Hi Jervin,
Under "IPv6 DNS SETTINGS"
I used "Obtain IPv6 DNS Servers automatically", but obviously you can set these if you want to.
I am in doubt if "Obtain IPv6 DNS Servers automatically" works with a HE tunnel, so I would recommend to select the other option "Use the following IPv6 DNS servers" and then specify the primary and secondary HE DNS server addresses.
Under "LAN IPv6 ADDRESS SETTINGS"
Do not use "Enable DHCP-PD", it didn't work for me
I wouldn't have expected either that DHCP-PD is available for a HE tunnel.
Under "ADDRESS AUTOCONFIGURATION SETTINGS"
Check off "Enable Automatic IPv6 address assignment"
Set "Autoconfiguration Type :" whatever you want, I used SLAAC + Stateless DHCP, but Stateless by itself worked and I didn't try SLAAC+RDNSS
Set "Router Advertisement Lifetime:" to 60 minutes because it seems to be some sort of default anyway.
You should use "SLAAC + Stateless DHCPv6" (as you did) because stateless DHCPv6 is the default method to convey the IPv6 primary and secondary DNS server addresses you entered above to the LAN client PCs. In contrast SLAAC+RDNSS is not recommendable, because RDNSS isn't supported by most client PCs (e.g. Windows). You could also use "Stateful DHCPv6", this would work either and give you more control about the assigned IPv6 addresses but would also mean more configuration steps (and hence possible sources for mistakes) to do.
Set "Router Advertisement Lifetime:" to 60 minutes because it seems to be some sort of default anyway.
A client in your LAN which receives a Router Advertisement (RA) sent by your DIR-645 on a regular basis (about every 10 minutes is a common default value) sees the router lifetime (contained in the RA) and if it is >0 it takes the source address of the Router Advertisement, which is always the router's link local address, as the initial or updated value of its default gateway and sets the valid timer for the default gateway to the lifetime value. Without receiving other RA the default gateway would become invalid if lifetime is over. Hence it is important that the router sends RA periodically and that the advertised lifetime is greater than the sending intervall. 60 minutes is okay. When a client starts it sends a Router Solicitation in order to force the router to send a RA at once in response.
Note: I don't know what to do with the tunnelbroker "Available DNS Resolvers" addresses. Should I use these in addition or instead of my DNS addresses?
If you configure it the way I described above you should see them as additional IPv6 DNS server addresses (besides the IPv4 ones) within your LAN client's IP/IPv6 configuration. In principle you can use either IPv4 DNS servers, IPv6 DNS servers or both to resolve names to both IPv4 and/or IPv6 addresses. I would use a combination of both to cover both cases of IPv4-only and IPv6-only DNS servers.
PacketTracer