RFC 4891:Using IPsec to Secure IPv6-in-IPv4 Tunnel...
RFC-Ref

encapsulation


Click on the red underlined text to get to the source

... Explicit Congestion Notification bits [RFC4213]) from the encapsulated packets to the tunnel path is out of scope. ...


... 2. The IPv6 source address of the encapsulated ("inner") packet can be spoofed. ...
... RFC3704]. The reason threat (2) exists is that the IPv6 packet is encapsulated in IPv4 and hence may escape IPv6 ...
... Transport mode is often also used in other kinds of tunnels such as Generic Routing Encapsulation (GRE) [RFC4023 ...


... Huttunen, A., Swander, B., Volpe, V., DiBurro, L., and M. Stenberg, "UDP Encapsulation of IPsec ESP Packets", RFC 3948prop, January 2005. ...
... Worster, T., Rekhter, Y., and E. Rosen, "Encapsulating MPLS in IP or Generic Routing Encapsulation (GRE)", RFC 4023prop, March 2005. ...


... IPsec NAT traversal extensions, UDP encapsulation can be enabled. ...
... More details about UDP encapsulation of IPsec-protected IP packets can be found in [RFC3948 ...



Google
Web
RFC-Ref