Error while starting SAPRouter with SNC

Former Member — Wed, 14 Aug 2013 08:59:26 GMT

Dear All Guru,

i'm having a problem due to configuration SAPRouter, when i'm trying to start SAPRouter with command

c:\usr\sap\saprouter>saprouter.exe -r -S 3299 -V 3 -K "p:CN=WINDOWS-RF5AN42, OU=0001339748, OU=SAProuter, O=SAP, C=DE"

it Resulting error

trcfile  dev_rout
no logging active
*** ERROR => invalid lines in './saprouttab', see 'dev_rout' [nirout.cpp   9591]
 
check dev_rout filestrace
  
ERROR => host myserver.mydomain unknown, skip line 21 [nirout.cpp   10155]

the steps i have been done is :

1. Installing saprouter under C:\usr\sap\saprouter

2. setup environment variable

SNC_LIB = c:\usr\sap\saprouter\nt-x86_64\sapcrypto.dll

SECURDIR = c:\usr\sap\saprouter

3. Generate certificate request

4. Requesting SAPRouter Certificate

5. Importing SAPRouter certificate

6. Creating credential for user responsible to Start SAPRouter

7. Verifying the configuration

sapgenpse get_my_name -v -n Issuer

8. Create saprouttab file

# SNC connection to and from SAP
KT "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 169.145.197.110 *
# SNC connection to local system for R/3-Support
# R/3 Server: 192.168.1.14
# R/3 Instance: 01
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 192.168.1.10 3200
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 192.168.1.11 3200
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 192.168.1.14 3201
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 192.168.1.12 3200
# SNC connection to local WINDOWS system for WTS, if applicable
# Windows server: 192.168.1.2
# Default WTS port: 3389
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 192.168.1.2 3389
# SNC connection to local UNIX system for SAPtelnet, if applicable
# UNIX server: 192.168.1.3
# Default Telnet port: 23
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" 192.168.1.3 23
# SNC connection to local Portal system for URL access, if applicable
# Portal server: myserver.mydomain
# Port number: 50003
KP "p:CN=sapserv9, OU=SAProuter, O=SAP, C=DE" myserver.mydomain 50003
# Access from local network to SAP
P * 169.145.197.110 3299
# deny all other connections
D * * *

8. Adding all local SAP Hostname and SAP Remote support to SAPROUTER hosts files

9. Starting SAPRouter with command below :

c:\usr\sap\saprouter>saprouter.exe -r -S 3299 -V 3 -K "p:CN=WINDOWS-RF5AN42, OU=0001339748, OU=SAProuter, O=SAP, C=DE"

But it Resulting error :

 trcfile  dev_rout
no logging active
*** ERROR => invalid lines in './saprouttab', see 'dev_rout' [nirout.cpp   9591]
check dev_rout filestrace
ERROR => host myserver.mydomain unknown, skip line 21 [nirout.cpp   10155]

if i change the saprouttab file content to (P * * *), and starting the SAPRouter , it working fine.

could you guys advise me, where did i miss the configuration?

and if you need to see the dev_rout file, i already attached it.

thanks & regards,

Re: Error while starting SAPRouter with SNC

mvoros — Fri, 16 Aug 2013 23:00:48 GMT

Hi,

I think the problem is here.

NiStrToAddrMask: '192.168.1.10' -> 192.168.1.10/32 (0/0)

NiIGetServNo: servicename '3300' = port 3300

NiSncGetPeer: hdl 8 not SNC enabled

route [ 0,0 hops, 180.243.75.156 to 192.168.1.10, 3300 ]

matches [ D255,255 ::/0 ::/0 * ]

checkRoute: route not permitted (8)

*** ERROR => NiRClientHandle: NiRExRouteCon for C8/-1 '180.243.75.156' failed (rc=-94) [nirout.cpp 2653]

So router is trying to connect from 192.168.1.10 to 192.168.1.10. That connection is not allowed by your config. Not sure why router is trying to open that connection.

Cheers

topic Error while starting SAPRouter with SNC in Application Development and Automation Discussions

Error while starting SAPRouter with SNC

Re: Error while starting SAPRouter with SNC