> NAT-OA payloads in IKEv1 Quick Mode (RFC 3947)

> IPv6 support fixed and enabled by default

Oof. Bad sign to see either of these, though for opposite reasons. Broken IPv6 points to way insufficient testing & use. IKEv1 meanwhile is deprecated and rather ought to be removed entirely.