Firewall builder wants to see each interface when it loads, as interfaces are added, removed the firewall has to be restarted.
When using OpenVpn, you can create all the interface you need using the command

openvpn --mktun --dev tun0

This can be run from a start up script or from the Ubuntu /etc/network/interfaces file