I just glanced through your config very briefly and might be totally off or missing something here, so take this as a guess but it looks like both delegated IPv6 prefixes are being advertised on all VLANs.
You're assigning one prefix to vlan10-lan and another to vlan20-iot, but the default /ipv6 nd config is still active on vlan10-lan and might be causing both prefixes to leak into both VLANs.
Try adding a dedicated /ipv6 nd config for vlan10-lan, like you did for vlan20-iot. Then disable the default nd instance (the one with default=yes). After that, check which prefixes are being advertised using "/ipv6 nd prefix print".
You're assigning one prefix to vlan10-lan and another to vlan20-iot, but the default /ipv6 nd config is still active on vlan10-lan and might be causing both prefixes to leak into both VLANs.
Try adding a dedicated /ipv6 nd config for vlan10-lan, like you did for vlan20-iot. Then disable the default nd instance (the one with default=yes). After that, check which prefixes are being advertised using "/ipv6 nd prefix print".
Statistics: Posted by Larsa — Mon Mar 31, 2025 4:23 pm