Configuring for Network Address Translation

If you use Network Address Translation (NAT) on the outer firewall only, then no special configuration is required for Crystal Enterprise to communicate properly. However, if NAT is employed on the inner firewall—between the Web Connector and the Web Component Server (WCS)—you must configure the Web Connector to communicate properly through the firewall. This Web Connector configuration is required because the internal IP address of the WCS may not be routable through the firewall. (The WCS requires no special configuration, because the Web Connector's IP address is not hidden by the NAT firewall.)

Note:    You can configure the Web Connector to communicate properly across NAT firewalls that use static IP translation; however, the Web Connector cannot communicate across a firewall whose IP translation is dynamic.

To configure the Web Connector on Windows

1. Start the CCM.
2. Stop the Word Wide Web Publishing Service.
3. On the toolbar, click Configure web connector.
4. In the Web Component Servers area, click Add.

   If your WCS Host Name is already listed, select it and click Edit.

5. In the WCS Host Name field, type one of the following:
   • The name of the machine that is running the WCS. This machine must be routable from the web server that is running the Web Connector.
   • The external translated IP address of the machine that is running the WCS. This IP address must be fixed; that is, your firewall must use static IP translation to grant the WCS machine a fixed IP address.
6. If you have customized the WCS so that it listens on a port other than the default, type your new port number in the Port field. Otherwise, ensure that the default port number (6401) appears.
7. Click OK twice to return to the CCM.
8. Start the Word Wide Web Publishing Service.

To configure the Web Connector on UNIX

If your web server is running on UNIX, stop the web server and then set the WCSHOST or WCSHosts variable to one of the following:

• The name of the machine that is running the WCS. This machine must be routable from the web server that is running the Web Connector.
• The external translated IP address of the machine that is running the WCS. This IP address must be fixed; that is, your firewall must use static IP translation to grant the WCS machine a fixed IP address.

The WCSHOST or WCSHosts variable is defined in the configuration file that corresponds to your web server. For details about each configuration file, see Web Connector virtual path mappings.