Most network interface configurations allow you to specify a DNS server for that specific connection. I use both OpenVPN2 and Cisco IPSec clients on Windows and Linux. In both cases, the virtual adapters/interfaces used by these clients can have their own DNS server configured. It is only used when the adapter/interface is connected.