VPN Tunnel

[Former Member]

Hi,

We're in the midst of setting up a tunnel for the VPN connection to SAP.

The network team has assigned a public IP to the VPN gateway..however the router host has a private IP.

Could anyone throw some light on y it's mandatory to have a public IP for the router host when anyway there's going to be a direct tunnel between this machine & sapserv1.

Thanks,

Saba.

[Former Member]

Hi, I don´t get your question clear, are you connecting with SAP AG?, either way if you are setting a VPN tunnel you don´t need to have a public IP for Router, that's the main idea of VPN's. When you write router you mean SAP Router?

[Former Member]

Hi AC,

Thanks for the reply..

Ya I mean saprouter ..n that's precisely what we thought..1 IP would suffice. (the VPN IP)

However you need 2 IP's : one for the saprouter registration & 1 for the VPN tunnel.

Since SAP has 1000's of router's/tunnel's registered, both need a public IP.

Have a nice day,

Saba.

[former_member579716]

Hello Saba

I have to configure a new SAP router with VPN Tunnel.....I have configure SAP router without VPN tunnel before....Can you tell me what difference will VPN tunnel made to sap router configuration.......i have use two IPs before public and local....and applied for sap router certificate at sap marketplace. .....and test the connection with command lgtst u2013H /H/172.18.9.8//H/194.39.131.34/S/sapdp99/H/oss001/S/sapmsO01 u2013S x u2013W 30000

will all the steps remain same expect two IPs and the command above. to test the connection ??????

Gurprinder

[Former Member]

Hi,

In order to setup a VPN connection u need 2 Public IP's (provide these along with the SAPRouter hostname to SAP).

1. Public IP 1 = VPN tunnel

2. Public IP 2 = SAPRouter host

The VPN tunnel needs to be set up @ your end once SAP reverts back with the details @ their end (like SAP router IP address--sapserv1, shared secret etc.).

Once the tunnel is in place & your details registered on SMP, you should be able to ping 194.117.106.129 (SAP's router-sapserv1) from your SAProuter host.

Thanks,

-S

[former_member579716]

HI Saba

Thanks for the reply. .... will rest of the router configuration remain same....like applying router certificate on marketplace and applying sap router certificate and then routtab file....????

kind regards

Gurprinder

[Former Member]

Nooo...that's the best thing about a tunnel..no certificates, no hassles of renewing it yearly:)

As for the saprouttab file, you don't need any K entries..just:

P 194.117.106.129 <your system> <port>

or a P * * * *

Thanks,

Saba.

[former_member579716]

Hi Saba

if i get you right than mean. I have to

1. i have to creat router directory.

2. set envirnomnet variables

3. download, extract and copy router files in saprouter folder.

4. Skip the sap router certificate step///////////////////do not perform this step?

4. create saprouttab file

5. start the saprouter

or if i am missing anything or need to do anything extra?????? what will happen if i perform sap router certificate step with VPN tunnel.

kind regards

Gurprinder