Sap Router problem....

[Former Member]

Dear All,

Suddenly saprouter macj=hine is getting problem,

1) When users connecting through SAP ROUTER string, the users are able to login but with in a few seconds the connection is getting disconnected.....

2) When i checked the "SAPOSS" RFC Connection test, it shows permission problem as below :

Logon Connection Error

Error Details Error when opening an RFC connection

Error Details ERROR: sapserv2a: route permission denied (61.246.137.50 to oss001, sapmsOSS)

Error Details LOCATION: SAProuter 39.2 (SP4) on 'sapserv2a'

Error Details COMPONENT: NI (network interface)

Error Details COUNTER: 30

Error Details MODULE:

Error Details LINE:

Error Details RETURN CODE: -93

Error Details SUBRC: 0

Error Details RELEASE: 710

Error Details TIME: Wed Nov 2 08:28:58 2011

Error Details VERSION: 39

3) And also, i have checked the sap router certificate also, everything it shows ok.

4) I tried to restart the saprouter, again when i am starting saprouter through command "saprouter -r"

it shows error as below...

C:\saprouter>saprouter -r

trcfile dev_rout

no logging active

• ERROR => invalid lines in './saprouttab', see 'dev_rout' [nirout.cpp 8006]

WARNING: wildcard character used in route target

Please suggest, How to resolve this issue,

Waiting for your results, Helpfull answers will be appriciated more.....

Thanks in advance.......

Regards

Vamsi.

Edited by: sapkak on Nov 2, 2011 8:42 AM

[Former Member]

Hi,

You need to renewal your SAP router SNC certificate from market place.

Every year you have to renewal your certificate.

I hope it will help you.

Regards,

Kiran .V

[Former Member]

Hi Kiran,

As i have mentioned, already i have renewal the sap router certificate,

And the certificate is showing ok.

Regards

Vamsi.

[Former Member]

Hi Kiran,

As i have mentioned, already i have renewal the sap router certificate,

And the certificate is showing ok.

Regards

Vamsi.

[Former Member]

Dear All

dev_rout and saprouttab files for the above issue.....

5) dev_rout file :

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Wed Nov 02 11:46:38 2011

SAP Network Interface Router, Version 38.10

command line arg 0: saprouter

command line arg 1: -r

main: pid = 2412, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

• ERROR => SNC field without SNC active, skip line 2 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 3 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 4 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 5 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 6 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 11 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 12 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 13 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 14 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 15 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 16 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 17 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 22 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 23 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 28 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 29 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 34 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 35 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 36 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 37 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 38 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 39 [nirout.cpp 7775]

• ERROR => SNC field without SNC active, skip line 40 [nirout.cpp 7775]

Wed Nov 02 11:47:03 2011

NiHsLGetHostName: to get 192.168.1.11 failed in 4499ms (tl=2000ms)

Wed Nov 02 11:48:10 2011

• ERROR => NiBufIProcMsg: hdl 4 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

Wed Nov 02 11:55:07 2011

• ERROR => NiBufIProcMsg: hdl 4 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

Wed Nov 02 12:20:10 2011

• ERROR => NiBufIProcMsg: hdl 3 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

Wed Nov 02 12:47:45 2011

• ERROR => NiBufIProcMsg: hdl 6 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

Wed Nov 02 12:49:58 2011

• ERROR => NiBufIProcMsg: hdl 6 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

Wed Nov 02 12:58:58 2011

• ERROR => NiBufIProcMsg: hdl 6 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

Wed Nov 02 13:00:13 2011

• ERROR => NiBufIProcMsg: hdl 6 received rc=-94 (NIEROUT_PERM_DENIED) from peer [nibuf.cpp 2125]

Please suggest, How to resolve this issue,

Waiting for your results, Helpfull answers will be appriciated more.....

Thanks in advance.......

Regards

Vamsi.

Edited by: sapkak on Nov 2, 2011 8:44 AM

[Former Member]

6) saprouttab file for the above issue..

1. SNC connection to and from SAP

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3200

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3201

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 3299

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * *

1. SNC connection to local system for R/3-Support

2. R/3 Server: 10.0.7.xx

3. R/3 Instance: 01

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 3299

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 3200

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 3201

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 3299

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * *

1. SNC connection to local WINDOWS system for WTS, if applicable

2. Windows server: 10.0.7.xx

3. Default WTS port: 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 3389

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 3389

1. SNC connection to local UNIX system for SAPtelnet, if applicable

2. UNIX server: 10.0.7.xx

3. Default Telnet port: 23

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 23

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 23

1. SNC connection to local Portal system for HTTP URL access, if applicable

2. Portal server: 10.0.7.xx

3. HTTP Port: 500xx

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 50100

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 80

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 443

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" ip address 50003

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 50000

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 50001

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" * 50002

1. Access from the local Network to SAP

P * 194.39.131.34 3299

P * 194.39.131.34 3201

P * * *

1. Deny all other connections

Thanks in advance...

Regards

Vamsi

[former_member188883]

Hi,

Please check whether connection between your saprouter public IP and sapserv2 IP on port 3299 is working or not.

Resolve the connection problem , your OSS1 will work fine.

Regards,

Deepak Kori

[Former Member]

Hi Deepak,

OSS1 tcode is not working fine......

it shows error as :

sapserver2a : route permissions denied (61.246.137.50 to oss001, sapdp01)

Please check whether connection between your saprouter public IP and sapserv2 IP on port 3299 is working or not

Please suggest....How to check it?

Thanks for your replies.......

Regards

Vamsi.

[former_member188883]

Hi,

Following things you can check by making a login to saprouter machine.

1) Ping sapserv2 or ip address of sapserv2. Check the response.

