What is SAP Router and how to configure it in SAP

  SAProuter is an SAP program that acts as an intermediate station (proxy) in a network connection between SAP systems, or between SAP systems and external networks.

We use SAP router to do the following.

  It controls and logs the connection to the sap system.

Ø  A password, which protects your connection and data from unauthorized external access

Ø  Allowing access from only particular SAP routers

Ø  Only allowing encrypted connections from a known partner (using the SNC layer)

Ø  Increase performance and stability by reducing the SAP system workload within a local area network (LAN) when communicating with a wide area network (WAN)

      SAProuter examines any incoming data packets, checks the route and authorization and then sends them to their specified targets. The partner that sets up the connection specifies the route (from SAProuter to SAProuter and to the target). This procedure is known as source routing.

      If we want a connection, from a SAPgui to an R/3 System for example, to run through a SAProuter, then you need to enter the SAP Router string in the SAPgui command line.

      we can use SAProuter if there is no direct IP connection between the communication partners. SAProuter must be running on a host that is connected to both IP networks. It can then receive data from the SAPgui in one IP network and relay it to the R/3 server in another IP network, and vice versa. Normal IP routing is used between the application programs and the SAProuters.

      Connections established using SAP router have the additional advantage that no end-to-end connections between the participating systems are necessary on network level. For example, if accessing a frontend PC on an R/3 server with an intermediate SAP router, it is not necessary to define the complete path between the two systems at TCP/IP level. It is 

We can check SAP Router version in windows which as follows.

Go to saprouter directory in command prompt   cd: \usr\sap\saprouter

Type saprouter -v

You can see result like below

SAP Network Interface Router, Version 38.10

compiled Mar  1 2013 01:38:53

start router : saprouter -r

stop router  : saprouter -s

soft shutdown: saprouter -p

router info  : saprouter -l (-L)

new routtab  : saprouter –n

Steps to install SAP Router in Unix environment

Perquisites for configuring SAP Router

Download SAP Cryptographic Binary from SAP Market Place.

After click on SAP Cryptographic Software you will get new browser window, where you have to select the file and download the file depend upon the OS platform on which you have to configure SAP Router.

SAP router use port 3298 & 3299 for communication.

Steps for Configuring SAP Router

Create SAP Router Folder in /usr/sap

 Go to location /usr/sap

Cd /usr/sap

Mkdir

saprouter Change owner of folder saprouter to<Sid> adm:sapsys

Copy Downloaded Cryptographic Binary to saprouter folder and extract the binary using SAPCAR exe

Extract “saprouter_514-20010605.sar” using “-xvf” command by “SAPCAR.EXE” program.

Extract “SAPCRYPTOLIB_36-10010895.SAR” using “-xvf” command by “SAPCAR.EXE” program. Set Variable SECUDIR, SNC_LIB

Variable Name: - SNC_LIB

Value: - C:\usr\sap\saprouter\ntintel\sapcrypto.dll

Variable Name: - SECUDIR

Value: -C:\usr\sap\saprouter

After setting environmental variable at os level.