WAN vs LAN DNS use with a VPN kicker.

[128bit]

i could use some help confirming what i've learned from an ai app.
my ax-88u pro setup:

• some clients have manually assigned (static) ip's
• lan dns fields are blank (per ai recommendation)
• wan dns is assigned to quad9.

this setup allows me to ping my lan clients by hostname. when i look at a specific lan client's stack, the router is listed as the gateway and the dns server.

since everything seems to work, can i assume that when a client sends a dns request to the router, the router forwards that request to the dns (quad9) defined in the wan fields and not my isp?

now where it gets funky is with my openvpn iot clients. i use nord and some iot cleints are directed through the vpn. not sure, but my guess is that they use nord's dns and there's no way to redirect them to quad9. mind you, using nord's dns is ok, i just want to understand how it works.

 

[ColinTaylor]

The VPN client's Settings page has its own DNS option.

 

[bennor]

now where it gets funky is with my openvpn iot clients. i use nord and some iot cleints are directed through the vpn. not sure, but my guess is that they use nord's dns and there's no way to redirect them to quad9. mind you, using nord's dns is ok, i just want to understand how it works.

Note your Router's GUI VPN > OpenVPN > Network Settings > Accept DNS Configuration setting. That may determine which DNS servers (yours or the VPN service host's) are used and in which order. You can see an explanation of the Accept DNS Configuration option by clicking on it's text. Example of the text's tool tip:

 

[128bit]

Note your Router's GUI VPN > OpenVPN > Network Settings > Accept DNS Configuration setting. That may determine which DNS servers (yours or the VPN service host's) are used and in which order. You can see an explanation of the Accept DNS Configuration option by clicking on it's text. Example of the text's tool tip:

interesting! if i'm understanding the description, in my use case, disabled equates to not using the nord dns server and likely using quad9. where as, relaxed allows for all of them, likely including my isp but in some ordered fashion. fwiw, the ai recommended "relaxed." prior to that i had strict. i'm good now.

commentary: folks, i'm truly humbled by the knowledge on snb. i started goofing around with routers post retirement just to keep the wheels turning. graduated from linksys to asus and am truly amazed with how gracious u folks are on this board! mind you, i had formal tcp/ip training and was a software engineer for what was once a fortune 1, company. with the exception of a rude encounter or 2 with an "insect" variety, this forum has been exceptional. i have to thank all of u for the global support u provide to all of us.