SNC router configuration - Firewall settings needed

[Former Member]

Dear all,

I have configured the SNC router in a Machine and it seems to be not working. I am sure the SNC configuration is correct but some settings in firewall is blocking the bi-directional connection between SAP router and our router.

Since our router is controlled by a different team located in germany I need to send them mail regarding this. But as my request they have placed the public IP (for which SNC is registered) in our firewall and have enabled the 3299 port . But still there are errors in RFC throwing some error that 194.39.131.34 is not reachable. When I tried to telnet 194.39.131.34 3299 its giving errors.

So can anyone provide me the detailed setting that has to be done in firewall so that i can be very clear as what they have to do in our firewall.

Regards,

Pradeep

[Former Member]

HI,

You must be able to ping and telnet to 194.39.131.34 3299 .

Ask your network team to allow atleast below rules :

Basically the following must be there :

firewall would have to allow the following rules

Allow: 194.39.131.34/32 -> <public ip of your router>/32 :3299

Allow: <public ip of your router>/32 -> 194.39.131.34/32 :3299

Allow: 194.39.131.34/32 -> <public ip of your router>/32 :icmp(echo-request,type 8

Allow: <public ip of your router>/32 -> 194.39.131.34/32 :icmp(echo-reply, type 0

See the note 48243 for more details.

Regards,

Nibu

[JPReyes]

@Nibu, What the point in replying with the same info?....

[Former Member]

thank you for your replies ..

[JPReyes]

Basically you need bi directional connection to 3299 also you shoud ask them to provide icmp in order to be able to ping the server and if you want to be able to telnet the port for testing then port 23 needs to be open...

Read SAP Note 48243 - Integrating SAProuter into a firewall

Regards

Juan