Connect Developer Studio to SAP systems behind a firewall (NAT)

[Former Member]

Hi all,

our SAP instances reside behind a NAT gateway.

From outside the firewall the three instances are.

NAT:50001 -> to instancea:50000

NAT:50002 -> to instanceb:50000

NAT:50003 -> to instancec:50000

I tried to connect the developer studio to either any of the system but it does'nt work.

Any idea or hint what to do to connect through a (P)NAT firewall?

Thankx in advance

[Former Member]

This is because port 50000 is not the only one required.

You will need NWDS connection to

- SDM, port 50019 (not sure about 50018)

- Message server 3900

My guess you will also need

- Dispatcher access 50008

- Possibly debug port 50002

This is assuming your instance number is 00, otherwise port number will be SDM 5<INST NUM>19 and so on.

Regards,

Slava

[Former Member]

SDM port is 5xx18.

[Former Member]

Hi,

using wireshark i detected, that a connection to port 50013 (Instance 00) was build. you think i need 50018, too?

thanks

[Former Member]

Clarification on SDM 5XX18 and 5XX19.

SDM uses both. You can see in the dev trace of SDM:

[Thr 8104] JLaunchISetSDMPort: set SDM port 50018

[Thr 8104] JLaunchISetHttpPort: set http port 50019

5XX18 is for admin connect and it shoud be available

5XX19 is DSM HTTP listener port. It is better to have it available as well.

Your idea with wireshark is great.

I would make all the port you can find used routed and then, once it is working, start taking them out until you know exactly what is required. If you can do that please share your findings.

Regards,

Slava

[Former Member]

Hi Slava,

thanks for our answers and -yes- you're absolutly right.

Screening the wireshark log we additionally found that:

Developer Studio -> Port 50002 -> NAT -> 50000 -> NetWeaver DI

also doesn't work. Trying to download th devconf-files the engine redirected to the ipadress and port stored in SLD.

Maybe that helps anyone.

Thanks again

regards

Markus