Yeah, you need to add the BSSID of all APs. VPN does not matter the OS will have to provide access to this info.