config system dns
Use this command to configure the IP addresses of the primary and secondary DNS servers that FortiAI queries to resolve domain names into IP addresses.
Syntax
config system dns
set cache {enable | disable}
set cache-min-ttl <time_in_sec>
set primary <dns_ipv4>
set private_ip_query {enable | disable}
set protected-domain-dns-servers <class_ip>
set protected-domain-dns-state {enable | disable}
set secondary <dns_ipv4>
set truncate-handling {disable | tcp-retry}
end
|
Variable |
Description |
Default |
|---|---|---|
|
|
Enable to cache DNS query results to improve performance. If memory is low, disable to free up more memory. |
|
|
|
Minimum TTL for cached DNS records in seconds. |
|
|
|
IP address of the primary DNS server. |
|
|
|
Enable to perform reverse DNS lookups on private network IP addresses, as defined in RFC 1918. The DNS server must have PTR records for your private network’s IP addresses. Not having records for those IP addresses might increase DNS query time and cause query results to show Host not found. |
|
|
|
IP addresses of DNS servers for protected domains. |
|
|
|
Enable or disable using DNS servers for protected domains. |
|
|
|
IP address of the secondary DNS serve. |
|
|
|
Action for truncated UDP. |
|