Starting SAProuter

Hi everyone,
in order to make a remote SNC connection between SAP and our company,
i already made a remote connection data sheet and SAP sent me back the installation procedure. Also, i have the SAP Cryptolib Software CD installation. Regarding to this, i created the SAProuter Certificate for Support Connections. I have checked if the certificate has been imported correctly and the name of the Issuer is: CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
After checking all th previous procedure, i have to start the SAProuter. When i enter the command : saprouter -r
there is an error message :
trcfile dev_rout
no logging active
in the dev_rout file :
trc file: "dev_rout", trc level: 1, release: "700"
Mon Mar 17 12:48:11 2008
SAP Network Interface Router, Version 38.10
command line arg 0: saprouter
command line arg 1: -r
main: pid = 3692, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: './saprouttab'
Could you please tell me why there is no logging active?
Thanks a lot.
EDIT :
PS :
1. I already have installed the latest cryptolib via a CD sent by SAP AG
2. In the path E:\usr\sap\saprouter, there are all the files (sapgenpse.exe, saprouter.exe, sapcrypto.dll, saprouttab, dev_rout etc.
3. The environment variables SECUDIR are located in E:\usr\sap\saprouter and SNC_LIB also in E:\usr\sap\saprouter\sapcrypto.dll
4. The command sapgenpse get_my_name -v -n Issuer displays Issuer : CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE

Hi,
here is the command "saprouter -r -G saprouter.log" and there is this message :
trcfile  dev_rout
logfile  saprouter.log
ERROR => invalid lines in './saprouttab', see 'dev_rout' [nirout.cpp   7998]
Regarding to the dev_rout file:
trc file: "dev_rout", trc level: 1, release: "700"
Tue Mar 18 10:16:26 2008
SAP Network Interface Router, Version 38.10
command line arg 0:     saprouter
command line arg 1:     -r
command line arg 2:     -G
command line arg 3:     saprouter.log
main: pid = 4088, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
reading routtab: './saprouttab'
ERROR => SNC field without SNC active, skip line 6 [nirout.cpp   7767]
ERROR => SNC field without SNC active, skip line 14 [nirout.cpp   7767]
saprouttab file:
line 6 : KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Solution Manager IP Adress> <Solution Manager Port>
line 14 : KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3299
Thanks

Similar Messages

  • Not able to start Saprouter from services.msc

    Hi,
    We have installed a saprouter into Windows 2003 Server. It is running fine. When we start the system then we need to manually start the saprouter by a batch file, so i am trying to register a service so that we need not to start the router manually.
    i have read the note 525751 and install a new service by this command
    ntscmgr install saprouter -b c:\saprouter\saprouter.exe -p "service -r -W 60000 -R c:\saprouter\saprouttab -K "p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE""
    Service successfully created. I have followed the note and done everything as per the note, but when i try to start the service i am getting this error  couldnot start saprouter service on local computer, error 1067 process terminated unexpectedly
    When i checked the event log i found this message.
    RROR       Unable to load the GSS-API DLL
                 named "sncgss32.dll"
    TIME        Tue Oct 06 16:30:17 2009
    RELEASE     640
    COMPONENT   NI (network interface)
    VERSION     5
    RC          -17
    MODULE      sncxxdl.c
    LINE        342
    DETAIL      SncPDLInit
    SYSTEM CALL LoadLibrary
    COUNTER     1
    I have checked some thread on related to issue but not able to solve the problem. Could you please assist what's wrong.
    Regards,
    Subhash

