A manufacturer uses a centralized security policy for internet breakout at headquarters while each plant needs unique OSPF costs and VLAN mappings on its own Edge routers. Engineers debate where to enforce each requirement efficiently. Which distinction between localized policy versus centralized policy guides enforcement placement?
Select an answer to reveal the explanation.
Short Explanation
You're juggling shared rules and local quirks, so you'll use centralized policy on your Controller for fabric-wide routing and security while your Edges keep their own OSPF costs and VLANs. It's like corporate sets the menu but each cafe arranges its tables, so don't swap those jobs or you'll tie yourself in knots.
Full Explanation
Centralized policy is created in SD-WAN Manager and enforced fabric-wide: control policy on the SD-WAN Controller shapes OMP routing and topology, and data policy on the Edges steers and secures traffic, which fits the HQ internet breakout. Localized policy applies to a single Edge and covers on-box behavior such as QoS, ACLs and routing-protocol route policy, while per-site interface, VLAN and OSPF cost values belong to the device configuration (feature templates with variables) rather than to any centralized policy. That split puts breakout in the centralized layer and plant-specific values at the Edge. Pushing OSPF costs and VLANs as fabric-wide policy while keeping breakout local fails because it inverts the roles: fabric-wide policy cannot carry per-plant interface values, and independent local breakout loses the uniform inspection the manufacturer wants at headquarters. Localized-only enforcement fails for the same reason, abandoning the centralized breakout and its consistent security. Assigning breakout steering to centralized control policy fails by type, because control policy governs OMP route and TLOC advertisement while data policy governs how traffic is forwarded, and per-plant OSPF costs and VLAN mappings are device configuration that no centralized policy carries. In practice, confirm the centralized policy is attached on the Controller and that each plant Edge shows its own OSPF and VLAN values.