You need to ensure that all VPN connection requests are authenticated and authorized by either Server2 or Server3