A branch has BFD up to the cloud gateway and an OMP route for the VPC. A payroll application still fails. Its data policy sends it to a TLOC that is down. Other applications on the OMP route succeed. What is wrong?
Select an answer to reveal the explanation.
Short Explanation
The good road is open, and payroll was sent down a closed side street. You pointed that application at a down TLOC in the data policy, so it fails while other applications use the OMP route. A withdrawn prefix would have taken everyone with it.
Full Explanation
A data policy can steer one application to a TLOC that is not the one OMP would have used. Payroll is pinned to a down TLOC, so it fails. Other applications follow the live OMP route and succeed, which proves the prefix and BFD are fine. OMP has not withdrawn the VPC prefix. An IKE key on a virtual private gateway does not reject a single application's ports inside an SD-WAN overlay that is already up. A SaaS probe does not delete a working TLOC because payroll was left out of OnRamp. Exam caveat: after you retarget the data policy, confirm the new TLOC is the cloud gateway and not another down color. Operational check: a payroll flow should follow the up cloud TLOC, and the other applications should be unchanged.