JulianRiano,
Hello,
My first question is, does the customer have an external load balancer? If so, I would recommend the following:
Datacenter 1 (PAM-001 and PAM-002) configured as a primary master site cluster with a VIP for the Datacenter, something like (DC1-PAM.company.com) and Datacenter 2 (PAM-003 and PAM-004) also configured with a VIP similarly (DC2-PAM.company.com). At this point, for full failover, you could utilize an external load balancer with weighting of 98% for Datacenter1 and 2% for Datacenter2. This would allow a single VIP controlled by an external load balancer to automatically direct traffic to the DR site should the primary site go down and leverage a single URL for access such as PAM.company.com.
If the customer does not have an external load balancer for their network, then you would have the two VIPs to direct traffic, but end users would need to know to switch the URL to the alternate site in the event of an outage.
Cheers!
David