nat: Use tun2X as VPN interface