Sean, If you are using the AMPR VPN listed on the services wiki site, it uses the allocation given to its operator. You MUST setup an IPENCAP tunnel, or have your subnet routed over the global Internet via BGP. You might be able to have your allocation directed to the VPN operator (callsign - OH7LZB) and then arrange for him to route your IPs to the tunnel connection you have established between him. Please be advised, out of all the options, this one is not regularly supported. In addition, your latency would be extremely poor, since you appear to be in the United States and the VPN endpoint is in Finland. Lastly, from what I observed, the AMPR VPN appears to be a Layer 3 VPN (not Layer 2). This means that more detailed configuration (on part of the operator) may be required to route multiple IPs to your VPN instance - my understanding is that the VPN is maintained on a volunteer basis. What issue(s) are you having getting "[IPENCAP] over to the VM"? I ran my AMPR router as an Ubuntu VM for many years before migrating it to an actual hardware border router running OpenWRT; perhaps I can assist. 73, Lynwood KB3VWG