Easiest way..
2 NetVM's.
It is the way I work it.
sys-net - sys-firewall - Some Guests
- sys-net-vpn1 - Some other Guests
- sys-net-vpn2 - Other Guests
Is that what you are wanting?
I have nm-applet and NetworkManager running in both, that way I have VPN from the VPN machines.