SAProuter

Hi,
We have SAProuter service on solution manager production, on any other servers I am not found this service.
Can anybody explain we why the service is required on solution manager of production & its necessity.
Regards,
Rajesh

Hello Rajesh,
you need saprouter to provide the secure access in your network for SAP support engineers. It can run also on any host in your network.
Details see <a href="http://help.sap.com/saphelp_nw04/helpdata/en/4f/992ce8446d11d189700000e8322d00/frameset.htm">here</a>.
best regards

Similar Messages

Configurar saprouter para aceitar conexoes de fora

Olha sei que este topico ja foi aberto mas volto a pedir um suporte. Preciso me conectar ao meu SAP de casa, tenho no meu saprouttab o seguinte:
# SNC connection to and from SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
# SNC connection to local system for R/3-Support
# R/3 Server: 192.168.1.1
# R/3 Instance: 00
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.1.15 3200
# SNC connection to local WINDOWS system for WTS, if applicable
# Windows server: 192.168.1.2
# Default WTS port: 3389
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.1.15 3389
# SNC connection to local UNIX system for SAPtelnet, if applicable
# UNIX server: 192.168.1.3
# Default Telnet port: 23
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.1.15 23
# SNC connection to local Portal system for URL access, if applicable
# Portal server: 192.168.1.4
# Port number: 50003
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.1.15 50003
# Access from the local Network to SAP
P 10.1.1.15 194.39.131.34 3299
# Permitir todas as redes temporariamente
P * * *
# deny all other connections
D * * *
Ja coloquei no meu SAPGui a seguinte string:
/H/<IP PUBLICO DA FIREWALL>/S/3299/H/
IP - 10.1.1.15 = IP Do servidor de SAPRouter que é o mesmo Servidor que correr o SAP ECC 6.
So que mesmo assim nao consigo conectar-me, o que estará errado aqui.
cumprimentos.

Bom dia!
Estou tentando configurar o SAP ROUTER para possbilitar conexões a partir de uma rede externa. Entretanto, sem sucesso. Agradeço toda ajuda!
# inbound connections MUST use SNC
# yyy --> SAP ROUTER DA EMPRESA QUE IRÁ ACESSAR O MEU SAP VIA SAP ROUTER.
# ECC --> SERVIDOR ECC 6
# SOL --> SERVIDOR SOLMAN
# SRM --> SERVIDOR SRM
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" YYY.YYY.YYY.YYY *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ECC.ECC.ECC.ECC 3200
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ECC.ECC.ECC.ECC *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ECC.ECC.ECC.ECC 3300
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ECC.ECC.ECC.ECC 3600
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SOL.SOL.SOL.SOL 3200
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SOL.SOL.SOL.SOL *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SOL.SOL.SOL.SOL 3300
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SOL.SOL.SOL.SOL 3600
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SRM.SRM.SRM.SRM 3600
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SRM.SRM.SRM.SRM 3300
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" SRM.SRM.SRM.SRM *
# outbound connections to <sapservX> will use SNC --
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" YYY.YYY.YYY.YYY *
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" YYY.YYY.YYY.YYY 3200
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" YYY.YYY.YYY.YYY 3298
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" YYY.YYY.YYY.YYY 3299
# permission entries ONLY ECC
P ECC.ECC.ECC.ECC YYY.YYY.YYY.YYY 3200
P ECC.ECC.ECC.ECC YYY.YYY.YYY.YYY *
P ECC.ECC.ECC.ECC YYY.YYY.YYY.YYY 3299
P ECC.ECC.ECC.ECC YYY.YYY.YYY.YYY 3389
# all other connections will be denied
D * * *

