system dns
Configure DNS settings used to resolve domain names to IP addresses, so devices connected to a FortiGate interface can use it.
History
The following table shows all newly added, changed, or removed entries as of FortiOS 6.0.5.
| Command | Description |
|---|---|
|
config domain |
Allows you to add multiple DNS domains. |
config system dns
set primary {ipv4 address} Primary DNS server IP address.
set secondary {ipv4 address} Secondary DNS server IP address.
config domain
edit {domain}
# Search suffix list for hostname lookup.
set domain {string} DNS search domain list separated by space (maximum 8 domains) size[127]
next
set ip6-primary {ipv6 address} Primary DNS server IPv6 address.
set ip6-secondary {ipv6 address} Secondary DNS server IPv6 address.
set timeout {integer} DNS query timeout interval in seconds (1 - 10). range[1-10]
set retry {integer} Number of times to retry (0 - 5). range[0-5]
set dns-cache-limit {integer} Maximum number of records in the DNS cache. range[0-4294967295]
set dns-cache-ttl {integer} Duration in seconds that the DNS cache retains information. range[60-86400]
set cache-notfound-responses {disable | enable} Enable/disable response from the DNS server when a record is not in cache.
set source-ip {ipv4 address} IP address used by the DNS server as its source IP.
end
primary <ip>
The primary DNS server IP address, default is 208.91.112.53, a FortiGuard server.
secondary <ip>
The secondary DNS server IP address, default is 208.91.112.52, a FortiGuard server.
config domain
Add one or more DNS domains.
domain <string>
The domain name suffix for the IP addresses of the DNS server.
ip6-primary <ipv6>
The primary DNS server IPv6 address.
ip6-secondary <ipv6>
The secondary DNS server IPv6 address.
dns-cache-limit <integer>
The number of records in the DNS cache, value between 0 and 4294967295, default is 5000.
dns-cache-ttl <integer>
The duration, in seconds, that the DNS cache retains information, value between 60 and 86400, default is 1800.
cache-notfound-responses {disable | enable}
Disable or enable response from the DNS server when a record is not in cache, default is disable.
source-ip <ip>
The IP address used by the DNS server as the source IP.