New SAProuter with VPN to setup

[Former Member]

Hello Gurus,

I have been requested to setup new SAProuter 7.00 in our SAP environment through VPN to be created.

Existing environment is as below :

SAP systems : R/3 4.6C

SAProuter release : v34

SAProuter host configuration : Windows 2003 (US) Entreprise Edition

SAProuter runs through router ISDN line 128KBits connected to our LAN...

As I already checked 'SAProuter 7.00 - Documentation' from http://service.sap.com/patches, I would like to know the 'step-by-step' procedure to proceed :

1. Can I setup new SAProuter even if we currently use existing SAProuter?

2. If NO, what is the procedure for testing my new SAProuter when installed?

3. Plus, can I 'upgrade' existing SAPRouter release to 7.00 then 'only' modify the network configuration? (note that I am checking documentation 'Remote Connectivity for mySAP.com Solutions over the Internet' from march 2001 to find solution : where finding newest release of this documentation?)

Thanks in advance for your insight!

Rgds,

zulain

[Former Member]

Hi Zulain,

You can install or upgrade both are same and

Please do the following:

-Installation and setup of the SNC Certificates, please review the URL

http://service.sap.com/saprouter-sncdoc , follow the steps detailed in

the documentation.

-For exchange of the SNC Certificates, please go to the URL

http://service.sap.com/saprouter-sncadd,

Click on "Apply Now!"

and follow the instructions displayed on the screen.

[Former Member]

Hello Hariprasad,

First, apologies for delay to respond but I didn't confirm this topic because of required a little bit time to understand the documentations that you recommended to me : thanks by the way for this

We acted to deploy new saprouter 7.0 on server which already exists in DMZ. In SAProuter 7.0 guide, I noted that host must have 'quick network adapter' and '2 CPU's with at least 2GHz tact frequency' : but what about operating system as host is at the moment in Windos 2003 FR => should we install W2003 Entreprise US version mandatory as currently for SAP releases?

More, I noted too that specific user must be created to execute the 'saprouter Windows service' : does it mean that we msut create a new user dedicated?

Ending, after prodviding 'Remote connection data sheet' to SAP with @IP public of our saprouter and downloading saprouter package form marketplace (readme.txt file, saprouter + niping excutables), what is the best way to follow regarding SNC certificates?

Thanks again for your insight!

Rgds,

zulain

[Former Member]

Hi Zulain,

There is no need of worrying about OS any OS will do. When it comes to specific user 'sncadm', this is better in future but still you can go a head with out new user.

This SNC certificates you can simply follow the document nothing is complicated.

Regards,

Hari.

[Former Member]

Hello Hari,

As mentionned previously, we started a survey to change our SAProuter acrhitecture to SAProuter 7.0 version.

As we overviewed all prerequisites, I do require confirmation on the 2 following points :

1. As saprouter program will be installed on host which already exists

and is located in DMZ, the existing Windows operating system version is

W2003 Server Standard Edition in french version.

Thus, we would like SAP support to confirm that SAProuter program can

be installed and will run correctly on Windows 2003 Standard Edition in

french version as SAP note 690432 'Windows 2003 Support' mentions that

SAP supports such an hardware configuration if Windows Multilanguage

User Interface (MUI) kit is installed and that W2003 Standard Edition

is supported for 'test or small systems only' (only saprouter program

will run on this host)

2. One of the requirements of saprouter installation is to provide

public @IP to SAP.

As we get such an IP adress, we require SAP support to confirm that

this IP adress will work properly as below :

Saprouter will be installed on host which is located in DMZ (SAP

requirement) what does mean 'between our 2 firewalls'

Thus, connection from sap will be translated by first firewall which

will redirect to public adress provided

Question : Must the host on which saprouter will run have one and only

one IP adress?

As mentionned previously, host already exists and has already an IP

adress : then, public @IP provided will have to be translated by

firewall. Will such a configuration work fine?

Thanks in advance for your support.

Rgds,

Zulain