Configuring The Fortigate Dns Database - Fortinet FortiGate Series Administration Manual

Configuring FortiGate DNS services

Configuring the FortiGate DNS database

208
5 Configure the hosts on the internal network to use the FortiGate interface as their DNS
server.
If you are also using a FortiGate DHCP server to configure the hosts on this network,
add the IP address of the FortiGate interface to the DNS Sever IP address list.
To configure a split DNS configuration
Configure an interface to resolve DNS requests using the FortiGate DNS database and
relay DNS requests for host names not in the FortiGate DNS database to the DNS servers
configured under System > Network > Options. This is called a split DNS configuration.
See "About split DNS" on page
1 Go to System > Network > Options and add the IP addresses of a Primary and
Secondary DNS server.
These should be the DNS servers provided by your ISP or other public DNS servers.
The FortiGate unit uses these DNS servers for its own DNS lookups and can be used
to supply DNS look ups for your internal networks. See
Options" on page 204.
2 Go to System > Network > Interface and edit the interface connected to a network that
you want the FortiGate unit to be a DNS server for.
3 Select Enable DNS Query and select Recursive.
The interface is configured to look up domain names in the FortiGate DNS database.
and relay the requests for names not in the FortiGate DNS database to the DNS
servers configured under System > Network > Options. You can add entries to the
FortiGate DNS database for users on the internal network.
4 Go to System > Network > DNS Database and configure the FortiGate DNS database.
Add zones and entries as required for users on the internal network. See
the FortiGate DNS database" on page
5 Configure the hosts on the internal network to use the FortiGate interface as their DNS
server.
If you are also using a FortiGate DHCP server to configure the hosts on this network,
add the IP address of the FortiGate interface to the DNS Sever IP address list.
Configure the FortiGate DNS database so that DNS lookups from an internal network are
resolved by the FortiGate DNS database. To configure the DNS database you add zones.
Each zone has its own domain name.
You then add entries to each zone. An entry is an host name and the IP address it
resolves to. You can also specify if the entry is an IPv4 address (A), an IPv6 address
(AAAA), a name server (NS), a canonical name (CNAME), or a mail exchange (MX)
name.
Go to System > Network > DNS Database to configure the FortiGate DNS database.
206.
208.
FortiGate Version 4.0 MR1 Administration Guide
System Network
"Configuring Networking
"Configuring
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback