SAP RISE/Hana VPN with Mikrotik

RouterOS General
1

Does Mikrotik support VPN tunnel for SAP HANA Cloud?

Some of the data from there documentation

IPSec crypto settings Phase1
IKEv2-AES256-SHA384-DHgroup20-86400s (recommended)
IKEv2-AES256-SHA256-DHgroup15-86400s
IKEv2-AES256-SHA256-DHgroup5-86400s
IKEv1-AES256-SHA1-DHgroup15-86400s (not recommended, insecure)
IKEv1-AES128-SHA1-DHgroup5-86400s (not recommended, insecure)

IPSec crypto settings Phase2
AES256-SHA256-PFSgroup20-3600s (recommended)
AES256-SHA256-PFSgroup15-3600s
AES256-SHA256-PFSgroup5-3600s
AES256-SHA1-PFSgroup15-3600s (not recommended, insecure)
AES256-SHA1-PFSgroup5-3600s (not recommended, insecure)

Ike settings / "Pre-shared Key (min. 20 char.) - Optional

2

https://help.mikrotik.com/docs/display/ROS/IPsec

3

I forgot to update this post. We are able to configure IPSEC tunnel with SAP HEC (Hana Enterprise Cloud). Initially SAP team made few mistakes like incorrect pre-shared key, our local subnets were not allowed at there end, Our router wan ip was incorrectly configured at there end & stuff like that & it created headaches for many days at our end. after 8-10s of requesting for remote support they fixed all at there end & tunnel established.