Well, no reason, it just "feels" right. I know both IP addresses are valid, but somehow I think that the subnet is mine and the tunnel endpoint is not. I just want to control which IP address the firewall uses.
The firewall has got two IPv6 addresses from the subnet, one being on a bridged interface (two physical ports and one vlan), the other a vlan.
It also drives me crazy that after I deprecated the local tunnel endpoint the firewall now uses the IP address from the vlan, and not the bridge :(
and I have no clue how to change that. I tried to change the metric of the vlan interface but that didn't help.
So, if you don't want to implement such a thing, is there a playce where I can put that command so that it is executed everytime the firewall boots up (or better, everytime the interface is brought up)?