SAPRouter set up in Solman 7.1 sr1 release

Dear All,
we completed the installation Of Solman Server 7.1. Now we are in the process of activity "Configuration Of SOlman Server ".
RFC Destination SAP OSS not working. Connection and Authorization test for SAPOSS is failing with "Connection Error "
Connection test of RFC Destination ( SAPOSS) is failing with below error:
Logon Connection Error
Error Details Error when opening an RFC connection (LB: Hostname or service of the message ser
Error Details ERROR: partner '147.204.2.5:sapdp99' not reached
Error Details LOCATION: SAP-Server solmantrg_SMI_01 on host solmantrg (wp 2)
Error Details DETAIL: NiPConnect2: 147.204.2.5:3299
Error Details CALL: connect
Error Details COMPONENT: NI (network interface)
Error Details COUNTER: 27
Error Details ERROR NUMBER: 79
Error Details ERROR TEXT: Connection refused
Error Details MODULE: nixxi.cpp
Error Details LINE: 3286
Error Details RETURN CODE: -10
Error Details SUBRC: 0
Error Details RELEASE: 720
Error Details TIME: Fri Apr 25 13:04:19 2014
Error Details VERSION: 40
Authorization Test Of RFC Destination ( SAPOSS) IS FAILING WITH below error
Logon Connection Error
Error Details Error when opening an RFC connection (LB: Hostname or service of the message ser
Error Details ERROR: partner '147.204.2.5:sapdp99' not reached
Error Details LOCATION: SAP-Server solmantrg_SMI_01 on host solmantrg (wp 2)
Error Details DETAIL: NiPConnect2: 147.204.2.5:3299
Error Details CALL: connect
Error Details COMPONENT: NI (network interface)
Error Details COUNTER: 34
Error Details ERROR NUMBER: 79
Error Details ERROR TEXT: Connection refused
Error Details MODULE: nixxi.cpp
Error Details LINE: 3286
Error Details RETURN CODE: -10
Error Details SUBRC: 0
Error Details RELEASE: 720
Error Details TIME: Fri Apr 25 13:05:37 2014
Error Details VERSION: 40
In OSS1, parameter of the technical setting is attached. Please check attached screenshot for more details on the error
Please tel how to maintain OSS1 details and help to fix the RFC error of destination SAPOSS
Regards,
Gayathri.K

Gayathri,
Is your SAProuter installed on the same server as Solution Manager, or on another server? Since you said this was all working before when you were using SolMan 4.0, you must have already had a saprouter registered with SAP. Do you still have that SolMan 4.0 system? Or did you wipe it out before doing the fresh install of SolMan 7.1?
The SAProuter will have two IP addresses: an 'external' one that you have registered with SAP, and an 'internal' one that is on your company's private network. That internal IP address needs to be set up in OSS1 technical settings as the address of your "SAProuter at Customer Site". In your screenshot, you had these fields blank, and as Shkelzen pointed out, this isn't going to work until you fill that in:
Regards,
Matt

Difference between the way of login with ip address and SAProuter when checkin original file

Hi, experts
We found out:
① Login with ip address, check in a file with file name less than 22 Chinese character, OK.
② Login with ip address, check in a file with file name more than 22 Chinese character, error message 26253 appeares: Error while checking in and storing: &
③ Login with SAProuter, check in a file with file name more than 22 Chinese character, OK.
What casues error in condition ②? The only difference between ② and ③ is the way of logining to SAP system.
Best Regards
Yemi

Hi Yemi,
based on your description I would kindly ask you to check the application log transaction SLG1 after getting the error message with your userID. Here normally further background information is listed that might help to get a hint what is going wrong.
Best regards,
Christoph

Saprouter:wildcard character error

Hi people,
I stopped the saprouter and when I try to start other time I have the next error message:
WARNING: Wildcard character used in route target
What can i do?

I push a # in the two lines for the documented them and try to execute saprouter.exe -r and the next message are:
command line arg 0:     saprouter.exe
command line arg 1:     -r
main(): pid = 6084, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a SAProuter)
reading routtab: ./saprouttab
ERROR => SNC field without SNC active, skip line 2 [nirout.cpp   7806]
ERROR => SNC field without SNC active, skip line 5 [nirout.cpp   7806]
ERROR => SNC field without SNC active, skip line 9 [nirout.cpp   7806]
ERROR => SNC field without SNC active, skip line 13 [nirout.cpp   7806]
Now I have configured the OSS1 with the note 96655, and when I try to logon on the system I have the error message:
Unable to connect to message server.
Edited by: David Esquivel on Sep 19, 2008 3:11 PM

How to install the SAPRouter service on a Windows 2003 Server?

