Skip to main content
AlexFerenX
New Member
April 27, 2026
Question

Local DNS resolution for FQDN address objects in multiple VDOM

  • April 27, 2026
  • 4 replies
  • 60 views

Hi!

This question’s context is only resolution of address objects of ‘type’ is “FQDN” referenced within firewall policies, NOT by end-users.

 

Global:

FGT (global) # show system dns
config system dns
    set primary 1.1.1.1
    set secondary 8.8.8.8
    set domain "x.net"
end

 

VDOM1:

FGT (vdom1) # show system dns-database 
config system dns-database
    edit "x.net"
        set domain "x.net"
        set type secondary
        set authoritative disable
        set forwarder "10.1.1.2" "10.2.1.2" 
        set ip-primary 10.1.1.2
    next
end

 

My question: if I want to Local DNS resolution (with “x.net” suffix) to preempt public DNS resolution in another VDOM, do I need to clone above “show system dns-database” into that VDOM also, or, is it sufficient to have just one, ie. in vdom1?

Thanks!

4 replies

AlexFerenX
New Member
April 27, 2026

Clarifying the question:
My question: if I want to do same in another VDOM,  do I need to clone above “show system dns-database” into that VDOM also, or, is it sufficient to have just one, ie. in vdom1?

funkylicious
SuperUser
SuperUser
April 27, 2026

dns-database is per-vdom if im not mistaken, so you would need to do it in every vdom.

"jack of all trades, master of none"
rosatechnocrat
Explorer III
April 27, 2026

yes.. As its a per VDOM database. 

Subscribe "ROSA Technocrat" on Youtube for Fortinet Videos and Troubleshooting https://www.youtube.com/@rosatechnocrat
AlexFerenX
New Member
April 27, 2026

I know “system dns-database” is per VDOM, but if I do not have it provisioned in the VDOM, could “system dns” table’s “domain” field cause DNS query fall-back to “system dns-database” in ANY VDOM specifically for matched for DNS suffix matched by “domain”?

rosatechnocrat
Explorer III
April 27, 2026

No .. but yes root / mgmt vdom can use . as system DNS is same as Mgmt VDOM. 

May be if you can share a screenshot will help to understand your requirement or the issue you are facing.. 

Subscribe "ROSA Technocrat" on Youtube for Fortinet Videos and Troubleshooting https://www.youtube.com/@rosatechnocrat