    >
    Tomas Gustafsson wrote:
    > I'm sorry to put a silly question here, but this message is a little bit hard to get the grip on:
    > Do you use the same user for both the command prompt and the service?
    Yes I understand it's frustrating now., and Yes i am using the same user srvsolmgr to run from Services.msc and from command prompt also.
    > Also
    > Can you please post the command which runs successfulll (from the command prompt)
    > and the complete command for the saprouter-service.
    C:\>cd saprouter
    C:\saprouter>saprouter -r -G log.txt -R C:\saprouter\saprouttab -S 3299 -K "p:CN
    =SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE"
    trcfile  dev_rout
    logfile  log.txt
    Connection test OK
    u Oct 08 16:03:56 2009
    SAP Network Interface Router, Version 37.11
    command line arg 0:     saprouter
    command line arg 1:     -r
    command line arg 2:     -G
    command line arg 3:     log.txt
    command line arg 4:     -R
    command line arg 5:     C:\saprouter\saprouttab
    command line arg 6:     -S
    command line arg 7:     3299
    command line arg 8:     -K
    command line arg 9:     p:CN=SAPROUTER, OU=0000835750, OU=SAProuter, O=SAP, C=DE
    SncInit(): Initializing Secure Network Communication (SNC)
          PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)
    SncInit(): Trying environment variable SNC_LIB as a
          gssapi library name: "C:\saprouter\sapcrypto.dll".
      File "C:\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.
      The internal Adapter for the loaded GSS-API mechanism identifies as:
      Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
    main(): pid = 2776, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a SAProuter)
    reading routtab: C:\saprouter\saprouttab
    Regards,
    Subhash

  • Error in starting SAProuter.

    Hi! Gurus,
    To establish remote connection for SAP Support I have installed SAProuter in our ECC Server host. But when I am trying to start the service it cannot start. self testing is OK. I cannot cerate SAProuter (file / table ?) Not sure about really how to create it. I have checked related
    notes and manual. Still it is not clear to me .
    Please help me.
    error files are attached.
    trc file: "dev_rout", trc level: 1, release: "640"
    Fri Jun 02 04:05:45 2006
    SAP Network Interface Router, Version 37.0
    command line arg 0:     saprouter
    command line arg 1:     -r
    main(): pid = 4712, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a SAProuter)
    ERROR => fopen ./saprouttab (2: No such file or directory) [nirout.cpp   7549]
    **LOG Q0I=> NiRRouttab: fopen (2: ENOENT: No such file or directory OR: The system cannot find the file specified.  ) [nirout.cpp 7550]
    cannot open './saprouttab': all routing disabled!!!
    Could not open permission table
    With Thanks and regards,
    Pratip Bhattacharyya

    Hi! Barry,
    Rightly you have detected my problem. Yes , I am trying to create a route permission table.
    But, unfortuanetly I am not able to do it till now. Even the PDF reffered by you and it's earlier documents. As per the doc (pg 25.) I have already created a txt file named as saprouttab.txt in d:\usr\sap\saprouter folder. Our Server is in Windows 2003. I have tried with defferent combination of connect string. But nothing working. I cannot understand the the problem. Am I doing anything wrong or missed something ?
    I simply want to establish a connection in-between SAP Support server and our ECC server.
    Awaiting for your advise.
    With regards,
    Pratip Bhattacharyya

  • Error while starting saprouter service

    i am narayana. i have installed saprouter service.it is successfully installed.i had changed the logon as <SID>adm.
    while starting the saprouter service it is giving the following error message.
    Could not start the saprouter service on Local Computer.  Error 2: The system cannot find the file specified.
    can anybody help me.it is urgent for me.please help as early as possible
      thank you

    hi
         thanks for responding with usufull information.
         now while starting service 'SAPRouter' i am not getting any error.
         for command "saprouter -r" at command level output is
              " trcfile dev_rout
                no logging active
                WARNING :wildcard character used in route terget
          my "saproutetab" file is as follows
                    P      *       *        *     
          this is the only entry i have given.
    and my dev_rout file is as follows
    trc file: "dev_rout", trc level: 1, release: "640"
    Mon Oct 22 12:06:50 2007
    SAP Network Interface Router, Version 37.12
    command line arg 0:     saprouter
    command line arg 1:     -r
    main(): pid = 228, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a SAProuter)
    reading routtab: ./saprouttab
                          I WANT TO GIVE PERMISSION TO SAP TO WATCH MY SYSTEM
                          HOW CAN I GIVE THE ENTRY IN SAPROUTETAB
                          because of some problem in my system we raised a customer message.Sap responded that to configure saprouter. so to allow sap what is the entry to give in saprouttab.what is the ip-address of sap system?
                         please respond as early as possible
                          thank you

