Local DNS resolution for FQDN address objects in multiple VDOM
Hi!
This question’s context is only resolution of address objects of ‘type’ is “FQDN” referenced within firewall policies, NOT by end-users.
Global:
FGT (global) # show system dns
config system dns
set primary 1.1.1.1
set secondary 8.8.8.8
set domain "x.net"
end
VDOM1:
FGT (vdom1) # show system dns-database
config system dns-database
edit "x.net"
set domain "x.net"
set type secondary
set authoritative disable
set forwarder "10.1.1.2" "10.2.1.2"
set ip-primary 10.1.1.2
next
end
My question: if I want to Local DNS resolution (with “x.net” suffix) to preempt public DNS resolution in another VDOM, do I need to clone above “show system dns-database” into that VDOM also, or, is it sufficient to have just one, ie. in vdom1?
Thanks!