Patent ID: 11882150
Assignee: JUNIPER NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A system comprising one or more processors implemented in circuitry and configured to:
receive an encapsulated network packet via a network tunnel of an IPv6 network, wherein a Tunnel Entry Point (TEP) routing device acts as an entry point to the network tunnel within the IPv6 network, and wherein the network device acts as a termination point of the network tunnel;
extract IPv6 header information from the encapsulated network packet;
extract IPv4 header information from the encapsulated network packet;
determine that the encapsulated network packet is a spoofed network packet, wherein to determine that the encapsulated network packet is the spoofed network packet, the one or more processors are configured to:
determine respective IPv6 header information from the IPv4 header information;
compare the extracted IPv6 header information with the determined, respective IPv6 header information; and
determine that the extracted IPv6 header information does not match the determined, respective IPv6 header information; and

in response to detecting the spoofed network packet, transmit a message to the TEP routing device, the message including data representing the IPv6 header information and IPv4 header information and indicating that the IPv6 header information was spoofed.