  • Unable to start saprouter

    As per the saprouter documents I have gone upto the registery MYCOMPUTER/HKEY_LOCAL_MACHINE/Currentcontrolset/Services/saprouter, unable to understand what to do next -
    edit  ^to" under Imagepath. Can anyone guide me.
    And kindly explain how to move on saprouttab.
    Gone through almost all the sites for help. Request help from the person who had configured.
    Thanks.

    Further to this the event log states as below :
    An anonymous session connected from 61.109.248.120 has attempted to open an LSA policy handle on this machine. The attempt was rejected with STATUS_ACCESS_DENIED to prevent leaking security sensitive information to the anonymous caller.
    The application that made this attempt needs to be fixed.  Please contact the application vendor. As a temporary workaround, this security measure can be disabled by setting the \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\TurnOffAnonymousBlock DWORD value to 1.

  • Saprouter doesn't start as service

    Hello!
    We faced with some troubles with our system (based on MSWin2003).
    Our saprouter worked correct before using SNC connect to SAP.
    Now, when we try to start saprouter via services.msc we get
    error 1053 the service did not respond to the start or control request in a timely fashion
    On MS site I have found article where describes the same problem with other service. Article told us that the problem in Framework.NET and recommends to upgrade it. Here is the link [NET Framework|http://support.microsoft.com/kb/839174]
    Now saprouter works only in console mode.
    d:\saprouter\saprouter.exe -r -K "p:CN=<our_servername>, OU=<our_cust_numb>, OU=SAProuter, O=SAP, C=DE"
    With the same string in services saprouter doesn't work.
    Thanks
    Artem

    Hi Artem,
    1st - when I start saprouter error 1053 occured: the service did not respond to the start or control request in a timely fashion. It must start by sidadm user.
    This seems that the user you are trying to start the router does not have the permissions at os level so user <sidadm> to start the router.
    2nd - you told me that I can use "service" parameter in command line. And I ask you: Will saprouter appear in services.msc as service or will it be work in "background" without appear in services.msc?
    Normally we start the router at command prompt by using the command saprouter -r <parameters> at the os level in the folder usr/sap/saprouter
    But as you want to make it as windows service you have to first install it as a service then only you can use it as a service.Simply typing service in the command can not make the router to be installed as service.If you want to install this as a service then you have to execute the command which i have posted in my previous post.
    Hope this helps!!!
    Reward points if helpfull.
    Regards,
    Vamshi.

  • SAProuter Service Is Not Starting

    Hi,
    I have installed saprouter on my end.service is created sucessfully.
    when i am start saprouter service its given me
    error SAProuter Service Is Not Starting locally error 1067.
    I am tried to start this service windows administrator as well sncadm.its give me same error.
    Regards
    Amol

    Hi Amol,
    Read,
    Re: SAPROUTER
    http://sap.ittoolbox.com/documents/popular-q-and-a/saprouter-service-is-not-starting-4447
    regards
    Juan
    PS: Hi Abinash,
    GREAT COPY AND PASTE JOB...!

  • Saprouter starting problem

    Hi All,
    I configured saprouter in solman server(windows) iam unable start saprouter . I gave the follwoing command its not giving any output.
    C:\saprouter\ntintel>saprouter -r -G routlog -S 3299 -K "p:CN=solman, OU=SAProut
    er, O=SAP, C=DE"
    trcfile  dev_rout
    logfile  routlog
    Regards
    Siva

