RFC with SAProuter-String?!

[Former Member]

Hi,

well i am trying to set up a RFC Connection to a external 4.6c because i would like to send an IDoc into our XI. I have no clue if this will work, it seems not to work so I ask all of you if you could give me a hand to use the SAProuter-String inside a RFC-Connection.

I have the router-string, means the /H/Host/H/Service/H/ and also the IP-Adress of the 4.6c- System

Can u please help me?! best regards, Jens

btw, I already posted this question in the XI forum.

[Former Member · Accepted solution]

Hi jens,

Are you planning to use ALE for this purpose?

Even if you are not using ALE you need to create an RFC destination for 4.6 C system. You can use the IP address of the external system. Further you need to create a LS type port in WE20 and add message types there.of course you need to create a logical system for 4.6 system as well. The same activities need to be carried out in 4.6 C for making connections to your system.

Same LAN is not neccesary as long as firewall ports are open using secure BP VPN.

Regards.

Ruchit.

[Former Member · Accepted solution]

Thx ruchit,

I was about to explain the same that the reason i asked the question.

Jens,

Please follow the procedure and let us know.

Cheers

Arun

[Former Member · Accepted solution]

Ok, because i try everything i configured both systems.

I did BD54, WE20, WE21, IDX1 (for ALE)

In IDX1 i get an error while trying to add the RFC-Destination to the port. That's because of the reasons mentioned above.

As i understand u said i don't need to add the SAProuter-String and only use my target IP-adress of the foreign system (4.6c)? but this doesn't work either

any ideas? does somebody implement a connection like this?

Maybe u can check my other post inside the XI-Forum?!

br, Jens

[Former Member · Accepted solution]

I guess you muct specify the router string like the below

/H/IP address/S/sapdp01(01 instance number)

Cheers

Arun

[Former Member · Accepted solution]

/H/IP address/S/sapdp01/H/ipaddress/S/sapdp99/H/

Cheers

Arun

[Former Member · Accepted solution]

Hi Arun,

i posted following in the other forum:

+++++++++++

I have folowing style of SAProuter-String

/H/62.206.XX.YYY/H/170.56.XX.YY/H/

additionaly i got the IPs form the systems i have to connect: 170.56.XXX.YY with the System ID XY

Also i have been told that the port range is open from 3200-3399 so that the standard port 3299 is also open and don't have to be specified.

So i put the given SAProuterString in the host field and added the system-IPs for example, but the connection-test is always aborting!

++++++++++++++

Because of the portrange and of the normal standard-port of 3299 for my understanding i don't need to specify it, as mentioned above.

so actually i tried everything, didn't I?

br

[Former Member · Accepted solution]

Jens, do as below -

Create new RFC destination with connection type 3

and maintain Trfc options from menu Destination->TRFC as

attempts 5, time 1

Then target system, message server and group fields will be enabled.

Then put your router string in message server.

select "IP Address" radio button for field Save As.

Select load distribution as Yes.

Hope this resolves your problem.

[rolfc_weber · Accepted solution]

Hi Jens,

If I understand you right, the 4.6c system and the XI system are on different networks. If so, are they sharing the same SAProuter or are there two SAProuters involved here?

If there are two SAProuters, is there a technical network connection between them, and is at least the port the SAProuter is using open (default port 3299)?

This can be verified by trying to telnet from the one SAProuter to the other. (telnet <IP of other saprouter> <port of saprouter>). Here it is enough that telnet can connect on the specified port, and off curse this should work both ways.

If only one shared SAProuter is involved, check if you can connect (telnet again) from the SAProuter to both systems.

Is there any message in the dev_rout file on the SAProuter(s) ?

Regards

Rolf

[Former Member · Accepted solution]

Hi Rolf,

well after a few days i am back to my problem.

