miredo unfortunately starts before the main router configuration
is loaded, and thus may fail to bind the public address. So disable
mirede via update-rc.d, and make sure Vyatta starts it be setting
an appropriate priority.
That update-rc.d business was harder than I thought - turns
out debian uses something called insserv nowadays which determines
the start-stop order from dependency information in a comment
at the top of the init scripts. So deal with that correctly...