On 4/29/23 01:10, Per Jessen wrote:
I was unable to segment that /64 to separate physical interfaces
on the router.  /66 wouldn't work, for example.
You and Carlos are kindred spirits, you both have this uncanny
knack for quietly shifting the goalposts :-)

What else are goalposts good for if not shifting?

What has "transparent public access to a /64" got to do with your
inability to split a /64 on your router, at the time? 

As has been mentioned once or twice over the last week, to work with
less than a /64, you need dhcpv6. The stateless auto config will only
work with /64.

Yes, I seem to remember that from my efforts of a few years ago.

For my home network I use 2001:db8:7d68:1 - with two distinct subnets:

2001:db8:7d68:1:ff99:ffff::/96 - unknown/foreign/guest devices
2001:db8:7d68:1:ff99::/80      - known devices without static addr
2001:db8:7d68:1::/64           - static addresses.

This is what I was trying to do on my router, where each subnet
is on it's own physical Ethernet interface.  I couldn't do it, either
due to my ignorance, the Xyxel router, or my ISP.

It's been maybe a few years, should I expend the effort and try
again?  Why?  It works perfectly well with IPv4. 

By the way, how do you mitigate the rogue RA problem?  There's
even a RFC about it?  (RFC-6104)  As mentioned, I've been affected
by this at work.

Regards,
Lew