Hi all

On my Draytek Vigor 2927 LAN1 I have the DNS set to 1.0.0.1 and 1.1.1.1 - I then have "Force router to use "DNS server IP" settings specified in: LAN1" so the router effectively uses 1.0.0.1 and 1.1.1.1 rather than my ISP DNS.

The problem is I  have my network VLAN'ed.  So LAN 2 clients pick up an IP of 10.7.32.x and a local DNS IP of 10.7.0.150 - this is a virtual IP that points to two Pi's running Keepalived HA

But when I look at clients DNS IPs it reads

Primary DNS: 10.7.0.150
Secondary DNS: 1.0.0.1

Is there a way to solve this?  Or is it a case of setting both DNS's on VLAN Subnet LAN2 to 10.7.0.150?

Screenshots below

I’ve a similar multiple VLAN setup and the VLAN2 has nothing in the DNS server IP address box.

However that’s without a local DNS server.

If LAN2 clients should use local DNS then the same settings in both boxes sounds likely.

Hi

Out of interest, what DNS server IP's are you pulling?  Are they defaulting to your ISP DNS?

I use OpenDNS.

I like it for both logging and blocking.

It also seems extremely reliable.

Jonathan wrote:

Hi all

On my Draytek Vigor 2927 LAN1 I have the DNS set to 1.0.0.1 and 1.1.1.1 - I then have "Force router to use "DNS server IP" settings specified in: LAN1" so the router effectively uses 1.0.0.1 and 1.1.1.1 rather than my ISP DNS.

The problem is I  have my network VLAN'ed.  So LAN 2 clients pick up an IP of 10.7.32.x and a local DNS IP of 10.7.0.150 - this is a virtual IP that points to two Pi's running Keepalived HA

But when I look at clients DNS IPs it reads

Primary DNS: 10.7.0.150
Secondary DNS: 1.0.0.1

Is there a way to solve this?  Or is it a case of setting both DNS's on VLAN Subnet LAN2 to 10.7.0.150?

Screenshots below

 

Why don´t you set Cloudflare/ OpenDNS  at WAN and Pi-Hole as Primary & Secondary for LAN (check Subnet Mask)?
Anyone encountered the problem that IPv6 DNS-Servers are propagated to DHCP-Clients (even if only IPv4 is used)?  

Armin wrote:

Why don´t you set Cloudflare/ OpenDNS  at WAN and Pi-Hole as Primary & Secondary for LAN (check Subnet Mask)?

 

Hi Armin,

I don't think you can actually set the DNS at WAN level on the 2927 unless I'm doing it wrong?  Hence why I force the router to use Cloudflare on LAN1 and tick "Force router to use "DNS server IP address" settings specified in LAN1" then the WAN side uses the DNS specified in LAN1.

https://ibb.co/F4zgGh3s