Earlier quoted context omitted.
It's a good overall plan C. But why does the data link itself have no fallback? An important data link should have multiple dissimilar backups.
It sounds good in theory, but the practice is different. “High availability” database measures are often less reliable than the normal, simpler approach. Automated network failover equipment often causes more downtime than having multiple links and only failing over manually, or even depending on a single link. Complexity is the enemy of robustness. System failure is not just one simple category with known behaviours…
Failing over manually sounds fine. If they can't swap over at all then that's a sign of fragility which will cause its own problems.