Fortinet black logo

CLI Reference

config system dns-database

config system dns-database

Configure DNS databases.

config system dns-database
    Description: Configure DNS databases.
    edit <name>
        set allow-transfer {user}
        set authoritative [enable|disable]
        set contact {string}
        config dns-entry
            Description: DNS entry.
            edit <id>
                set status [enable|disable]
                set type [A|NS|...]
                set ttl {integer}
                set preference {integer}
                set ip {ipv4-address-any}
                set ipv6 {ipv6-address}
                set hostname {string}
                set canonical-name {string}
            next
        end
        set domain {string}
        set forwarder {user}
        set ip-master {ipv4-address-any}
        set primary-name {string}
        set source-ip {ipv4-address}
        set status [enable|disable]
        set ttl {integer}
        set type [master|slave]
        set view [shadow|public]
    next
end

config system dns-database

Parameter

Description

Type

Size

allow-transfer

DNS zone transfer IP address list.

user

Not Specified

authoritative

Enable/disable authoritative zone.

option

-

Option

Description

enable

Enable authoritative zone.

disable

Disable authoritative zone.

contact

Email address of the administrator for this zone. You can specify only the username (e.g. admin) or full email address (e.g. admin@test.com) When using a simple username, the domain of the email will be this zone.

string

Maximum length: 255

domain

Domain name.

string

Maximum length: 255

forwarder

DNS zone forwarder IP address list.

user

Not Specified

ip-master

IP address of master DNS server. Entries in this master DNS server and imported into the DNS zone.

ipv4-address-any

Not Specified

name

Zone name.

string

Maximum length: 35

primary-name

Domain name of the default DNS server for this zone.

string

Maximum length: 255

source-ip

Source IP for forwarding to DNS server.

ipv4-address

Not Specified

status

Enable/disable this DNS zone.

option

-

Option

Description

enable

Enable setting.

disable

Disable setting.

ttl

Default time-to-live value for the entries of this DNS zone.

integer

Minimum value: 0 Maximum value: 2147483647

type

Zone type (master to manage entries directly, slave to import entries from other zones).

option

-

Option

Description

master

Master DNS zone, to manage entries directly.

slave

Slave DNS zone, to import entries from other DNS zones.

view

Zone view (public to serve public clients, shadow to serve internal clients).

option

-

Option

Description

shadow

Shadow DNS zone to serve internal clients.

public

Public DNS zone to serve public clients.

config dns-entry

Parameter

Description

Type

Size

id

DNS entry ID.

integer

Minimum value: 0 Maximum value: 4294967295

status

Enable/disable resource record status.

option

-

Option

Description

enable

Enable resource record status.

disable

Disable resource record status.

type

Resource record type.

option

-

Option

Description

A

Host type.

NS

Name server type.

CNAME

Canonical name type.

MX

Mail exchange type.

AAAA

IPv6 host type.

PTR

Pointer type.

PTR_V6

IPv6 pointer type.

ttl

Time-to-live for this entry.

integer

Minimum value: 0 Maximum value: 2147483647

preference

DNS entry preference, 0 is the highest preference

integer

Minimum value: 0 Maximum value: 65535

ip

IPv4 address of the host.

ipv4-address-any

Not Specified

ipv6

IPv6 address of the host.

ipv6-address

Not Specified

hostname

Name of the host.

string

Maximum length: 255

canonical-name

Canonical name of the host.

string

Maximum length: 255

config system dns-database

Configure DNS databases.

config system dns-database
    Description: Configure DNS databases.
    edit <name>
        set allow-transfer {user}
        set authoritative [enable|disable]
        set contact {string}
        config dns-entry
            Description: DNS entry.
            edit <id>
                set status [enable|disable]
                set type [A|NS|...]
                set ttl {integer}
                set preference {integer}
                set ip {ipv4-address-any}
                set ipv6 {ipv6-address}
                set hostname {string}
                set canonical-name {string}
            next
        end
        set domain {string}
        set forwarder {user}
        set ip-master {ipv4-address-any}
        set primary-name {string}
        set source-ip {ipv4-address}
        set status [enable|disable]
        set ttl {integer}
        set type [master|slave]
        set view [shadow|public]
    next
end

config system dns-database

Parameter

Description

Type

Size

allow-transfer

DNS zone transfer IP address list.

user

Not Specified

authoritative

Enable/disable authoritative zone.

option

-

Option

Description

enable

Enable authoritative zone.

disable

Disable authoritative zone.

contact

Email address of the administrator for this zone. You can specify only the username (e.g. admin) or full email address (e.g. admin@test.com) When using a simple username, the domain of the email will be this zone.

string

Maximum length: 255

domain

Domain name.

string

Maximum length: 255

forwarder

DNS zone forwarder IP address list.

user

Not Specified

ip-master

IP address of master DNS server. Entries in this master DNS server and imported into the DNS zone.

ipv4-address-any

Not Specified

name

Zone name.

string

Maximum length: 35

primary-name

Domain name of the default DNS server for this zone.

string

Maximum length: 255

source-ip

Source IP for forwarding to DNS server.

ipv4-address

Not Specified

status

Enable/disable this DNS zone.

option

-

Option

Description

enable

Enable setting.

disable

Disable setting.

ttl

Default time-to-live value for the entries of this DNS zone.

integer

Minimum value: 0 Maximum value: 2147483647

type

Zone type (master to manage entries directly, slave to import entries from other zones).

option

-

Option

Description

master

Master DNS zone, to manage entries directly.

slave

Slave DNS zone, to import entries from other DNS zones.

view

Zone view (public to serve public clients, shadow to serve internal clients).

option

-

Option

Description

shadow

Shadow DNS zone to serve internal clients.

public

Public DNS zone to serve public clients.

config dns-entry

Parameter

Description

Type

Size

id

DNS entry ID.

integer

Minimum value: 0 Maximum value: 4294967295

status

Enable/disable resource record status.

option

-

Option

Description

enable

Enable resource record status.

disable

Disable resource record status.

type

Resource record type.

option

-

Option

Description

A

Host type.

NS

Name server type.

CNAME

Canonical name type.

MX

Mail exchange type.

AAAA

IPv6 host type.

PTR

Pointer type.

PTR_V6

IPv6 pointer type.

ttl

Time-to-live for this entry.

integer

Minimum value: 0 Maximum value: 2147483647

preference

DNS entry preference, 0 is the highest preference

integer

Minimum value: 0 Maximum value: 65535

ip

IPv4 address of the host.

ipv4-address-any

Not Specified

ipv6

IPv6 address of the host.

ipv6-address

Not Specified

hostname

Name of the host.

string

Maximum length: 255

canonical-name

Canonical name of the host.

string

Maximum length: 255