I've been trying to get this sorted out in my head, and it's not working (OK not working well , at least).
I've configured my he.net tunnel on the router and it's routing traffic fine. I've configured various /64's from the /48 allocation on XG interfaces…