Double SAPRouter with SNC enabled

[Former Member]

Hello SAP Geniuses,

We are trying to set up a double SAPRouter protected by SNC:

Our intended config:

sapserv2 =======> DMZ Saprouter =======> Private Network Saprouter -----------> SAP System

=====> (SNC protected connection)

----------> (Non protected connection)

Our DMZ saprouttab file:

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sap's ipaddr> *

KT "p:<Internal server certificate>" xxx.xxx.xxx.xxx *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" xxx.xxx.xxx.xxx 3299

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Private network SAP-Router> 3299

D * * *

Our Private Network saprouttab file:

KT "p:<DMZ server certificate>" yyy.yyy.yyy.yyy *

KP "p:<DMZ server certificate>" * *

D * * *

With this configuration we can successfully ping using RFC connection: SAPOSS. However, when SAP tries to connect to our systems they get a "SNC processing failed" error return code -93 on our Private network SAPRouter.

Does any one have any idea?

Thanks,

Yannick C.

[Former Member]

Hi,

I know this is an old thread, but I'm trying to do this exact thing.  Can you please provide some details as to how you set this up.  Perhaps screenshots and how you exchanged certificates, etc. 
Did you get it to work?

Best regards,

Jim

[Former Member]

Just to clarify

yyy.yyy.yyy.yyy = DMZ SAProuter IP

xxx.xxx.xxx.xxx = Private Network SAProuter IP

[former_member182505]

Hi

Please give us the log details.

mean whiile try this.

login with SIDADM user and scroll to the saprouter folder

sapgenpse seclogin -p local.pse -O <sidadm>