SAP Knowledge Base Article - Preview

3743114 - BAS Calls Blocked by IP Whitelist in SAP API Management – IPv6-Mapped Proxy IP Format

Symptom

When invoking OData services through SAP API Management from SAP Business Application Studio (BAS), requests are rejected with an "Access Denied" or IP whitelist error, even though the BAS public IP ranges are added to the allowlist. The same calls succeed when originating from Cloud Foundry applications.

On the receiving side (CPI/API Management), the client IP appears in the following format:

[::ffff:127.0.0.1, <BAS public egress IP>]


Read more...

Environment

  • SAP Business Application Studio (BAS)
  • SAP API Management / SAP Integration Suite (CPI)

Product

SAP Business Application Studio all versions

Keywords

BAS, Business Application Studio, IP whitelist, IP allowlist, Access Denied, API Management, SAP API Management, X-Forwarded-For, IPv6, ::ffff:127.0.0.1, loopback, proxy IP, egress IP, CPI, Integration Suite, Cloud Foundry, OData, S/4HANA, BTP, IP chain, forwarded header , KBA , CA-BAS-WS-MNG , Dev Space Manager - SAP Business Application Studio , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.