I am trying to do the same thing. I have a "Guest Network" vlan with a gateway ACL to deny it on all others but i want their dns to use pi hole thats on the primary vlan. This guest network is for...