The full solution consists of a hub-and-spoke with VPN for data and VoIP control backup.
In this topology:
There is a direct WAN connection to the Main Office for VoIP bearer and as primary VoIP control connection.
The Broadband Internet connection uses cable or DSL modem, with a static public IP address
There is a VPN tunnel to the hub over the Internet for intranet data, and as backup connection for VoIP control
The local hosts access the Internet directly through the local broadband connection
The PSTN connection backs up the voice bearer