SAProuter Installation with SNC via the Internet

[ Home ] [ << Older entry ] [ Newer entry >> ]

SAProuter Installation with SNC via the Internet - reduce your costs !

Current situation

Customers dial in to SAP via dial-up connections or leased lines to one of the sapserv3-7.
The dial-in is based on an expensive line from the customer to SAP.
These lines are mostly only needed for SAP, so there are meanwhile relatively slow.
Most of the customers do have permanent Internet access with high bandwidth.

Future situation with SNC or VPN

There won't be any special and expensive lines for SAP necessary any more.
For the communication between the customer and SAP there are mostly lines used with a high bandwidth, that are really fast.
Security via the internet will be ensured because of SNC or VPN.
Customers are asked to change their connections in the next time in order to reduce the costs on their sites.

In the following you can see a sample saprouttab definition for SNC:

# SNC is used to sapserv2 because of the following line for each protocol
KT "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 194.39.131.34 *  

# Access from all locations in the customer Network to the
# SAPNet - R/3 Frontend (SAP Support System) via sapserv2
KP *  "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" 3299

# SNC-connection from SAP to the customer R/3-System for Support
# (one line of these per each system or appl-server)
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> <R/3-Instance>  <pwd>

# SNC-connection from SAP to the customer R/3-System for NetMeeting
# please setup this ONLY if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 1503 <pwd>

# SNC-connection from SAP to the customer R/3-System for telnet
# please setup this ONLY if it is needed
KP "p:CN=sapserv2, OU=SAProuter, O=SAP, C=DE" <R/3-Server> 23 <pwd>

# deny all other connections
D * * *

(The password at the end is always optional, but should be used AT LEAST for telnet and netmeeting connections as they are a bit more risky than "noraml SAP communication. Furthermore, you could use a "*" instead of indivdual IP-adresses or ports, but this decreases the security on your site, because you would mostly allow too much with this strategy. So, please invest the effort and write down exactly what is necessary - without the asterix.)

Further information is available at:

www.service.sap.com/saprouter-sncdoc

If you want to install SAProuter with SAPCrypto Lib on iSeries (AS/400) you should have a look to:
Setup a SAProuter with SNC on iSeries (AS/400) - Workshop / Example.

[ go to top ] [ << Older entry ] [ Newer entry >> ]

back

04/25/2024, 00:11:30