    Hi All,
    I ran this command. saprouter -r -V 3 -K "p:<Distinguished name>"
    I get the following message in a 'trace file'
    trc file: "dev_rout", trc level: 3, release: "700"
    Thu Oct 23 09:22:28 2008
    NiHsLInit: alloc host/serv bufs (200/200 entries)
    NiIInit: allocated nitab (811 at 02CA02C8)
    NiIInit: host/serv bufs already initialized
    NiPGetNodeAddrList: got 1 interface(s) from operating system
              [0] IP-Address: 10.14.147.32
    SAP Network Interface Router, Version 38.10
    Compiled May 22 2007 00:31:59
    command line arg 0:     saprouter
    command line arg 1:     -r
    command line arg 2:     -V
    command line arg 3:     3
    command line arg 4:     -K
    command line arg 5:     p:CN=solman, OU=0000731019, OU=SAProuter, O=SAP, C=DE
    service   : 3299
    routtab   : ./saprouttab
    plug-in   : no plug-in
    -argument: 'no argument'
    clients   : 800
    max servers  : 1
    quelength : 1
    maxheap   : 20000000
    timeoutL  : 5000
    tracefile : dev_rout
    logfile   : no logging active
    portrange : no portrange active
    local address : default address
    ->> SncInit(prg=0, ini_fname=(NULL), &sec_avail=0157F6BF)
    SncInit(): Initializing Secure Network Communication (SNC)
          PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 16/32/32)
    SncInit(): Trying environment variable SNC_LIB as a
          gssapi library name: "C:\saprouter\ntintel\sapcrypto.dll ".
    load shared library (C:\saprouter\ntintel\sapcrypto.dll ), hdl 0
        using "C:\saprouter\ntintel\sapcrypto.dll"
    DlLoadFunc: GetProcAddress(sapsnc_init_adapter) Error 127
            Error 127 = "The specified procedure could not be found."
    load shared func (gss_acquire_cred) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_release_cred) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_init_sec_context) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_accept_sec_context) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_process_context_token) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_delete_sec_context) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_context_time) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_get_mic) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_verify_mic) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_wrap) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_unwrap) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_display_status) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_indicate_mechs) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_compare_name) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_display_name) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_import_name) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_release_name) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_release_buffer) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_release_oid_set) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_inquire_cred) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_add_cred) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_inquire_cred_by_mech) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_inquire_context) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_wrap_size_limit) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_export_sec_context) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_import_sec_context) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_create_empty_oid_set) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_add_oid_set_member) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_test_oid_set_member) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_inquire_names_for_mech) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_inquire_mechs_for_name) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_canonicalize_name) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_export_name) from C:\saprouter\ntintel\sapcrypto.dll
    load shared func (gss_duplicate_name) from C:\saprouter\ntintel\sapcrypto.dll
      File "C:\saprouter\ntintel\sapcrypto.dll " dynamically loaded as GSS-API v2 library.
      The internal Adapter for the loaded GSS-API mechanism identifies as:
      Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2
      <<- SncPDLInit()==SAP_O_K
    <<- SncInit()==SAP_O_K
             sec_avail = "true"
    ->> SncSetMyName(snc_hdl=00000000, myname="p:CN=solman, OU=0000731019, OU=SAProuter, O=SAP, C=DE")
    <<- SncSetMyName()==SAP_O_K
         in: myname = "p:CN=solman, OU=0000731019, OU=SAProuter, O=SAP, C=DE"
    NiBufISetParam: set max heap to 20000000
    NiSetParamEx: switch NIP_CONNLOCAL off (not supported by platform)
    NiIMyHostName: hostname = 'solman'
    main: pid = 1032, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)
    NiICreateHandle: hdl 0 state NI_INITIAL
    NiIInitSocket: set default settings for new hdl 0 / sock 876 (I4; ST)
    NiITraceByteOrder: CPU byte order: little endian, reverse network, low val .. high val
    NiIBind: hdl 0 bound to 3299 (IP only)
    NiIBlockMode: set blockmode for hdl 0 FALSE
    NiIListen: state of hdl 0 NI_LISTEN
    NiIListen: listen for client requests on hdl 0
    NiSelICreateSet: new set0
    SiSelNInit: allocate 134560 bytes for FI (811)
    NiSelIInit: size of set0 is 811
    SiSelNSet: sock 876 added to set pos 0
    NiSelIAddMsg: added hdl 0 to set0
    SiSelNSet: set events of sock 876 to: rp-
    reading routtab: './saprouttab'
    NiStrToAddrMask: '194.117.106.129' -> 194.117.106.129 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]
    NiStrToAddrMask: '10.14.147.32' -> 10.14.147.32 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]
    NiIGetServNo: servicename '3200' = port 0C.80/3200
    NiStrToAddrMask: '194.117.106.129' -> 194.117.106.129 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]
    NiIGetServNo: servicename '3299' = port 0C.E3/3299
    NiStrToAddrMask: '10.14.147.32' -> 10.14.147.32 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]
    NiStrToAddrMask: '194.117.106.129' -> 194.117.106.129 [ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff]
    NiIGetServNo: servicename '3299' = port 0C.E3/3299
    contents of routtab ('./saprouttab', 4 entries):
    P,  194.117.106.129 ffff:ffff:ffff:  10.14.147.32    ffff:ffff:ffff: 3200      *
    P,  0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0  194.117.106.129 ffff:ffff:ffff: 3299      *
    P,  10.14.147.32    ffff:ffff:ffff:  194.117.106.129 ffff:ffff:ffff: 3299      *
    D,  0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0  0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:0 *         *
    NI-ROUTER LOOP ********
    SiSelNSelect: start select (timeout=-1)
    Regards
    Siva

