Showing results for 
Search instead for 
Did you mean: 


Former Member
0 Kudos

When i go to transaction (OSS1) and i try to logon to SAP Notes

sapserv3 : router permision denied

i check SM59 for SAPOSS and in configuration Part1 the S-user is fine.

any help or hint?

Accepted Solutions (0)

Answers (3)

Answers (3)

Former Member
0 Kudos


1. Install saprouter first and give OSS1 (sap service IP Address).

2. You need to check your RFC connections in SM59 and your hosts file.

If you have set up any external ftp connections to your system, you also need to check if they use IP address or hostname.

If the SAProuter runs on the server you are changing the IP address, you must create a customer message for SAP and ask them to change the IP at their site. The IP address of a SAProuter must be from an official range. You must also update your SAProuter data and change the IP on SAPNet (system-data).

In saprouttab you need to adjust the IP as well.

3.SAProuter examines any incoming data packets, checks the route and authorization and then sends them to their specified targets. The partner that sets up the connection specifies the route (from SAProuter to SAProuter and to the target). This procedure is known as source routing.

If you want a connection, from a SAPgui to an R/3 System for example, to run through a SAProuter, then you need to enter the route in the SAPgui command line.

You can use SAProuter if there is no direct IP connection between the communication partners. SAProuter must be running on a host that is connected to both IP networks. It can then receive data from the SAPgui in one IP network and relay it to the R/3 server in another IP network, and vice versa. Normal IP routing is used between the application programs and the SAProuters.

Connections established using SAProuter have the additional advantage that no end-to-end connections between the participating system are necessary on network level. For example, if accessing a frontend PC on an R/3 server with an intermediate SAProuter, it is not necessary to define the complete path between the two systems at TCP/IP level. It is

sufficient if both parties can reach the SAProuter. From an SAP communication viewpoint, this represents a point of concentration in your network that serves as a starting point for each subconnection.

Each subnetwork stored logically behind a SAProuter is therefore reduced to the network address of the SAProuter.

Without SAProuter, the Internet Protocol (IP) addresses must be unique, which cannot always be guaranteed, particularly on international networks.

With SAProuter it is possible to connect two points that have unofficial,or even identical, IP addresses. Therefore, it is rarely

necessary to adapt existing address topologies using official IP addresses.

SAP Online Service & Support now only supports SAProuter connections due to these advantages. Because SAP routes all accesses to internal systems (such as SAPNet - R/3 Frontend) and all service connections via SAProuter, the connection between SAP and the customer is reduced to a single SAProuter - SAProuter connection.

4.How can i access SAP through internet, I have tried by inserting IP address of SAPROUTER in Sap router string in SAP GUI, i.e. H/IP address/H...

whether it is neccessary to install ITS(internet Trasation Server)for accessing SAP through internet?

it will be better to know me that, without using ITS, is there anyway to access SAP through internet using SAPRouter ?

solution:PORT NO means it is a logical service number.

for Message Server default Port No: 3600

solution:SAPROUTER String should be in the following format. /H/PUBLIC IP/S/PORTNo/ H/

PUBLICIP is your IP and PORTNo: is message port number.


Srini Nookala

Former Member
0 Kudos

first Thanks for your reply.

the service is active.

still OSS1 can not logon to SAPNOTE

i'm getting the following message

saperv3 : route permission denied

any help or input?

Former Member
0 Kudos


1. You will have to configure the saprouter installation and configuration.

2. After this you will have to enable the SAPCONNECT using SICF tcode.

After this you can try for OSS1. Then it should work.


Srini Nookala