I checked telnet with the given IPs in the SAProuter-String - actually i am not quite sure which one is the SAProuter's IP - i guess the first one, the second should be the IP to the System - right?!

i tried like o 62.206.XY.XYX 3299 and telnet told me that it "lost the connection" - what does this mean!?

message looks nearly like:

ERR1 connection timed out-5NI (network interface)70038nirout.cpp5420RTPENDLIST::timedoutPend: CONNECTED timeoutWED Jan 17[...]5458SAProuter 38.4 on 'saprtr01' ERR

I can't give any informations on the dev_rout file because i am no admin of the SAProuter.

Can u give me a hand?!

br, Jens

[Former Member · Accepted solution]

SAP router suppose to be on which will help in activating 3299 port or else u can do a telnet to 3299.

check is ur SAP router working currently

Cheers

Arun

[Former Member · Accepted solution]

Hi, actually the port range is open from 3200-3399 and the SAProuter is running because we use it all the time to get on the clients Systems via SAP-Logon.

Therefore it all should be fine in this point of view.

cheers Jens

[Former Member · Accepted solution]

R u able to do telnet succuessfully to the ip with out 3299 port

Arun

[Former Member · Accepted solution]

No the connection failed after a view seconds - check my previous post, there i gave the error message from telnet.

[Former Member · Accepted solution]

Am sure there is some prb in firewall config. The base public ip should telnet if tht is not possible then consultant the firewall vendor or ur it team to chk it

Arun

[rolfc_weber · Accepted solution]

Hi Jens,

You say you use a router sting to connect your GUI to the system.

Does this mean you can connect with GUI to both systems (the 4.6c system and your XI), by using a router string in sap-logon?

And thereby there is only one SAProuter in the environment?

In SM59 the router string you have to use (Type "3" connection) when connecting 2 systems through 1 SAProuter is as follows:

"/H/<ip of saprouter seen from source system>/S/3299/H/<ip of destination system seen from saprouter box>"

Mark the connection as "IP Address" (not as "Host name") and fill in the correct system number of the destination system.

This then apply for connections in both directions (from both systems).

If there is an additional SAProuter you have to add "/H/<ip of 2. saprouter seen from 1. saprouter>/S/3299" right after the first "3299" in the string from before.

By the way have you checked up if your SAProuter is configured so that it allows connections between the IP's of the systems? (This is defined in the saprouttab file and is an addition to the opened ports).

On the other hand, the timeout you get when doing a telnet connection looks like a bad connection (network problems?) or in deed a firewall blocking as other suggests....

Regards

Rolf

[Former Member · Accepted solution]

Hi Rolf,

well i can only say that we can connect with the SAP-Logon via SAProuter-String - yes. From Client-side i have no clue because i am no admin

Thx for your detailed description - it's the way i did it.

BUT: i have also the IP-Adress of the target 4.6c system. But where to add this IP.

<b>what i have in detail:

Connection type 3

/H/<ip of saprouter seen from source system>/S/3299/H/<ip of 2. saprouter seen from 1. saprouter>/S/3299/H/<ip of destination system seen from saprouter box>

/H/62.XXX.YY.232/S/3299/H/170.XX.YY.54/S/3299/H/170.56.XXX.80

IP-Adress 1. SAProuter: 62.XXX.YY.232

IP-Adress 2. SAProuter: 170.XX.YY.54

destination system: 170.56.XXX.80

</b>

To make it clear: from SAP-Logon everything works fine - but in RFC-Dest. the connection fails!!

Have u any idea what could be wrong? the user is able to connect to the system....

br, cheers, Jens

[rolfc_weber · Accepted solution]

Hi Jens,

It this is not a network issue, it can only be the setup of the saprouter(s).

You should check up with the admin's of the router(s) if they in the saprouttab have opened up for connections between the saprouter(s).

If this is not the case, ask them to look at the dev_rout file on the saprouter box.

If the saprouter(s) are blocking the connection there will be an entry saying so in the dev_rout file.

If there is no entry in the dev_rout file of the saprouter(s), it is not the saprouter(s) blocking the connection, and then we are back to network / firewall settings.

Regards

Rolf

[Former Member]

Hello jens,

OS01 allows you to ping from application server at SAP level without actually login into it as OS level.

