Warda-DNSDocs Warda: from ward — to protect, guardian
v0.8.6
Menu

14. Your router, brand by brand

In short

Set Warda in the router the devices connect to, not in the box behind it. Some routers answer the devices themselves (Netgear, Orbi, Google Nest Wifi, eero, AmpliFi): the network is protected, but Warda sees one device. IPv6: the router must announce Warda, or no DNS at all.

This chapter takes the routers bought for the home, mesh systems included, brand by brand. The menus are those of the documentation of each maker, in English as the interfaces name them; they change with the model and the version of the software. Where no page of the maker could be found, the entry says so.

The method, for every router#

Where to set Warda. In the router the devices connect to. When your router sits behind the box of your provider (two routers one behind the other, "double NAT"), Warda works this way: set it in your router, not in the box. The settings are those of chapter 13 (the address of Warda, the three settings, the check), done in the router.

IPv6 behind a box. A router that relays the IPv6 of the box passes its announcements on, its IPv6 DNS with them. Then set the IPv6 DNS in the box too (chapter 13), or the devices keep the one of the box.

A router that answers the devices itself. Some routers give themselves as DNS server to the devices, and their DNS setting only chooses the server they ask (Netgear, Netgear Orbi, Google Nest Wifi, eero, AmpliFi). Put Warda there: the network is protected, but Warda sees every device as the router, and the settings of each person do not apply. To see each device, let Warda give the addresses (chapter 3, The DHCP server of Warda) if the router lets you turn its DHCP server off; some only allow it in bridge or access point mode.

Deco (mesh)#

  • DNS (IPv4): Deco app → More → Advanced → DHCP Server: the address of Warda as primary DNS, the secondary empty, then Save.
  • IPv6: look in the IPv6 settings for the DNS server announced: put the IPv6 address of Warda, or turn off only that announcement (chapter 13, setting 2).

Not verified: written from the documentation of the maker; tell us if your screens differ.

  • DNS (IPv4): Advanced → Network → DHCP Server: the address of Warda as Primary DNS, then save (most models).
  • IPv6: the IPv6 settings of the local network (IPv6 LAN on some models) say how the router announces itself; look there for the DNS announced (chapter 13, setting 2). The DNS fields of IPv6 WAN are the servers the router asks, not those it gives.

Not verified: written from the documentation of the maker; tell us if your screens differ.

Netgear#

Orbi (mesh)#

  • DNS: the Orbi answers the devices itself (method above). In its interface (orbilogin.com), look in the settings of the Internet connection for the DNS servers: put the address of Warda. We found no page of Netgear for the Orbi itself: tell us the menu on yours.
  • IPv6: look in the IPv6 settings for the DNS server announced: put the IPv6 address of Warda, or turn off only that announcement (chapter 13, setting 2).

Not verified: we found no official page for this setting; tell us if your screens differ.

Nighthawk and other Netgear routers#

  • DNS: the router answers the devices itself (method above). routerlogin.net → Internet → Domain Name Server (DNS) Address → Use These DNS Servers: the address of Warda as primary, then Apply.
  • IPv6: look in the IPv6 settings for the DNS server announced: put the IPv6 address of Warda, or turn off only that announcement (chapter 13, setting 2).

Not verified: written from the documentation of the maker; tell us if your screens differ.

ASUS#

ZenWiFi (mesh)#

The ZenWiFi has the web interface of the ASUS routers: do as below, ASUS routers.

Not verified: written from the documentation of the maker; tell us if your screens differ.

ASUS routers#

  • DNS (IPv4): LAN → DHCP Server, section DNS and WINS Server Setting: the address of Warda as DNS Server. Then turn off Advertise router's IP in addition to user-specified DNS (firmware later than 3.0.0.4.388.22525), or the devices also get the router as DNS.
  • IPv6: look in the IPv6 settings for the DNS server announced: put the IPv6 address of Warda, or turn off only that announcement (chapter 13, setting 2).

Not verified: written from the documentation of the maker; tell us if your screens differ.

Linksys#

Velop (mesh)#

  • DNS (IPv4): in the web interface, Menu → Advanced Settings → Local Network, tab DHCP Server: the address of Warda as DNS server.
  • IPv6: look in the IPv6 settings for the DNS server announced: put the IPv6 address of Warda, or turn off only that announcement (chapter 13, setting 2).

Not verified: written from the documentation of the maker; tell us if your screens differ.

Linksys routers (Smart Wi-Fi)#

  • DNS (IPv4): Router Settings → Connectivity → tab Local Network, section DHCP Server: the address of Warda in Static DNS 1, the others empty.
  • IPv6: look in the IPv6 settings for the DNS server announced: put the IPv6 address of Warda, or turn off only that announcement (chapter 13, setting 2).

Not verified: written from the documentation of the maker; tell us if your screens differ.

Google Nest Wifi#

  • DNS: Google Nest Wifi answers the devices itself (method above). Google Home app → Wi-Fi → Network settings → Advanced networking → DNS → custom: the address of Warda as primary server, then Save.
  • IPv6: the same custom setting has a list for IPv6: put the IPv6 address of Warda there.

Not verified: written from the documentation of the maker; tell us if your screens differ.

