saprouter - how to setup the saprouter _ what is the saprouter
TRANSCRIPT
-
7/22/2019 SAProuter - How to Setup the Saprouter _ What is the Saprouter
1/6
-
7/22/2019 SAProuter - How to Setup the Saprouter _ What is the Saprouter
2/6
5/15/13 SAProuter - How to setup the saprouter ? What is the saprouter ?
www.easymarketplace.de/saprouter.php 2/6
Feedback
Imprint
www.sybeklue.de
SAProuter in a SAP System
This tool SAProuter is designed, to connect different IP Networks even when the IP adresses are in
conflict as it does a network adress translation itself. So, this is always used in order to connect
SAP with the customer's systems. This is the case for the way from SAP to the customers andmostly the case as well for logging on into the SAP systems from customer's site as well. If the
customer uses the SAPNet R/3 Frontend, he has to use the SAProuter on his site.
Further information is available in the very good note 30289.
What ports to open for a SAProuter ?
From external to the SAProuter (mostly from Internet to DMZ)
The SAProuter is running (listening) on port 3299 by default. When you change this with the option "-S" you have to open a different service. But, by default it is just the port 3299 inbound that needs to
be available from external partners. The SAProuter now changes the ports to the "original" ones onthe computer where the SAProuter is running. So, i t looks like for the target system, as if the requestwould always come from the computer where the SAProuter is running.
From the SAProuter to the internal systems (mostly from DMZ to intranet)
The SAProuter rerouts all requests from the port 3299 where it is receiving the data to the originalports. Therefore, it is necessary, that you open all ports from the SAProuter to your intranet, that are
used in your environment.
This is normally at least the SAP system. The SAP systems dispatcher is running on port 32nnwhere nn is the system number. So, you might have to open port 3200 - keep in mind, that 3299 to
the intranet normally is NOT necessary.
Overview of a few typical applications and their port needs (especially for the access from SAP to
your system):
32nn: R3 Support Connection
23: Telnet
1503: Netmeeting5601: PC-Anywhere
http://service.sap.com/~IRON/FM/011000358700000431401997E/0030289http://www.sybeklue.de/http://www.easymarketplace.de/imprint.phphttp://www.easymarketplace.de/Feedback.php -
7/22/2019 SAProuter - How to Setup the Saprouter _ What is the Saprouter
3/6
5/15/13 SAProuter - How to setup the saprouter ? What is the saprouter ?
www.easymarketplace.de/saprouter.php 3/6
3389: Windows Terminal Server (WTS)
How to setup the SAProuter for an VPN-Internet-Connection ?
Even when VPN often sounds horrible complicated this is pretty easy in this scenario ...
You just grap the "Remote Connection Data Sheet" from note 28976 and return it filled in to SAP
either via Fax or via SAPNet R/3 Frontend (OSS) with componente XX-SER-NET-OSS-NEW (Theshort text for that message must be "Remote Connection Data Sheet").
In this "Remote Connection Data Sheet" you mainly have to let SAP know the official IP adress of
your VPN Server and the second official IP adress of your SAProuter. You then forward this secondIP to the server of your choice where you want to run the SAProuter.
SAP will setup the VPN access for you and will return the necessary preshared key with the official
SAP IP adresses in a few days to you. You then setup your end of the VPN and everything is fine.Installation of the SAProuter itself for VPN works identically to the way via a private line for non
internet connections as described below.
How to setup the SAProuter for NON-Internet-Connection ?
The following description is designed for Windows, but for other platforms, there is documentationavailable as well in the SAP Help Portal.
First you have to setup a physically direct connection to SAP. This can be an ISDN-, Frame-Relay or similar connection. If a di rect connection from your site is not feasable, you can have
a look to some service providers, if they can offer you a "OSS-Connection" to SAP for a usefulfee.Then you receive a special official IP-Adress from SAP (mostly 2 IPs). One of the IP adresses
has to become attached to the server you want to run SAProuter on. This means, that this
server can receive several IP adresses (at least your normal local one and the official one fromSAP).
Create the subdirectory saprouter in the directory :\usr\sap.Copy the SAProuter.exe either from :\usr\sap\\SYS\exe\run or get the latest one
as described below from the SAP Service Marketplace.
