Configuring DNS

Chapter 8: System Management > Configuring DNS

The system must be able to contact DNS servers to resolve IP addresses and fully qualified domain names.

Before you begin:

You must know the IP addresses of the DNS servers used in your network.
Your Internet service provider (ISP) might supply IP addresses of DNS servers, or you might want to use the IP addresses of your own DNS servers. You must provide unicast, non-local addresses for your DNS servers. Local host and broadcast addresses are not accepted.
Incorrect DNS settings or unreliable DNS connectivity can cause issues with other features, such as FortiGuard services and NTP system time.
You must have Read-Write permission for System settings.

Figure 135: DNS configuration page

Table 76: DNS configuration guidelines
Settings	Guidelines
Primary DNS Server	IPv4 address of the primary DNS server. For best performance, use a DNS server on your local network.
Secondary DNS Server	IPv4 address of the secondary DNS server for your local network.

CLI commands:

config system dns

set primary <ip address>

set secondary <ip address>

end

execute traceroute <server_fqdn>

where <server_fqdn> is a domain name such as www.example.com.