Double SAPRouter with SNC enabled

155 Views

Hello SAP Geniuses,

We are trying to set up a double SAPRouter protected by SNC:

Our intended config:

sapserv2 =======> DMZ Saprouter =======> Private Network Saprouter -----------> SAP System

=====> (SNC protected connection)

----------> (Non protected connection)

Our DMZ saprouttab file:

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sap's ipaddr> *

KT "p:<Internal server certificate>" xxx.xxx.xxx.xxx *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" xxx.xxx.xxx.xxx 3299

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Private network SAP-Router> 3299

D * * *

Our Private Network saprouttab file:

KT "p:<DMZ server certificate>" yyy.yyy.yyy.yyy *

KP "p:<DMZ server certificate>" * *

D * * *

With this configuration we can successfully ping using RFC connection: SAPOSS. However, when SAP tries to connect to our systems they get a "SNC processing failed" error return code -93 on our Private network SAPRouter.

Does any one have any idea?

Thanks,

Yannick C.