  • Saprouter not starting

    Hi guys,
    Im trying to setup an saprouter for my solution manager system, my solution manager is not yet ready but im through with the saprouter configuration.
    When i try to start the saprouter, this is the error i got
    "trcfile  dev_rout
    logfile  routerlog
    routtab  cannot open './saprouttab': EXIT PROGRAM !!!
             (running without saproutab is no longer supported for security reasons)
    Could not open permission table"
    I would appreciate any help you can offer.
    Regards.

    Hi,
    You need to create the saprouttab file which I think is missing. Please go throuhg the below threads which will help you in resolving the issue.
    SAP Router error
    error while configuring saprouter
    configure maintenance optimizer
    Unable to start SAProuter
    Regards,
    Sharath

  • Error while configuring saprouter

    Hi,
    I m getting error while configuring saprouter.
    When i run the command get_pse -v -r certreq -p local.pse"DN name".I get the following error.
    get_pse: Malformed distinguished name "pqprojsrv  CN=pqprojsrv, OU=0000756782, O
    U=SAProuter, O=SAP, C=DE"
    ERROR in Name2DName: (12321/0x3021) problem parsing DName : "unknown key or malf
    ormed OID"
    ERROR in aux_Name2ObjId: (1/0x0001) unknown algorithm : "PQPROJSRV  CN"
    Please suggest on this .
    Thanks in advance.
    Regards,
    Amit

    Hi,
    I resolved tht issue.but  now when im starting saprouter it gives me following error :
    trcfile  dev_rout
    no logging active
    routtab  cannot open './saprouttab': EXIT PROGRAM !!!
             (running without saproutab is no longer supported for security reasons)
    Could not open permission table
    saprouttab is nt created in saprouter directory.
    Please suggest
    Thanks in advance.
    Regards,
    Amit

