Unable to change source IP for "Local Out Routing\system DNS"

Forum|Forum|2 years ago
January 8, 2024
3 replies
2847 views

Hi, I am new to using Fortigate and looking to update the source IP for local out routing\system DNS but the manual option is greyed out. It is on latest firmware. We have few more exact model firewalls but no issues.

,

FortiGate

Best answer by smaruvala

Hi,

- We can not change this from GUI if you are using "Outgoing Interface" as "Auto". However we can change this from CLI as mentioned by @rtanagras .

- Please note that IP you are providing must be configured in the interface of the firewall. Else it will throw an error like below.

#set source-ip 192.168.1.
192.168.1.1 does not match any interface ip in vdom root.
node_check_object fail! for source-ip 192.168.1.1

value parse error before '192.168.1.1'
Command fail. Return code -8

Regards,

Shiva

rtanagras

Staff & Editor

What is the FortiOS version of the other model? Maybe they disabled that on the new release? Is it the same if you're going to click the Specify (then select the interface on the dropdown list) and click Manually? If you can't set the source IP from the GUI, you can still do it on the CLI by using the set source-ip command.

Example:
config sys dns
set source-ip 192.168.1.1
end

smaruvalaAnswer

Staff

Hi,

- We can not change this from GUI if you are using "Outgoing Interface" as "Auto". However we can change this from CLI as mentioned by @rtanagras .

- Please note that IP you are providing must be configured in the interface of the firewall. Else it will throw an error like below.

#set source-ip 192.168.1.
192.168.1.1 does not match any interface ip in vdom root.
node_check_object fail! for source-ip 192.168.1.1

value parse error before '192.168.1.1'
Command fail. Return code -8

Regards,

Shiva

-j-Author

Visitor III

Thanks guys! I have updated it via CLI and that worked.

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded