Redirecting your DNS traffic to Secure DNS Client Node hosts

To redirect DNS traffic through the Secure DNS Client Node hosts (positioned between your endpoints and DNS servers), reconfigure the local stub resolvers.

If you use DHCP, reconfigure the DHCP server's option 6 (DNS Server) to specify the IP addresses of your Secure DNS Client Node hosts.

If you do not use DHCP, reconfigure the stub resolvers on each local computer and server of your organization.

Instructions for the most common DHCP servers are provided below.

Cisco ISR

To reconfigure the Cisco ISR DHCP server:

1. In configuration mode, navigate to the ip dhcp pool settings and run the following commands:

   Router(config)#ip dhcp pool <pool name>
   Router(config-pool)#dns-server <Secure DNS Client Node IP address 1> [<Secure DNS Client Node IP address 2> <Secure DNS Client Node IP address 3>]

2. On Windows:

   1. Press Windows + R to open the Run window.

   2. In the Open field, type cmd and press Enter.

      The command prompt window is now opened.

   3. Run the following commands:

      ipconfig /release
      ipconfig /renew

3. On Linux, run the following commands in the terminal:

   sudo systemctl restart network.service
   sudo systemctl status network.service

ISC DHCP

To reconfigure the ISC DHCP server:

1. In the /etc/dhcp/dhcpd.conf file, edit the option domain-name-servers parameter:

   option domain-name-servers <Secure DNS Client Node IP address 1> [<Secure DNS Client Node IP address 2> <Secure DNS Client Node IP address 3>];

2. To restart the service, run:

   sudo systemctl restart dhcpd.service

3. On Windows:

   1. Press Windows + R to open the Run window.

   2. In the Open field, type cmd and press Enter.

      The command prompt window is now opened.

   3. Run the following commands:

      ipconfig /release
      ipconfig /renew

4. On Linux, run the following commands in the terminal:

   sudo systemctl restart network.service
   sudo systemctl status network.service

MikroTik RouterOS

Before reconfiguring the DHCP server on MikroTik RouterOS, perform the following steps:

1. Create a bridge interface named bridge1-lan.

2. Add physical ports ether2-5 and wlan1 to the bridge1-lan interface.

3. Define the IP network 192.168.100.0/24 for the local area network connected to the bridge1-lan interface.

4. Assign the IP address 192.168.100.1 to the bridge1-lan interface.

To reconfigure the DHCP server on MikroTik RouterOS, perform the following steps in the WinBox terminal:

1. To create a network, run:

   ip dhcp-server network add address=192.168.100.0/24 dns-none=no dns-server=<Secure DNS Client Node IP address 1>[,<Secure DNS Client Node IP address 2>] gateway=192.168.100.1 netmask=24

2. To create an IP address pool, run:

   ip pool add name=dhcp-secdns-pool ranges=192.168.100.2-192.168.100.254

3. To create a DHCP server and bind it to the bridge1-lan interface, run:

   ip pool add name=dhcp-secdns-pool ranges=192.168.100.2-192.168.100.254

4. On Windows:

   1. Press Windows + R to open the Run window.

   2. In the Open field, type cmd and press Enter.

      The command prompt window is now opened.

   3. Run the following commands:

      ipconfig /release
      ipconfig /renew

5. On Linux, run the following commands in the terminal:

   sudo systemctl restart network.service
   sudo systemctl status network.service