  • Unable to Start SAP Router

    Hi All,
    I have installed SAP Router before but this time when I installed and tried to start SAP Router its not getting started, and also not giving any error log file in SAP Router directory.
    Please check the below command and correct me if I am wrong.
    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.
    C:\Documents and Settings\sap_admin>cd \
    C:\>cd SAPRTR
    C:\SAPRTR>saprouter -r -S 3299 -K "p:CN=<MyRouterHOSTNAME>, OU=<Cust_NUM>, OU=SAProuter,
    O=SAP, C=DE"
    SAP Network Interface Router, Version 38.10
    Compiled Oct  7 2009 03:08:09
    start router : saprouter -r
    stop router  : saprouter -s
    soft shutdown: saprouter -p
    router info  : saprouter -l (-L)
    new routtab  : saprouter -n
    toggle trace : saprouter -t
    cancel route : saprouter -c id
    dump buffers : saprouter -d
    flush   "    : saprouter -f
    hide errInfo : saprouter -z
    start router with third-party library: saprouter -a library
    additional options
    -R routtab   : name of route-permission-file  (default ./saprouttab)
    -G logfile   : name of log file               (default no logging)
    -T tracefile : name of trace file             (default dev_rout)
    -V tracelev  : trace level to run with        (default 1)
    -H hostname  : of running SAProuter           (default localhost)
    -S service   : service-name / number          (default 3299)
    -P infopass  : password for info requests
    -C clients   : maximum no of clients          (default 800)
    -Y servers   : maximum no of servers to start (default 1)
    -K [myname]  : activate SNC; if given, use 'myname' as own sec-id
    -A initstring: initialization options for third-party library
    -D           : switch DNS reverse lookup off
    -E           : append log- and trace-files to existing
    -J filesize  : maximum log file size in byte  (default off)
    -6           : IPv6 enabled
    -Z           : hide connect error information for clients
    expert options
    -B quelength : max. no. of queued packets per client  (default 1)
    -Q queuesize : max. total size for all queues (default 20000000 bytes)
    -W waittime  : timeout for blocking net-calls (default 5000 millisec)
    -M min.max   : portrange for outgoing connects, like -M 1.1023
    -I address   : address for outgoing connects, like -I 155.56.76.6
    this is a sample routtab : -----------------------------------------
    D     host1                host2     serviceX
    D     host3
    P     *                    *         serviceX
    P     155.56..           155.56
    P     155.57.1011xxxx.*
    P     host4                host5     *          xxx
    P     host6                localhost 3299
    P     host7                host8     telnet
    S     host9
    P0,*  host10
    KP    sncname1             *         *
    KS    *                    host11    *
    KD    "sncname "abc"       *         *
    KT    sncname3             host11    *
    deny routes from host1 to host2 serviceX
    deny all routes from host3
    permit routes from anywhere to any host using serviceX
    permit all routes from/to addresses matching 155.56
    permit ... with 3rd byte matching 1011xxxx
    permit routes from host4 to host5 if password xxx supplied
    permit information requests from host6
    permit native-protocol-routes to non-SAP-server telnet
    permit ... excluding native-protocol-routes (SAP-servers only)
    permit ... if number of preceding/succeeding hops (SAProuters) <= 0/*
    permit SNC-connection with partnerid = 'sncname1' to any host
    permit all SAP-SAP SNC-connections to host11
    deny all SNC-connections  with partnerid = 'sncname "abc'
    open connects to host11 with SNC enabled and partnerid = 'sncname3'
    first match [host/sncname host service] is used
    permission is denied if no entry matches
    service wildcard (*) does not apply to native-protocol-routes
    C:\SAPRTR>
    Rg
    Ramesh