Hi, can someone please either provide me with the instructions or point me to a URL or a SAP note that describes how to install the SAPRouter service on a Windows 2003 32-bit server?
This is fairly urgent so your assistance here would be much appreciated.
Many thanks
Sharon

I tried this and I get the following error...
'ntscmgr' is not recognized as an internal or external command, operable program or batch file.
Any further suggestions?
S

Access SAP through SAPRouter from outside of Network

Hello All,
As my SAPRouter cerificate got expired i genrated new certificate & import same into SAProuter. And this time my router is working fine.
But this time i want to access from outside of network so added this entries in my SAProutab as follow:
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Public ip>
P <Public ip> 194.39.131.34 3299
P <my router ip> 194.39.131.34 3299
P 172.16.. 194.39.131.34 3299
P 194.39.131.34 172.16..
P 194.39.131.34 <Public ip> 3299
S * <my SAP ip> 3200
P <Public ip> <my SAP ip> 3200
Note:
SAP System No: 00
DEV_Rout
trc file: "dev_rout", trc level: 1, release: "700"
Thu Sep 30 11:38:25 2010
SAP Network Interface Router, Version 38.10
command line arg 0: F:\usr\sap\saprouter\saprouter.exe
command line arg 1: -r
command line arg 2: -W
command line arg 3: 60000
command line arg 4: -R
command line arg 5: F:\usr\sap\saprouter\saprouttab
command line arg 6: -K
command line arg 7: p:CN=<HOSTNAME>,OU=0000*****,OU=SAProuter,O=SAP,C=DE
SncInit(): Initializing Secure Network Communication (SNC)
PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 16/64/64)
SncInit(): Trying environment variable SNC_LIB as a
gssapi library name: "F:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll".
File "F:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
main: pid = 2028, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: 'F:\usr\sap\saprouter\saprouttab'
I am not able to access my sap from outside of network.
SAP Router String: /H/<PUBLIC IP>/S/3299/H
Any idea. Thnaks in advance
Regards.

Hi,
Hope you have private external IP than dynamic which changes every now and then you can this:
P <Public ip> * 3299 or P <Public ip> SID_IP 3299
Also look for your the logs for saprouter and your router logs if this not works.
Regards;

Connect to SAP R/3 using SAP GUI for HTML through saprouter

Hello,
I have my system running on my intranet, but I need to connect some support enginners through an Internet connection. Nowadays some users can connect to QAS and PRO systems using SAP GUI for windows and java with the saprouter string, but the support enginners are using SAP GUI for HTML, do I need a special string or configuration so html users can connect to my system from the Internet?
Thanks in advance.

thanks, I can get the data from SAP R/3 to crystal report.
but still dont know how to do the second question mentioned in previous message:
once the table I want to get the data from is a cluster, and have found the mapping data dictionary of this data cluster, which displayed in crystal report connection as well, however, the data is not what I wanted.

Error in SAProuter 38.10

Hi,
We just switched our SAPRouter from Host A to Host B.
When trying to open service connection from SAP Market Place, here's the error we get:
The remote function call library returned the following error message:
SAP_CMINIT3 : rc-20 > Connect to SAP gateway failed
Connect_PM DEST=o01,
GWHOST=/H/HOST_A/S/3299/H/194.117.106.129/S/3299/H/oss001.wdf.sap-ag.de/S/3301, GWSERV-sapgw01, SYSNR=01
LOCATION SAProuter 38.10 on 'HOST_A'
ERROR
Any ideas what's wrong?
I looked up some posts here and tried to telnet to HOST_A and it worked.

