Which policy permits TLOC communication between data-center hubs and spokes while blocking spoke-to-spoke communication?

A centralized control policy is used to define how traffic flows across the SD-WAN fabric, including TLOC (Transport Locator) reachability. By configuring a centralized control policy, you can specify that TLOCs from spokes are only advertised to data-center hubs, effectively allowing spoke-to-hub and hub-to-spoke communication while preventing direct spoke-to-spoke TLOC advertisement and thus blocking spoke-to-spoke data plane communication. Localized control policies affect only the vEdge router where they are applied, not the entire overlay. Centralized data policies influence data plane forwarding decisions based on data packet fields, but TLOC reachability is a control plane function. Localized data policies are applied to specific interfaces on a vEdge router and only affect traffic entering or exiting that interface.