Fortinet white logo
Fortinet white logo

CLI Reference

config system dns-database

config system dns-database

Configure DNS databases.

config system dns-database
    Description: Configure DNS databases.
    edit <name>
        set status [enable|disable]
        set domain {string}
        set allow-transfer {user}
        set type [primary|secondary]
        set view [shadow|public]
        set ip-primary {ipv4-address-any}
        set primary-name {string}
        set contact {string}
        set ttl {integer}
        set authoritative [enable|disable]
        set forwarder {user}
        set source-ip {ipv4-address}
        config dns-entry
            Description: DNS entry.
            edit <id>
                set status [enable|disable]
                set type [A|NS|...]
                set ttl {integer}
                set preference {integer}
                set ip {ipv4-address-any}
                set ipv6 {ipv6-address}
                set hostname {string}
                set canonical-name {string}
            next
        end
    next
end

config system dns-database

Parameter

Description

Type

Size

name

Zone name.

string

Maximum length: 35

status

Enable/disable this DNS zone.

option

-

Option

Description

enable

Enable setting.

disable

Disable setting.

domain

Domain name.

string

Maximum length: 255

allow-transfer

DNS zone transfer IP address list.

user

Not Specified

type

Zone type (primary to manage entries directly, secondary to import entries from other zones).

option

-

Option

Description

primary

Primary DNS zone, to manage entries directly.

secondary

Secondary DNS zone, to import entries from other DNS zones.

view

Zone view (public to serve public clients, shadow to serve internal clients).

option

-

Option

Description

shadow

Shadow DNS zone to serve internal clients.

public

Public DNS zone to serve public clients.

ip-primary

IP address of primary DNS server. Entries in this primary DNS server and imported into the DNS zone.

ipv4-address-any

Not Specified

primary-name

Domain name of the default DNS server for this zone.

string

Maximum length: 255

contact

Email address of the administrator for this zone. You can specify only the username (e.g. admin) or full email address (e.g. admin@test.com) When using a simple username, the domain of the email will be this zone.

string

Maximum length: 255

ttl

Default time-to-live value for the entries of this DNS zone.

integer

Minimum value: 0 Maximum value: 2147483647

authoritative

Enable/disable authoritative zone.

option

-

Option

Description

enable

Enable authoritative zone.

disable

Disable authoritative zone.

forwarder

DNS zone forwarder IP address list.

user

Not Specified

source-ip

Source IP for forwarding to DNS server.

ipv4-address

Not Specified

config dns-entry

Parameter

Description

Type

Size

id

DNS entry ID.

integer

Minimum value: 0 Maximum value: 4294967295

status

Enable/disable resource record status.

option

-

Option

Description

enable

Enable resource record status.

disable

Disable resource record status.

type

Resource record type.

option

-

Option

Description

A

Host type.

NS

Name server type.

CNAME

Canonical name type.

MX

Mail exchange type.

AAAA

IPv6 host type.

PTR

Pointer type.

PTR_V6

IPv6 pointer type.

ttl

Time-to-live for this entry.

integer

Minimum value: 0 Maximum value: 2147483647

preference

DNS entry preference, 0 is the highest preference

integer

Minimum value: 0 Maximum value: 65535

ip

IPv4 address of the host.

ipv4-address-any

Not Specified

ipv6

IPv6 address of the host.

ipv6-address

Not Specified

hostname

Name of the host.

string

Maximum length: 255

canonical-name

Canonical name of the host.

string

Maximum length: 255

config system dns-database

config system dns-database

Configure DNS databases.

config system dns-database
    Description: Configure DNS databases.
    edit <name>
        set status [enable|disable]
        set domain {string}
        set allow-transfer {user}
        set type [primary|secondary]
        set view [shadow|public]
        set ip-primary {ipv4-address-any}
        set primary-name {string}
        set contact {string}
        set ttl {integer}
        set authoritative [enable|disable]
        set forwarder {user}
        set source-ip {ipv4-address}
        config dns-entry
            Description: DNS entry.
            edit <id>
                set status [enable|disable]
                set type [A|NS|...]
                set ttl {integer}
                set preference {integer}
                set ip {ipv4-address-any}
                set ipv6 {ipv6-address}
                set hostname {string}
                set canonical-name {string}
            next
        end
    next
end

config system dns-database

Parameter

Description

Type

Size

name

Zone name.

string

Maximum length: 35

status

Enable/disable this DNS zone.

option

-

Option

Description

enable

Enable setting.

disable

Disable setting.

domain

Domain name.

string

Maximum length: 255

allow-transfer

DNS zone transfer IP address list.

user

Not Specified

type

Zone type (primary to manage entries directly, secondary to import entries from other zones).

option

-

Option

Description

primary

Primary DNS zone, to manage entries directly.

secondary

Secondary DNS zone, to import entries from other DNS zones.

view

Zone view (public to serve public clients, shadow to serve internal clients).

option

-

Option

Description

shadow

Shadow DNS zone to serve internal clients.

public

Public DNS zone to serve public clients.

ip-primary

IP address of primary DNS server. Entries in this primary DNS server and imported into the DNS zone.

ipv4-address-any

Not Specified

primary-name

Domain name of the default DNS server for this zone.

string

Maximum length: 255

contact

Email address of the administrator for this zone. You can specify only the username (e.g. admin) or full email address (e.g. admin@test.com) When using a simple username, the domain of the email will be this zone.

string

Maximum length: 255

ttl

Default time-to-live value for the entries of this DNS zone.

integer

Minimum value: 0 Maximum value: 2147483647

authoritative

Enable/disable authoritative zone.

option

-

Option

Description

enable

Enable authoritative zone.

disable

Disable authoritative zone.

forwarder

DNS zone forwarder IP address list.

user

Not Specified

source-ip

Source IP for forwarding to DNS server.

ipv4-address

Not Specified

config dns-entry

Parameter

Description

Type

Size

id

DNS entry ID.

integer

Minimum value: 0 Maximum value: 4294967295

status

Enable/disable resource record status.

option

-

Option

Description

enable

Enable resource record status.

disable

Disable resource record status.

type

Resource record type.

option

-

Option

Description

A

Host type.

NS

Name server type.

CNAME

Canonical name type.

MX

Mail exchange type.

AAAA

IPv6 host type.

PTR

Pointer type.

PTR_V6

IPv6 pointer type.

ttl

Time-to-live for this entry.

integer

Minimum value: 0 Maximum value: 2147483647

preference

DNS entry preference, 0 is the highest preference

integer

Minimum value: 0 Maximum value: 65535

ip

IPv4 address of the host.

ipv4-address-any

Not Specified

ipv6

IPv6 address of the host.

ipv6-address

Not Specified

hostname

Name of the host.

string

Maximum length: 255

canonical-name

Canonical name of the host.

string

Maximum length: 255