Hello SAP Geniuses,
We are trying to set up a double SAPRouter protected by SNC:
Our intended config:
sapserv2 =======> DMZ Saprouter =======> Private Network Saprouter -----------> SAP System
=====> (SNC protected connection)
----------> (Non protected connection)
Our DMZ saprouttab file:
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <sap's ipaddr> *
KT "p:<Internal server certificate>" xxx.xxx.xxx.xxx *
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" xxx.xxx.xxx.xxx 3299
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <Private network SAP-Router host name> 3299
D * * *
Our Private Network saprouttab file:
KT "p:<DMZ server certificate>" yyy.yyy.yyy.yyy *
KP "p:<DMZ server certificate>" * *
D * * *
yyy.yyy.yyy.yyy = DMZ SAProuter IP
xxx.xxx.xxx.xxx = Private Network SAProuter IP
With this configuration we can successfully ping using RFC connection: SAPOSS. However, when SAP tries to connect to our systems they get a "SNC processing failed" error return code -93 on our Private network SAPRouter.
Does any one have any idea?
Thanks,
Yannick C.
NOTE: This is a double post, because I am haven't gotten any responses on the other forum: