Showing results for 
Search instead for 
Did you mean: 

Double SAPRouter with SNC enabled

Former Member
0 Kudos

Hello SAP Geniuses,

We are trying to set up a double SAPRouter protected by SNC:

Our intended config:

sapserv2 =======> DMZ Saprouter =======> Private Network Saprouter -----------> SAP System

=====> (SNC protected connection)

----------> (Non protected connection)

Our DMZ saprouttab file:

KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sap's ipaddr> *

KT "p:<Internal server certificate>" *

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 3299

KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Private network SAP-Router> 3299

D * * *

Our Private Network saprouttab file:

KT "p:<DMZ server certificate>" yyy.yyy.yyy.yyy *

KP "p:<DMZ server certificate>" * *

D * * *

With this configuration we can successfully ping using RFC connection: SAPOSS. However, when SAP tries to connect to our systems they get a "SNC processing failed" error return code -93 on our Private network SAPRouter.

Does any one have any idea?


Yannick C.

Accepted Solutions (0)

Answers (2)

Answers (2)

Former Member
0 Kudos


I know this is an old thread, but I'm trying to do this exact thing.  Can you please provide some details as to how you set this up.  Perhaps screenshots and how you exchanged certificates, etc. 
Did you get it to work?

Best regards,


Former Member
0 Kudos

Just to clarify

yyy.yyy.yyy.yyy = DMZ SAProuter IP = Private Network SAProuter IP

0 Kudos


Please give us the log details.

mean whiile try this.

login with SIDADM user and scroll to the saprouter folder

sapgenpse seclogin -p local.pse -O <sidadm>