> like it to do is have a dedicated ipv6 ULA ip address for management > purposes (not using a vlan here), and announce that to the network, but > never offer itself as a routing opportunity to anything [...] > out br-lan something deny? > in? > inflate the metric? out br-lan ula/128 allow out deny