SAP Router internal error

[Former Member]

Hello

I have installed solution manager 7.0 and then sap router is also configured on the same box.

1. To generate a certificate request,

sapgenpse get_pse -v -r D:\usr\sap\saprouter\certreq -p D:\usr\sap\saprouter\local.pse "CN=sbsapmgrapp01, OU=0000809350, OU=SAProuter, O=SAP, C=DE"

2. Then you have to request the certificate from

http://service.sap.com/tcs -> Download Area -> SAProuter Certificate

3. Create a file D:\usr\sap\saprouter\srcert and copy the requested

certificate into this file. :

sapgenpse import_own_cert -c D:\usr\sap\saprouter\srcert -p

D:\usr\sap\saprouter\local.pse

4. To generate credentials for the user that's running the SAProuter

service:

sapgenpse seclogin -p D:\usr\sap\saprouter\local.pse -O sapadmin

(this will create the file "cred_v2")

5. Check the configuration:

sapgenpse get_my_name -v -n Issuer

(Result: "CN=SAProuter CA, OU=SAProuter,

O=SAP, C=DE")

6. Create SAProuter service on Windows :

ntscmgr install SAProuter -b D:\usr\sap\saprouter\saprouter.exe -p

"service -r -R D:\usr\sap\saprouter\saprouttab -W 60000 -K "CN=sbsapmgrapp01, OU=0000809350, OU=SAProuter, O=SAP, C=DE"

7. Edit the Windows Registry key :

MyComputer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SAProuter\ImagePath

8. Start the SAProuter service -- success

9. Enter the parameters in OSS1 -> Technical Settings -->

hostname : sbsapmgrapp01

IP: 10.1.0.112

instance : 00

SAP host name : sapserv2

IP: 194.39.131.34

instance:99

10. saprouttab

1. SNC-connection from and to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

1. SNC-connection from SAP to local R/3-System for Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.0.112 3200

1. Access from the local Network to SAPNet - R/3 Frontend (OSS)

P 10.1.0.112 194.39.131.34 3299

1. deny all other connections

D * * *

when I check the sap-oss connection i am getting internal error. Any help would be appreciate..

Thanks

seshu

[Former Member]

I am having the same problem

1 - SAP Router installation completed

2 - when we try to configure the SAPOSS using the transaction - SM59 when i run the connection test we got the below error

Error -

Logon Connection Error

Error Details Error when opening an RFC connection

Error Details ERROR: sapserv2a: route permission denied (202.56.195.39 to oss001, sapmsOSS)

Error Details LOCATION: SAProuter 39.2 (SP4) on 'sapserv2a'

Error Details COMPONENT: NI (network interface)

Error Details COUNTER: 1286120

Error Details MODULE:

Error Details LINE:

Error Details RETURN CODE: -94

Error Details SUBRC: 0

Error Details RELEASE: 710

Error Details TIME: Wed May 19 15:12:38 2010

Error Details VERSION: 39

Please help me how to solve the problem.

[Former Member]

issue resolved

[Former Member]

Hello Seshagiri,

How did you solve the issue?

Regards,

Abhilash

[Former Member]

I have the same issue.........Please help...........as i am bugged up now

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Sun Nov 22 16:29:10 2009

SAP Network Interface Router, Version 38.10

command line arg 0: saprouter

command line arg 1: -r

main: pid = 4796, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

• ERROR => SNC field without SNC active, skip line 2 [nirout.cpp 7767]

• ERROR => SNC field without SNC active, skip line 5 [nirout.cpp 7767]

• ERROR => SNC field without SNC active, skip line 6 [nirout.cpp 7767]

• ERROR => SNC field without SNC active, skip line 7 [nirout.cpp 7767]

• ERROR => SNC field without SNC active, skip line 8 [nirout.cpp 7767]

• ERROR => SNC field without SNC active, skip line 12 [nirout.cpp 7767]

• ERROR => SNC field without SNC active, skip line 15 [nirout.cpp 7767]

Sun Nov 22 16:29:44 2009

• ERROR => NiBufIProcMsg: hdl 4 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

Sun Nov 22 16:29:53 2009

• ERROR => NiBufIProcMsg: hdl 4 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

Sun Nov 22 16:29:55 2009

• ERROR => NiBufIProcMsg: hdl 4 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

[Former Member]

Hi Gurus,

I have the same error getting how did you solve the issue. Below is my dev_rout.

