config global-dns-server dsset-info-list
Use this command to paste in the content of the DSSET files provided by child domain servers or stub domains.
If you enable DNSSEC, secure communication between the FortiADC DNS server and any child DNS servers is based on keys contained in delegation signer files (DSSET files). In DNSSEC deployments, DSSET files are generated automatically when the zone is signed by DNSSEC.
Note: You use the Global DNS zone configuration to generate the DSSET file for this server. The file generated by the zone configuration editor is the one you give to any parent zone or the registrar of your domain.
Before you begin:
• You must have a good understanding of DNSSEC and knowledge of the DNS deployment in your network.
• You must have used DNSSEC to sign the child domain servers and have downloaded the DSset files to a location you can reach from your management computer.
• You must have read-write permission for global load balancing settings.
Syntax
config global-dns-server dsset-info-list
edit <name>
set filename <string>
set content <string>
next
end
filename | Specify the filename. The convention is dsset-<domain>, for example, dsset-example.com. |
content | Specify (paste) the DSset file content. The content of DSset files is similar to the following: dns.example.com. IN DS 13447 5 1 A5AD9EFB6840F58CF817F3CC7C24A7ED2DD5559C |