I am using routed mode hubs, and the default route on each DOES point to a core switch on the LAN side. It's been like 7 months since I tested this, but if I remember correctly, I didn't need to even check the box on the spoke for them to follow my default route to the hubs, since the hubs were already advertising a default AND it was visible in the route table. During a maintenance window, I checked the box, and then disabled 0.0.0.0/0 on the hubs from being advertised into VPN fabric, but this broke the path, so no matter what, it appears I must announce a 0.0.0.0/0 from the hubs. From my perspective, this feature doesn't do anything at all.
... View more