Connecting On premise SFTP from HCI

[former_member213558]

Dear All.

my scenario is SOAP to SFTP (On premise), i guess thorough cloud connector we need connect, or is there some other way? my first option is connecting SFTP On premise through colud connector, else other option.

Do we have any blog for connection on premise SFTP using Cloud connector.?

i can see there an option enabling the firewall and Imported the certificates, do we have any blog for this?

please do needful.

Regards

Ramesh

[former_member598593]

Hello Ramesh,

With the Nov.2018 release, Cloud Connector can be used for connecting On-Premise SFTP Connections. Please refer to below blog:

https://blogs.sap.com/2018/11/16/cloud-integration-how-to-connect-to-an-on-premise-sftp-server-via-c...

[Sriprasadsbhat]

Hello Ramesh,

Cloud Connector is not required for SFTP Connectivity.Below are the steps you need to perform.

From SAP HCI perspective:
1) Get the IP address or Address Range of your Client SFTP Server or On premise.
2) Create a OSS note to SAP OPS team to whitelist the Client/on premise SFTP Server IP address.
3) Get the Public Key of Client or On Premise SFTP Server and request SAP OPS team to update it in known_hosts file of SAP HCI [ Depends on the SAP HCI Licensing]From On Premise or Client SFTP Team perspective:

1) Share the IP Address range of SAP HCI ( you can get it from SAP HELP based on data centre where your Tenant hosted ] with your client/on premise networks team to whitelist it.

2) Get the Public Key of your SAP HCI server from SAP OPS team and share it with your client networks team to update it.

Once Above setup is done you can test the connectivity by following below

Right Click on your Tenant [ Node Explorer of Eclipse Tooling ]-> Select Test Outbound Connection->SSH Connection-> Enter the required details and select type of authentication which you want to test-> Click on Run

Regards,

Sriprasad Shivaram Bhat

[manoj_khavatkopp]

Sri,

Just Wondering on what cases we need cloud connector ?

Br,

Manoj

[former_member213558]

Great Sriprasad.. thank you for your reply.

Having few clarification, please do needful.

From SAP HCI perspective:

3) Get the Public Key of Client or On Premise SFTP Server and request SAP OPS team to update it in known_hosts file of SAP HCI [ Depends on the SAP HCI Licensing]

i>how can i get this? because the sftp server (bitvise ssh server installed where PI server installed on on-premises ) installed in local premises.

ii>and i have right to insert known_host file in HCI, in this case do we need to approach SAP?

iii>i think to white list public ip of sftp server is mandatory to raise OSS to SAP (correct me if i'm wrong)

From On Premise or Client SFTP Team perspective:

2) Get the Public Key of your SAP HCI server from SAP OPS team and share it with your client networks team to update it.

in HCI from "Manage Security Material " i can see system.jks file is available, in this case what do i need to do? basically jks has both public and private key right (correct me if i'm wrong)? in this case how can i share the public certificate of HCI to SFTP server side.

Regards

ramesh

[Bais]

Hi Sriprasad Shivaram Bhat,

you wrote:

>1) Share the IP Address range of SAP HCI ( you can get it from SAP HELP based on data centre where your Tenant hosted ] with your client/on premise networks team to whitelist it.

I'm trying to find list of ip address to ask access on "on-premise sftp server" but I didn't find it, could you guide me to find them?

Federico Bellizia

[Sriprasadsbhat]

Hello federico,

Please find the below

https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/350356d1dc314d3199dca15bd2a...

Regards,

Sriprasad Shivaram Bhat

[Bais]

My friend resolved my question:

https://help.sap.com/doc/bd6250c40c9c4c5391e3009a6f26dc3b/Cloud/en-US/SAP_Cloud_Platform.pdf