Fix IPsec status when using interface macros (e.g. "LAN subnet") and handle matching better when IPs may not match up due to IPv6 formatting/compression.