SAP Deployment Guide v1 0

8/3/2019 SAP Deployment Guide v1 0

1/15

Deployment Guide

Juniper Networks, Inc.

1194 North Mathilda Avenue

Sunnyvale, California 94089

USA

408.745.2000

1.888 JUNIPER

www.juniper.net

Deploying SAP Business Applications withDX Data Center Acceleration Platorms

Part Number: 710066-001 April 2007


2/15

2

Deploying SAP Business Applications with DX Data Center Acceleration Platorms

Copyright 2007, Juniper Networks, Inc.

Table of Contents

Introduction.3

SAP..DX.Deployment.4

DX.Integration.in.the.SAP.Inrastructure.5

.DX.Conguration.6

DX.IP.Conguration.7

DX.Enterprise.Portal.VIP.8

DX.Composite.VIP. 11

DX.Failover.15

DX.Conguration.Synchronization.15


3/15


4/15

4



SAP DX Deployment

The.SAP.businss.applications.are.composed.o.multiple.servers

Figure 1: SAP Deployment Architecture

Internet

Clients

COMP

DMZ

BackEnd

EP

ESA-2ESA-1

ESA-1

ESA-2

Original ESA Discovery Server

Exchange Infrastructure XI

ECC MDM

BW

2ndary SAP Application Server

Exchange Infrastructure XI

ECC

BW

EP

COMP

Enterprise Portal:

LogOn

SSO

Composite

J2EE App

WebDynpro

Suppliers Companys Application

(ex. Product Catalog)

Note: Co-hosted on this configuration


5/15

Copyright 2007, Juniper Networks, Inc. 5


DX Integration in the SAP Inrastructure

In.an.SAP.inrastructure,.the.DX.platorm.integrates.as.shown.in.Figure.2:

Figure 2: SAP deployment architecture with DX platorm integration

DX

DX

Internet

Clients

COMP

DMZ

BackEnd

EP

ESA-2ESA-1

EP-VIP

COMP-VIP


6/15

6



DX Conguration

The.ollowing.DX.platorm.conguration.is.based.on.the.ollowing.inrastructure:

Figure 3: Trac fow in SAP deployment architecture with DX integration

The.DX.platorm.conguration.can.be.done.via.command.line.interace.(CLI).(telnet.or.SSH).or.a.

WebUI.(http.or.https)

This.chapter.details.the.step-by-step.conguration.using.the.WebUI

DX

DX

Internet

ClientsEP/COMP (Web https)

EP/COMP (Web http or https)

SAP propriatary binary RFC

Web-Service, http/XML

SAP propriatary binary MDM

COMP.12:50200/50400 (http)

.12:50201/50401 (https)

DX1/DX2.20/.21

.15DMZ169.145.90.0/24

BackEnd169.145.91.0/24

EP.11:52000/52400 (http)

.11:52201/52401 (https)

ESA-2.12

ESA-1.11

EP-VIP: .22:443

COMP-VIP: .23:443


7/15



DX IP Conguration

This.section.describes.how.to.congure.the.DX.platorms.IP.address.and.deault.gateway.Reer.

to.Figure.3.to.identiy.DX1.and.DX2

. DX1:.In.Admin..Network

. DX2:.In.Admin..Network


8/15

8



DX Enterprise Portal VIP

This.section.describes.how.to.congure.the.Enterprise.Portal.Virtual.IP.(VIP).address.that.ront-

ends.load-balanced.applications.on.the.DX.platorm

As.shown.in.Figure.3,.the.EP.trac.rom.the.clients.to.the.DX.platorm.is.always.encrypted.The.

trac.rom.the.DX.platorm.to.the.servers.can.be.encrypted.(SSL.end-to-end.conguration).or.not.(AutoSSL.conguration)

The.SSL.end-to-end.conguration.improves.security.since.all.trac.is.encrypted,.without.adding.

extra.load.on.the.servers;.see.the.Improving.the.Perormance.o.Web-enabled.SAP.Solutions.

Solution.Brie.or.the.results.o.joint.DX-SAP.testing

The ollowing is an SSL end-to-end confguration:

Note:.This.conguration.is.perormed.only.on.DX1;.the.conguration.synchronization.eature.

will.push.the.conguration.to.DX2

. DX1-EP-SSL-end-to-end..VIP.creation

. In.Services..Clusters..Cluster.Groups..New.Cluster

Note: Sections.not.mentioned.retain.deault.settings


9/15



. Note: SAP.does.not.provide.a.deault.test.page.to.validate.server.status.I.you.have.such.

a.test.page.in.your.installation,.you.can.ask.the.DX.platorm.to.continuously.test.this.

page.to.validate.server.availability

. I.your.servers.dont.run.SSL.(https),.then.you.must.congure.the.DX.platorm.in.AutoSSL.

mode

The ollowing is an AutoSSL confguration:

. Note: This.conguration.is.perormed.only.on.DX1;.the.conguration.synchronization.

eature.will.push.the.conguration.to.DX2

. DX1..AppRule

. Technical Note: SAP.uses.absolute.links.(with.http.or.https.inormation).In.the.case.o.

