I always set up tun. Tap is used by ethernet bridging in OpenVPN and introduces an unprecendented level of complexity that is simply not worth bothering with. Usually when a VPN needs to be installed, its needed now, and complex deployments don't come fast.
The OpenVPN FAQ and the Ethernet Bridging HOWTO are excellent resources on this topic.