You need to ensure that all VPN connection requests are authenticated and authorized by either Server2 or Server3
You need to recommend changes to the DHCP infrastructure to ensure that the client computers continue to receive IP addressing information if a single DHCP server fails