Which method dynamically installs the network routes for remote tunnel endpoints?

Policy-based routing steers traffic based on defined match criteria and actions, but it does not create or install routing table entries for remote VPN tunnel endpoints.

CEF (Cisco Express Forwarding) is a high-speed packet switching mechanism that builds forwarding tables from existing routing entries - it does not generate or inject routes on its own.

Reverse Route Injection is an IPsec feature that automatically generates static host or network routes corresponding to remote VPN tunnel endpoints whenever a tunnel is established, inserting them into the routing table without manual configuration. These dynamically injected routes can then be redistributed into routing protocols such as OSPF or EIGRP, allowing other network devices to learn reachability to remote VPN networks.

Route filtering controls which routes a routing protocol accepts or advertises between neighbors, but it does not dynamically create or install routes for VPN tunnel endpoints.