To ensure that spoke sites (102 and 103) prefer the MPLS path when reaching the 172.16.101.0/24 subnet from site 101 (Hub), the control policy must be applied inbound on the Spokes. This way, vSmart modifies the route advertisements as they are sent to the spoke sites, setting higher preference (100) for the MPLS TLOC.