Skip to main content
Mictronic
Explorer III
November 19, 2023
Question

FortiGate with local DHCP service is not updating local DNS Zone entries

  • November 19, 2023
  • 2 replies
  • 3654 views

Hello fellows,

 

I have the following situation:
A FortiGate 61F (FortiOS 7.2.6) with a local DHCP service for the clients in the network and also a local DNS service with a "local.tld" zone. Using the DDNS mechanism, the IP addresses assigned via DHCP should be entered with the host names of the respective computers in the DNS zone.
Unfortunately, this does not work in my case.
 
I have made the following configuration, which should be sufficient according to the documentation:
 
config system dhcp server
    edit 1
        set dns-service local
        set ntp-service local
        set domain "local.tld"
        set default-gateway 10.1.1.1
        set netmask 255.255.255.0
...
        set ddns-update enable
        set ddns-update-override enable
        set ddns-server-ip 10.1.1.1
        set ddns-zone "local.tld"
    next
end
 
Clients in this subnet are assigned addresses and DNS etc. accordingly.
 
config system dns-database
    edit "local.tld"
        set domain "local.tld"
        set ttl 21600
     next
 
In the log I find entries like:
logdesc="DHCP DDNS add query" dhcp_msg="DHCP DDNS Add" ddnsserver=10.1.1.1 ip=10.1.1.217 fqdn="kolab16.local.tld" msg="DHCP server sends a DDNS add query"
 
But I cannot find an A record in the corresponding DNS zone.
 
Where am I still missing something?
What have I done wrong?
 
Thank you!

 

2 replies

hbac
Staff
Staff
November 20, 2023

Hi @Mictronic,

 

"ddns-update-override" should be used when DNS server is different then DHCP server. Since you are using local DNS database on the FortiGate, I don't think you need to enable that option. For more details, please refer to https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configure-DDNS-update-override-in-FortiGate-DHCP/ta-p/191554

 

Regards, 

Mictronic
MictronicAuthor
Explorer III
November 21, 2023

Hello @hbac and thank you for your response. I set ddns-update-override disable but anyways that changed nothing. Only the hosts I added manually exist in the zone.

:\

Mictronic
MictronicAuthor
Explorer III
November 22, 2023

Hello fellows,

 

anyone in here who can confirm, that FortiOS 7.2.6 with local dns zone and local dhcp service can add/update hosts in dns zone by ddns on same device is working?

 

Thank you.

AlexFerenX
New Member
May 27, 2025
 

@Mictronic, were you able to find solution to make this work?

Mictronic
MictronicAuthor
Explorer III
June 20, 2025

Sorry for the late answer, no, I did not. Still not working for me @home.

Using v7.4.7 in the meantime.