Hi guys,
I know this question was asked a few times, but I need a little help ..
Our customer is using a RFC tool, to upload files, start transactions etc., now they get an update of this tool and we have some network problems.
The main reason of this error is because the SAP systems sends his internal IP address back to the RFC tool, and the tool want to connect to the dispatcher with the given internal IP address.
We tested it with the SAPRouter and without, the problem is the same.
1. The tool (client e.g. 10.10.20.1) connects to the SAP Gateway (e.g. 210.10.10.1) with the given external IP address, and/or with a SAPRouter string.
- this connection works
2. The tool want to start a transaction, so it calls the function "SYSTEM_PREPARE_ATTACH_GUI", SAP sends the interal IP address (e.g. 192.168.1.1) to the client and I get the SAPGUI security prompt to allow to start a SAPGUI, after that, the tool wants to connect to the dispatcher with the internal IP address of the SAP system, but this fails .. I know that this is right ..
During the search for a solution I found this nice tutorial: RFC connections on “NATed” environments - ABAP Connectivity - SCN Wiki
But this is for a connection between two systems via a @back@ RFC connection, I have hand full of clients.
I read also a few notes:
• 21151 - Multiple Network adapters in SAP Servers
• 148832 - IP address conversion with a firewall
• 555162 - Asynchronous RFCs with a dialog using a SAP router
• 1033987 - Remote login using NAT or SAP router fails
I know there must be an option, I don't think I am the first one who wants to use a NAT IP address for RFC.
So, what is the right way to tell the SAP system to send not the internal IP address back to the client, but the external?
Or should I route on the SAPRouter all questions to the internal IP address to the external?
The way to the Clients:
SAP (internal e.g. 192.168.1.1.) > FW (external e.g. 210.10.10.1) > VPN > FW (e.g. 220.10.10.1) > SAPRouter (e.g. 10.10.10.1) > Client (e.g. 10.10.20.1)
Thank you for any help!
Best regards,
Tobias