Have 2 L2TP 'lines' on the same login which the end-user can route as they wish, but not add any additional quota (and therefore no significant additional cost).
IP blocks can then be routed as per the normal process, allowing for seamless failover.