The *dch-vpn-server* role configures strongSwan to act as an IPsec responder for `vpn.pyrocufflink.net` and provide an IKEv2/IPsec VPN for remote access clients, as well as the reverse VPN to FireMon.
