Web Connector separated from the WCS by packet filtering

When the Web Connector is in the DMZ, you must configure the Web Connector to make initial contact with the Web Component Server (WCS) using a specific hostname and port number.

Next you must configure the WCS to respond appropriately to communications from the Web Connector (WC). This is accomplished using the following command:

-requestport fixed

The -requestport command is used to configure the WCS to use a fixed port number for all subsequent communications with the WC. When the WC and WCS are separated by a firewall that uses packet filtering, you must specify this port number. You can use any free port number for fixed.

Finally, you must configure your firewall to allow communications using the addresses and ports that you've specified.

To configure the Web Connector on Windows
  1. Start the CCM.
  2. Stop the World Wide Web Publishing Service.
  3. On the toolbar, click Configure web connector.
  4. In the Web Component Servers area, click Add.

    If your WCS Host Name is already listed, select it and click Edit.

  5. In the WCS Host Name field, type the name of the machine that is running the WCS. This machine must be routable from the web server that is running the Web Connector.
  6. If you have customized the WCS so that it listens on a port other than the default, type your new port number in the Port field. Otherwise, ensure that the default port number (6401) appears.
  7. Click OK twice to return to the CCM.
  8. Start the World Wide Web Publishing Service.
To configure the Web Connector on UNIX

If your web server is running on UNIX, stop the web server and then set the WCSHOST or WCSHosts variable to the name of the machine that is running the WCS. This machine must be routable from the web server that is running the Web Connector.

The WCSHOST or WCSHosts variable is defined in the configuration file that corresponds to your web server. For details about each configuration file, see Crystal Enterprise Installation Guide.

To configure the WCS
  1. Start the CCM.
  2. Stop the Crystal Web Component Server.
  3. On the toolbar, click Properties.
  4. In the Command box, add the following option:

    -requestport portnum

    Substitute any free port number for portnum.

  5. Click OK to return to the CCM.
  6. Start the Crystal Web Component Server.
Specifying firewall rules when the WC is separated from the WCS by packet filtering

Stateful firewalls (packet filtering or NAT) need only inbound access rules to allow the Web Connector and the WCS to communicate. For details of how to specify these rules, consult your firewall documentation.

The fixed port number specified in the chart is the port number you specify for the WCS using -requestport. See To configure the WCS for details.

Inbound Rules
Source Destination Action
Computer Port Computer Port

Web Server (WC)

Any

WCS

6401

Allow

Web Server (WC)

Any

WCS

fixed

Allow

Any

Any

Any

Any

Reject

Related topics

Crystal Decisions
http://www.crystaldecisions.com/
Support services
http://support.crystaldecisions.com/