Run BGP with $ISP on both Main and Satellite site... Just announce a unique /24 prefix from each site. No need to run VPN, unless you are using private addresses. Ensure to have ROA & route objects correctly registered at RIR database.
-- have you enabled IPv6 on something today...? Chriztoffer 📧 from 📱 device.
