Comsume Web Service via Internet

qiashzhou

I have a question about comsume NAV Web Service via Internet.
my deployment is as below:
Version:NAV 2013 R2
Three Tier:SQL NAV-Database <

---

\:D/

---

> Middle Tier Runing Web Service<

---

](*,)

---

> IIS7.0 Web Server running ASP.NET application (DMZ) <

---

](*,)

---

> WWW
(as another post viewtopic.php?f=32&t=50815&hilit=web+service%2C+IIS)

My question is when I publish a Web service, I can only access to the middle tier by using an internal IP address or Middle tier host name, because the web service is host in Middle tier, right? Now I have a public IP address and Domain name which point to web server, then what should I do to open the web service to the internet? I mean, I could open the web client via public IP address, but How can I access the web service via the public IP address?

In the post above, ScottJones mentioned "Kerbros and tickets", I really don't know what is that mean, is there any easy way to do this kind of thing?

geordie

Hi, if the IP address is public it's actually possible to access from the external, you need anyway to decide which type of authentication the user consuming web service requires: here the options available for SOAP services.

qiashzhou

Thank you geordie, I will use [Windows] authentication.
I think maybe I didn't make myself clear enough.
For example:
1.AP Server(Middle Tier Runing Web Service)
local IP:192.168.0.1
Name:NAV-AP
2.Web Server(IIS7.0)
local IP:192.168.0.2
public IP:10.0.0.1
Name:NAV-WEB

I could access to web service use http://NAV-AP:7047/DynamicsNAV71/WS/Com ... temService,
or http://192.168.0.1:7047/DynamicsNAV71/W ... temService, only if I am in the same LAN,
my question is how could I access to my web service from WWW, because web service is in AP Server, there is no web client for web serivice I think. if user type http://10.0.0.1:7047/DynamicsNAV71/WS/C ... temService, how should it redirect it to
http://192.168.0.1:7047/DynamicsNAV71/W ... temService? Maybe my understanding is totally wrong about this thing...

I think firewall will redirect the request of 10.0.0.1 to 192.168.0.2(IIS7.0), maybe it is possible to let the firewall
redirect the request of 10.0.0.1:7047 to 192.168.0.1:7047(or other port number), but is it safe to redirect directly
to AP Server?

By the way, we are using SSL, so the actual URL will be like https://10.0.0.1: <port number>/DynamicsNAV71/WS/CompanyName/SystemService