Patent ID: 11882150
Assignee: JUNIPER NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 8:
9. A system acting as an entry point to a network tunnel of an IPv6 network, the system comprising one or more processors implemented in circuitry and configured to:
receive a message from a network device that acts as termination point of the network tunnel, the message including data representing IPv6 header information and IPv4 header information and indicating that the IPv6 header information was spoofed;
receive an encapsulated network packet;
determine that the encapsulated network packet is a spoofed network packet, wherein to determine that the encapsulated network packet is the spoofed network packet, the one or more processors are configured to:
match the IPv6 header information to outer header information of the encapsulated packet; and
match the IPv4 header information to inner header information of the encapsulated packet; and

in response to detecting the spoofed network packet, drop the encapsulated network packet.