SAP Knowledge Base Article - Public

2395508 - IP addresses to be added into allowlist when a third-party SFTP is used in Integration Center

Symptom

A non-SuccessFactors/private/external SFTP used is failing to receive data or receive files from your integrations with the SAP Integration Center, or an SAP SFTP is used and is currently configured with a restriction IP address list.

Environment

  • SAP SuccessFactors HXM Suite
    • Integration Center

Cause

  1. You have IP restrictions enabled on the external SFTP server side.
  2. Or, the outbound SFTP communications is restricted in the SAP Datacenter.
  3. Or, you are trying to use a non-default port that is not allowed as the Port 22 is the supported port for SFTP communication. 

Resolution

1. Request from the SFTP provider to confirm that the two SAP Data Center public IP addresses for your system are not listed on the SFTP server(s) IP Auto Ban List (aka automatic blocklist).

2. Request from the SFTP Provider, that has access restrictions based on IP address, to add the two SAP Data Center public IP addresses on their SFTP server(s) to their IP Allow List (aka IP allowlisting).

DC

IP to be added into allow list

DC2 Preview

213.52.186.149, 213.52.186.102 (deprecated now DC02 > changed to DC57)

DC2 Prod

213.52.186.149 (deprecated now DC02 > changed to DC57)

DC2 Salesdemo

213.52.186.149 (deprecated now DC02 > changed to DC57)

DC4 Preview

70.42.227.129 (deprecated now DC04 > changed to DC68)

DC4 Prod

70.42.227.129  (deprecated now DC04 > changed to DC68)

DC4 Salesdemo

70.42.227.129 (deprecated now DC04 > changed to DC68)

DC8 Prod

65.221.12.148, 65.221.12.129 (deprecated now DC08 > changed to DC70)

DC8 Preview

65.221.12.148, 65.221.12.129 (deprecated now DC08 > changed to DC70)

DC8 Salesdemo

65.221.12.148, 65.221.12.129 (deprecated now DC08 > changed to DC70)

DC10 Prod and preview

147.204.72.56, 210.80.140.129, 210.80.140.70, 210.80.140.148, 157.133.97.210, 157.133.97.211, 157.133.97.212, 157.133.97.213
(deprecated now DC10 > changed to DC66)

DC12 Prod and preview

155.56.220.129, 155.56.208.83, 155.56.208.84, 155.56.208.85
(deprecated now DC12 > changed to DC33)

DC15 Prod

180.153.153.66 (deprecated now DC15 > changed to DC30)

DC16 Premium

46.29.102.141

DC17 Prod

157.133.48.10, 157.133.49.22  (deprecated now DC17 > changed to DC60)

DC18 Prod

157.133.1.221 (deprecated now DC18 > changed to DC55)

DC19 Prod

157.133.241.18 (deprecated now DC19 > changed to DC62)

DC19 Preview

157.133.241.18 (deprecated now DC19 > changed to DC62)

DC13

155.56.215.20, 155.56.251.10

DC22

130.214.250.33 - 130.214.250.46 (Complete Range)

DC23

130.214.222.32/28 (Complete Range)

DC30

121.91.105.81 and 121.91.105.109

DC33

 All IP addresses listed under Outbound IPs in the reference KBA 3241765

DC41

52.226.143.121 and 52.226.141.236 (we need to ask customers to allow both IPs as the system picks both of them randomly!)

DC44

157.133.165.14 (deprecated now DC44 > changed to DC52)

DC47 Preview

40.82.189.81

DC47 Prod

40.82.189.57

DC52 Prod and Preview

34.142.169.59 and 34.143.224.127

DC55

34.107.88.2

35.246.224.53

DC56

34.90.160.55

34.91.16.201

DC57

35.204.84.239 and 34.90.197.59

DC60

20.200.93.147 and 20.200.93.151

DC62

20.201.46.101 and 20.201.46.58

DC66

20.211.113.80 and 20.211.117.218

DC68

20.85.85.243 and 20.85.86.82

DC70

20.85.87.247 and 20.22.120.11

NOTE: Items in BLUE are the latest updated IPs.

IMPORTANT: Most of the time, the allowlisting needs to be done in SAP servers as well. Refer to the KBA 3122406 and request it.

See Also

Keywords

IP, address, add, adding, allowlist, allow list, allowlisting, allow listing, Integration Center, custom, own, third, 3rd, external, internal, private, ftp, sftp, restrict, successfactors, success factors
 , KBA , LOD-SF-INT-INC , Integration Center , LOD-SF-INT , Integrations , LOD-SF-PLT-FTPS , SFTP Account Creation, Reset Password & Install SSH Service , How To

Product

SAP SuccessFactors HXM Suite all versions