diff --git a/nixos/boxes/home/castle/default.nix b/nixos/boxes/home/castle/default.nix
index 041fa70..05b80d4 100644
--- a/nixos/boxes/home/castle/default.nix
+++ b/nixos/boxes/home/castle/default.nix
@@ -2,7 +2,7 @@
 let
   inherit (lib.my) net;
   inherit (lib.my.c) networkd;
-  inherit (lib.my.c.home) domain vlans prefixes vips roceBootModules;
+  inherit (lib.my.c.home) domain searchDomains vlans prefixes vips roceBootModules;
 in
 {
   nixos.systems.castle = {
@@ -189,8 +189,16 @@ in
               };
               "40-lan-hi" = mkMerge [
                 (networkdAssignment "lan-hi" assignments.hi)
-                # So we don't drop the IP we use to connect to NVMe-oF!
-                { networkConfig.KeepConfiguration = "static"; }
+                {
+                  networkConfig = {
+                    # v6 is RA/SLAAC-derived, so when RA is absent we have no v6 at all;
+                    # anchor DNS on the always-present static v4 (the VRRP VIP follows the master)
+                    DNS = [ vips.hi.v4 vips.hi.v6 ];
+                    Domains = searchDomains;
+                    # So we don't drop the IP we use to connect to NVMe-oF!
+                    KeepConfiguration = "static";
+                  };
+                }
               ];
               "45-lan-lo" = {
                 matchConfig.Name = "lan-lo";