Exclude VLAN from DNS Crypt Proxy

[teo88]

i have setup dns crypt proxy together with unbound. all vlans are yet using the dnscrypt proxy perfectly.
now im struggeling to do the following. i want to exclude 1 vlan from using dns crypt proxy, and send clear dns port 53 udp to for example cloudflare dns ip 1.1.1.1 .

when i go to the dhcp settings for this vlan, and set there the dns server from opnsense ip to 1.1.1.1 it works, clients get the cloudflare dns and can access internet, fine.

but if i change the dns server back, to the opnsense ip for this vlan (same as gateway ip of opnsense) i cannot access internet, and dns clear requests didnt work.

how can i solve this?