Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
-j-
New Contributor

Unable to change source IP for "Local Out Routing\system DNS"

Hi, I am new to using Fortigate and looking to update the source IP for local out routing\system DNS but the manual option is greyed out. It is on latest firmware. We have few more exact model firewalls but no issues.

 

, fortigatelocalout.png

2 Solutions
rtanagras
Staff
Staff

What is the FortiOS version of the other model? Maybe they disabled that on the new release? Is it the same if you're going to click the Specify (then select the interface on the dropdown list) and click Manually? If you can't set the source IP from the GUI, you can still do it on the CLI by using the set source-ip command.


Example:
config sys dns
set source-ip 192.168.1.1
end

Best,
Ricky

View solution in original post

smaruvala
Staff
Staff

Hi,

 

- We can not change this from GUI if you are using "Outgoing Interface" as "Auto". However we can change this from CLI as mentioned by @rtanagras .

- Please note that IP you are providing must be configured in the interface of the firewall. Else it will throw an error like below.

#set source-ip 192.168.1.
192.168.1.1 does not match any interface ip in vdom root.
node_check_object fail! for source-ip 192.168.1.1

value parse error before '192.168.1.1'
Command fail. Return code -8

 

Regards,

Shiva

View solution in original post

3 REPLIES 3
rtanagras
Staff
Staff

What is the FortiOS version of the other model? Maybe they disabled that on the new release? Is it the same if you're going to click the Specify (then select the interface on the dropdown list) and click Manually? If you can't set the source IP from the GUI, you can still do it on the CLI by using the set source-ip command.


Example:
config sys dns
set source-ip 192.168.1.1
end

Best,
Ricky
smaruvala
Staff
Staff

Hi,

 

- We can not change this from GUI if you are using "Outgoing Interface" as "Auto". However we can change this from CLI as mentioned by @rtanagras .

- Please note that IP you are providing must be configured in the interface of the firewall. Else it will throw an error like below.

#set source-ip 192.168.1.
192.168.1.1 does not match any interface ip in vdom root.
node_check_object fail! for source-ip 192.168.1.1

value parse error before '192.168.1.1'
Command fail. Return code -8

 

Regards,

Shiva

-j-
New Contributor

Thanks guys! I have updated it via CLI and that worked.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors