
Sharon.
Edited by: Sharon Bartlet on Mar 20, 2009 8:42 AM

Hi,
You need to conslidate the both router entries in single saprouttab file. Also you need to update RFC destinations for SAPOSS & SAPNET_RFC .
You can go through following sap help link
http://help.sap.com/saphelp_nw70/helpdata/EN/65/8d09ab5c7e46028f633bb01a09b380/frameset.htm
Regards,
Sachin Rane.

Saprouter installation

Similar Messages

Maybe you are looking for