Fortinet white logo
Fortinet white logo

CLI Reference

config system dns-database

config system dns-database

Configure DNS databases.

config system dns-database
    Description: Configure DNS databases.
    edit <name>
        set allow-transfer {user}
        set authoritative [enable|disable]
        set contact {string}
        config dns-entry
            Description: DNS entry.
            edit <id>
                set status [enable|disable]
                set type [A|NS|...]
                set ttl {integer}
                set preference {integer}
                set ip {ipv4-address-any}
                set ipv6 {ipv6-address}
                set hostname {string}
                set canonical-name {string}
            next
        end
        set domain {string}
        set forwarder {user}
        set forwarder6 {ipv6-address}
        set ip-primary {ipv4-address-any}
        set primary-name {string}
        set rr-max {integer}
        set source-ip {ipv4-address}
        set source-ip6 {ipv6-address}
        set status [enable|disable]
        set ttl {integer}
        set type [primary|secondary]
        set view [shadow|public|...]
    next
end

config system dns-database

Parameter

Description

Type

Size

Default

allow-transfer

DNS zone transfer IP address list.

user

Not Specified

authoritative

Enable/disable authoritative zone.

option

-

enable

Option

Description

enable

Enable authoritative zone.

disable

Disable authoritative zone.

contact

Email address of the administrator for this zone. You can specify only the username, such as admin or the full email address, such as admin@test.com When using only a username, the domain of the email will be this zone.

string

Maximum length: 255

host

domain

Domain name.

string

Maximum length: 255

forwarder

DNS zone forwarder IP address list.

user

Not Specified

forwarder6

Forwarder IPv6 address.

ipv6-address

Not Specified

::

ip-primary

IP address of primary DNS server. Entries in this primary DNS server and imported into the DNS zone.

ipv4-address-any

Not Specified

0.0.0.0

name

Zone name.

string

Maximum length: 35

primary-name

Domain name of the default DNS server for this zone.

string

Maximum length: 255

dns

rr-max

Maximum number of resource records.

integer

Minimum value: 10 Maximum value: 65536

16384

source-ip

Source IP for forwarding to DNS server.

ipv4-address

Not Specified

0.0.0.0

source-ip6

IPv6 source IP address for forwarding to DNS server.

ipv6-address

Not Specified

::

status

Enable/disable this DNS zone.

option

-

enable

Option

Description

enable

Enable setting.

disable

Disable setting.

ttl

Default time-to-live value for the entries of this DNS zone.

integer

Minimum value: 0 Maximum value: 2147483647

86400

type

Zone type (primary to manage entries directly, secondary to import entries from other zones).

option

-

primary

Option

Description

primary

Primary DNS zone, to manage entries directly.

secondary

Secondary DNS zone, to import entries from other DNS zones.

view

Zone view (public to serve public clients, shadow to serve internal clients).

option

-

shadow

Option

Description

shadow

Shadow DNS zone to serve internal clients.

public

Public DNS zone to serve public clients.

shadow-ztna

implicit DNS zone for ztna dox tunnel.

proxy

Shadow DNS zone for internal proxy.

config dns-entry

Parameter

Description

Type

Size

Default

id

DNS entry ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

status

Enable/disable resource record status.

option

-

enable

Option

Description

enable

Enable resource record status.

disable

Disable resource record status.

type

Resource record type.

option

-

A

Option

Description

A

Host type.

NS

Name server type.

CNAME

Canonical name type.

MX

Mail exchange type.

AAAA

IPv6 host type.

PTR

Pointer type.