Amazon eero#

  • DNS: eero answers the devices itself when some of its features are on (method above). eero app → Settings → Advanced networking → DNS → Custom DNS: the IPv4 address of Warda and its IPv6 address, then Save (the network restarts).
  • With eero Plus, the custom DNS is greyed out: turn off its filters first (Advanced Security, Ad Blocking, blocks of apps and sites).

Not verified: written from the documentation of the maker; tell us if your screens differ.

Ubiquiti#

AmpliFi (mesh)#

  • DNS: AmpliFi answers the devices itself (method above). AmpliFi app → the router → Settings → Internet: the address of Warda as DNS server.
  • IPv6: look in the IPv6 settings for the DNS server announced: put the IPv6 address of Warda, or turn off only that announcement (chapter 13, setting 2).

Not verified: written from the documentation of the maker; tell us if your screens differ.

UniFi#

  • DNS (IPv4): UniFi Network → Settings → Networks → the network → DHCP Service Management → DNS Server: turn off the automatic choice, put the address of Warda, then Apply Changes. The devices take it when their address is renewed (up to a day).
  • IPv6: look in the IPv6 settings for the DNS server announced: put the IPv6 address of Warda, or turn off only that announcement (chapter 13, setting 2).

Not verified: written from the documentation of the maker; tell us if your screens differ.

MikroTik#

  • DNS (IPv4): IP → DHCP Server, tab Networks, field DNS Servers (/ip dhcp-server network, property dns-server): the address of Warda.
  • IPv6: /ipv6 nd, on the interface of the network: dns set to the IPv6 address of Warda and advertise-dns set to yes.

Not verified: written from the documentation of the maker; tell us if your screens differ.

OpenWrt and DD-WRT#

OpenWrt#

  • DNS (IPv4): LuCI → Network → Interfaces → LAN → Edit → tab DHCP Server → DHCP-Options: 6, followed by the address of Warda (for example 6,192.168.1.2), then Save & Apply.
  • IPv6: same tab, IPv6 Settings → Announce IPv4/6 DNS servers: the IPv6 address of Warda (announced by RA and DHCPv6). The names change a little with the version.

Not verified: written from the documentation of the maker; tell us if your screens differ.

DD-WRT#

  • DNS (IPv4): look in the settings of the DHCP server for the DNS given to the devices: put the address of Warda.
  • IPv6: look in the IPv6 settings for the DNS server announced: put the IPv6 address of Warda, or turn off only that announcement (chapter 13, setting 2).
  • If there is no DNS field: turn the DHCP server of the router off and let Warda give the addresses (chapter 13, setting 3).

Not verified: we found no official page for this setting; tell us if your screens differ.

pfSense and OPNsense#

pfSense#

  • DNS (IPv4): Services → DHCP Server → tab of the interface (LAN), Server Options → DNS Servers: the address of Warda.
  • IPv6: Services → Router Advertisement, DNS Configuration → DNS Servers: the IPv6 address of Warda (and in DHCPv6 if it is on).

Not verified: written from the documentation of the maker; tell us if your screens differ.

OPNsense#

  • DNS (IPv4): with Dnsmasq, Services → Dnsmasq DNS & DHCP → DHCP options: add the option dns-server with the address of Warda (otherwise OPNsense gives its own address). With another DHCP service, look on its page of the LAN for the DNS servers.
  • IPv6: Services → Router Advertisements, Recursive DNS Servers (RDNSS): the IPv6 address of Warda.

Not verified: written from the documentation of the maker; tell us if your screens differ.

Synology Router#

  • DNS (IPv4): SRM → Network Center → Local Network → the network → DHCP IPv4: Primary DNS is the address of Warda, Secondary DNS empty.
  • IPv6: behind a box, Network Center → Internet → IPv6 setup → IPv6 relay: set the IPv6 DNS of the box to Warda first (chapter 13), then keep the relay (chapter 10, Synology router).

Verified: the IPv6 part, with an RT6600ax behind a Freebox (chapter 10). The rest is not verified: tell us if your screens differ.

AVM FRITZ!Box#

  • DNS (IPv4): Home Network → Network → tab Network Settings → Additional Settings → IPv4 Settings: the address of Warda in Local DNS server.
  • IPv6: same place, IPv6 Settings: tick Also announce DNSv6 server via router advertisement (RFC 5006) and put the IPv6 address of Warda in Local DNSv6 server.

Not verified: written from the documentation of the maker; tell us if your screens differ.

Huawei and ZTE (4G/5G)#

Huawei#

  • DNS (IPv4): the DHCP settings are in Advanced → Router → DHCP. We could not confirm a DNS field there: if there is one, put the address of Warda.
  • IPv6: look in the IPv6 settings for the DNS server announced: put the IPv6 address of Warda, or turn off only that announcement (chapter 13, setting 2).
  • If there is no DNS field: turn the DHCP server of the router off and let Warda give the addresses (chapter 13, setting 3).

Not verified: we found no official page for this setting; tell us if your screens differ.

ZTE#

  • DNS (IPv4): look in the settings of the local network / DHCP for a DNS server: put the address of Warda.
  • IPv6: look in the IPv6 settings for the DNS server announced: put the IPv6 address of Warda, or turn off only that announcement (chapter 13, setting 2).
  • If there is no DNS field: turn the DHCP server of the router off and let Warda give the addresses (chapter 13, setting 3).

Not verified: we found no official page for this setting; tell us if your screens differ.