What's New
SAP on Cloud Technology Poster
SAP Deployment Guide
- About This Document
- Abstract
- Service Overview
- Planning
- Deployment
- Backup and Restoration
- Summary
- Support Information
  - Huawei Support
  - SAP Support
- Change History
Data Provider for SAP User Guide
- About This Document
- Introduction
- Agency Configuration
- Installation
  - Installing Data Provider on a Linux Cloud Server
  - Installing Data Provider on a Windows Cloud Server
- Uninstallation
  - Uninstalling Data Provider from a Linux Cloud Server
  - Uninstalling Data Provider on a Windows Cloud Server
- FAQs
- Change History
SAP HA and DR Guide
- Purpose
- Advantages of Cloud-Based HA
- Introduction to Public Cloud Services
- Concepts Related to HA and Disaster Recovery
- SAP HANA HA and DR
  - Native SAP HANA HA Support
  - Public Cloud HA and DR Scenarios
- SAP Application HA and DR
  - SAP Application SDRS
- Related Documents
- Change History
SAP Security White Paper
- Production Environment Security Solution
- Development and Test Environment Security Solution
- Huawei Technical Support Channel Security Solution
- Other Security Solutions
- Security Solution Mapping Table
- Change History
SAP HANA Overview
- Introduction to SAP HANA
- Advantages of Deploying SAP HANA on the Public Cloud
- Required Resources
  - Licenses
  - Public Cloud Services
- Application Scenarios
- Service Continuity
- Support
- Change History
SAP HANA User Guide (Single Node)
- Introduction
- Deployment
- Management and Monitoring
- Backing Up and Restoring Data
- FAQs
- Appendix
- Change History
SAP HANA HA and DR Guide
- About This Document
- Advantages of Cloud-Based HA
- Introduction to Public Cloud Services
- Native SAP HANA HA Support
- Public Cloud HA and DR Scenarios
- SAP HANA HA Planning (Distance and RTT)
- Related Documents
- Change History
SAP NetWeaver User Guide
- Overview
- Solution
  - Solution Introduction
  - Data Planning
- Deploying SAP NetWeaver
- Backup and Restoration
- FAQs
  - What Should I Do If a SAP Application on an ECS Cannot Be Started?
- Change History
SAP Application AS User Guide
- Overview
- Deployment
- SAP Application AS Management
  - Expanding AASs Manually
  - Deleting AASs Manually
- FAQs
- Change History
SAP S/4HANA Quick Deployment Guide
- Overview
- Scheme
- Planning
- SAP S/4HANA Deployment
- Verifying the Installation
- FAQs
  - How Do I Delete an Application?
  - What Should I Do If a SAP Application on an ECS Cannot Be Started?
- Change History
SAP S/4HANA HA Deployment Guide
- Overview
- Deployment Scheme
- Resource Planning
- Resource Preparation
- Configuration Before Installation
- SAP S/4HANA Installation
- Backup and Restoration
- FAQs
  - What Should I Do If a SAP Application on an ECS Cannot Be Started?
- Change History
SAP Business One User Guide
- Introduction
- Deployment Modes
- Data Planning
  - Node Planning
  - Network Planning
- Preparing for Resources
- Configuration Before Installation
- Installing Software
  - Installing the SAP Software
  - Installing Data Provider
- FAQs
  - What Should I Do If a SAP Application on an ECS Cannot Be Started?
- Change History
SAP Business One Quick Deployment Guide
- Overview
- Scheme
- Resource Planning
- Deploying SAP Business One
- Verifying the Installation
- FAQs
  - How Do I Delete an Application?
  - What Should I Do If a SAP Application on an ECS Cannot Be Started?
- Change History
Best Practices
- SAP Best Practices
- Huawei Cloud SAP on DB2 Installation Best Practice
- Huawei Cloud SAP on SQL Server Installation Best Practice
- SAP S/4HANA (1809) HA Deployment Best Practice
- HUAWEI CLOUD SAP Business One on HANA Installation Best Practice
- SAP Monitoring Best Practices
- Best Practices of SAP Migration to HUAWEI CLOUD
- Best Practice of Using Block-Level Migration of SMS to Migrate SAP Applications and Databases Running on Linux Servers
- Best Practice of SAP Migration from XEN to KVM
- Best Practice of SAP Disaster Recovery with SDRS
- Best Practice of Rsync-based SAP Disaster Recovery
- SAP Backint Installation Guide
- Best Practices for Uploading SAP Backups to the OBS Bucket
- Best Practices of the SAP ASE Solution
- Best Practices of SAP System Capacity Expansion
- Change History
FAQs
- FAQs
- Change History
Videos
Glossary
General Reference
- Glossary
- Service Level Agreement
- White Papers
- Endpoints
- Permissions

On this page

Show all

Help Center/ SAP Cloud/ SAP Security White Paper/ Huawei Technical Support Channel Security Solution

Huawei Technical Support Channel Security Solution

Updated on 2022-03-04 GMT+08:00

View PDF

Figure 1 Huawei technical support channel security solution
click to enlarge

If you need Huawei technical support, install a Huawei dedicated bastion host to ensure O&M channel security. For details, see Figure 1.

The Huawei dedicated bastion host differs from an enterprise intranet bastion host in the following aspects:

The Huawei dedicated bastion host is configured with two network interface cards (NICs). The two NICs belong to the subnets for the PRD management zone and DEV management zone, respectively.

You need to configure an EIP for the Huawei dedicated bastion host so that Huawei technical support can use the EIP for access.

The Huawei dedicated bastion host needs to allow access from the Internet. Therefore, you need to add inbound ACL rules to the subnet to which the NIC bound with the EIP belongs, allowing access from the Internet to the Huawei dedicated bastion host. You do not need to modify outbound ACL rules.

If the NIC bound with the EIP belongs to the subnet for the DEV-management zone, you need to add the following inbound ACL rules.

NOTE:

IP addresses and ports in this section are only used as examples. If necessary, add temporary ACL rules to allow access from other source IP addresses.

**Table 1** Inbound rules of network ACL **NACL-DEV-MGMT**
Rule	Source IP Address	Protocol	Destination Port	Allow or Deny	Description
For Huawei technical support	2.2.2.0/24	TCP	8443	Allow	Allows the administrator in Huawei technical support (from fixed source IP addresses) to access the Huawei dedicated bastion host.