single nic is supported with rras. try with route 10.0.0.0/8 to include your entire range and redeploy the profile.
you can check with powershell on the client to show route if the route is added.
You do not need to deploy a User tunnel unless you plan on using NRPT.