Previous answers assumed you already had dnsmasq running.
It requires config rule like:
set service dns forwarding cache-size 300 set service dns forwarding listen-on switch0 set service dns forwarding name-server 208.67.222.222 set service dns forwarding name-server 208.67.220.220 set service dns forwarding options no-hosts
Also, use dhcp option to point clients to dns server on ER