An extension of the point-to-point tunneling protocol used by an internet service provider to enable the operation of a virtual private network over the internet.