I usually find answers after hours of searching (my first computer was a Commodore 64, worked in IT, and used/troubleshooted computers ever since. Been hours searching Mikrtotik manuals, FAQ's, using Brave AI, etc... no luck.
Configuring a hAP ax2 as a router (using the latest update as of today), there's a lot of things I need to configure but let start with DNS.
I need to change the current default DNS servers from Verizon to my my NextDNS IP's.
Under IP/DNS there's a "servers" with a "+" ready to add,
Then there's "dynamic servers" which I cannot change and are the Verizon DNS servers,
Then there's a "Use DOH Server". NextDNS are DOH servers.
Questions:
How to disable Verizons "dynamic servers"?
Where to input NextDNS IP servers (under "servers", "Use DOH servers", or?
To do this you disable the "Use Peer DNS" option in the DHCP client or PPPoE client settings (depending on which method you are using with your ISP).
If you only need to use plain DNS, then put the NextDNS IP addresses under Servers.
If you want to use DNS-over-HTTPS, then first, add static A and AAAA records for dns.nextdns.io under /ip dns static, then configure the DoH URL in "Use DoH Server", something like https://dns.nextdns.io/yourID.
Note: In older guides like this one: NextDNS in Mikrotik - Discussions - NextDNS Help Center there is a step where you have to import CA certificates. This is no longer needed with recent RouterOS versions, as the root CA certificate used by dns.nextdns.io (Sectigo Public Server Authentication Root E46) is already included in RouterOS.
See?
All wasted time.
You just came here to the forum, asked living people for help, saved the entire planet's electricity,
and you'd already solved the problem (hopefully...).
Your something[1] will decline dramatically over time.
The more you rely on AI, the less the world will be on your side.
For example, deductive reasoning. If, for example, DNS addresses come from a DHCP client or a PPPoE client, where do you think someone would look for something that determines whether or not they're acquired? ↩︎
@rextended
To be picky (as I am BTW), if we use "deductive reasoning" we might be able to find where to look for something, but then, if that something is called "use-peer-dns" it should mean that it is named with some logic.
I am failing to understand what "peer" has to do with this.
dns-as-provided-by-dhcp-server would be too long, but I think that it could be better named than "peer".
But a beginner, by definition, shouldn't change what their ISP provides as DNS,
so it's assumed that if someone wants to change them, they're not such a beginner after all...
Or not?
