JAEN

FortiGate

config system dns

CautionSystem DNS settings

show system dns

Gets/sets the box's own DNS — FortiGuard, web filtering and FQDN objects all depend on it.

Examples

  • config system dns set primary 192.168.1.1 endChange the primary DNS
  • show system dnsShow the current DNS settings
  • config system dns set primary 192.168.1.10 set secondary 192.168.1.11 endUse internal DNS servers
  • execute ping update.fortiguard.netTest name resolution and outbound reachability together

Syntax

show system dns / config system dns → set primary <ip>

Key points

  • The default is FortiGuard DNS (96.45.45.45 / 96.45.46.46). Pointing it at internal DNS lets it resolve internal names and FQDN objects.
  • FQDN address objects resolve through this DNS. If it fails, policies using them stop matching.
  • This is separate from the DNS server feature for clients (config system dns-server).

When it does not work

  • If FortiGuard is unreachable or licences fail to update, first check name resolution with execute ping.

Before you run it

Bad DNS breaks FQDN-based policies too.

Related commands

You can carry a laptop to the rack. Signal will not follow.

Check syntax standing in front of the hardware, with no connection at all. The app keeps 1,510 commands and 120 fix flows on your device. Free to install, no ads (some content is a one-time purchase).

Get it free on the App Store