Symptom
A non-SuccessFactors/private/external SFTP used is failing to receive data or receive files from your integrations with the SAP Integration Center, or an SAP SFTP is used and is currently configured with a restriction IP address list.
Environment
- SAP SuccessFactors HXM Suite
- Integration Center
Cause
You have IP restrictions enabled at your SFTP site or the outbound SFTP communications may be restricted in the SAP Datacenter.
You are trying to use other port not allowed. The Port 22 is the supported port for SFTP communication. Custom port is not authorized for communication.
Resolution
1. Request the SFTP provider to confirm the two SAP Data Center public IP addresses for your system are not on the SFTP server(s): IP Auto Ban List.
2. Request the SFTP Provider that restricts access by IP address to add the two SAP public data center IP addresses on their SFTP server(s): IP Allow List.
DC |
IP to be added into allow list |
DC2 Preview |
213.52.186.149, 213.52.186.102 |
DC2 Prod |
213.52.186.149 |
DC2 Salesdemo |
213.52.186.149 |
DC4 Preview |
70.42.227.129 |
DC4 Prod |
70.42.227.129 |
DC4 Salesdemo |
70.42.227.129 |
DC8 Prod |
65.221.12.148, 65.221.12.129 |
DC8 Preview |
65.221.12.148, 65.221.12.129 |
DC8 Salesdemo |
65.221.12.148, 65.221.12.129 |
DC10 Prod and preview |
147.204.72.56, 210.80.140.129, 210.80.140.70, 210.80.140.148, 157.133.97.210, 157.133.97.211, 157.133.97.212, 157.133.97.213 |
DC12 Prod and preview |
155.56.220.129, 155.56.208.83, 155.56.208.84, 155.56.208.85 |
DC15 Prod |
180.153.153.66 |
DC16 Premium |
46.29.102.141 |
DC17 Prod |
157.133.48.10, 157.133.49.22 (deprecated now DC17 > changed to DC60) |
DC18 Prod |
157.133.1.221 |
DC19 Prod |
157.133.241.18 (deprecated now DC19 > changed to DC62) |
DC19 Preview |
157.133.241.18 (deprecated now DC19 > changed to DC62) |
DC13 |
155.56.215.20, 155.56.251.10 |
DC22 |
130.214.250.33 - 130.214.250.46 (Complete Range) |
DC23 |
130.214.222.40 |
DC41 |
52.226.143.121 and 52.226.141.236 (we need to ask customers to allow both IPs as the system picks both of them randomly!) |
DC44 |
157.133.165.14 |
DC47 Preview |
40.82.189.81 |
DC47 Prod |
40.82.189.57 |
DC52 Prod and Preview |
34.142.169.59 and 34.143.224.127 |
DC55 |
34.107.88.2 35.246.224.53 |
DC56 |
34.90.160.55 34.91.16.201 |
DC60 |
20.200.93.147 and 20.200.93.151 |
DC62 |
20.201.46.101 and 20.201.46.58 |
Note: Items in BLUE are the latest updated IPs.
Please note that in the Integration Center's handbook section 13.2 (Scenario 2: Cannot Reach Destination Server for REST and SOAP Integrations), you can see in the error logs the IP addresses that is still missing in your allow list in case of failures.
If you still cannot connect, please read the KBAs in the "See Also" section. Just for your information, if the SAP allowlist is required from SAP network side, this request can around 2 or 4 weeks due several internal approvals required.
Also check our Integration Center's handbook.
See Also
Related KBAs:
- 2658112 - Restrict or allow list IP access to SFTP server to specified IP addresses only
- 2579806 - "Could not connect to SFTP server" Error for Remote File Report Job
- 2658112 - Restrict or allow IP access to SFTP server to specified IP addresses only
- 2911175 - Requirements for DC41 SFTP Utilizing Local/Private SFTP Site (Non SAP SFTP site )
- 3097292 - Connectivity issues from DC41 and DC55 to external sites
- 2553334 - DC2 Integration Center Connectivity to Customers or Third Party SFTP
- 3104820 - SAP SuccessFactors - New Toronto Azure Data Center IP Addresses for DC17 Tenants
- 3139661 - SAP SuccessFactors - New MS Azure Brazil South - São Paulo Data Center IP Addresses for DC19 Tenants
Keywords
IP adding into allow list with Integration Center, custom own sftp, addresses, restrict, successfactors, success factors, internal, external SFTP, Private SFTP , KBA , LOD-SF-INT-INC , Integration Center , LOD-SF-INT , Integrations , How To