PAS-C01 · Question #118
A company wants to migrate its SAP ERP landscape to AWS. The company will use a highly available distributed deployment for the new architecture. Clients will access SAP systems from a local data cent
The correct answer is B. For the ASCS instance, configure an overlay IP address that is outside the production VPC CIDR D. For the ASCS instance, configure an overlay IP address that is outside the production VPC CIDR. For SAP high-availability clusters on AWS, the overlay IP address used for the ASCS (ABAP Central Services) instance must be outside the production VPC CIDR range. This is a fundamental AWS networking requirement for the cluster failover mechanism: when a failover occurs, the Pac
Question
A company wants to migrate its SAP ERP landscape to AWS. The company will use a highly available distributed deployment for the new architecture. Clients will access SAP systems from a local data center through an AWS Site-to-Site VPN connection that is already in place. An SAP solutions architect needs to design the network access to the SAP production environment. Which configuration approaches will meet these requirements? (Choose two.)
Options
- AFor the ASCS instance, configure an overlay IP address that is within the production VPC CIDR
- BFor the ASCS instance, configure an overlay IP address that is outside the production VPC CIDR
- CFor the ASCS instance, configure an overlay IP address that is within the production VPC CIDR
- DFor the ASCS instance, configure an overlay IP address that is outside the production VPC CIDR
- EFor the ASCS instance, configure an overlay IP address that is outside the production VPC CIDR
How the community answered
(35 responses)- A23% (8)
- B60% (21)
- C11% (4)
- E6% (2)
Explanation
For SAP high-availability clusters on AWS, the overlay IP address used for the ASCS (ABAP Central Services) instance must be outside the production VPC CIDR range. This is a fundamental AWS networking requirement for the cluster failover mechanism: when a failover occurs, the Pacemaker resource agent updates the VPC route table to redirect traffic for the overlay IP to the current active node. If the overlay IP were within the VPC CIDR, AWS's native routing would interfere with this process and prevent correct failover routing. Options B and D both specify an overlay IP outside the VPC CIDR, satisfying this requirement, while differing in another configuration detail (not fully visible in the truncated options). Options A, C, and E specify overlay IPs within the VPC CIDR, which would cause the same type of clustering failure described in Question 2.
Topics
Community Discussion
No community discussion yet for this question.