Underlay/02 — IPv6 host-route leaks to the underlay

[bcavnvidia]

Summary

Leak tenant IPv6 host routes into the underlay allow-list (today it is default-deny for IPv6). The fix belongs at the consumer side; narrowing the address producer would drop IPv6 from interfaces fleet-wide.

Dependencies

• Underlay/01 — DPU IPv6 loopback / VTEP next-hop #2390 — leaked IPv6 routes need a valid IPv6 next-hop source first.

Additional Notes

• Stage: G2 — EVPN underlay
• Plan: IPV6_UNDERLAY_PLAN/02_host_route_leaks_v6