    Hello my friend
    It could be certificate didn't import properly or routtab content is not correct. Here's your checklist:
    Creating the certificate request
    1) As user <snc_adm> set the environment variables SNC_LIB and SECUDIR
    2) Change to the alias SAPROUTER-SNCADD. From the list of SAProuters registered to your installation, choose the relevant u201CDistinguished Nameu201D.
    3) Generate the certificate Request with the command:
    sapgenpse get_pse -v -r certreq -p local.pse u201C<Distinguished Name>u201D
    You will be asked twice for a PIN here. Please choose a PIN and document it, you have to enter it identically both times. Then you will have to enter the same PIN every time you want to use this PSE.
    4) Display the output file "certreq" and with copy&paste (including the BEGIN and END statement) insert the certificate request into the text area of the same form on the SAP Service Marketplace from which you copied the Distinguished Name.
    5) In response you will receive the certificate signed by the CA in the Service Marketplace. Copy&paste the text to a new local file named "srcert", which must be created in the same directory as the sapgenpse executable.
    6) With this in turn you can install the certificate in your saprouter by calling:
    sapgenpse import_own_cert -c srcert -p local.pse
    7) Now you will have to create the credentials for the SAProuter with the same program (if you omit -O <user_for_saprouter>, the credentials are created for the logged in user account). 
    sapgenpse seclogin -p local.pse -O <user_for _saprouter>
    Note: The account of the service user should always be entered in full <domainname>\<username>
    8) This will create a file called "cred_v2" in the same directory as "local.pse"
    9) Check if the certificate has been imported successfully with the following command:
    sapgenpse get_my_name -v -n Issuer
    The name of the Issuer should be:
    CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE
    10) If this is not the case, delete the files "cred_v2"and "local.pse" and start over at Item 3.
    Additional actions necessary before you can start SAProuter
    1.     Check if the environment of the user running SAProuter contains the environment variable SNC_LIB and SECUDIR
    2.     Start the SAProuter with the following command line (to start the SAProuter as a Windows service, please follow the steps described in SAP note 525751):
                   saprouter -r -S <port> -K "p:<Distingushed Name>"
                   -K tells the saprouter to start with loading the SNC library
    3.     The corresponding file "saprouttab" should look like:
    SNC-connection from and to SAP                               
    KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *  
    SNC-connection from SAP to local R/3-System for Support      
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * *              
    SNC-connection from SAP to telnet in your network            
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 23             
    Access from the local Network to SAPNet - R/3 Frontend (OSS) 
    P * 194.39.131.34 3299                                         
    KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <your IP> <port> 
    Regards,
    Effan
    DON'T KNOW WHY THE FORMAT MESSED UP, PLEASE USE QUOTE ORIGINAL IN REPLY MODE TO READ THE CORRECT FORMAT CONTENT. SORRY!

  • Error in SAProuter installation

    Hi to all,
    I have followed all step for install a saprouter, but i have the follow error message:
    (when i start the service in "Computer Management")
    "Could not start saprouter service on local computer
    Error 14001: This application has failed to start because the application configuration is incorrect. Reinstalling application may fix the problem."
    (in cmd)
    C:\>saprouter -r
    trcfile  dev_rout
    no logging active
    ERROR => invalid lines in ./saprouttab, see dev_rout [nirout.cpp   8009]
    WARNING: wildcard character used in route target
    C:\>saprouter -l
    Tue Dec 04 10:18:40 2007
    SAP Network Interface Router, Version 37.12
    Tue Dec 04 10:18:41 2007
    ***LOG Q0I=> NiPConnect2: SiPeekPendConn (10061: WSAECONNREFUSED: Connection ref
    used) [nixxi.cpp 8724]
    ERROR => RTADMINREQ::execClientReq: NiBufConnect (rc=-10) [nirout.cpp   6713
    ERROR       partner not reached (host 127.0.0.1, service 3299)
    TIME        Tue Dec 04 10:18:41 2007
    RELEASE     640
    COMPONENT   NI (network interface)
    VERSION     37
    RC          -10
    MODULE      nixxi.cpp
    LINE        8724
    DETAIL      NiPConnect2
    SYSTEM CALL SiPeekPendConn
    ERRNO       10061
    ERRNO TEXT  WSAECONNREFUSED: Connection refused
    COUNTER     1
    the saprouttab file is in the same foleder of saprouter and there is only a line (ex."P 10.0.1.132 10.0.1.211 3299")
    Where is the problem?

    hi franco,
    please check your network card. It seems that you have problem with your network card since it's only show loopback address.
    ardhian
    http://sapbasis.wordpress.com

  • Error in saprouter

    Hi guys,
    I am getting an error in my sap router as my network team made some changes in the VPN connections
    SAP Network Interface Router, Version 34, August 30 1999
    command line arg 0:     saprouter
    command line arg 1:     -r
    ERROR => fopen ./saprouttab (2: No such file or directory) [nixxrout.c   2666]
    ***LOG Q0I=> NiRRouttab: fopen (2: No such file or directory) [nixxrout.c 2667]
    cannot open ./saprouttab: all routing disabled!!!
    Could not open permission table
    Please reply with ur suggestions.
    Thank you,
    Irshad Mohammed

    When i m trying to start saprouter from saprouter utility im getting this error
    External Call                                                                               
    0                                                                               
    31 Could not open permission table                                                      
    0                                                                               
    17 trcfile  dev_rout                                                                    
    17 no logging active                                                                    
    51 routtab  cannot open ./saprouttab: EXIT PROGRAM !!!                                  
    0                                                                               
    80          (running without saproutab is no longer supported for security reasons)     
    46 External program terminated with exit code 255

  • Configuration of saprouter.

