RFC 4891:Using IPsec to Secure IPv6-in-IPv4 Tunnel...
RFC-Ref

decryption


Click on the red underlined text to get to the source

... address spoofing is irrelevant as long as the decryption succeeds and the inner IPv6 packet can be verified to have come from the right ...



Google
Web
RFC-Ref