Hi,
If you changed the host where the saprouter is running then it is quite possible that the saprouter running on SAP side (194.117.106.129) does not know your new host, and it is rejecting the connection.
Create a support message using component XX-SER-NET so they help you setting this up.
Greetings,
Juan

SAPRouter on Windows Server 2008 R2 / Service definition

Hi,
I installed SAPRouter on a Windows Server 2008 R2 and i have troubles registering saprouter as a service...
The installation directory is: C:\usr\sap\saprouter. There are these files:
niping.exe
sapcar.exe
ntscmgr.exesaprouter.exe
I am able to start the router from the command line.
trc file: "dev_rout", trc level: 1, release: "710"
Tue Feb 08 13:38:43 2011
SAP Network Interface Router, Version 39.3 (SP4)
command line arg 0:     saprouter
command line arg 1:     -r
command line arg 2:     -R
command line arg 3:     c:\Windows\System32\saprouttab.txt
main: pid = 1748, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: 'c:\Windows\System32\saprouttab.txt'
When i try to register (with Domain admin user) the service, the system means that:
C:\usr\sap\saprouter>ntscmgr install SAProuter -b C:\usr\sap\saprouter\saprouter
.exe -p "service -r -R C:\Windows\System32\saprouttab.txt"
CreateService SUCCESS
After that i am editing the service and entering a different user "sapadm" with local user rights. When i want to start the service terminates with Error 2 The system cannot find the file specified
when i check the the service' properties, the path to executable is empty...
Can anyone help me?
Thanks,
Martin

Hi,
If you don't want to run the service then just stop the service from services file.
For successful service creation, you need to follow all steps from the note which i suggested you earlier.
Thanks
Sunny

Error in starting SAProuter.

Hi! Gurus,
To establish remote connection for SAP Support I have installed SAProuter in our ECC Server host. But when I am trying to start the service it cannot start. self testing is OK. I cannot cerate SAProuter (file / table ?) Not sure about really how to create it. I have checked related
notes and manual. Still it is not clear to me .
Please help me.
error files are attached.
trc file: "dev_rout", trc level: 1, release: "640"
Fri Jun 02 04:05:45 2006
SAP Network Interface Router, Version 37.0
command line arg 0:     saprouter
command line arg 1:     -r
main(): pid = 4712, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a SAProuter)
ERROR => fopen ./saprouttab (2: No such file or directory) [nirout.cpp   7549]
**LOG Q0I=> NiRRouttab: fopen (2: ENOENT: No such file or directory OR: The system cannot find the file specified. ) [nirout.cpp 7550]
cannot open './saprouttab': all routing disabled!!!
Could not open permission table
With Thanks and regards,
Pratip Bhattacharyya

Hi! Barry,
Rightly you have detected my problem. Yes , I am trying to create a route permission table.
But, unfortuanetly I am not able to do it till now. Even the PDF reffered by you and it's earlier documents. As per the doc (pg 25.) I have already created a txt file named as saprouttab.txt in d:\usr\sap\saprouter folder. Our Server is in Windows 2003. I have tried with defferent combination of connect string. But nothing working. I cannot understand the the problem. Am I doing anything wrong or missed something ?
I simply want to establish a connection in-between SAP Support server and our ECC server.
Awaiting for your advise.
With regards,
Pratip Bhattacharyya

SAProuter for Jco between Java and ABAP stack

When configuring Jco at Java only, there is an option to use SAProuter.
This is not for SMP download or OSS support.
So is there any document for this kind of SAProuter usage?
Thanks!

I don't quite understand why you need SAProuter between 2 SAP instances, which means they locate in 2 different network segments and cannot communicate each other directly. But let's assume this scenario:
1. ECC in network A, IP 10.10.10.1;
2. Portal in network B, IP 192.168.1.1;
3. SAProuter has 2 adapters, IP 10.10.10.2 and 192.168.1.2.
Make sure all message server and dispatch info are maintained correctly in service file (or corresponding file on other platform) on all 3 hosts, and then when you configure Portal Jco connection routestring you need is /H/<SAProuter IP>/S/3299 to enable them communicate each other. Usually this is for security purpose of potential network attack to SAP hosts from user IP, for instance:
4. All public users in network C, IP 172...*, then you need a SAProuter which has 3 adapters.
Regards,
Effan

Configure SNC for JavaGui to use in the Internet with Saprouter

Hello,
we want to configure SNC to use JavaGui in the Internet without SSO. Only use of encryption in communication between the frontend JavaGui and the backend WAS 640(ITS integrated) using saprouter in between.
We are trying to configure it using SAP cryptographic library.
Do we need any kind of certificate? Can it be done using only the PSE generated file?
Does any one have any suggestions?
Regards,
Maria Serra

