Hi @Clive_A, The IPv6 prefix will come from the WAN (via the ISP) and "pushed" to the LAN, the LAN is configured this way: I indeed found the IPv6 group for ACLs applicable to the whole subnet...

I've deployed successfully IPv6 on my network, although my ISP sometimes changes the IPv6 scope, which impacts the ACLs so some systems are not accessible from the Internet over IPv6. So for example...

@Fae / Others This morning I received the update (2.2.3 Build 20231201 Rel.32918) for my TL-R605 v2 which enabled IPv6 ACLs via the Omada SDN... All works great! Thanks for the Christmas present!...

@Hank21/ @Fae Just want to have some clearity... the EOL (https://www.tp-link.com/en/support/faq/3562/) mentions the R605 version 1.0 and 1.6. Does this mean that the 2.0 version is still in support?...

@Fae In the meanwhile I purchased a ER605 v2 router, which indeed has IPv6 ACLs in the standalone mode... although when does it come to the SDN OC200 controller so I can control it all from there.

@gmaster - what is your router hardware and version? Just curious, so I know which router I'm going to order as replacement.