All VPNs are always terminated on the IP that the MX holds. You can put other services (NAT) on the additional IPs.
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.