Install the SAProuter as service with ntscmgras follows:ntscmgr install SAProuter -b c:\usr\sap\saprouter\saprouter.exe -p "service -r -
http://help.sap.com/http://www.easymarketplace.de/saprouter.php#Setuphttp://service.sap.com/~IRON/FM/011000358700000431401997E/0028976 -
7/22/2019 SAProuter - How to Setup the Saprouter _ What is the Saprouter
4/6
5/15/13 SAProuter - How to setup the saprouter ? What is the saprouter ?
www.easymarketplace.de/saprouter.php 4/6
R c:\usr\sap\saprouter\saprouttab -G c:\usr\sap\saprouter\router.log"
(The "parameter" has to become replaced with the additional parameters you are using. This
is mostly not necessary at all)
Define the general attributes of the service:In Control Panel->Services, set the startup type to automatic and enter a user. SAProuter
should not run under the SystemAccount.
To avoid the error message The description for Event ID (0) in the Windows NT event log,
you must enter the following in the registry: Under HKEY_LOCAL_MACHINE->SYSTEM->CurrentControlSet->Services->Eventlog->Application, create the key saprouter and definethe following values under it:
EventMessageFile (REG_SZ): :\usr\sap\saprouter\saprouter.exe
TypesSupported (REG_DWORD): 0x7
Every SAProuter needs a fi le called "saprouttab". This is normally expected in the same
directory as saprouter.exe is located. You should have a look at the end of this web-site or to
the SAP Help Portal how to setup this for productive use.Right for the moment for tests, the following line in the file
:\usr\sap\saprouter\saprouttab is sufficient:P * * *
(Please change this as soon as your tests are done, as this file opens all ports and all of your
systems!)Now, have fun with your SAProuter after starting i t via the Windows Service Manager!
How to download the latest version ?
You can download the latest version of all the SAP Executables in the SAP Service Marketplace.
As the binaries are different for each platform, you should have a look at the following link:Download Executable Patches on the SAP Service Marketplace
SAProuter online help with all supported command line options and
further examples
SAP Network Interface Router
start router : saprouter -r
stop router : saprouter -ssoft shutdown: saprouter -p
http://www.easymarketplace.de/KernelPatches.php -
7/22/2019 SAProuter - How to Setup the Saprouter _ What is the Saprouter
5/6
5/15/13 SAProuter - How to setup the saprouter ? What is the saprouter ?
www.easymarketplace.de/saprouter.php 5/6
router info : saprouter -l (-L)
new routtab : saprouter -n
toggle trace : saprouter -t
cancel route : saprouter -c id
dump buffers : saprouter -d
flush " : saprouter -f
start router with third-party library: saprouter -a library
additional options-R routtab : name of route-permission-file (default ./saprouttab)
-G logfile : name of log file (default no logging)
-T tracefile : name of trace file (default dev_rout)
-V tracelev : trace level to run with (default 1)
-H hostname : of running saprouter (default localhost)
-S service : service-name / number (default 3299)
-P infopass : password for info requests
-C clients : maximum no of clients (default 801)
-Y servers : maximum no of servers to start (default 1)
-K [myname] : activate SNC; if given, use 'myname' as own sec-id
-A initstring: initialization options for third-party library-D : switch DNS reverse lookup off
expert options
-B quelength : max. no. of queued packets per client (default 1)
-Q queuesize : max. total size for all queues (default 20000000 bytes)
-W waittime : timeout for blocking net-calls (default 5000 millisec)
-M min.max : portrange for outgoing connects, like -M 1.1023
-U abs_path : absolute path for Unix Domain Sockets,
default is "/tmp/.sapstream%d"
# this is a sample routtab : -----------------------------------------D host1 host2 serviceX
D host3
P * * serviceX
P 155.56.*.* 155.56
P 155.57.1011xxxx.*
P host4 host5 * xxx
P host6 localhost 3299
P host7 host8 telnet
S host9
P0,* host10
KP sncname1 * *
KS * host11 *
-
7/22/2019 SAProuter - How to Setup the Saprouter _ What is the Saprouter
6/6