Eliminate spoofing threat in IPv6 tunnel

This study proposed a new mechanism to defend spoofing threat in Internet Protocol version 6 (IPv6) tunnel. The new mechanism using optional filed on Internet Protocol Security (IPSec´s) Encapsulating Security Payload (ESP) frame, particularly padding area, to tag in the IPv6 source address before encapsulate the IPv6 packet into Internet Protocol version 4 (IPv4) datagram. On the receiving end, the device will match the IPv6 source address after de-capsulation and forward the packet to its destination only if matched, otherwise will drop the packet. IP spoofing remains a severe problem in the Internet today, unfortunately, although many defense mechanisms have been proposed, none have eradicated the spoofing problem. We proposed in this study a solution that is different theoretically and practically from existing solutions.