Skip to Content
Former Member
Mar 25, 2014 at 08:21 PM

Double SAPRouter with SNC enabled


Hello SAP Geniuses,

We are trying to set up a double SAPRouter protected by SNC:

Our intended config:

sapserv2 =======> DMZ Saprouter =======> Private Network Saprouter -----------> SAP System

=====> (SNC protected connection)

----------> (Non protected connection)

Our DMZ saprouttab file:

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sap's ipaddr> *

KT "p:<Internal server certificate>" *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 3299

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Private network SAP-Router> 3299

D * * *

Our Private Network saprouttab file:

KT "p:<DMZ server certificate>" yyy.yyy.yyy.yyy *

KP "p:<DMZ server certificate>" * *

D * * *

With this configuration we can successfully ping using RFC connection: SAPOSS. However, when SAP tries to connect to our systems they get a "SNC processing failed" error return code -93 on our Private network SAPRouter.

Does any one have any idea?


Yannick C.