VPN config questions

Let me start with some background

Currently, We have an MPLS and Broadband connection at Each branch. MPLS trunks all internal traffic and internet goes out locally through the PA-220. If MPLS goes down, they loose connection to the DC but if internet goes down, we backhaul that over MPLS by changing a route in the Branch Cisco Router.

​

I'd like to get this more redundant and automated. I'd like to somehow configure this the easiest way to:

On the PA-220, add a CradlePoint CBA 850 as a third uplink

Have the PA-220 handle redundant VPN's with the broadband and CradlePoint to the DC and Backup DC if possible

Somehow monitor the routing for MPLS and if it goes down, go live on the primary vpn tunnel using broadband and if broadband is down, go out over the cradlepoint. When the MPLS comes back up, send all internal traffic back over the MPLS and internet out the PA-220.

​

If we could configure 4 vpn tunnels - Broadband and CradlePoint to Primary DC and BroadBand and CradlePoint to Backup DC that would be great as well.