Sean,
If you are using the AMPR VPN listed on the services wiki site, it uses
the allocation given to its operator.
You MUST setup an IPENCAP tunnel, or have your subnet routed over the
global Internet via BGP.
You might be able to have your allocation directed to the VPN operator
(callsign - OH7LZB) and then arrange for him to route your IPs to the
tunnel connection you have established between him. Please be advised,
out of all the options, this one is not regularly supported. In
addition, your latency would be extremely poor, since you appear to be
in the United States and the VPN endpoint is in Finland. Lastly, from
what I observed, the AMPR VPN appears to be a Layer 3 VPN (not Layer 2).
This means that more detailed configuration (on part of the operator)
may be required to route multiple IPs to your VPN instance - my
understanding is that the VPN is maintained on a volunteer basis.
What issue(s) are you having getting "[IPENCAP] over to the VM"?
I ran my AMPR router as an Ubuntu VM for many years before migrating it
to an actual hardware border router running OpenWRT; perhaps I can assist.
73,
Lynwood
KB3VWG