NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
AbrekUS
Jul 25, 2026Aspirant
XR1000 v1 DNS not working when VPN is enabled
I've XR1000 v1 router with the following settings: firmware: 1.0.2.86_2.1.40 IP address: 192.168.2.1 and DNS stops working as soon as I enable VPN on it (see nslookup output below). Resetting ...
FURRYe38
Jul 26, 2026Guru - Experienced User
What LAN IP address are you using? Default 192.168.1.1 or something different? Looks like your using 192.168.2.1?
What brand and model# ISP modem or ONT is the router connected too?
How is VPN setup on the router? I presume your using the built in VPN feature?
What happens if you use ISP detected DNS with VPN disabled and enabled?
- AbrekUSJul 26, 2026Aspirant
Right now, I'm using 192.168.2.0/24 network for my setup with 192.168.2.1 assigned to the router and 192.168.2.200-254 range setup for the DHCP clients.
However, I've observed the same issue with default setup where router had 192.168.1.1 IP address.
Not sure how this is relevant because this issue is on the LAN part, but router is connected to the provider vie Ethernet cable.
Yes, I'm talking about VPN server embedded to the router.
I don't follow this question: "What happens if you use ISP detected DNS with VPN disabled and enabled?"
The router receives, "detects", DNS server IP addresses from the ISP on the startup and uses them to resolve domain names and it shouldn't change when VPN enabled/disabled.
Even if router would itself would switch to some other DNS servers when VPN is on, why it would start refusing DNS connections from the LAN clients?
- FURRYe38Jul 26, 2026Guru - Experienced User
What is the brand and model# of the ISP modem/ONT?
Just checking to see if same thing happens when using ISP DNS vs using custom which you stated using with VPN enabled.
Has this ever worked on this router or is this new to you?
- AbrekUSJul 26, 2026Aspirant
The ISP DNS is used by the router in all scenarios described above.
I've set DNS server IP addresses on the router to 8.8.8.8/1.1.1.1 temporary to test whether it would help with the issue but it didn't so I've switched back to "Get Dynamically from ISP".
Re "Has this ever worked on this router or is this new to you?": what is "this" here?
Everything works fine until "Enable VPN Service" is checked/applied on the router.
After that, LAN clients are getting "connection refused" from the router when they are trying to resolve domain names.