SAPRouter SNC connection.

Hi,
I am using SAP 4.6c on Iseries.
I have SAPRouter configured on a windows system for my Iseries. It was functional 2 months ago.
Suddenly, I realised that when i am executing any saprouter command (e.g saprouter -l ), I am getting the following error:
=====================================================
ERROR       partner not reached (host localhost, service 3299)
TIME        Thu May 17 17:11:58 2007
RELEASE     46D
COMPONENT   NI (network interface)
VERSION     34
RC          -10
MODULE      ninti.c
LINE        1011
DETAIL      NiPConnect2
SYSTEM CALL SO_ERROR
ERRNO       10061
ERRNO TEXT WSAECONNREFUSED: Connection refused
COUNTER     1
========================================================
Even, I cant see any SAPRouter service in services.msc
Do I need to check / change anything on the Iseries server?
Please advise.
Regards,
Sai

Hello Sai,
you can run the SAProuter on the Server/OS of your choice. So, it is fully OK, to run it on Windows and the SAP system on iSeries.
The iSeries system doesn't need any changes - "just" a running SAProuter.
But, at the moment, your SAProuter doesn't seem to run (at least if you ran "saprouter -l" on Windows and not on iSeries).
As you describe that the service is not installed, it is "just" a wrong installation on your site. Either it ran never or you configured to run it in a DOS box and this is closed now - perhaps because of a reboot.
The following web-site describes a bit what to do and obviously partly you didn't do this by now:
http://www.easymarketplace.de/saprouter.php
Regards
Volker Gueldenpfennig, consolut.gmbh
http://www.consolut.de - http://www.4soi.de - http://www.easymarketplace.de

Similar Messages

SAPRouter to SAPRouter SNC Setting

Dear Experts Teams.
It is currently established the SNC connection of their SAPRouter server and SAP AG.
I want to connect the SAPRouter to external network SAPRouter for SNC.
However, I know that there are certificates to SNC connections, but in SAPRouter server,
I don't know the procedure of issuance of the order to configure the SNC.
Tell me the procedure of SAPRouter to external network SAPRouter SNC connection.
In addition, this configuration or would not have been supported by SAP?
Regards.
Jun

Error is displayed when you start -K option SAPRouter.
By the way, SAPRouter have the following settings.
■SAPRouter Host1
※Possible SNC connection with SAP AG SAProuter
　　SNC Name：CN=SNC201401-01 OU=SAProuter, O=SAP, C=DE
　 SAProuttab:
　　 KT "p:CN=snc201306-09" * 3299
　　　P * * *
　　SAPRouter Command：
saprouter -r -S 3299 -T dev_rout -K "p:CN=SNC201401-01, OU=0000657984, OU=SAProuter, O=SAP, C=DE"
■SAPRouter Host2
　　SNC Name：CN=SNC201401-02
　 SAProuttab:
　　 KT "CN=SNC201401-01 OU=SAProuter, O=SAP, C=DE" <Host1 Gloval IP> 3299
　　　P * * *
　　SAPRouter Command：
saprouter -r -K p:CN=SNC201401-02
SAPRouter of Host1 to start normally, but, SAPRouter of Host2 can not boot properly.
And has implemented procedures to reference the URL.
http://wiki.scn.sap.com/wiki/display/Basis/How+to+setup+SNC+connection+between+SAProuters
Jun

SNC connection between two SAProuter

Hi Guys,
Please give me the procedure to establish the SNC connectivity between two SAProuter.
Thanks and Regards,
Atul

Hi Atul,
have tried the SDN Search Function with "snc AND saprouter"? It gave me this Links:
SNC User Guide:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sapportals.km.docs/documents/a1-8-4/snc user guide.pdf
Configure Secure Network Communication SNC:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sapportals.km.docs/documents/a1-8-4/configure secure network communication snc.pdf
Regards
Gregor

SAPROUTER SNC - ERROR in Batch

Hello,
We have our SNC connection working between our site and SAPSERV2 as long as our call to saprouter is running in interactive mode. When we submit the job to batch using a CL (copied from 4soi.de) the connection does not work. The message in DEV_ROUT file we're seeing the following error:
ERROR GSS-API(maj): No credentials were supplied
It seems like the the job isn't seeing either env variables or the SIDOFR STMF in the SECUDE directory.
Any thoughts on why this works in the foreground from a command line, but not in batch as an autostart job, or just a submitted batch job?
Thanks,
Philip

Hello Philip,
if you follow the instructions at
http://www.easymarketplace.de/snc-iseries-setup.php
you set SECUDIR within the CL and it is not (necessarily) in directory /secude.
And you have to run the CL as SIDOFR.
Regards
Guido

Is this possible: SNC connection from SAP GUI to SAP Router, and ...

