Fortinet black logo

CLI Reference

config global-dns-server dsset-info-list

config global-dns-server dsset-info-list

Use this command to paste in the content of the DSSET files provided by child domain servers or stub domains.

If you enable DNSSEC, secure communication between the FortiADC DNS server and any child DNS servers is based on keys contained in delegation signer files (DSSET files). In DNSSEC deployments, DSSET files are generated automatically when the zone is signed by DNSSEC.

Note: You use the Global DNS zone configuration to generate the DSSET file for this server. The file generated by the zone configuration editor is the one you give to any parent zone or the registrar of your domain.

Before you begin:

  • You must have a good understanding of DNSSEC and knowledge of the DNS deployment in your network.
  • You must have used DNSSEC to sign the child domain servers and have downloaded the DSset files to a location you can reach from your management computer.
  • You must have read-write permission for global load balancing settings.

Syntax

config global-dns-server dsset-info-list

edit <name>

set filename <string>

set content <string>

next

end

filename

Specify the filename. The convention is dsset-<domain>, for example, dsset-example.com.

content

Specify (paste) the DSset file content. The content of DSset files is similar to the following:

dns.example.com. IN DS 13447 5 1 A5AD9EFB6840F58CF817F3CC7C24A7ED2DD5559C

config global-dns-server dsset-info-list

config global-dns-server dsset-info-list

Use this command to paste in the content of the DSSET files provided by child domain servers or stub domains.

If you enable DNSSEC, secure communication between the FortiADC DNS server and any child DNS servers is based on keys contained in delegation signer files (DSSET files). In DNSSEC deployments, DSSET files are generated automatically when the zone is signed by DNSSEC.

Note: You use the Global DNS zone configuration to generate the DSSET file for this server. The file generated by the zone configuration editor is the one you give to any parent zone or the registrar of your domain.

Before you begin:

  • You must have a good understanding of DNSSEC and knowledge of the DNS deployment in your network.
  • You must have used DNSSEC to sign the child domain servers and have downloaded the DSset files to a location you can reach from your management computer.
  • You must have read-write permission for global load balancing settings.

Syntax

config global-dns-server dsset-info-list

edit <name>

set filename <string>

set content <string>

next

end

filename

Specify the filename. The convention is dsset-<domain>, for example, dsset-example.com.

content

Specify (paste) the DSset file content. The content of DSset files is similar to the following:

dns.example.com. IN DS 13447 5 1 A5AD9EFB6840F58CF817F3CC7C24A7ED2DD5559C