SAP Router not properly set - Need help

[LeonardoAraujo]

Guys,

I've proceeded with the installation of SAP ROuter and did the following:

Created a batch file with the following:

created a SAProuter folder into E:\USR\SAP\SAPROUTER

I put there the SAPROUTAB with:

P * * 3200

P * * 3210

P * * 3220

P * * 3230

P * * 3240

P * * 3290

My batch file has the following:

<<begin of batch file>>

E:

CD \USR\SAP\BT6\SYS\EXE\uc\NIT386

saprouter -S 443 -r

ntscmgr install saprouter -b e:\USR\SAP\BT6\SYS\EXE\uc\NIT386\saprter.exe -p "service -r -s 443 -R E:\USR\SAP\saprouter\saproutab"

I execute the batch and I get the following:

1st problem, the execution of the batch stops after

E:

CD \USR\SAP\BT6\SYS\EXE\uc\NIT386

saprouter -S 443 -r

It returns trcfile dev_rout

no logging active

WARNING: wildcard character used in route target

Then the system stays there.

If I run SAPROUTER -l (for status) I get the following:

LOCATION SAPRouter 38.0 on 'sapserver1'

ERROR partner 127.0.0.1:3299 not reached

Any ideas on what I am doing wrong or what I might have forgot? Services or hosts table?

Thanks

Leonardo De Araujo

[former_member286504]

Hi,

My problem was resolved. I have renewed my SAPROUTER again by following the below link.

http://scn.sap.com/community/netweaver-administrator/blog/2012/11/03/sap-router-certificate-renewal-...

Now SAPOSS rfc connection also working fine...

Thanks

Venkat

[former_member286504]

Hi ,

I have similar problem, After i renew certificate i am unable to run saprouter -r command. The error is WARNING: wildcard character used in route target.

Here i am posting my saprouttab. Please help me to sort this issue..

#SNC-Connection to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.4.12 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.4.12 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.4.12 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.4.12 3299

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.4.54 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.4.152 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.4.54 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 124.7.139.229 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 124.7.139.227 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 124.7.139.226 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 124.7.139.237 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 124.7.139.250 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.4.42 23

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.4.32 23

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 124.7.139.237 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.4.32 *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.4.54 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.10 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 3299

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 50000

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 8000

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 8001

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 50200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 8000

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 8001

p * 124.7.139.226 *

p * 124.7.139.237 *

p * 192.168.4.32 *

P * 194.39.131.34 3201

P * 194.39.131.34 3299

P * * 3600

P * * 3200

P * * 3201

P * * 3202

P * * 3203

P * * 3204

P * * 3205

P * * 3206

P * * 3207

P * * 3208

P * * telnet

P * * *

[Former Member]

It is only a warning and it is documented, see the attached link for details (section Security Note). Check the log/trace that saprouter is actually restarted.

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/48/6c7a3fc1504e6ce10000000a421937/frameset.htm

[Former Member]

Hi,

no logging active

WARNING: wildcard character used in route target

Then the system stays there.

This states the router is started.You are at right place dont worry thats it.

But in your routtab you have made all the entries with out snc, but sap supports only snc routers like they login in to ur system only using snc router.

So Change your entries in the routtab.

Also try downloading the sap note through snote.

Regards,

Vamshi.

[LeonardoAraujo]

Thanks for your help.

How do you recommend me to change the routtab?

Also, why do I need to download an SAP Note? If so, which one?

Thanks

Leonardo

[LeonardoAraujo]

I think my saproutab was not properly set....

My system number is not 00. It is 01. So I add the following to the SAPROUTTAB:

P * * 3201

....

P * * 3291

So, if it is ok, how come I don't get the NTSCMGR line executed?

Thanks agaiin

Leo

[LeonardoAraujo]

Still, I get the following if I try to connect to the instance from the web...

sapserver1: route permission denied

Any help is greatly appreciated.

Leo

[Former Member]

Hi,

As i said you normal p* entry would not allow you using snc router,you got to use

Outbound Connections to sapserv2 will use SNC

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

#Inbound Connection MUST use SNC

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" < pubilc ip> 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" < pubilc ip>3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" < local ip> 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" < local ip> 3389

#KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * *

#Permission entries to check if the connection is allowed at all

p * Ipaddress 3200

make this changes in your routtab abd then run your router as saprouter -n

this will run the router on the new rout tab entries.

Regards,

Vamshi.

[LeonardoAraujo]

I will try this and I will let you know.

What I find weir though is that before (not long ago) I was able to set it up like this and it was working.

This is a test installation that we want to allow remote access (GUI) via web.

The server sapserver1 is connected to a router that has been set to forward the ports.

This router access internet via a normal ISP.

Using SAP Logon entry /H/www.beyondtechnologies.xxxxxx.org/S/443/H/

sys num 01

sys ID BT6

I was expecting to be able to log on.

I get error route permission denied.

If I enter www.beyondtechnologies.xxxxxxx.org as the server on the SAPLOGON Iget through. But this is not a viable solution since I get blocked by some firewalls. That is why I wanted to implement SAPROUTER and I was able to do it in the past, but now I am stuck.

About SNC, I am not quite sure what you refer to since I am not a Basis / network guy.

Thanks and let me know.

Leonardo

[LeonardoAraujo]

I checked my hosts file and there was an entry there like this:

127.0.0.1 localhost

I changed it to:

192.168.1.50 localhost " (the ip within our network).

STILL NOT WORKING.

Leo

Edited by: Leonardo De Araujo on Jul 9, 2008 11:01 AM