Hi,
I have (stupid perhaps) question.
Is this scenario possible:
SNC connection from SAP GUI to SAP Router, and non-SNC connection from SAP Router to SAP System.
I know how to set up scenario like this:
SAP System --- (non-SNC conn) --- saprouter1 --- (SNC conn) --- saprouter2 --- (non-SNC conn) --- SAP GUI.
Best regards,
Marek Majchrowski

Wolfgang,
To be sure myself and Marek understand, can you confirm the different scenarios supported:
Scenario 1:
SAP GUI --- (non SNC conn) --- saprouter1 --- (SNC conn) --- saprouter2 --- (non-SNC conn) --- SAP System
With this scenario, it would be possible for a user to logon using SAP GUI onto the SAP System, but without SAP GUI SNC.
Scenario 2:
SAP GUI --- (SNC conn) --- saprouter1 --- (non SNC conn) --- saprouter2 --- (SNC conn) --- SAP System
With this scenario it would be possible to logon to the SAP System using SAP GUI, and using SNC authentication.
Also, with this scenario the SAP GUI software and SAP System software would consider this to be similar to:
SAP GUI -- (SNC conn) -- SAP System
Scenario 3:
This is the scenario mentioned by Marek in his initial question:
SAP GUI -- (SNC conn) -- saprouter1 -- (non SNC conn) -- SAP System
With this scenario it will not be possible to logon to SAP System using SNC, and only possible if the SAP GUI is configured to not use SNC. In other words the SNC connection between SAP GUI and saprouter1 is available, but cannot be used.
Thanks,
Tim
Edited by: Tim Alsop on Feb 25, 2008 5:24 PM

SAProuter..Connection timed out ?

Dear Experts,
I have configured my saprouter and its working fine (as from test niping). Now i am trying to logon to the OSS of sabserv7, It desplyes first message "Unable to connect to the SAPNet message server, default connection will be use" and after a connect atempt, it displayed "Connection to host 194.39.134.35, service SAPDB99 timed out.
Please help me as i have connected directly to the internet (the computer is conneted to internet without behind any firewall).
1 - Is there anydata should be maintained in the service.sap.com?(we didnt maintained regarding connection at sap service portel.
2 - Is there any step missing?
3 - Are these system generated IP address of SAProuter are correct?
Thanks
Usman Rana

You are welcome. For the developer access key, you'll need to go to http://service.sap.com -> Keys & Requests -> SSCR Keys -> Register SSCR keys. Here, you will see your systems registered with SAP. You can select the relevant system, provide it with the details required such as Object type and ID. A key will be generated which can be used to modify the code.
For documentation on the standard modification process, please check out <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/60/d6ba5aceda11d1953a0000e82de14a/content.htm">this link</a>.
Please keep in mind that in case of modifications, whenever you will install latest patches, your modified programs may be overwritten by newer SAP releases and you'll have to adjust these programs manually once again. That is why modifications are not recommended and the developers should try to find a suitable user exit to write their code into. If no user exit exists, then it is recommended to try to find a workaround such as trying to carry out the chages by using a function module/batch input/etc after the standard transaction is complete. Modifications should only be the last resort and someone experienced should confirm if that is the only option available. If your developer needs further information, (s)he should post a question in any of the forums listed at /community [original link is broken] .
Hope this helps.
Regards
Shehryar
ps: Yes, I am the guy from Abacus Consulting

Performance issue using Universe with SNC connection

I had a dynamic dashboard using Live office > Webi report > Universe > Bex query which was working fine but we recently implemented SNC between Business Objects and SAP BW due to which the universe connection has been changed to use sign on connection. After changing the connection in the universe I am see a performance degradation refreshing the connections in xelsius dashboard. Earlier the connection refresh time was 6 sec now the refresh time is around 30 secs, Intersting thing is I have tryed refreshing the webi report the refresh time of the webi report did not change which is still less than 6 secs and I have also tryed refeshing the Live Office component directly in the design/spreedsheet mode of the xcelsius even here the refresh time remain same less than 6 secs.
The connection refresh time is bad only when I am in preview mode or if I deploy the swf to the business object server.
Xcelsius Version: 2008 (5.3)
BO Version: 3.1 sp2 fixpack 2.8
Thanks

Anup,
What will happen behind the screens when application restarts.
what are the otherways of achieving the same Behavior,like getting the application state to initial state.