2) Telnet <sapserv2 IP address> <port 3299>

Ensure that your network has opened above 2 connections with sapserv2 IP address.

Regards,

Deepak Kori

[Former Member]

The key seems to be this error message:

ERROR => SNC field without SNC active, skip line ...

If you want to use SNC, you have to start saprouter with -K option.

http://help.sap.com/saphelp_erp60/helpdata/en/4f/992ec6446d11d189700000e8322d00/frameset.htm

hope this helps

[Former Member]

Hi deepak,

My saprouter1 ipaddressa on port works fine.

but sapserver2, while pinging for every 2 to 3 seconds its getting "Request and time out" and again its pinging,

for sapserver2, telnet works fine.

As mentioned above for every few seconds, SAP is getting disconnecting, when connecting through saprouter string, I think its due to sapserver2 ip........

Please suggest, How to proceed further........How to start saprouter? while using "saprouter -r" its shows error as mentioned above.

Thanks for your reply,

Regards,

Vamsi.

[former_member188883]

Hi Vamsi,

1) To get rid of connection issues, get along with your network team and stablize the same.

2) To get rid of SNC issue, start the saprouter with -K option.

Hope this answers your query.

Regards,

Deepak Kori

[Former Member]

Dear Deppak,

Please clarify a small thing..

sapserver2 IP : 194.39.131.34 (for using SNC).

I think this ip is default one foe using SNC of sap, am i right..

Is it can be checked by network team......

Regards

Vamsi.

[former_member188883]

Hi Vamsi,

Your network team needs to check the communication from your saprouter public ip -> 194.39.131.34 on port 3299.

Otherway round 194.39.131.34 -> saprouter public ip can be verified by SAP network team. For this you need to raise an OSS message .

Hope this helps.

Regards,

Deepak Kori

[Former Member]

Dear All,

Thanks for the replies,

When trying to start saprouter through "saprouter -r -K"

output :

C:\saprouter>saprouter -r -K

trcfile dev_rout

no logging active

WARNING: wildcard character used in route target

Please suggest, what does it mean?

To start saprouter with SNC : saprouter -r -K <mysncname>

mysncname : How to get it?

is it the name of SNC, mentioned in OSS1 tocde....?

1) dev_rout file :

-

---

trc file: "dev_rout", trc level: 1, release: "700"

-

---

Thu Nov 03 10:56:38 2011

SAP Network Interface Router, Version 38.10

command line arg 0: saprouter

command line arg 1: -r

command line arg 2: -K

SncInit(): Initializing Secure Network Communication (SNC)

PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 8/32/32)

SncInit(): Trying environment variable SNC_LIB as a

gssapi library name: "C:\saprouter\ntintel\sapcrypto.dll".

File "C:\saprouter\ntintel\sapcrypto.dll" dynamically loaded as GSS-API v2 library.

The internal Adapter for the loaded GSS-API mechanism identifies as:

Internal SNC-Adapter (Rev 1.0) to SECUDE 5/GSS-API v2

main: pid = 3832, ppid = 0, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

Thu Nov 03 10:58:37 2011

NiHsLGetHostName: to get 192.168.1.11 failed in 4503ms (tl=2000ms)

Thu Nov 03 11:41:14 2011

***LOG Q0I=> NiIRead: recv (10054: WSAECONNRESET: Connection reset by peer) [nixxi.cpp 4424]

• ERROR => NiIRead: SiRecv failed for hdl 2 / sock 1892

(SI_ECONN_BROKEN/10054; I4; ST; 192.168.1.11:44046) [nixxi.cpp 4424]

Please suggest for solution...

Thanks in advance..

Regards

Vamsi.

[former_member188883]

Hi,

SNC name should be something like this

p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE

Please check the extact details on SAP OSS SNC-add quicklink with your S-user id.

Regards,

Deepak Kori

[Former Member]

Hi deepak

Its fine, thank you.

But starting the saprouter with -k option, will also getting the same error.

When i ecuted the command "saprouter -r" (or) "saprouter -r -K <sncname>" its showing error as:

trcfile dev_rout

no logging active

WARNING: wildcard character used in route target

After executing the command, if i have not closed the command executed window, i can able to connect through saprouter string and SAPOSS RFC also.

But when i closed the session, unable to connect through saprputer string and saposs rfc also not working..

Please suggest.. How to proceed further?

Any suggestions , please...

Thanks in advance....

Regards

Vamsi.

[former_member188883]

Hi,

///When i ecuted the command "saprouter -r" (or) "saprouter -r -K <sncname>" its showing error as:

trcfile dev_rout

no logging active

WARNING: wildcard character used in route target //

If after starting the saprouter with above command results in the output shown above, it implies your saprouter has started sucessfully. There is no issue .

Hope your query is answered.

Regards,

Deepak Kori

[Former Member]

Hello,

After executing the command, if i have not closed the command executed window, i can able to connect through saprouter string and SAPOSS RFC also.
But when i closed the session, unable to connect through saprputer string and saposs rfc also not working..

Keep this window running if you want SAProuter to be running.

Or just configure SAP router to run as Windows Service...

Refer this like:

[http://help.sap.com/saphelp_nw70/helpdata/en/4f/992dab446d11d189700000e8322d00/content.htm|http://help.sap.com/saphelp_nw70/helpdata/en/4f/992dab446d11d189700000e8322d00/content.htm]

Regards.

Rajesh Narkhede

[Former Member]

Hi Deepak,

Its ok, but why my sap session is closing, when i closed the window of start saprouter command.

Before its working fine, suddenly its behaving like this,

@Rajesh : I am doing the same without closing the window, Please let me know, whats may be the problem, as it not happend before.

Please give some clarity........

Thanks in advance...

Regards

Vamsi.