The following example shows the configuration of centralized control policy for hub-and-spoke deployment:
policy
lists
tloc-list Hub-TLOCs
tloc 10.10.10.2 color biz-internet encap ipsec
tloc 192.0.2.1 color biz-internet encap ipsec
!
site-list Branches
site-id 140
site-id 68
!
site-list DCs
site-id 50
site-id 67
!
!
control-policy Hub-Control-Policy
sequence 11
match tloc
site-list DCs
!
action accept
!
!
sequence 31
match route
site-list DCs
!
action accept
!
!
default-action reject
!
control-policy Spoke-Control-Policy
sequence 1
match tloc
site-list Branches
!
action reject
!
!
sequence 11
match tloc
site-list DCs
!
action accept
!
!
default-action reject
!
!
apply-policy
site-list Branches
control-policy Spoke-Control-Policy out
!
site-list DCs
control-policy Hub-Control-Policy out
!
!
The following example shows the spoke configuration for hub-and-spoke multicast deployment:
sdwan
multicast
address-family ipv4 vrf 1
spoke
!
!
!