I have a network with about dozen VLANs, most with inter-VLAN routing, some without. They might talk to each other but not to the other's gateway. It's not divided because of security or congestion, it's more like there are VLANs are for the servers, some exit locally to my ISPs, some are VPNed into another region, some is throttled, some are DMZ landing places for VPS...and of course there's one that's public. So VLANs are crucial for routing the traffic to the right places without assigning fixed IP addresses.
Just now I'm realizing that the broadcast domain is actually the key piece here but I'm still confused so I'll continue. 😩
I've been reading up on IPv6 for a couple of days now and I'd like to divide a single /64 block into more or less what I have no but from what I can gather reading article, forums and some papers it's not advisable to go into smaller blocks. I did read something about how there's a subnet identifier built into the IPv6 address.
How can I divide a /64 block while all the clients get the same /64 prefix and I can still separate them on VLANs assigned with RADIUS as I'm doing right now?
I'd like for each clients get more or less the same address space without necessarily being a fixed IP no matter which AP or ethernet port it connects to.
Should I just eff it and go with longer prefixes and have the router or L3 switch(es) do the heavy lifting communicating the select VLANs back together? I'm afraid of getting asymmetric routing and resetting the network would be a major PITA even with backups; some of it is very far away connected by long-distance wireless links.
I appreciate your help; 🙌🏼 I can't find a specific enough answer relative to actual separation of segments, most are concerning only to the address space.