Unable to change source IP for "Local Out Routing\system DNS"

[-j-]

Hi, I am new to using Fortigate and looking to update the source IP for local out routing\system DNS but the manual option is greyed out. It is on latest firmware. We have few more exact model firewalls but no issues.

,

[rtanagras · Accepted solution]

What is the FortiOS version of the other model? Maybe they disabled that on the new release? Is it the same if you're going to click the Specify (then select the interface on the dropdown list) and click Manually? If you can't set the source IP from the GUI, you can still do it on the CLI by using the set source-ip command.

Example:
config sys dns
set source-ip 192.168.1.1
end

[rtanagras · Accepted solution]

What is the FortiOS version of the other model? Maybe they disabled that on the new release? Is it the same if you're going to click the Specify (then select the interface on the dropdown list) and click Manually? If you can't set the source IP from the GUI, you can still do it on the CLI by using the set source-ip command.

Example:
config sys dns
set source-ip 192.168.1.1
end

[smaruvala · Accepted solution]

Hi,

- We can not change this from GUI if you are using "Outgoing Interface" as "Auto". However we can change this from CLI as mentioned by @rtanagras .

- Please note that IP you are providing must be configured in the interface of the firewall. Else it will throw an error like below.

#set source-ip 192.168.1.
192.168.1.1 does not match any interface ip in vdom root.
node_check_object fail! for source-ip 192.168.1.1

value parse error before '192.168.1.1'
Command fail. Return code -8

Regards,

Shiva

[-j-]

Thanks guys! I have updated it via CLI and that worked.