SAP

Step	Owner	Description
Preparation
1	Customer and Verizon	You must be a Verizon Private IP customer to complete this activation process. If not, a Private IP connection must be established to at least one of your locations. As this component is probably the one with the longest deliverable timeframe, you should not proceed with the rest of the activation process until this step is completed.
2	Verizon	The Verizon Account Team will work with you to create entitlements for Verizon Enterprise Center/Dynamic Network Manager which provides access to your Secure Cloud Interconnect service. This step shall be completed once the Secure Cloud Interconnect order is entered.
3	Customer and Verizon	If you have plans to use MSS Cloud Firewall as an addition to you Secure Cloud Interconnect service needs, check the section on MSS Cloud Firewall for information on how to provision that service. MSS Cloud Firewall has to be ordered at the same time as the Secure Cloud Interconnect port and cannot be added to an existing Secure Cloud Interconnect service.
Ordering and Provisioning
1	Customer	Before entering the Secure Cloud Interconnect order, your SAP account team needs to confirm internally with the SAP cloud peering team (cloud-peering@sap.com) if Secure Cloud Interconnect is possible in the requested location for the requested application like private peering with HANA Enterprise Cloud or public peering with SuccessFactors or other application. The SAP cloud peering team will return an SAP authorization key if the request is approved.
2	Customer	You select the location where the Secure Cloud Interconnect port will be provisioned.
3	Customer	You provide the SAP cloud authorization key to the Verizon Account Team along with the desired location and the option private peering for HANA Enterprise Cloud or public peering for SuccessFactors or other application. Note: If this information is not provided at the time of order placement, it may slow the provisioning process.
4	Customer and Verizon	The Verizon Account Team, in consultation with you, identifies the appropriate time for the Secure Cloud Interconnect activation.
5	Verizon	At the appropriate time, the Verizon Account Team places the Secure Cloud Interconnect order using the SAP cloud authorization key. The SAP cloud authorization key is entered in the “CSP Customer ID” field. The “CSP Customer Service ID” field is left empty.
6	Customer	By default, the Private IP VPN entered with the Secure Cloud Interconnect order is connected to the Secure Cloud Interconnect port. If you want to add additional VPNs, you can use the Dynamic Network Manager to add one or more of your Private IP VPNs to the Secure Cloud Interconnect port (using the Add/Remove VPN menu). PLEASE NOTE: When you add or remove Private IP VPNs to a Secure Cloud Interconnect port, it is important to ensure that the IP addresses of the Private IP VPNs don’t overlap and the total number of Private IP prefixes do not exceed the MAX number specified in the VPNs. In the latter case, you must contact the Verizon Account Team and request an increase to that MAX number. If you are using non-standard Secure Cloud Interconnect designs reach out and coordinate with your Verizon Account Team before proceeding with this step.
7	Customer	Secure Cloud Interconnect is established and configured on the Verizon Provider Edge Router connected to SAP in the specified location.
8	Customer	Dynamic Network Manager (Verizon Enterprise Center Portal) is updated with your Secure Cloud Interconnect configuration information.
9	Customer	You provide the supplied Secure Cloud Interconnect configuration letter details together with the SAP cloud authorization key to SAP to complete the configuration process.
10	SAP	SAP provisions your connection on the SAP PE Router.
11	SAP and Customer	SAP Engineering works with you to establish end to end connectivity.
MSS Cloud Firewall
1	Verizon	MSS Cloud Firewall has to be ordered at the same time as the Secure Cloud Interconnect port. MSS Cloud Firewall cannot be added to Secure Cloud Interconnect once the Secure Cloud Interconnect port is activated.
2	Verizon and Customer	Verizon would create the Secure Cloud Interconnect port but not activate the connection. Following that, the MSS Cloud Firewall order will be processed and Verizon will configure the MSS Cloud Firewall instance with the Firewall rules provided by you. Once the MSS Cloud Firewall is configured, the Secure Cloud Interconnect port can be activated.
3	Customer	You have ‘Read’ privilege to MSS Cloud Firewall. You do not have ‘Write’ privilege. Changes to the Firewall rules have to be either sent to Verizon or entered in the MSS Cloud Firewall portal.
Shutting Down the Secure Cloud Interconnect Port
1	Customer or Verizon	Once the port is provisioned, you or your Verizon Account Team logs into Dynamic Network Manager and select the Secure Cloud Interconnect port. As highlighted, click on the pen following the “Modify Admin Status” field.
2	Verizon and Customer	The following screen shot shows the page that will open once the “Modify Admin Status” pen is clicked on. The Shutdown / No Shutdown of the port can be done through the “New Admin Status” drop down menu.