Hello, here is another problem I am currently experiencing.

I activated IPv6 support because of a new Internet Provider (CGNAT).
So I activated IPv6 for the WAN connection, stored the prefix delegation size according to the ISP's specifications, and also activated IPv6 support with the corresponding ID in the LAN interface.
My devices in this LAN are now also assigned appropriate IPv6 addresses.

Now I need permissions to access certain services on the network from outside. I am familiar with the relevant support document:

https://www.tp-link.com/de/support/faq/4117/

However, according to this guide, fixed IPv6 addresses or ranges are stored in the IPv6 groups. But how can this be combined with prefix delegation, since the prefix can change at any time and the ACL will then no longer work, or have I overlooked something?

Thank you very much