can one not designate the IP of the VM as exempt from the VPN like one does with proxies? Or maybe some Magic with your local routing table so Stuff for the VM doesn't get routed to the VPN? I haven't played with VPN's much for most of my tunnelling needs SSH tunneling works just fine.

But is seems like there should be some way to exempt the VM's traffic