add special IPv6 rules for NVP port security

This change adds link-local and the subnet cidr to allow temp IPv6
addresses to work properly when port security is enabled.