Volker Gueldenpfennig

SAP Service Marketplace

SAP User Groups

Status Tracking

Kernel Patches

Support Packages

SAPGui Patches

SAP ITS Patches


Notes // Side-Effects

SAP Kernel Programs

Cust Messages

Service Connection

SAP Online Help PDFs


Order CDs

Solution Manager






SMP Quicklinks Download CDs

Easy Service Marketplace Why this website ?

SAProuter Installation with SNC via the Internet - reduce your costs !

Current situation

  • Customers dial in to SAP via dial-up connections or leased lines to one of the sapserv3-7.
  • The dial-in is based on an expensive line from the customer to SAP.
  • These lines are mostly only needed for SAP, so there are meanwhile relatively slow.
  • Most of the customers do have permanent Internet access with high bandwidth.

Future situation with SNC or VPN

  • There won't be any special and expensive lines for SAP necessary any more.
  • For the communication between the customer and SAP there are mostly lines used with a high bandwidth, that are really fast.
  • Security via the internet will be ensured because of SNC or VPN.
  • Customers are asked to change their connections in the next time in order to reduce the costs on their sites.

In the following you can see a sample saprouttab definition for SNC:

# SNC is used to sapserv2 because of the following line for each protocol
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" *  

# Access from all locations in the customer Network to the
# SAPNet - R/3 Frontend (SAP Support System) via sapserv2
KP *  "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 3299

# SNC-connection from SAP to the customer R/3-System for Support
# (one line of these per each system or appl-server)
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <R/3-Instance>  <pwd>

# SNC-connection from SAP to the customer R/3-System for NetMeeting
# please setup this ONLY if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503 <pwd>

# SNC-connection from SAP to the customer R/3-System for telnet
# please setup this ONLY if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23 <pwd>

# deny all other connections
D * * *
(The password at the end is always optional, but should be used AT LEAST for telnet and netmeeting connections as they are a bit more risky than "noraml SAP communication. Furthermore, you could use a "*" instead of indivdual IP-adresses or ports, but this decreases the security on your site, because you would mostly allow too much with this strategy. So, please invest the effort and write down exactly what is necessary - without the asterix.)

Further information is available at:


If you want to install SAProuter with SAPCrypto Lib on iSeries (AS/400) you should have a look to:
Setup a SAProuter with SNC on iSeries (AS/400) - Workshop / Example.

back 01/20/2017, 00:27:30