The full solution consists of a hub-and-spoke with VPN for data and VoIP control backup.
In this topology:
There is a direct WAN connection, through an external layer 3 router in the branch, to the Main Office for VoIP bearer and as primary VoIP control connection. The layer 3 router is connected to the G430 through a dedicated VLAN interface.
The Broadband Internet connection uses cable or DSL modem, with a static public IP address
There is a VPN tunnel to the hub over the Internet for intranet data, and as backup connection for VoIP control
The local hosts access the Internet directly through the local broadband connection