SAProuter SNC processing failed

Hi All,
I have done all the necessary steps and completed successfully. But when I try to start saprouter using this command saprouter -r -K "p:CN=CORONA391,OU=0001200552,OU=SAProuter,O=SAP,C=DE" I am getting the following error.
trcfile dev_rout
ERROR       SNC processing failed:
             SncInit
TIME        Wed Jun 15 20:25:52 2011
RELEASE     701
COMPONENT   NI (network interface)
VERSION     38
RC          -17
MODULE      nisnc.c
LINE        646
DETAIL      NiSncInit: sncrc=-1
COUNTER     3
Thanks & Regards
Uday

Hi All,
This is dev_rout file
trc file: "dev_rout", trc level: 1, release: "701"
Wed Jun 15 20:02:49 2011
SAP Network Interface Router, Version 38.10
command line arg 0:     saprouter
command line arg 1:     -r
command line arg 2:     -K
command line arg 3:     p:CN=CORONA391,OU=0001200552,OU=SAProuter,O=SAP,C=DE
SncInit(): Initializing Secure Network Communication (SNC)
      AMD/Intel x86_64 with Linux (st,ascii,SAP_UC/size_t/void* = 16/64/64)
SncInit(): Trying environment variable SNC_LIB as a
      gssapi library name: "/usr/sap/saprouter/libsapcrypto.so".
ERROR => DlLoadLib: dlopen()= /usr/sap/saprouter/libsapcrypto.so: wrong ELF class: ELFCLASS32 -> DLENOACCESS (0,Success) [dlux.c       314]
ERROR => SncPDLInit(): DlLoadLib("/usr/sap/saprouter/libsapcrypto.so")=DLENOACCESS
[sncxxdl.0340]*** ERROR => SncPDLInit()==SNCERR_INIT, Adapter (#0) /usr/sap/saprouter/libsapcrypto.so not loaded
[sncxxdl.0604]<<- SncInit()==SNCERR_INIT
         sec_avail = "false"
ERROR => NiSncInit: SncInit failed (rc=-1) [nisnc.c      647]
ERROR => main: NiSncInit failed (rc=-17) [nirout.cpp   1219]
ERROR       SNC processing failed:
             SncInit
TIME        Wed Jun 15 20:02:49 2011
RELEASE     701
COMPONENT   NI (network interface)
VERSION     38
RC          -17
MODULE      nisnc.c
LINE        646
DETAIL      NiSncInit: sncrc=-1
COUNTER     3
<<- ERROR: SncDone()==SNCERR_INIT_FIRST
Please help me in this,
Thanks in advance
Uday

How to apply for a certificate and install saprouter SNC

I am in the middle of an R2R build.
I need first to apply for a certificate and then to install saprouter (on an amd64 win server)
So I can download oss notes...
Please help,
Thankyou,

The exact URL to apply for a certificate is service.sap.com/tcs. On the right side, you will see a link to SAProuter Certificates. Please use this to request a certificate.
Regards

Multipe customer numbers under a single snc saprouter

We have a concern regarding saprouter (snc type) and customer numbers.
We are a consulting company providing application hosting for 3 of our customers running SAP systems. All of these systems are hosted in a data centre at our premises. Presently we have 3 separate saprouters for each customer and these 3 customers have separate SAP customer numbers.
Inline with our server consolidations efforts, we are planning to merge these 3 snc saprouters into a single saprouter. While we understand that due to the generation of snc cert which is based on customer number, every saproute cert is unique to that particular customer, are there any work arounds for this? Have there been any solutions for other companies having the same issue i.e. having multiple customers in the same data centre and sharing saprouter?
Please advise the best solution forward to consolidate saprouters.

