Disabling o removing DNS Dynamic Servers

Hi Friends,
I’m using a Mikrotik SXT LTE kit (product code RBSXTR&R11e-LTE).
I’ve added DNS primary and secondary both by OpenDns, now I would like to remove the provider Dynamic Server.
Could you suggest the right way?
I’ve search on the documentation with no luck :confused:

Many thanks!


Davide

/ip dhcp-client set use-peer-dns=no

(client is 0)

Hi erlinden and thanks for your reply!
I’ve try:

  1. /ip dhcp-client set use-peer-dns=no
  2. numbers: 0
    Script Error: action cancelled

“0” to the question “numbers” was that what you wanted to say?


Thanks again!

Davide

try this

Well, this second command did not give me errors, but how can I check if Dynamic Server has been removed?
Looking into webfig → IP → DNS It is still present:

Dynamic Servers 83.158.240.241

:confused:

Thanks Again!

Davide

Can you show /ip dns print?

WebFig might have an caching thingie…

/ip dns print  

                      servers: 218.67.222.222,208.67.220.220

              dynamic-servers: 83.158.240.241

        allow-remote-requests: yes

          max-udp-packet-size: 4096

         query-server-timeout: 2s

          query-total-timeout: 10s

       max-concurrent-queries: 100

  max-concurrent-tcp-sessions: 20

                   cache-size: 2048KiB

                cache-max-ttl: 1w

                   cache-used: 79KiB

Thanks again!

Davide

I can’t also not shed those and made a feature request for that.

http://forum.mikrotik.com/t/feature-requests/41609/1106

That’s strange, especially as this seems to be a (your?) public IP address…
Your provider uses ns0.proxad.net and ns1.proxad.net (212.27.32.2 and 212.27.32.130).

Can you post a /export hide-sensitive please?
What version are you running?

/export hide-sensitive 

# jul/31/2019 13:59:43 by RouterOS 6.42.10

# software id = J73U-WMIG

#

# model = RBSXTR

# serial number = A1870A9D55E4

/interface lte

set [ find ] mac-address=AC:FF:FF:00:00:00 mtu=1500 name=lte1 network-mode=3g,lte

/interface bridge

add admin-mac=74:4D:28:23:BD:7F auto-mac=no comment=defconf name=bridge

/interface list

add comment=defconf name=WAN

add comment=defconf name=LAN

/interface lte apn

set [ find default=yes ] apn=iliad

/interface wireless security-profiles

set [ find default=yes ] supplicant-identity=MikroTik

/ip hotspot profile

set [ find default=yes ] html-directory=flash/hotspot

/ip pool

add name=dhcp ranges=192.168.88.10-192.168.88.254

/ip dhcp-server

add address-pool=dhcp disabled=no interface=bridge name=defconf

/interface bridge port

add bridge=bridge comment=defconf interface=ether1

add bridge=bridge comment=defconf interface=ether2

/interface list member

add comment=defconf interface=bridge list=LAN

add comment=defconf interface=lte1 list=WAN

/ip address

add address=192.168.88.1/24 comment=defconf interface=ether1 network=192.168.88.0

/ip dhcp-server network

add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1

/ip dns

set allow-remote-requests=yes servers=218.67.222.222,208.67.220.220

/ip dns static

add address=192.168.88.1 name=router.lan

/ip firewall filter

add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec

add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec

add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related

add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked

add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid

add action=drop chain=forward comment="defconf:  drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN

add action=accept chain=input protocol=icmp

add action=accept chain=input connection-state=established

add action=accept chain=input connection-state=related

add action=drop chain=input in-interface-list=!LAN

/ip firewall nat

add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN

/ip service

set ssh port=*****

/system clock

set time-zone-name=Europe/Paris

/system routerboard settings

set silent-boot=no

/tool mac-server

set allowed-interface-list=LAN

/tool mac-server mac-winbox

set allowed-interface-list=LAN

Version v6.42.10 (long-term)


Thanks again!

Davide

Try version 6.44.5 long term

..excuse me for the silly question, but how I could upgrade to 6.44.5 long term? Could you give me a documentation link page?
And eventually do I run the risk of turning my SXT LTE kit into a paperweight?..

Thanks again!


Davide

I am on a Beta and that one also does not allow to remove the dynamic servers.

There is a WiKi page on how to upgrade a RB:
https://wiki.mikrotik.com/wiki/Manual:Upgrading_RouterOS

I know that 6.45.2 (current stable) works flawless…not sure why the beta isn’t.

Upgrading is not without risks. Make sure you have a backup before performing the upgrade.

Well, thanks!
Could you suggest the right way for a backup and eventually the right way for revert to the saved backup?

Thanks again!

Davide

From Mikrotik Support:

Disable dhcp-clients “user-peer-dns” function:


/ip dhcp-client set 0 use-peer-dns=no



Thanks

Davide

(again) from MIkrotik Support:

/interface lte apn set use-peer-dns=no

and then digit:

0

This one works fine!


/ip dns print 

                      servers: 218.67.222.222,208.67.220.220

              dynamic-servers: 

        allow-remote-requests: yes

          max-udp-packet-size: 4096

         query-server-timeout: 2s

          query-total-timeout: 10s

       max-concurrent-queries: 100

  max-concurrent-tcp-sessions: 20

                   cache-size: 2048KiB

                cache-max-ttl: 1w

                   cache-used: 35KiB

Thanks

Davide

RouterOS 7.9.1 (stable)

I followed danjde’s final two posts however that didn’t remove the Dynamic DNS servers, although neither they nor ‘Use Peer DNS’ were listed when I ran

/export hide-sensitive



/interface lte apn
set [ find default=yes ] use-peer-dns=no

/ip dhcp-client
add interface=*8 use-peer-dns=no

In WebFig Interfaces menu - LTE tab - LTE APNs button - click on the APN in the list - I unchecked ‘Use Peer DNS’ which was still checked, and that fixed it. Maybe this alone would have solved the problem.