F5 VPN CLIENT USER GUIDE

MANUAL 2011 - VERSION 2.1

SAP IT

F5 VPN CLIENT USER GUIDE Contents

1 2 3 4 5. 6. Overview ................................................................................................................................................................................... 3 Connection Options Provided by F5 VPN Client..................................................................................................................... 4 Connecting with the F5 Stand Alone VPN Client .................................................................................................................... 5 Quick Troubleshooting ............................................................................................................................................................. 7 Addendum 1: Client Proxy Settings ......................................................................................................................................... 8 Addendum 2: F5 Error Codes .................................................................................................................................................. 9

SAP IT

2/9

F5 VPN CLIENT USER GUIDE

Overview

Overview
The purpose of this document is to introduce the SAP user community to the capabilities of the SAP Network Access solution from F5 Networks VPN Client.
GENERAL DESCRIPTION

The F5 Networks VPN Client is a next generation VPN (Virtual Private Network) solution providing secure user access to the SAP corporate network via Internet Explorer web browser version 7 and higher. This solution also provides "Firewall Friendly Access," which means that it will work through most customer site proxy and firewall configurations.

SAP IT

3/9

F5 VPN CLIENT USER GUIDE

Connection Options Provided by F5 VPN Client

Connection Options Provided by F5 VPN Client

User can connect to the SAP Network using the F5 Networks VPN Client (AKA Stand Alone Client) via the following mechanism: Full SSL VPN Connection

SAP IT

4/9

F5 VPN CLIENT USER GUIDE

Connecting with the F5 Stand Alone VPN Client

Connecting with the F5 Stand Alone VPN Client

SAP has made available a stand-alone client to allow VPN connections to the SAP Network without a dependency on the Browser. This will allow VPN operation even while the browser is closed. To use the Stand Alone client, go to Start / All Programs / F5 VPN Client Choose shortcut BIG-IP Edge Client. Choose Yes if the User Account Control window appears!

Then the F5 client main console will appear:

First choose Disconnectand second push button Change Server to select a server closest to your location in the drop down menu (e.g. Walldorf) and click on button Next. Then choose Connect to establish the VPN connection. The new feature Auto-Connect is an additional option. If selected it will automatically launch the connection for you when youre not at the SAP network.

Now insert your I/C/D number (Username) and your SecurID token (Passcode) in the blanks and click on Logon. You will then be connected to the SAP Network.

SAP IT

5/9

F5 VPN CLIENT USER GUIDE

Once connected, the application will display a graph (choose button Show Graph) of the inbound and outbound network traffic (the scale of the graph is tuned to the PPP establishment rate and not reflective of actual upstream and downstream traffic however it gives a good indication of the relative volume of network traffic inbound and outbound). Note regarding remediation: The remediation process of the client works in the same way that the browser based remediation works.

SAP IT

6/9

F5 VPN CLIENT USER GUIDE

Quick Troubleshooting

Quick Troubleshooting
If you are unable to make a connection: Please write down any error messages you get. This may be required to troubleshoot your connection issues. Ensure the user is logged into the PC as an administrator. Ensure that the user is able to browse other Internet web pages (if not, ask the user to troubleshoot their Internet connection with their local IT department). Use clientless vpn access http://connect.sap.com instead. Contact the Support Centre.

SAP IT

7/9

F5 VPN CLIENT USER GUIDE

5 Addendum 1: Client Proxy Settings

Addendum 1: Client Proxy Settings

If Your SAP Laptop proxy settings are set correctly, you should be able to access the internet via Internet Explorer on your SAP laptop both on the SAP network, and from home with a Cable Modem / DSL connection, without the need to change your proxy settings per location. The correct proxy settings are as follows for SAP Imaged Machines: In IE, go to tools, internet options / click on the connections tab. Click on the LAN settings button. Check "Use Automatic Configuration Script", insert address http://proxy:8083. Uncheck all other boxes. (See right) IE will first try to determine if you are on the sap network. If so, it will download the correct proxy settings and use them to access the Internet. If you are not on the SAP network, calls will go direct to the Internet.

Note: FYI. If you are at a customer site that uses a proxy, you will have to fill in the correct proxy settings provided by the customer by unchecking "Use automatic configuration script"), then checking "Use a proxy server for your LAN" and inserting the customers proxy address and port settings. When you leave that customer site, you would then need to change the settings back to the settings shown above.

SAP IT

8/9

F5 VPN CLIENT USER GUIDE

6 Addendum 2: F5 Error Codes

Addendum 2: F5 Error Codes

SAP IT

9/9