-

---

trc file: "dev_rout", trc level: 1, release: "710"

-

---

Tue Mar 23 16:02:29 2010

SAP Network Interface Router, Version 39.1 (SP3)

command line arg 0: saprouter

command line arg 1: -r

main: pid = 2832, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

• ERROR => SNC field without SNC active, skip line 1 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 2 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 4 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 5 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 6 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 10 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 11 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 12 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 13 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 14 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 15 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 16 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 17 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 18 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 19 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 20 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 21 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 22 [nirout.cpp 9101]

• ERROR => SNC field without SNC active, skip line 23 [nirout.cpp 9101]

TIA.

[raguraman_c]

Hi,

Funny... You have just explained the process of setting up router.

What is the error you are getting, you have just mentioned internal error.

Please post contents of dev_rout here.

Feel free to revert back.

--Ragu

[Former Member]

Hi Ragu

Thanks for your response.

Here is the content of dev_route

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Tue Oct 14 15:36:01 2008

SAP Network Interface Router, Version 38.10

command line arg 0: D:\usr\sap\saprouter\saprouter.exe

command line arg 1: -r

command line arg 2: -R

command line arg 3: D:\usr\sap\saprouter\saprouttab

command line arg 4: -W

command line arg 5: 60000

command line arg 6: -K

command line arg 7: p:CN=sbsapmgrapp01, OU=0000809350, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "D:\usr\sap\saprouter\sapcrypto.dll".

File "D:\usr\sap\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 1688, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: 'D:\usr\sap\saprouter\saprouttab'

Wed Oct 15 09:51:21 2008

***LOG Q0I=> NiPConnect2: connect (10061: WSAECONNREFUSED: Connection refused) [nixxi.cpp 2823]

• ERROR => NiPConnect2: SiPeekPendConn failed for hdl 2 / sock 256

(SI_ECONN_REFUSE/10061; I4; ST; 194.39.131.34:3299) [nixxi.cpp 2823]

Wed Oct 15 09:51:24 2008

checkRoute: route not permitted (3)

• ERROR => NiRClientHandle: NiRExRouteCon for C1/-1 'seshu' failed (rc=-94) [nirout.cpp 2243]

Wed Oct 15 09:51:52 2008

***LOG Q0I=> NiPConnect2: connect (10061: WSAECONNREFUSED: Connection refused) [nixxi.cpp 2823]

• ERROR => NiPConnect2: SiPeekPendConn failed for hdl 2 / sock 256

(SI_ECONN_REFUSE/10061; I4; ST; 194.39.131.34:3299) [nixxi.cpp 2823]

Thanks

seshu.

Edited by: Seshagiri Rao Myneni on Oct 16, 2008 1:30 AM

[raguraman_c]

Hi,

There seems to be problem with your rout tab file.

The error is

checkRoute: route not permitted (3)

Please check your entries in rout tab file.

Feel free to revert back.

--Ragu

[Former Member]

Hi Rahu

Thanks for your response. Here is my saprouttab entry's

1. SNC-connection from and to SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

1. SNC-connection from SAP to local Solman System for Support

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 10.1.0.112 3200

1. Access from the local Network to SAPNet - R/3 Frontend (OSS)

P 10.1.0.112 194.39.131.34 3299

P 10...* 194.39.131.34 *

Here is my dev_rout file..

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Thu Oct 16 02:08:22 2008

SAP Network Interface Router, Version 38.10

command line arg 0: D:\usr\sap\saprouter\saprouter.exe

command line arg 1: -r

command line arg 2: -R

command line arg 3: D:\usr\sap\saprouter\saprouttab

command line arg 4: -W

command line arg 5: 60000

command line arg 6: -K

command line arg 7: p:CN=sbsapmgrapp01, OU=0000809350, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/64/64)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "D:\usr\sap\saprouter\sapcrypto.dll".

File "D:\usr\sap\saprouter\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 1684, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: 'D:\usr\sap\saprouter\saprouttab'

Thu Oct 16 09:14:17 2008

***LOG Q0I=> NiPConnect2: connect (10061: WSAECONNREFUSED: Connection refused) [nixxi.cpp 2823]

• ERROR => NiPConnect2: SiPeekPendConn failed for hdl 2 / sock 256

(SI_ECONN_REFUSE/10061; I4; ST; 194.39.131.34:3299) [nixxi.cpp 2823]

Thu Oct 16 09:14:20 2008

***LOG Q0I=> NiPConnect2: connect (10061: WSAECONNREFUSED: Connection refused) [nixxi.cpp 2823]

• ERROR => NiPConnect2: SiPeekPendConn failed for hdl 2 / sock 256

(SI_ECONN_REFUSE/10061; I4; ST; 194.39.131.34:3299) [nixxi.cpp 2823]

Kindly suggest the changes in my saprottab file..

Thanks

seshu

Issue resloved..

Edited by: Seshagiri Rao Myneni on Oct 16, 2008 7:31 PM