RFC 4891:Using IPsec to Secure IPv6-in-IPv4 Tunnel...
RFC-Ref

IPv6 address


Click on the red underlined text to get to the source

... o To mitigate threat (2), the decapsulator verifies whether the inner IPv6 address is a valid IPv6 address and also applies IPv6 ...
... inner IPv6 address is a valid IPv6 address and also applies IPv6 ingress filtering ...
... transport mode does not verify the contents of the payload itself where the IPv6 addresses are carried. That is, two nodes using IPsec transport mode ...
... tunnel mode; the packets will be demultiplexed based on the SPI and possibly the IPv6 address bound to the SA. Thus, the outer address ...


... IPv6 prefixes, so binding IPv6 addresses to be used to the SA is not generally feasible. IPv6 ...
... IPv6 ingress filtering must be performed to mitigate the IPv6 address spoofing threat. ...


... IKEv2 supports dynamic address configuration, which may be used to configure the IPv6 address of the host. ...


... tunnel interface as the IPsec policy checks do not check the IPv6 addresses at all. Routing protocols, multicast, etc. will work ...
... SPD entries assume that there are two hosts, Host1 and Host2, whose IPv6 addresses are denoted IPV6-EP1 and IPV6-EP2 (global ...
... The following SPD entries assume that the host has the IPv6 address IPV6-EP1 and the tunnel endpoints ...


... host in the host-to-router scenario to obtain an IPv6 address from the ISP as part of setting up ...



Google
Web
RFC-Ref