Delays are fine but since you say that a package is lost then it indicates a firewall issue.

Again I must stress successful ping alone doesnot mean that firewall ports are open. In reality telnet has to work.

In your case I really believe that this might be a networking issue.

Regards.

Ruchit.

[Former Member]

Hi, well i talked to both system/basis-admins and both say that everything is configured fine.

The ports are open, and with SAP-GUI it is also possible to connect via bothj SAProuters.

Now i am not sure if my R3-Config of the RFC Connection is right. It looks like:

/H/62.206.XX.232/S/3299/H/170.56.XX.54/S/3299/H/170.56.XXX.80 System-ID: 71

In the target LAN the port 3271 is also open, depending on the System-ID + 3200.

Do i have to add this to the given SAProuter-String in any way.

I am desperate - it really has to be managed!

thx in advance, Jens

[rolfc_weber]

Hi Jens,

One more thing you maybe can try:

Download the so called RFC-SDK for your platform (Windows?) from the Service Marketplace, it does not matter what it is used for, but after extracting the RFC-SDK you will have a small utility program named sapinfo.

This is a command line tool that can be used to make a "ping" to a SAP system.

The advantage is that you can use a router sting as parameter, and that if the connection is not ok, it gives you a bit more information on way not.

If i don't remember wrong, the command is like:

sapinfo <complete routerstring> 32xx (xx=System-ID) or something like it.

But if you just type sapinfo there will come a help on syntax.

As you can connect to the systems with SAP-GUI, you can start trying this from you workstation, using the routerstring from SAP-GUI to get familar with this utility. Afterwards you have to do the same directly from the server(s) the SAP systems are running on.

If you still can not connect, or resolve what's wrong, i think you have to ask your networking people to trace the connection, and thereby get a clue on what's wrong.

Regards

Rolf

[Former Member]

Hi Rolf,

I will check it out.

Finally the destination is working from client system. From our side it's because of a second network device which is installed inside our XI-Server.

We figured it out because of adding the "trace" option in the RFC Dest and check Tx SMGW in the SAP-System. There we found the the second Network-Adapter's IP-Address.

Now the routing has to be modified!!!

Thx so far, Jens

[Former Member]

Hello Jens,

When you are login through SAP GUI then it that case presentation server (your PC) should have firewall ports opened up for 4.6C sytem. They would be opened and hence you are able to connect. This is your normal connection enabled through LAN,WAN or VON.

However in case of RFC connection firewall ports have to be opened at application server levels. So check with both XI and 4.6 C admins if these ports are open.

Has an entry been made in your XI hosts file for 4.6C system?

Next up check in transaction OS01 in your XI system check if you are able to ping 4.6C system giving its IP address.

Frankly this is a network issue and there is not much a non networking guy can do much about.

Get a team of dedication networking people from both the systems and ask them to look into this issue. They will be able to fix it asap.

regards.

Ruchit.

[Former Member]

Hi thx for ur help.

Well i got all the information from our Basis-Team which implement the SAProuter-Connection in connection with the client-basis-team.

I checked OS01 (i didn't know this) - and i could ping the target system - without using the SAProuter-String! But the are one package-lost message in the report, the others have some delay about 250ms.

Now i thought i check the RFC-Dest by only using the IP of the target system - but the connection failed, again

What can i do???

[Former Member]

Hello Jens,

it might be a firewall issue. Do telnet from the application server to 4.6 C system using port as 32XX where XX is the system number of the 4.6 C system.

Check with your network team as well as that responsible for 4.6 C system

Regards.

Ruchit.

[Former Member]

Hi,

Is you XI and 4.6c on same LAN?

Have you configured the partner profile, ports for IDOCs?

Wht error message do you get?

Cheers

Arun

[Former Member]

Hi, excatly thats the problem. The 4.6c is not in our LAN, otherwise there won't be any problem for me.

Until the connection isn't running i don't have to configure ports and profile!?

br, Jens