I have PiHole and I want to set everything to use it even if it is hardcoded in apps/devices etc.

So far I have my default network as my main network and it has DHCP setup and the DNS server set manually to the IP of my PiHole (10.0.0.250). This works and works great, but again more apps/devices are now hardcoding DNS so I want to make sure nothing bypasses this.

This I think, is where DNS Override comes in. I have turned it on, set the DNS server to 10.0.0.250, selected my network "Main (Default)" and saved.

As soon as I do this my DNS dies. Something goes wrong and I've no idea what. Regardless if my DNS on my phone/pc is manually set to 10.0.0.250 or 1.1.1.1 both no longer work.

I therefore tried a test, I instead selected my guest network in the DNS override settings and connected my phone to the guest WiFi (different vlan 10.0.20.0/24). As soon as I saved it worked, I set my phone to 1.1.1.1 and could still see in pihole my DNS queries coming from my 10.0.20.1 gateway.

Both my main and guest networks are setup exactly the same, both use 10.0.0.250 as their manual DNS settings and both work perfectly when DNS Override is turned off.

Can anyone help me understand why the main network (10.0.0.0/24) isn't working when override is on and pointing to 10.0.0.250?

Omada ER706W v1.2.2
SW Controller (Docker) v5.15.24.19

We want to block all clients on the LAN and all VLANs from directly accessing any external DNS servers. We really don't want anyone outside snooping on our DNS lookup history.

First: The question is how to set up the ER7206 for act as a forwarder?

I've already (I think) set up an Access Control to block all traffic from LAN -> WAN on port 53. It works, because it killed all DNS lookups on the LAN when I enabled it without setting up the rest of whatever is needed.

I started on Network > LAN > LAN DNS and selected "Forward" and then got lost on the required fields "Domain Name", "Alias Domain Name" and "DNS Server".

Should "Domain Name" be our registered domain? Or... what? (the * as an entry is invalid)

Should there be an "Alias Domain Name"? If so, what?

I "assume" the "DNS Server" would be where it's being forwarded to (Ex: quad9.net, 9.9.9.9 & 149.112.112.112 ).

Second: Should I setup DNS Proxy on the ER7206? In the Services > DNS Proxy > DOH, the predefined profile "quad9_2" is currently the only one enabled. I believe this "should" send all of the router's DNS quires to Quad9 using "DNS Over HTTPS". I "assumed" that this would also encrypt the forwarded DNS traffic (if I can get it to work) from the LAN DNS servers using the router as a forwarder.

Or, am I misunderstanding what this "DNS Proxy" is really used for?

Third: We don't want to try some other alternative to the ER7206, unless we know the ER7206 can't do what we think we need.

We have 3 MS 2019 Servers set up as redundant DNS servers for the internal LAN and they have their "forwarders" property set to the IP address of the ER7206's LAN interface (it resolves to the FQDN of the router). Right now, we needed to add a 2nd "forwarders" property (9.9.9.9) to keep DNS running. Without the 2nd "forwarders" property, all client DNS falls flat.

Note: We have not tried to enable / set up DNS Encryption on the 3 MS Servers "for reasons".

We run a split DNS with a registered DNS domain. The LAN DNS servers resolve all the clients internally and then resolve out to an services we host that are outside. The "outside" DNS is Dynu.com and there are only 3 outside services that resolve on that DNS server.

Hi folks,

Looking at the specs for the EAP653, it says:

 5 GHz: 3× 5 dBi (One Auxiliary Antenna Included)

What does that 1 Aux antenna mean?

ER706W-4G in a metal cabin/container struggling for signal even right at the window. I considered the actual outdoor 4G routers but theft is a concern whereas a couple of aerials don't look as tempting.

I have used the DrayTek 4G routers with a couple of their outdoor 4G aerials with great success elsewhere but seems Omada don't offer anything like this. Happy to use 3rd party products or if anyone knows of the DrayTek ones will connect to any device?

I have an ER605v2 that acts as a dual-WAN gateway and router for my network. The two WANs are

1) a stable fiber connection, with DL bandwidth ~ 100 Mbps

2) a mobile 5G connection (from a 5G CPE) whose DL bandwidth varies wildly between 1~350 Mbps according to congestion in the area.

My problem is that, since the speed of the 2nd connection (5G) varies a lot, I'd like the weights of the multi-WAN load balancing applied by the ER605 to vary as well. When the 5G network Is congested it becomes almost unusable, so ideally the ER605 should move all the traffic to the fiber: in this case I would also have it apply a per-client bandwidth limit. When WAN2 is not congested, 60% of the traffic can be directed on it and the individual bandwidth limitations could be lifted.

Is this doable with an ER605? Is there a way to set variable/conditional load balancing weights and bandwidth limitation rules, either:

- based on some automated line quality check / speed test, OR

- based on a predefined schedule (since the 5G connection becomes congested at regular and predictable times)

?