What's new

Device names not showing in NextDNS dashboard with ASUS Merlin + CLI (setup-router=false)

mkaand

Occasional Visitor
Hello,

I’m running NextDNS CLI on an ASUS RT-AX86U (Merlin firmware) and trying to achieve proper device name visibility in the NextDNS dashboard without breaking my current DNS architecture.

Goal:

See all LAN devices under a single profile
With real device names (hostnames)
Instead of IPs or generic Device #xxxx
Current architecture:

Clients → dnsmasq (router) → NextDNS CLI (127.0.0.1:5555) → NextDNS (DoH)

dnsmasq is actively used (local overrides, ad-blocking, etc.)
upstream configuration:
server=127.0.0.1#5555
no-resolv
add-mac
add-subnet=32,128
NextDNS CLI config:

setup-router false

listen 127.0.0.1:5555

report-client-info true

use-hosts true

profile

Observed behavior:

DNS resolution works correctly
Client IPs are correctly visible in query logs
However, in the dashboard devices appear as Device #xxxx
Important finding:

When setup-router=true is enabled, device names are correctly detected.

However, this mode:

modifies router DNS behavior
interferes with my existing dnsmasq-based setup (especially local overrides / Diversion)
So I must keep setup-router=false.

Expectation:

In setup-router=false mode, I would expect at least one of the following:

dnsmasq hostnames being forwarded to NextDNS
DHCP lease / hosts-based names reflected in dashboard
or a documented/recommended way to achieve this behavior
Additional notes:

CLI -config = mapping was tested → no consistent result
MAC-based profile mapping works, but not suitable for my use case (I want a single profile)
Conclusion:

Without router mode, I cannot get device names in the dashboard.
With CLI in setup-router=false, names are not shown.

What is the recommended architecture for this use case?

Thanks in advance 🙏
 
Are you using AdGuard alongside NextDNS filtering? 🤔
No, I’m not using AdGuard.

I’m using dnsmasq (and Diversion on Merlin) for local overrides and some domain-level blocking (e.g. redirecting specific domains to 127.0.0.1).

NextDNS is used purely as upstream DNS (DoH) + filtering/logging layer.

So the setup is:

dnsmasq (local control & overrides) → NextDNS (cloud filtering)

The issue is not related to double filtering, but rather that in this architecture device hostnames are not reflected in the NextDNS dashboard when setup-router=false.
 
Try the following flag: nextdns config set -discovery-dns 192.168.1.1 -report-client-info true

Use the IP of your router. I "think" it instructs the daemon to check back with your router for hostnames before making a DoH request to the service. As it stands, it seems that diversion is taking those requests, and if not already blocked, forwarding them to NextDNS without the host names. This "should" put your router back in the loop.. see if that helps.

If Diversion blocks a query locally, it will never get forwarded to NextDNS. In effect, you will have 2 places to look for a full picture. Harder for troubleshooting?

There are more experienced folks with regard to diversion. I don't use it.

Update: searching on your behalf I found someone with similar issues had resolved it with the following flag:
nextdns config set -mdns=disabled

NextDNS KB Article
 
Last edited:
NextDNS CLI is evil insofar as it inserts an exit 0 into the dnsmasq.postconf, preventing any non-NextDNS lines from executing.
 

Similar threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Back
Top