you need to ensure that vpn clients that connect to rras1 can receive ip addresses from dhcp1