PPP over crypto pros Single TCP connection is very easy to tunnel though firewalls Can run on any port, if desired. Supports all protocols supported by PPP IPv4, IPv6, IPX (can disable protocols if desired) SSH Authentication OpenSSH supports many client authentication methods. OpenSSH host key authentication can be performed once at runtime SSL Authentication Stunnel supports standardized X.509 certificates, CAs, cert chains.