Either your phone is getting on wifi or you're using the cellular network to access the internet. If it's wifi, then you just need to connect the iPad to the same wifi. If you're using the phone's cellular connection to access the net, then you'll either need to get a tethering plan to use your phone as a mobile hotspot for your iPad, or get a device like the Mifi, which is a portable cellular wifi hotspot

Not able to start Saprouter from services.msc

Hi,
We have installed a saprouter into Windows 2003 Server. It is running fine. When we start the system then we need to manually start the saprouter by a batch file, so i am trying to register a service so that we need not to start the router manually.
i have read the note 525751 and install a new service by this command
ntscmgr install saprouter -b c:\saprouter\saprouter.exe -p "service -r -W 60000 -R c:\saprouter\saprouttab -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE""
Service successfully created. I have followed the note and done everything as per the note, but when i try to start the service i am getting this error couldnot start saprouter service on local computer, error 1067 process terminated unexpectedly
When i checked the event log i found this message.
RROR       Unable to load the GSS-API DLL
             named "sncgss32.dll"
TIME        Tue Oct 06 16:30:17 2009
RELEASE     640
COMPONENT   NI (network interface)
VERSION     5
RC          -17
MODULE      sncxxdl.c
LINE        342
DETAIL      SncPDLInit
SYSTEM CALL LoadLibrary
COUNTER     1
I have checked some thread on related to issue but not able to solve the problem. Could you please assist what's wrong.
Regards,
Subhash

>
Tomas Gustafsson wrote:
> I'm sorry to put a silly question here, but this message is a little bit hard to get the grip on:
> Do you use the same user for both the command prompt and the service?
Yes I understand it's frustrating now., and Yes i am using the same user srvsolmgr to run from Services.msc and from command prompt also.
> Also
> Can you please post the command which runs successfulll (from the command prompt)
> and the complete command for the saprouter-service.
C:\>cd saprouter
C:\saprouter>saprouter -r -G log.txt -R C:\saprouter\saprouttab -S 3299 -K "p:CN
=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"
trcfile dev_rout
logfile log.txt
Connection test OK
u Oct 08 16:03:56 2009
SAP Network Interface Router, Version 37.11
command line arg 0:     saprouter
command line arg 1:     -r
command line arg 2:     -G
command line arg 3:     log.txt
command line arg 4:     -R
command line arg 5:     C:\saprouter\saprouttab
command line arg 6:     -S
command line arg 7:     3299
command line arg 8:     -K
command line arg 9:     p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE
SncInit(): Initializing Secure Network Communication (SNC)
      PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)
SncInit(): Trying environment variable SNC_LIB as a
      gssapi library name: "C:\saprouter\sapcrypto.dll".
File "C:\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
The internal Adapter for the loaded GSS-API mechanism identifies as:
Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
main(): pid = 2776, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a SAProuter)
reading routtab: C:\saprouter\saprouttab
Regards,
Subhash

RFC Problem saprouter

Hi Friends,
I want to establish a RFC connection to a system.
Normaly, then I logon to the destination system using the gui I have to provide a saprouter string like /H/123.23.22.222/H/.
So then I connect through rfc how can I provide the string.
Thanks in advance.
Jimbob

Hi Jimbob,
Provide something like "/H/<sap_router_hostname>/S/sapdp99/H/194.39.131.34/S/sapdp99/H/oss001" string into target with sysnr "01". Don't forget to define "sapdp99" in your services file on the host, if it is not exist.
Best regards,
Orkun Gedik

How to apply for a certificate and install saprouter SNC

I am in the middle of an R2R build.
I need first to apply for a certificate and then to install saprouter (on an amd64 win server)
So I can download oss notes...
Please help,
Thankyou,

The exact URL to apply for a certificate is service.sap.com/tcs. On the right side, you will see a link to SAProuter Certificates. Please use this to request a certificate.
Regards

SAProuter

Similar Messages

Maybe you are looking for