AutoSSL.conguration,.the.servers.work.on.http.and.use.links.on.http.The.DX.platorm.

has.to.rewrite.the.SAP.http.links.to.https.so.the.clients.remain.on.https.This.is.done.via.

AppRules.(requires.HTTP.Advanced.license)

. In.Services..Clusters..AppRules..Create.RuleSet


10/15

10



..DX1-EP-AutoSSL..VIP.creation


Note: Sections.not.mentioned.retain.deault.settings


11/15



Note: SAP.does.not.provide.a.deault.test.page.to.validate.server.status.I.you.have.such.

a.test.page.in.your.installation,.you.can.ask.the.DX.platorm.to.continuously.test.this.

page.to.validate.server.availability

DX Composite VIP

This.section.describes.how.to.congure.the.composite.VIP.on.the.DX.platorm

As.shown.in.Figure.3,.the.comp.trac.rom.the.clients.to.the.DX.platorm.is.always.encrypted.

Trac.rom.the.DX.platorm.to.the.servers.can.be.encrypted.(SSL.end-to-end.conguration).or.

not.(AutoSSL.conguration)The.SSL.end-to-end.conguration.improves.security.since.all.trac.is.encrypted,.without.adding.

extra.load.on.the.servers;.see.the.Improving.the.Perormance.o.Web-enabled.SAP.Solutions.

Solution.Brie.or.the.results.o.joint.DX-SAP.testing

The ollowing is an SSL end-to-end confguration:

. Note:.This.conguration.is.perormed.only.on.DX1;.the.conguration.synchronization.


. DX1-Comp-SSL-end-to-end..VIP.creation



12/15

12



. Note:.Sections.not.mentioned.retain.deault.settings

. Note:.SAP.does.not.provide.a.deault.test.page.to.validate.server.status.I.you.have.such.a.

test.page.in.your.installation,.you.can.ask.the.DX.platorm.to.continuously.test.this.page.

to.validate.server.availability

. I.your.servers.dont.run.SSL.(https),.then.you.must.congure.the.DX.platorm.in.AutoSSL.

mode

The ollowing is an AutoSSL confguration:

Note: This.conguration.is.perormed.only.on.DX1;.the.conguration.synchronization.


. DX1..AppRule


13/15



. Technical Note: SAP.uses.absolute.links.(with.http.or.https.inormation).In.an.AutoSSL.

conguration,.the.servers.work.on.http.and.use.http.links.The.DX.platorm.must.rewrite.

the.SAP.http.links.to.https.links.so.the.clients.remain.on.https.This.is.done.via.AppRules.

(HTTP.Advanced.license.required)

. In.Services..Clusters..AppRules..Create.RuleSet


14/15

14



. DX1-Comp-AutoSSL..VIP.creation


. Note:.Sections.not.mentioned.retain.deault.settings

. Note:.SAP.does.not.provide.a.deault.test.page.to.validate.server.status.I.you.have.such.a.

test.page.in.your.installation,.you.can.ask.the.DX.platorm.to.continuously.test.this.page.

to.validate.server.availability


15/15



Copyright.2007,.Juniper.Networks,.Inc.All.rights.reserved.Juniper.Networks.and.the.Juniper.Networks.logo.are.registered.trademarks.o.Juniper.Networks,.Inc.in.

the.United.States.and.other.countries.All.other.trademarks,.service.marks,.registered.trademarks,.or.registered.service.marks.in.this.document.are.the.property.o.

Juniper.Networks.or.their.respective.owners.All.specications.are.subject.to.change.without.notice.Juniper.Networks.assumes.no.responsibility.or.any.inaccuracies.

in.this.document.or.or.any.obligation.to.update.inormation.in.this.document.Juniper.Networks.reserves.the.right.to.change,.modiy,.transer,.or.otherwise.revise.this.

publication.without.notice

DX Failover

This.section.describes.how.to.congure.the.ailover.on.the.DX.platorm.pair



. DX1..Failover

. In.Admin..Failover

. Note: Sections.not.mentioned.retain.deault.settings

DX Conguration Synchronization

This.section.describes.how.to.synchronize.the.conguration.to.the.backup.DX.platorm



This.eature.is.available.only.through.the.CLI.(telnet.or.SSH.or.console)

. DX1..con.sync.denition

-.Create.sync.group:

add.sync.group.DX-SAP

-.Dene.DX.members.(include.the.IP.o.the.local.device.as.well):

add.sync.group.DX-SAP.member.1693459020

add.sync.group.DX-SAP.member.1693459021

-.Dene.DX.administrator.user.name.enabled.on.member.(by.deault,.it.is.user.admin):.

set.sync.group.DX-SAP.member.1693459020.user.admin

set.sync.group.DX-SAP.member.1693459021.user.admin

-.Dene.the.administrator.users.password:

set.sync.group.DX-SAP.member.1693459020.passwordset.sync.group.DX-SAP.member.1693459021.password

. Note:.Ater.the.command,.enter.the.user.admin.password.(by.deault,.admin)

. DX1..launch.the.con.sync.

-.Launch.the.con.sync:

sync.group.DX-SAP

SAP Deployment Guide v1 0

Documents

Transcript of SAP Deployment Guide v1 0