In this lab, we’ll explore the different App-route policy actions and how they steer traffic onto the best-performing IPsec tunnels based on an application’s SLA.
To keep things simple, we’ll use only two routers from the topology: cEdge-1 and cEdge-6. In real deployment, the same App-route policy can be applied at scale using VPN lists and site lists, so the number of routers isn’t the point. The goal here is to clearly understand how the policy works.