I Have a setup using DMVPN between a hub and about 18 other spokes. Direct spoke to spoke connectivity is allowed also. The transport for the connections is the internet, so each site has a default route to the ISP and the VPN is established from there. Both internet traffic and VPN traffic use this interface.
Now there is a requirement for a second internet connection that will be used exclusively for Internet browsing. How do I force internet traffic through the new ISP link, while still maintaining the dynamic nature of NHRP for initiating tunnels to other spokes using the original external interface? How can I achieve this with Policy Based Routing?