Hi Stephen,
Question: Can the SAProuter be on the internal network with a private IP address but accessed by via the Public address of our firewall and proxied through?
yes, no problem, just a port forwarding for this one port 3299 for insite and NAT for outsite is required!
Question: Must all these ports be opened? Elsewhere Volker has stated only one port is required to be opened through the firewall.
ONLY port 3299 - I did several setups this way )
Question: Exactly how secure is this connection? What measures have others taken to protect the connection.
As save as a 128 Bit certificate is - by now I didn't hear on breaking that => it is safe with state of the art )
(I would imagine VPN is 128 Bit "only" as well)
=> really go for that ....
Regards
Volker Gueldenpfennig, consolut.gmbh
http://www.consolut.de - http://www.4soi.de - http://www.easymarketplace.de

Test conn. SAPOSS error when opening an RFC connection SNC processing fail

Dear all,
   I configured a Saprouter in DMZ with SNC connection type to establish connection from my company to SAP and vice-versa. Also I accept connection from external company to our SAP systems. During the test in SM59 SAPOSS connection I receive the following error:
Logon     Errore di colleg.
Dettagli err.     Error when opening an RFC connection
Dettagli err.     ERROR: SNC processing failed: SncSessionInitiatorAK
Dettagli err.     LOCAZ.: SAProuter 39.1 (SP3) on 'srvsaprouter1'
Dettagli err.     DETT.: NiSncIInitHdlSecurity: sncrc=-4;0x9d9350
Dettagli err.     COMPONENT: NI (network interface)
Dettagli err.     CONTAT.: 209
Dettagli err.     MODULE: nisnc.c
Dettagli err.     RIGA: 1091
Dettagli err.     VALORE RIT.: -104
Dettagli err.     SUBRC: 0
Dettagli err.     RELEASE: 710
Dettagli err.     ORA: Fri Jul 17 11:01:22 2009
Dettagli err.     VERS.: 39
My saprouttab for SAP AG connection is the following:
#SNC-connection from and to SAP
#KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * *
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
SNC-connection from SAP to local R/3-System for Support
#KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.229 3200
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.229 3201
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.211 3200
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.211 3600
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.209 3200
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.210 3201
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.231 3200
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.231 50000
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" epe0s.calpeda.priv 50000
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" epe0sc.calpeda.priv 50000
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.242 3200
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.242 50000
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" epe0t.calpeda.priv 50000
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" epe0tc.calpeda.priv 50000
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.215 3200
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.101.111.215 50100
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" epe0p.calpeda.priv 50100
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" epe0pc.calpeda.priv 50100
SNC-connection from SAP to local R/3-System for NetMeeting, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 1503
SNC-connection from SAP to local R/3-System for saptelnet, if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 23
Access from the local Network to SAPNet - R/3 Frontend (OSS)
#P <IP-addess of a local PC> 194.39.131.34 3299
P * * *
P * 194.39.131.34 3299
D * * *
Any suggestions?
Thanks in advance.

SNC processing failed could mean lots of things... did you installed the SAPcrypto library?.. did you created the certificates correctly?...
Read SAP notes 812386 and 33135.
Regards
Juan

SAPOSS connection Failed (saprouter)

Dear Gurus,
- We have already registered our public ip to SAP.
- Saprouter certificate renewed.
- Telnet functions ok
- Saprouttab ok
Saprouter String : /H/xxxxxx/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001
Sm59 error =
Connection Error
Error when opening an RFC connection (LB: Hostname or service of the message ser
ERROR: The connection to the specified message server (? / ?) failed. Please
LOCATION: SAP-Server xxxxxx_00 on host xxxxxx (wp 10)
COMPONENT: MS (message handling interface, multithreaded)
Dev_rout file=
NiBufIProcMsg: hdl 1 received rc=-94 (NIEROUT_PERM_DENIED) from peer
What could be the problem ?
Best Regards

Dear Ashutosh,
3299 port is already opened. What is 3289 port for ? by the way there is saprouttab informations. Also there is 3389 for something. Do you mean that 3289 port should be opened in saprouter machine in firewall ?
# SNC connection to and from SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
# SNC connection to local system for R/3-Support
# R/3 Server: xxxxxxx
# R/3 Instance: 00
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" xxxxxx 3200
# SNC connection to local WINDOWS system for WTS, if applicable
# Windows server:xxxxxx
# Default WTS port: 3389
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" xxxxxxx 3389
# SNC connection to local UNIX system for SAPtelnet, if applicable
# UNIX server: xxxxx
# Default Telnet port: 23
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" xxxxxx 23

Saprouter to Saprouter using SNC

Hi.. we already have a saprouter (routerA) using SNC connected to SAP for the OSS connection.
Now we were thinking to create anothe snc connection from routerA to another saprouter (routerB).
Which distinguish name that we should use and how is the process ? found documents on setting up SNC to SAP, and we can get our distinguish name from SAP.
But for connection to another SAP i could not find any.
Suggestion and reply really appreciated.. thank you

