DNS Settings for UnoTelly For Roku and Chromecast on Telkom PACE 921VNX ADSL Router

DNS Settings for UnoTelly For Roku and Chromecast on Telkom PACE 921VNX ADSL Router

Please see below solution, it will work for other unblocking services as well, simply replace the DNS servers only with the unblocking service DNS servers.
I used 4 DNS servers as this made the solution more stable
(I have used Unotelly, and specifically only Unotelly DNS servers, otherwise I found inconsistencies with DNS returns)
Also note that this means that you will only be using the DNS servers you assign for resolution.

I have tested this on
Product Name Pace 921VNX
Software Version B41006-TelkomSA9-74473

FULL SOLUTION

Go to the router web interface
Click on Router then Firewall
Set Security Level to Low (Filtering incoming packets using NAT rules)

Telnet to the router - I used Putty as a telnet client, you can use any telnet application
The default user name is admin and the default password is nology*/
Please enter the lines below one by one, exactly as they appear, and then Press Enter after each line.

cd WANConnectionDevice_1
set DNSServers 197.189.212.164,46.165.219.110,197.242.94.51,122.248.238.233
set PrivateDNSServers 197.189.212.164,46.165.219.110,197.242.94.51,122.248.238.233

set DNSOverrideAllowed 1
fcommit
set DNSOverrideAllowed 0
fcommit

--------------- CONTINUE BELOW TO DISABLE GOOGLES DNS, This could also be achieved through the web firewall settings, however then you will need to disable NAT, therefore below recommended for security purposes -------------------------------------------------------------

cd _ (type an underscore)
cd Firewall_Rules
mk 1010
set Enable 1
set User 1
set Description BlockGoogleDNS1
set Input 1,3
set InputExt 1
set SrcIPStart 8.8.8.8
set SrcIPEnd 8.8.8.8
set SrcPorts 53,67
set Protos tcp,udp
set Chain Forward
set Target Drop
set Table Auto
set Symetric 1
set IPProtocol IPv4

cd ..
mk 1011
set Enable 1
set User 1
set Description BlockGoogleDNS2
set Input 1,3
set InputExt 1
set SrcIPStart 8.8.4.4
set SrcIPEnd 8.8.4.4
set SrcPorts 53,67
set Protos tcp,udp
set Chain Forward
set Target Drop
set Table Auto
set Symetric 1
set IPProtocol IPv4
cd ..
fcommit
reboot

---------------------------------------------

IF YOU WISH TO REMOVE THE SOLUTION

cd WANConnectionDevice_1
set DNSOverrideAllowed 1
set DNSServers
fcommit
exit

Then go onto the web interface
Set Security Level to Custom, Click OK
Then Set Security Section back to Low, Click OK

I have not tested if this config will save to your backup file.

After entering the line:

LeeVA said:

set DNSServers 197.189.212.164,46.165.219.110,197.242.94.51,122.248.238.233

Click to expand...

I get a response below:



I figured it out and it is a weird one. When I copied the line directly from your post, it introduced a space in the final DNS (122.2 48.238.233). I had to manually remove that space before pasting into the Putty client.

I just thought I'd write this up in case anyone else experienced the same issue.

Cheers

I find this Pace device to be junk.

Kudos for finding a way to make it work.

Thanks for this!

If you would prefer not to completely block Google DNS for all devices on the network, some routers allow Route Policies to be implemented.
When configuring a route policy with the following settings, devices on the network besides for the Chromecast are still able to use Google's DNS.

Source IP: Chromecast's static IP (bind its MAC address to an IP in the router UI)
Destination IP: 8.8.8.8 (and 8.8.4.4)
WAN Interface: Any non-existent VPN index (this ensures that the traffic never reaches its destination)

MrDraytek said:

If you would prefer not to completely block Google DNS for all devices on the network, some routers allow Route Policies to be implemented.
When configuring a route policy with the following settings, devices on the network besides for the Chromecast are still able to use Google's DNS.

Source IP: Chromecast's static IP (bind its MAC address to an IP in the router UI)
Destination IP: 8.8.8.8 (and 8.8.4.4)
WAN Interface: Any non-existent VPN index (this ensures that the traffic never reaches its destination)

Click to expand...

Presumably this could also be accomplished by creating a firewall rule that blocks outbound traffic from a specific host (in this case the bound IP of the Chromecast) destined for 8.8.8.8 and 8.8.4.4.

Is the Route Policy option more efficient?

sst17 said:

Presumably this could also be accomplished by creating a firewall rule that blocks outbound traffic from a specific host (in this case the bound IP of the Chromecast) destined for 8.8.8.8 and 8.8.4.4.

Is the Route Policy option more efficient?

Click to expand...

A firewall rule would also work.
We find the Route Policy more efficient only since it's so simple for any level of user to configure.

MrDraytek said:

A firewall rule would also work.
We find the Route Policy more efficient only since it's so simple for any level of user to configure.

Click to expand...

Hi All,

Once you configure the firewall rules on the PACE device via the web interface, NAT is disabled, leaving a huge security hole. Most users will then not have the expertise to configure each port to maintain security

Therefore the original solution I posted in the initial post is recommended to ensure NAT remains enabled for the PACE router

Thanks

Hi

Could someone assist me adding a static route on this Telkom Pace router

I need to add the following

route -p add 172.18.0.0 mask 255.255.0.0 192.168.1.2

Thanks in advance.