    Hello,
    I have reinstalled the saprouter but after configuring the saprouter, it's giving error while starting saprouter.
    The error is as follows :
    $ ./saprouter -l
    SAP Network Interface Router, Version 40.4
    ***LOG Q0I=> NiPGetHostByName: 'localhost' not found: getaddrinfo [niuxi.c 1759]
    *** ERROR => NiGetLoopbackAddr: NiIGetNodeAddr failed (rc=-2) [nixx.c       2179]
    Mon Jun 16 16:53:40 2014
    peer SAProuter with NI version 40 ...
    send info-request to running SAProuter ...
    SAP Network Interface Router running on port 3299 (PID = 132)
    Started on: Mon Jun 16 16:12:14 2014
    ID  CLIENT                         | PARTNER                        service
    -----------------------------------+---------------------------------------
    9   127.0.0.1                      | (no partner)
    Total no. of clients: 1
    Working directory   : /usr/sap/saprouter
    Routtab             : ./saprouttab
    Please help.

    Hi,
    I have configured SAP Router on Windows. When i start the router i am getting error like as below.
    trcfile  dev_rout
    ERROR       SNC processing failed:
                 SncInit
    TIME        Tue Sep 30 10:32:29 2008
    RELEASE     700
    COMPONENT   NI (network interface)
    VERSION     38
    RC          -17
    MODULE      nisnc.c
    LINE        646
    DETAIL      NiSncInit: sncrc=-1
    COUNTER     3
    Please any body give the solution.
    Thanks,
    Regards,
    venkat

  • Saprouter connection refused

    Hello Guru,
    Well after configuring the SAP Router and doing everything possible to let it run.
    When, I finally tested it with the SAPOSS-connection it didn't work at all.
    In fact I'm getting an error msg fron sap serv2a with my external ip address, where the connection has been refused.
    ERROR : " sapserv2a router permission denied (XX.XX.XX.XX to oss001,sapmsOSS) "
    Now, I wonder why it's not working.
    Another problem that the OU name of my Distinguish name of my saprouter is different from my super user logon in sap marketplace, why is it different, it should be actually the same, unfortunatelly I can't change it because only SAP could (because of the certificat).
    A third and last problem is also the fact that my sap router name is actually named e.g. ROUTI but the Distinguish name contain the name SAProuter, I only added a line containing the saprouter name i.e. SAProuter with it's ip adresse on windows-file hosts (C:\WINDOWS\system32\drivers\etc)
    Please, let me now, if you have any idea.
    Best Regards,
    Kais

    Use these commands if you encounter problems connecting to OSS or sapserv4.
    Stop saprouter
    1. logon to system as <sid>adm
    2. ps -ef|grep saprouter - should show process as saprouter -r
    3. saprouter -s  - this will STOP saprouter service
    4. ps -ef|grep saprouter - should not show saprouter process
    Start saprouter
    1. logon to system as <sid>adm
    2. ps -ef|grep saprouter - should not show saprouter process, cd /usr/sap/saprouter
    3. nohup saprouter -r &  or nohup saprouter -r -G /usr/sap/saprouter/saprout.log  (Saprouter start with Log / command has been incluede in the /etc/init tab to start with the OS / server)  (wait a few seconds then press <enter> to return to prompt...this will start saprouter service in the background)
    4. ps -ef|grep saprouter - should show process as saprouter -r
    5. Logon to to OSS to test (should work from tcode OSS1 and from OSS entry on saplogon screen)

Maybe you are looking for