VPN Connectivity configuration in place of SNC

[Former Member]

Dear all,

There are two ways to open server access to SAP

1. SNC (Router string)

2.VPN

Earlier we used Router sting to open production server access for SAP support. But now we have switch to VPN . Can any one tell me how to configure/what are the pionts i should be aware so that i ll connect to SAP for support?......

Regards

Bala

[Former Member]

Hi,

As per your query, you have to install VPN (vertual private network) software in your computer. This is a user base software. In the VPN software you will give the router address which is sap router. When you connect vpn then you have to enter your windows login name and password which is define in your domain server. This sofware will checked it in domain if this is ok then this will allow you to login in you network. In the same way you can use your SAP also.

VPN is a secure network which is not hacked by outsider.

Anil

[manu_susankar]

Hi Bala,

Could you please check the Note 28976 - Remote Connection Data Sheet.

also check the avilable connection Types under :

https://websmp103.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000677223&_SCENARIO=011000358700000002...

Regards,

S.Manu.

[Former Member]

Hi ,

Thanks for the reply , but my query is not resolved... i have read the snotes : 31515,35010,41054, and 28976

1. Data sheet filled and got confirmation of VPN server access from SAP...

2. Here is the place i am stuck .. SAP has given me some parameters to be maintained in VPN server for the tunnel config.

I don't know where /how to maintain the settings....

Parameters on SAP side:

SAP VPN public IP address: 194.39.131.167

Type of VPN switch: CISCO IOS Router

SAP SAPRouter (sapserv1) : 194.117.106.129

(SAP Subnet: 194.117.106.128 Netmask: 255.255.255.252)

IPsec settings:

Encryption: ESP - Triple DES with MD5 Integrity

IKE and Diffie-Hellman Group: Triple DES with Group 2 (1024-bit)

PFS (Perfect Forward Secrecy) : Disabled

DPD (Dead Peer Detection) : Disabled

Vendor ID : Disabled

Compression: Disabled

Rekey Timeout

- lifetime in phase1 1440 minutes/86400 seconds

(default value on CISCO)

- lifetime in phase2 7200 seconds

?

Regards

Bala