Hi,
First of all,why do you require another router?
Call up the nearest SAP center for more details.
Rgs
vikas

Connecting 2 SNC SAProuters

Hi all,
how can we connect 2 Saprouters?
i.e.... how can we connect different SAP servers in separate geographical locations?
all geographical locations SAP servers are having SAProuter (registered SAProuter and running with SNC)
how to establish RFC connection between these SAP servers?
what kind of Ports to be forworded from firewall to SAProuter system?
please give your valuable information.
thanking you in anticipation.
best regards,
by
Raghav

Hi Raghav,
you can use
<b>SNC secured SAProuter SAProuter</b> connections are established between two SAProuter to provide data confidentiality and integrity services
You have to install a SAProuter with an official, static IP address (DHCP Addresses will not work) running SNC inbound and outbound connection to SAP at their end of the connection in a Demilitarized Zone. This SAProuter must be accessible from the Internet.
or
<b>LAN-to-LAN IPSec VPNs</b> are established to provide data confidentiality and integrity services VPN equipment is required at both ends of the connection. The VPN switch at customers side must be reachable from the Internet
if helpful reward points are appreciated

Configurar saprouter para aceitar conexoes de fora

Olha sei que este topico ja foi aberto mas volto a pedir um suporte. Preciso me conectar ao meu SAP de casa, tenho no meu saprouttab o seguinte:
# SNC connection to and from SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
# SNC connection to local system for R/3-Support
# R/3 Server: 192.168.1.1
# R/3 Instance: 00
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.1.15 3200
# SNC connection to local WINDOWS system for WTS, if applicable
# Windows server: 192.168.1.2
# Default WTS port: 3389
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.1.15 3389
# SNC connection to local UNIX system for SAPtelnet, if applicable
# UNIX server: 192.168.1.3
# Default Telnet port: 23
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.1.15 23
# SNC connection to local Portal system for URL access, if applicable
# Portal server: 192.168.1.4
# Port number: 50003
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.1.15 50003
# Access from the local Network to SAP
P 10.1.1.15 194.39.131.34 3299
# Permitir todas as redes temporariamente
P * * *
# deny all other connections
D * * *
Ja coloquei no meu SAPGui a seguinte string:
/H/<IP PUBLICO DA FIREWALL>/S/3299/H/
IP - 10.1.1.15 = IP Do servidor de SAPRouter que é o mesmo Servidor que correr o SAP ECC 6.
So que mesmo assim nao consigo conectar-me, o que estará errado aqui.
cumprimentos.

Bom dia!
Estou tentando configurar o SAP ROUTER para possbilitar conexões a partir de uma rede externa. Entretanto, sem sucesso. Agradeço toda ajuda!
# inbound connections MUST use SNC
# yyy --> SAP ROUTER DA EMPRESA QUE IRÁ ACESSAR O MEU SAP VIA SAP ROUTER.
# ECC --> SERVIDOR ECC 6
# SOL --> SERVIDOR SOLMAN
# SRM --> SERVIDOR SRM
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" YYY.YYY.YYY.YYY *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ECC.ECC.ECC.ECC 3200
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ECC.ECC.ECC.ECC *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ECC.ECC.ECC.ECC 3300
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ECC.ECC.ECC.ECC 3600
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SOL.SOL.SOL.SOL 3200
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SOL.SOL.SOL.SOL *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SOL.SOL.SOL.SOL 3300
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SOL.SOL.SOL.SOL 3600
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SRM.SRM.SRM.SRM 3600
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SRM.SRM.SRM.SRM 3300
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SRM.SRM.SRM.SRM *
# outbound connections to <sapservX> will use SNC --
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" YYY.YYY.YYY.YYY *
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" YYY.YYY.YYY.YYY 3200
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" YYY.YYY.YYY.YYY 3298
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" YYY.YYY.YYY.YYY 3299
# permission entries ONLY ECC
P ECC.ECC.ECC.ECC YYY.YYY.YYY.YYY 3200
P ECC.ECC.ECC.ECC YYY.YYY.YYY.YYY *
P ECC.ECC.ECC.ECC YYY.YYY.YYY.YYY 3299
P ECC.ECC.ECC.ECC YYY.YYY.YYY.YYY 3389
# all other connections will be denied
D * * *

SAPRouter SNC connection.

Similar Messages

Maybe you are looking for