Lokking for sap connectivity through NET

[Former Member]

Hello to every one,

we are useing SAP ECC 6.0 on windows environment through LAN (locally).

Now we want to access our devlopment server through net......as for Business point we require that oud enduser can login on our server remotely through NET.

So what should be the possible way for that :-

1- Arrange a public IP and we should mapped our local IP(sap saerver IP) on that. and use that public IP in GUI

rectify me if i am wrong

2-Through saprouter

can any body tell me what is fundamental behind that. i mean whats the procedure.

Waiting for special correction and solution.

Regards

Dik

[Former Member · Accepted solution]

Hi

you should user SAP router for that

just install SAP router(if you have not installed ),then wehn end user wacts to connect he will just have to add a router string in his SAP GUI connection and he will be able to access it

Rohit

[Former Member · Accepted solution]

What is the format of writing router string into GUI and what permission we have to give into routetab file.

[Former Member · Accepted solution]

SAPROUTER String should be in the following format. /H/PUBLIC IP/S/PORTNo/ H/

PUBLICIP is your IP and PORTNo: is message port of your SAP system

Rohir

[Former Member · Accepted solution]

Thanks for immediate reply

 /H/PUBLIC IP/S/PORTNo/ H/ 

Public ip =Router ip

port no = 36XX

where XX =system no

then what is H and S

please solve me

and this is on the point of 2-Through saprouter

ok

for that we have to install saprouter on own end and give the * permission into routetab file and

then we want to access sap through net

so for that just we have to install GUI on different location and and maintain that router string.

as you said and

then we are able to access SAP through NET.

or again we have to install another router ,lease line ,another public ip etc.

please suggest

and if i want to follow 1- Arrange a public IP and we should mapped our local IP(sap saerver IP) on that. and use that public IP in GUI

then what may be the difficulties....

Regards

Dik

[Former Member · Accepted solution]

yes you just need to install SAP router at your end and add this entry in user SAP GUI

he will be able to access SAP

Public IP- There are two ip's maintained for router-one is private ip(within LAN) and other is public ip(for outside world-your Network must do this)

/H indicates the host name(I.P can also be used)

/S indicates is used for specifying the service port

Well SAP Router is always a better option as it provides contolled access,you can also go for another option but that is not preferable as security is sacrified

Rohit

[Former Member · Accepted solution]

 /H indicates the host name(I.P can also be used)
          /S indicates is used for specifying the service port 

here at gui what should i mention only H or whole host name

also for S what should i mention only S or service port.

i know dp port 32XX

gateway port 33XX

and message port 36XX

then what is that service port.....

and another thing as you said

 Well SAP Router is always a better option as it provides contolled access,you can also go for another option but that is not preferable as security is sacrified 

even then if i want to test 1- option then ......

[Former Member · Accepted solution]

it should be S and H only,that is the format for SAP router string

and the port is message server port

well if you want to go for 1st option then you can,that will not be any issue

Rohit

[Former Member · Accepted solution]

what you can do is get a public ip and then give access to the user on the message port i.e ask your network team to open the SAP message port for public and then your end user will be able to access

Rohit

[Former Member · Accepted solution]

A very gud communication Mr. Rohit and Dik

yes he is saying the correct thing if you want to go remote connectivity then you should follow saprouter way.

ok

and as you asking for 1- option

1- Arrange a public IP and we should mapped our local IP(sap saerver IP) on that. and use that public IP in GUI

ok

mapped your local ip with public ip and open the port for those ip....

also you will go for that through firewall protection then open 32XX,33XX,and 36XX atleast and you should check it out that the public ip (on which you mapped your local ip) shold be TraceRT through NET.

ok

keep it up Rohit you are doing really well.

Regards

Anuj

[Former Member · Accepted solution]

Thanks both of you

Dear Rohit,

ok then i will go for second option then where should i install saprouter

1- At production server or Devlopment server

2- Any where

3- Not on sapserver at any other mashine.

please suggest me .....

regards

Dik

[Former Member · Accepted solution]

install it anywhere but that machine must be highly avaiable as that is the source of your end users to connect to SAP,so if it goes down,your users wouls not be able to connect to SAP

Rohit

[Former Member · Accepted solution]

thanks

but want to know that if SAProuter is installed at different machine on my local network then how can i check it that SAProuter is ok or not.

means that at sap any serever i am not able to see any folder under usr\sap\....

please give me the idea where should i have to check

[Former Member · Accepted solution]

hi

Look in the services,there must be a service for saprouter,check it is started or not

Rohit

[Former Member · Accepted solution]

Dear Rohit,

At our devlopment and production server i had check it out there is not any service like saprouter.

ok

rest i will update you as our it ppls are saying that it is at another IP(machine)

and also those are saying that it has been expired i have to go again certificate for that...

Thanks for support

[Former Member · Accepted solution]

Dear Anuj,

can you help me out for option 1

1- Arrange a public IP and we should mapped our local IP(sap saerver IP) on that. and use that public IP in GUI .

what should be the steps for that.

Regards

dik

[Former Member · Accepted solution]

Hi,

You can do this from your firewall or router.

You have to NAT the public ip with your server ip. And allow only tcp ports 32xx required to login to the prd server.

In clients side just replace the IP with Public ip, just as you configure the users for your local network.

HTH.

K

[Former Member · Accepted solution]

Sorry for late reply...

Dik

you have to map your local ip with public ip ok

you can discuss it with network people ....and also you have to open message port ,disp port and gateway port.

ok

and if you are useing firewall then you have to make policy for that unnecessary port you have to disable.

and in the same manner you can allow another ip (because of security)

means incomming trffic also should be restricted through firewall.

ok

then use that public ip as application server in GUI.

rest will ok

and if you want to go through saprouter then Mr. Rohit has done a great job.

Cheers

Anuj

[Former Member · Accepted solution]

thanks anuj,

its working finely....