Connection issue between SAP Router on AWS and EC payroll

[i048836]

Dear Expert.

Our customer have been operating S/4HANA and SAP Router on AWS and currently they have been implementing SuccessFactors EC and EC Payroll.

By the way, when trying to connect AWS Virtual Private Gateway ( VGW ) to the VPN of EC Payroll, connection issue occurs.

According to AWS guide, because AWS Virtual Private Gateway ( VGW ) doesn't support NAT, it can not send Public IP of SAP Router to EC payroll's VPN but it can send only private IP(ex: 10.60.0.10 ).

But SF EC Payroll VPN doesn't get AWS VGW(VPN device) customer requesting from private IP (10.60.0.10) .

As per SAP design we are allowing only public IP ‘s via tunnel .

SAP Recommended that customer implemented 3rd Party VPN(for example, Cisco CSRv or Vyos, etc) to be performed NAT (converted private SAP router IP to public IP ) .

I want to know if this is only solution to connect SAP Router on AWS to SF EC payroll.

If you have met the same issue, please guide us how to do the troubleshooting.

[Srikanth_B]

Hello Joong Bum Seo,

Were you able to achieve the connection of SAP Router on AWS to SF EC payroll? Which VPN you have used?

[i048836]

Yes. I have connected with install VPN with Fortinet FortiGate.

Link is below.

https://aws.amazon.com/marketplace/pp/prodview-lvfwuztjwe5b2?sr=0-4&ref_=beagle&applicationId=AWSMPC...

I want it to be helpful to you.