Configuring DNS settings for non-root VDOM

For FortiADC systems with VDOM enabled, you can configure the System DNS resolver for non-root VDOMs and override Global DNS settings to set a DNS server IP per VDOM for more flexibility.

This functionality is only available in the non-root VDOM. The root VDOM defaults to inherit the Global DNS settings.

Note: The DNS settings per VDOM is also not available when VDOMs are in Share Network mode (ADOM mode) as all ADOMs will share the same network namespace.

DNS settings per VDOM does not affect the following global modules which will continue to use Global DNS settings:

• Security Fabric external and fabric connectors
• URL filters
• FortiGuard
• SMTP for logs and alerts
• NTP
• Admin FortiToken Cloud
• AntiVirus cloud

Before you begin:

• You must have VDOM enabled and have access to a non-root VDOM.

• You must have a good understanding of DNS and knowledge of the remote DNS servers that can be used to communicate with Internet domain servers.

• You must have read-write permission for system settings.

To configure DNS settings for a non-root VDOM:

1. Go to System > Settings.
   The configuration page displays the DNS tab.
2. Configure the following settings:

   Setting	Description
   DNS Override	Enable to apply the DNS settings configured for this non-root VDOM instead of inheriting from the Global DNS settings.
   Primary DNS	Specify the IP address for the primary DNS server.
   Second DNS	Specify the IP address for the secondary DNS server.

3. Click Save.