Each PE must implement a policy to apply a unique SoO attribute to the set of routes received from each customer site.

A different BGP extended community is used on each PE that connects to a single site.

An import policy on the PE rejects a route if the attached SoO matches the configured value.

Import and export policies are applied on the PEs under the global BGP context.