The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 31, 2023

Filed:

Dec. 31, 2019
Applicant:

Juniper Networks, Inc., Sunnyvale, CA (US);

Inventors:

Ashish Suresh Ghule, Bangalore, IN;

Jagadish Narasimha Grandhi, Hyderabad, IN;

Assignee:

Juniper Networks, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 9/40 (2022.01); H04L 47/32 (2022.01); H04L 61/2592 (2022.01); H04L 69/22 (2022.01); H04L 12/46 (2006.01); H04L 101/686 (2022.01);
U.S. Cl.
CPC ...
H04L 63/1466 (2013.01); H04L 47/32 (2013.01); H04L 61/2592 (2013.01); H04L 63/029 (2013.01); H04L 63/0236 (2013.01); H04L 63/1425 (2013.01); H04L 69/22 (2013.01); H04L 12/4641 (2013.01); H04L 2101/686 (2022.05);
Abstract

An example network device receives an encapsulated network packet via a network tunnel; extracts IPv6 header information from the encapsulated network packet; extracts IPv4 header information from the encapsulated network packet; determines that the encapsulated network packet is a spoofed network packet based on the IPv6 header information and the IPv4 header information; and in response to detecting the spoofed network packet, transmits a message to a Tunnel Entry Point (TEP) device, the message including data representing the IPv6 header information and IPv4 header information. A tunnel entry point (TEP) device may receive the message and use the message to detect spoofed IPv6 traffic, e.g., when an IPv6 header and an IPv4 header of an encapsulated packet matches the IPv6 header and the IPv4 header specified in the message. In this manner, the TEP device may block, rate limit, or redirect spoofed network traffic.


Find Patent Forward Citations

Loading…