Editing Point-to-Point Protocol (section)

==Tunnels==

{| border="0" cellspacing="3" style="float:right; text-align:center; padding-left:15px"
|+ '''Simplified OSI [[protocol stack]] for an example [[Secure Shell|SSH]]+PPP tunnel'''
|-----
| bgcolor="#FFEEBB" | ''Application''
| bgcolor="#EEEEFF" | [[File Transfer Protocol|FTP]]
| bgcolor="#EEEEFF" | [[Simple Mail Transfer Protocol|SMTP]]
| bgcolor="#EEEEFF" | [[Hypertext Transfer Protocol|HTTP]]
| bgcolor="#EEEEFF" | …
| bgcolor="#EEEEFF" | [[Domain Name System|DNS]]
| bgcolor="#EEEEFF" | …
|-----
| bgcolor="#FFEEBB" | ''Transport''
| colspan=4 bgcolor="#EEEEFF" | [[Transmission Control Protocol|TCP]]
| colspan=2 bgcolor="#EEEEFF" | [[User Datagram Protocol|UDP]]
|-----
| rowspan=1 bgcolor="#FFEEBB" | ''Network''
| colspan=6 bgcolor="#EEEEFF" | [[Internet Protocol|IP]]
|-----
| rowspan=1 bgcolor="#FFCC99" | '''Data Link'''
| colspan=6 bgcolor="#EEEEEE" | '''PPP'''
|-----
| colspan=1 bgcolor="#999ff" | '''Application'''
| colspan=6 bgcolor="#999ff" | '''SSH'''
|-----
| colspan=1 bgcolor="#FFEEBB" | ''Transport''
| colspan=6 bgcolor="#EEEEFF" | [[Transmission Control Protocol|TCP]]
|-----
| rowspan=1 bgcolor="#FFEEBB" | ''Network''
| colspan=6 bgcolor="#EEEEFF" | [[Internet Protocol|IP]]
|-----
| rowspan=1 bgcolor="#FFCC99" | ''Data Link''
| colspan=3 bgcolor="#EEEEEE" | [[Ethernet]]
| colspan=3 bgcolor="#EEEEEE" | [[Asynchronous Transfer Mode|ATM]]
|-----
| rowspan=1 bgcolor="#FFCC99" | ''Physical''
| colspan=6 bgcolor="#EEEEEE" | Cables, Hubs, and so on
|}

=== Derived protocols ===

[[PPTP]] (Point-to-Point Tunneling Protocol) is a form of PPP between two hosts via [[Generic Routing Encapsulation|GRE]] using encryption ([[Microsoft Point-to-Point Encryption|MPPE]]) and compression ([[Microsoft Point-to-Point Compression|MPPC]]).

=== As a layer 2 protocol between both ends of a tunnel ===

Many protocols can be used to [[Tunneling protocol|tunnel]] data over IP networks. Some of them, like [[Secure Sockets Layer|SSL]], [[Secure Shell|SSH]], or [[L2TP]] create [[virtual network interface]]s and give the impression of direct physical connections between the tunnel endpoints. On a [[Linux]] host for example, these interfaces would be called '''tun0''' or '''ppp0'''.

As there are only two endpoints on a tunnel, the tunnel is a point-to-point connection and PPP is a natural choice as a data link layer protocol between the virtual network interfaces. PPP can assign IP addresses to these virtual interfaces, and these IP addresses can be used, for example, to route between the networks on both sides of the tunnel.

[[IPsec]] in tunneling mode does not create virtual physical interfaces at the end of the tunnel, since the tunnel is handled directly by the TCP/IP stack. [[L2TP]] can be used to provide these interfaces, this technique is called L2TP/IPsec. In this case too, PPP provides IP addresses to the extremities of the tunnel.