so what is the purpose of vpn1 and vpn2... just make vpn3 an ingress and egress gateway and connect the client to vpn3