RFC 4891:Using IPsec to Secure IPv6-in-IPv4 Tunnel...
RFC-Ref

verification


Click on the red underlined text to get to the source

... SA to verify that the packet is appropriate for the SA via which it was received. A successful verification implies that the packet came from the right IPv4 endpoint ...
... appropriate for the SA via which it was received. The successful verification implies that the packet came from the right endpoint. ...


... source address of the packet matches the prefix. Site B will not be able to do a similar verification for the packets it receives. This may be quite reasonable for most of the deployment ...
... addresses. Address verification prevents IPv6 source address ...



Google
Web
RFC-Ref