Clients should be configured with only one DNS server assigned (the Pi-hole IP address) or else ads will still leak through:
Do mind that stock Asus firmware dont play nice with Pi-hole: