VLAN best practices for hardware without hardware switch

[vevere]

Ok,
I have found the reason elsewhere:

IPv6 RA leak between VLANs

Its not a bug, its a feature ... of Windows! All Windows versions strip the Vlan tags and used the RAs. So all router of all vlans are assigned and slaac then add many the ips. Even when a vlan-capable nertwork driver is installed and you set a Vlan you get all RAs. Amusing: DHCP with IPv4 works well - maybe there are some workarounds in the OS Solutions: Disable all RAs and use static Ipv6 ^^ Use only wlan (different AP for each vlan) Or use a managed switch Microsoft devices What a crap! …

I made some testing (and I will continue) and I can confirm that.
So ok, I understand better the 'best practice' to have a trunk (without a untagged vlan) and to split the vlan near the client