Looking for some guidance on an Internet and Wan failover design

Question

Hey Everyone,
I have a project that has been somewhat dropped my lap.  The person who was going to do the project has abruptly bowed out.  I'm stuck in a position where I can either find another contractor, or just do the work myself.  For sake of saving my company, and putting another notch in my belt, I think I'm just going to do it myself.  For background info, I am a CCIE Collaboration.  I have held a CCNA in route switch for several years, and have used it extensively.  I have done some pretty large networking projects.  But I've never done this particular aspect of route switch.  I'm hoping someone here can point me to a good location for reference materials or videos.
Here is what I'm looking to do.  We have 30 branch offices, with 2 major data centers.  Both data centers have a 100mg internet, and a 50mg mpls connection.  Today our MPLS comes directly in to a Cisco 3945 router and then uplinks in to our datcenter on a 3750 stacked switch.  Our internet connection comes in to a HA pair of ASA 5510's and then also uplinks to our switches.  All of our branches come back to the datacenters over the MPLS for their internet services.  Today, all of our offices go to our west coast datacenter.  The only thing using our east coast datacenters internet is that office itself.  I want to achieve two goals:
1) Make all internet connectivity load balance. If one site loses internet, all traffic routes to the other site.
2) If the MPLS is lost, I want the datacenters to reroute traffic through a VPN tunnel between each other
The way I understood it from the person who left the project is that I need to bring the internet connection and the MPLS in to a single router, or pair of clustered routers.  That router can then make the patch selection and handle the BGP with our carrier.
Thank you all in advance.

Answer 1

I acually have similar setup at home using a 2611 router and forwarding port ranges to multiple ips on the internal network and it works great! My issue is that I have one dynamic ip assigned by my ISP and eventually I will have to manually change the ip for each nat statement. I wanted to know if there is a way to point to the outside interface instead of using on ip address. I found out that you can use a static nat statment
"ip nat inside source static tcp 10.0.0.2 22 interface fa0/0 22" instead of
"ip nat inside source static tcp 10.0.0.2 22 72.xxx.xxx.85 22 extendable"
but I cannot find how to point my route-map to the interface to fully resolve this dynamic ip change in the future. My config is listed below which works great if you have static ips assigned by your ISP!!! Though I would love some guidance on the dynamic issue if possible. Thanks
~Roman
P.S. ip nat statements work like numbered access lists and have to be in order or it will not work. I found out the hard way!.
interface fa0/0
ip nat outside
interface fa0/1
ip nat inside
interface s1/0
ip nat inside
ip nat inside source list 1 interface fa0/0 overload
ip nat inside source static tcp 10.0.0.2 22 72.xxx.xxx.85 22 extendable
ip nat inside source static 192.168.1.3 72.xxx.xxx.85 route-map DESKTOP extendable
access-list 1 remark NAT OVERLOAD List
access-list 1 permit 10.0.0.0 0.255.255.255
access-list 1 permit 192.168.0.0 0.0.255.255
access-list 1 permit 172.16.0.0 0.15.255.255
access-list 100 remark Desktop computer port-forwarding
access-list 100 permit tcp host 192.168.1.3 3389 any
access-list 100 permit tcp host 192.168.1.3 28960 any
access-list 100 permit udp host 192.168.1.3 range 28960 32000 any
route-map DESKTOP permit 10
match ip address 100