Default Call Routing
In an IP Office Server Edition deployment with no other changes than the addition of SIP trunks to the primary server:
The default short code/ARS configuration on the primary server routes all external calls to any trunk/channel in outgoing line group 0.
If a secondary server is present, its default short code/ARS configuration route all external calls to outgoing line group 99999 (to the primary).
For any expansion server's present, their default short code/ARS configuration routes all external calls to outgoing line group 99999 (to the primary) if available, else to outgoing line group 99998 (to the secondary).
The above provides only minimal resilience. Expansion systems unable to see the primary but able to see the secondary can still make external calls if the secondary can still access the primary. In the case above, the simplest method of adding some further resilience would be to also add SIP trunks to the secondary server. The secondary server's ARS would be reconfigured to use the outgoing line group of its own SIP trunks. Expansion systems unable to see the primary can then still make external calls using the secondary's SIP trunks.
Obviously, further resilience can be achieved by providing each location with its own trunks. This also simplifies the configuration of emergency call routing.