My suggestion would be to have 2 VSLs
One at the primary performing D2D and then the VSL on it's own should replicate the backed up data to the DR/Secondary site to the 2nd VSL and then if required for compliance or other standard Copy/duplicate data to tape at the DR site and take those those tape to another offsite location.
But a even better way, would be to have the 2nd VSL at a secondary site (NOT the DR site) and take tape to a 4th location.
Netapp has this replication functionality from VTL to VTL
So you would have primary backups on VSL at Primary site, then HOST based replication to DR site, VSL based replication to 3rd site and tape vaulting to the 4th site. theyby providing for 4 layers of protection and absolute compliance with standards...if any.
Having said that, now that the customer has already done the purchasing. a Combination of what Ganesan & u have in mind should work fine.
Cheers...Jayanth