具有SharePoint BCS连接的Azure防火墙 [英] Azure Firewall with SharePoint BCS Connection

问题描述

您好，我已创建Azure PaaS SQL数据库以供全局查看。 

Hi, i have created Azure PaaS SQL Database for global viewing. 

然后我创建了一个到SharePoint Online的BCS连接，但是，当我尝试创建时外部内容类型，它表示我的IP地址无法访问服务器。 我可以轻松添加我的IP地址，解决方案将正常运行。 

I have then created a BCS Connection to SharePoint Online, however, when i try to create the external content type, it says my IP Address cannot access the server.  I can easily add in my IP address and the solution will work. 

我的问题是，由于用户将全局访问此SharePoint列表，绕过所有全球用户的解决方案是什么来自天蓝色防火墙？

My question is, as users will be accessing this SharePoint list globally, what is the solution regarding bypassing all global users from the azure firewall ?

显然，将每个用户的IP地址添加到Azure SQL中并不是一个解决方案。 

Obviously, adding each users IP address into Azure SQL is not an solution. 

任何人都可以提供帮助吗？

Can anyone assist?

谢谢。 

推荐答案

我创建了Azure用于全局查看的PaaS SQL数据库。 

Hi, i have created Azure PaaS SQL Database for global viewing. 

然后我创建了一个到SharePoint Online的BCS连接，但是，当我尝试创建外部内容类型时，它说我的IP地址无法访问服务器。 我可以轻松添加我的IP地址，解决方案将正常运行。 

I have then created a BCS Connection to SharePoint Online, however, when i try to create the external content type, it says my IP Address cannot access the server.  I can easily add in my IP address and the solution will work. 

我的问题是，由于用户将全局访问此SharePoint列表，绕过所有全球用户的解决方案是什么来自天蓝色防火墙？

My question is, as users will be accessing this SharePoint list globally, what is the solution regarding bypassing all global users from the azure firewall ?

显然，将每个用户的IP地址添加到Azure SQL中并不是一个解决方案。 

Obviously, adding each users IP address into Azure SQL is not an solution. 

任何人都可以提供帮助吗？

Can anyone assist?

谢谢。 

美好的一天 

Good day 

>>   显然，将每个用户的IP地址添加到Azure SQL中并不是解决方案。 

>> Obviously, adding each users IP address into Azure SQL is not an solution. 

是的，但是你可以（不要做它!!!并不意味着应该）打开所有IP的防火墙，或者适用于你所在国家的一系列IP。防火墙规则允许使用IP范围，而不仅仅是单个IP​​

True, but you can (DO NOT DO IT!!! Can does not mean should) open the fire wall for all IPs,or for a range of IPs which fit your country for example. The Firewall rules allows to use range of IP and not only single IP

您拥有的一些选项：

1。不要直接从客户端连接，而是从共享服务器/应用程序连接，这意味着您只需要打开服务器/应用程序的防火墙IP。这通常应该如何工作。连接Azure数据库的终端客户端不是您使用的应用程序的
。 

1. Don't connect from the client directly but from the shared server/application, which mean you only need to open the Firewall IP of the server/application. This is how it should work usually. It is not the end client that connect the Azure Database but the application that you use. 

注意！我不熟悉SharePoint中的Business Connectivity Services，您可能希望在SharePoint论坛中获得另一个意见，但这是我理解它的工作原理。连接是从SharePoint到
sql server完成的，而不是从"最终用户"到sql server。

https://manojahuja95.wordpress.com/2014/05/22/sharepoint -2013-use-bcs-to-connect-with-sql-server /

Note! I am not familiar with Business Connectivity Services in SharePoint and you might want to get another opinion in the SharePoint forum, but this is how I understand that it is working. The connection is done from the SharePoint to the sql server andnot from the "end user"to the sql server.
https://manojahuja95.wordpress.com/2014/05/22/sharepoint-2013-use-bcs-to-connect-with-sql-server/

2。您可以使用Azure虚拟网络并从防火墙中的虚拟网络配置免费访问（在Azure门户中的IP规则下，您可以选择添加虚拟网络）

2. You can use Azure Virtual networks and configure free access from that Virtual networks in the firewall (under the IP rules in the Azure portal you have option to add Virtual networks)

这篇关于具有SharePoint BCS连接的Azure防火墙的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！