SAP ROUTER Installation

Installation of SAP Router

1.Hardware & Software Requirements

SAP Router Registration Data Sheet for SAP Router should be duly filled and sent to SAP by fax for registering SAP Router. Registration can be confirmed by checking the Router details under System data.

2.Download the latest SAP Router files (saprouter.car, nipping, cryptographic library) from SAP Service Market Place --- Patches.

3.Create a user called sncadm as a member of Administrator. Log off administrator and login as sncadm. Create the following environment variables for this user.

• SECUDIR = c:usrsapsaprouter
• SNC_LIB = c:usrsapsaproutersapcrypto.dll

4.Create folder c:usrsapsaprouter and copy the downloaded files into that folder. Extract all the compressed files. Now typically this folder will have the following files.

• Sapcrypto.dll
• Sapgenpse.exe
• Ticket
• Ntscmgr.exe
• Nipping.exe
• Saprouter.exe

(other required files can be copied from kernel directory of other SAP Systems)

5.Go to http://service.sap.com/saprouter-sncadd. Click on 'Apply Now'

• You will get information like this (on first screen):
• Click on Continue. Now we have to create the request for SAProuter which is to be given as input in the next screen “Request Certificate for SAProuter”.

6.Open a command prompt and execute the following commands.

Cd usrsapsaprouter
sapgenpse get_pse –r sap-router.p10 –p sap-router.pse “CN=SAP-ROUTER, OU=0000733879, OU=SAProuter, O=SAP, C=DE”

• You will be asked for a PIN: input any (but do not forget!!!!!) No Password is given in this installation.
• This command will create the file sap-router.p10 and sap-router.pse.
• Open the file sap-router.p10 with notepad, copy & paste this certificate request to the text area of the “Request Certificate for SAProuter” page.
• Click on Request Certificate
• In response you will get certificate signed by CA.
• Copy & paste the text into a text file including the header & footer (saprt.txt is the file created here)

7.Now install the certificate as follows

• Sapgenpse import_own_cert –c saprt.txt –p sap-router.pse

8.Now create credentials for saprouter

• Sapgenpse seclogin –p sap-router.pse –O sncadm

This will create a file called cred_v2 in c:usrsapsaprouter

9.Now Check whether certificate has been imported correctly or not

• Sapgenpse get_my_name –v –n Issuer

The name of issuer should be: CN=SAProuter CA, OU=SAProuter, O=SAP, C=DE. If the name is not correct, then delete the file cred_v2 and start all over again from Step – 5.

10.Now create a file “saprouttab” in the folder c:usrsapsaprouter and make the following entries in that.

# SNC connection to SAP
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *

# Access from your local Network to SAPNet - R/3 Frontend
P 172.16.*.* 194.39.131.34 3299
P 172.17.*.* 194.39.131.34 3299
P 172.18.*.* 194.39.131.34 3299
P 172.19.*.* 194.39.131.34 3299
D * * *
Save the file and close

11.Make the following changes in the hosts file and services file (under windowssystem32driversetc folder ) SAP-ROUTER system

hosts file:
172.18.9.8 SAP-ROUTER
194.39.131.34 sapserv2
services file:
sapdp99 3299/tcp
sapgw99 3399/tcp
sapmsO01 3601/tcp

12.Now check the entry in the services files for all servers and all front-end PCs under %winnt%/system32/drivers/etc/ there should have:

• sapdp99 3299/tcp
• sapmsO01 3601/tcp

13.Now start the sap router using the command (from the saprouter directory)

• Saprouter –r –V 3 –K “p:CN=SAP-ROUTER,OU=0000733879,OU=SAProuter,O=SAP,C=DE”

14.Connection to SAP can tested using the command

• lgtst –H /H/172.18.9.8//H/194.39.131.34/S/sapdp99/H/oss001/S/sapmsO01 –S x –W 30000

Note: The file lgtst.exe can be copied from other SAP system’s kernel directory.

The output should look like these:

Using trcfile: dev_lg
List of reachable application servers
------------------------------------------------

If the lgtst command does not display the list of reachable application servers, then the connection to SAP could not be established. Troubleshoot the error and rectify.