I’ve got my L2TP VPN set up, and it works, including IP6CP negotiating link-local connectivity with the routerboard.
The routerboard is serving a /64 on the LAN.
I could get a /48 instead of using a /64, and then use other networks in the /48 for the PPP clients. That just smacks of the same sort of wastefulness that prevailed in the early days of IPv4 (Apple got a /8? Really?).
It seems like there ought to be a way for the PPP server to perform neighbor advertisements for the VPN clients, as well as advertising the LAN prefix and default route to the client, shouldn’t there?
And even if there’s no way to do the “proxy” neighbor advertising thing so the client can be in the same /64, there ought to be a way to assign a /64 prefix from a pool or list (or just a static one) for each client, shouldn’t there?
I’ve tried adding the same /64 prefix as the remote-ipv6-address for the ppp secret. That didn’t seem to do anything.