print this page
Latest Post
Showing posts with label SAP ROUTER. Show all posts
Showing posts with label SAP ROUTER. Show all posts

How to renew the SAP Router license


Steps to renew SAP Router license :

Before starting the below mentioned steps, please stop the saprouter service.

1) make a new folder in your saprouter directory like <drive>:\usr\sap\saprouter\backup

Cut/Paste certreq, cred_v2, getcert.cer, local.pse, srcert in backup directory

2) Run the below command to generate new certificate request

D:\usr\sap\saprouter>sapgenpse get_pse -v -r certreq1 -p local.pse

it will ask for certain parameters you can get your Distinguished name from http://service.sap.com/saprouter-sncadd

3) After This

Open http://service.sap.com/saprouter-sncadd site

4) Logon using your service.sap.com ID and Password

Press Apply now-->Press Continue

5) Open the file: <drive>:\usr\sap\saprouter\certreq1 with notepad

Copy text from this file and paste the text to the request certificate page

Press the Request Certificate

6) Select the generated certificate text and copy and make a text file
srcert.txt in D:\usr\sap\saprouter directory

Rename the srcert.txt to srcert only

7) Install the certificate in our saprouter by running

<drive>:\usr\sap\saprouter>sapgenpse.exe import_own_cert -c srcert -p local.pse

8) Now we have to create the credentials for the SAProuter with command

<drive>:\usr\sap\saprouter>sapgenpse seclogin -p local.pse -O <saprouter user>

This will create a file called cred_v2 in the same directory.

Check if the certificate has been imported correctly

<drive>:\usr\sap\saprouter>Sapgenpse get_my_name -v -n Issuer

Once, all the steps have been performed, please restart your saprouter service.

SAProuter Connection Errors Checklist to Fix

SAPROUTER CHECKLIST NOTES

Check :
Check the following entry in the "services" file on all hosts (client,server, saprouter):
sapxxxx   3299/tcp

Check :
Try to ping  SAPserv2 or  ping to SAPserv1 from the host saprouter

Check: 
Check whether the ports you are trying to reach are allowed in the firewall

Check :
Check your technical settings(IP Address) in transaction OSS1

Check:
Check  if the right certificate has been generated and applied.

Check:
Check whether saprouter is working or not with this command
ps -ef|grep saprouter

Check:
Check below ports opening on firewall from saprouter to each sap Server
1. 32<Instance no> (GUI)
2. 23 ( Telnet Port)
3. 80<Instance No> ( HTTP Connection)

Note: Based on your requirement open the corresponding Ports.

Check : 
Check saprouter status via command saprouter -l

Check:
Check if saprouter port 3299 is open or closed with below command (if  nothing is listed port is not used)
netstat -an | grep 3299








Additional Info:
SAPRouter - SAP Notes: 30289, 35010, 30374, 41054, 48243


Tags: SAPROUTER CHECK STATUS NOTES STEPS, SAprouter Connection Errors Checklist to Fix , SAPRouter - SAP Notes: 30289,

SAProuter Certificate Expired How to Fix ?

Error: 

    • ERROR => SncPEstablishContext() failed for target='p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE'
[sncxxall3374]*** ERROR => SncPEstablishContext()==SNCERR_GSSAPI  [sncxxall.c 3340]
      GSS-API(maj): The referenced credentials have expired
      GSS-API(min): Validity date of certificate is invalid
    Unable to establish the security context
    target="p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE"


Solution:  Steps to apply saprouter certificate

Step 1:

Download the SAP Router and SAP Cryptographic software from market place and place this under the folder usr\sap\saprouter. This folder is called as saprouter’s home folder. Extract these files with sapcar.

Step 2:

Apply for the certificate with the distinguished name of your company. This distinguished name can be found in service market place under the link
http://service.sap.com/saprouter-sncadd and the certificate for saprouter should be applied in the same link.

Step 3:

With this distinguished name generate the PSE file with sapgenpse program located in saprouter folder.


Step 4:

After generating certreq file in saprouter folder edit the file and copy the content of the file under the link http://service.sap.com/saprouter-sncadd

Step 5:

After copying click “Request Certificate” in right most corner which generates the required certificate.Copy the content of the generated file and paste it into a text file in saprouter folder. Rename the file into “srcert” and install the certificate using sapgenpse command.The PIN which we have given in the previous step should be correctly to install the certificate.

Step 6:

After installing the certificate successfully credentials were to be added to the certificate. Only the added credentials will be allowed to start the saprouter program.


Step 7:

After adding credentials we can check the installation of certificate with sapgenpse command.


Step 8:

After verifying the certificate the SAPRouter program will be started in port number 3299.

Note:
SAP Router table should be correctly defined for accessing the systems through SAP router.




Tags: SAProuter certificate expired, sap router table, sapgenpse, saprouter port 3299, usr\sap\saprouter, SAP Cryptographic software, 

SAP Router is Down How to Check the status

How to check if SAP Router is up and running or down?

Check 1 from SAP :
Login to GUI where saprouter is setup.
Enter tcode SM59 double click on the ABAP Connection called SAPOSS and click on Connection Test. 

If no errors means SAPROUTER is running.

Check 2 from SAP Market Place :

Check 3 from Unix Level :
<hostname>: <sidadm>% saprouter -l

Wed Nov  7 13:44:37 2012
SAP Network Interface Router, Version 39.3 (SP4)

peer SAProuter with NI version 38 ...
send info-request to running SAProuter ...

SAP Network Interface Router running on port 3299 (PID = 27120)
Started on: Wed Apr  7 11:34:17 2011




Related Questions on SAPRouter

 Troubleshooting - SAProuter service is not starting
 What is saprouter ?
 How to Configure SAProuter
 How to Change SAPROUTER IP
 How to implement a correction note?
 How to SAP SNC Configuration - SAP Router configuration
 T-code OSS1 SM59 for SAP Router
 SAP Router Errors



Tags: Commands to check status of saprouter, SAP Router is Down How to Check the status, SAPOSS connection test,   saprouter -l, How to check if SAP Router is up and running or down, 
 
Copyright © 2011. SAP BASIS ANSWERS | SAP BASIS ADMIN BLOG - All Rights Reserved
T C P M
Proudly powered by Blogger