Thank for your promptly updating.
I've found at the IAP VC side, the VPN menu allows to add 2 public IP addresses(one is primary, the other is backup; see picture below). It seems like the IAP VC can choose the 1st one and select the 2nd if the 1st link fails.
Note: I also attached my customer requirement diagram.