PTR_V6

IPv6 pointer type.

ttl

Time-to-live for this entry.

integer

Minimum value: 0 Maximum value: 2147483647

0

preference

DNS entry preference.

integer

Minimum value: 0 Maximum value: 65535

10

ip

IPv4 address of the host.

ipv4-address-any

Not Specified

0.0.0.0

ipv6

IPv6 address of the host.

ipv6-address

Not Specified

::

hostname

Name of the host.

string

Maximum length: 255

canonical-name

Canonical name of the host.

string

Maximum length: 255

config system dns-database

config system dns-database

Configure DNS databases.

config system dns-database
    Description: Configure DNS databases.
    edit <name>
        set allow-transfer {user}
        set authoritative [enable|disable]
        set contact {string}
        config dns-entry
            Description: DNS entry.
            edit <id>
                set status [enable|disable]
                set type [A|NS|...]
                set ttl {integer}
                set preference {integer}
                set ip {ipv4-address-any}
                set ipv6 {ipv6-address}
                set hostname {string}
                set canonical-name {string}
            next
        end
        set domain {string}
        set forwarder {user}
        set forwarder6 {ipv6-address}
        set ip-primary {ipv4-address-any}
        set primary-name {string}
        set rr-max {integer}
        set source-ip {ipv4-address}
        set source-ip6 {ipv6-address}
        set status [enable|disable]
        set ttl {integer}
        set type [primary|secondary]
        set view [shadow|public|...]
    next
end

config system dns-database

Parameter

Description

Type

Size

Default

allow-transfer

DNS zone transfer IP address list.

user

Not Specified

authoritative

Enable/disable authoritative zone.

option

-

enable

Option

Description

enable

Enable authoritative zone.

disable

Disable authoritative zone.

contact

Email address of the administrator for this zone. You can specify only the username, such as admin or the full email address, such as admin@test.com When using only a username, the domain of the email will be this zone.

string

Maximum length: 255

host

domain

Domain name.

string

Maximum length: 255

forwarder

DNS zone forwarder IP address list.

user

Not Specified

forwarder6

Forwarder IPv6 address.

ipv6-address

Not Specified

::

ip-primary

IP address of primary DNS server. Entries in this primary DNS server and imported into the DNS zone.

ipv4-address-any

Not Specified

0.0.0.0

name

Zone name.

string

Maximum length: 35

primary-name

Domain name of the default DNS server for this zone.

string

Maximum length: 255

dns

rr-max

Maximum number of resource records.

integer

Minimum value: 10 Maximum value: 65536

16384

source-ip

Source IP for forwarding to DNS server.

ipv4-address

Not Specified

0.0.0.0

source-ip6

IPv6 source IP address for forwarding to DNS server.

ipv6-address

Not Specified

::

status

Enable/disable this DNS zone.

option

-

enable

Option

Description

enable

Enable setting.

disable

Disable setting.

ttl

Default time-to-live value for the entries of this DNS zone.

integer

Minimum value: 0 Maximum value: 2147483647

86400

type

Zone type (primary to manage entries directly, secondary to import entries from other zones).

option

-

primary

Option

Description

primary

Primary DNS zone, to manage entries directly.

secondary

Secondary DNS zone, to import entries from other DNS zones.

view

Zone view (public to serve public clients, shadow to serve internal clients).

option

-

shadow

Option

Description

shadow

Shadow DNS zone to serve internal clients.

public

Public DNS zone to serve public clients.

shadow-ztna

implicit DNS zone for ztna dox tunnel.

proxy

Shadow DNS zone for internal proxy.

config dns-entry

Parameter

Description

Type

Size

Default

id

DNS entry ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

status

Enable/disable resource record status.

option

-

enable

Option

Description

enable

Enable resource record status.

disable

Disable resource record status.

type

Resource record type.

option

-

A

Option

Description

A

Host type.

NS

Name server type.

CNAME

Canonical name type.

MX

Mail exchange type.

AAAA

IPv6 host type.

PTR

Pointer type.

PTR_V6

IPv6 pointer type.

ttl

Time-to-live for this entry.

integer

Minimum value: 0 Maximum value: 2147483647

0

preference

DNS entry preference.

integer

Minimum value: 0 Maximum value: 65535

10

ip

IPv4 address of the host.

ipv4-address-any

Not Specified

0.0.0.0

ipv6

IPv6 address of the host.

ipv6-address

Not Specified

::

hostname

Name of the host.

string

Maximum length: 255

canonical-name

Canonical name of the host.

string

Maximum length: 255