Refer to the exhibit. Two VRFs hosted on ACI are secured by an external firewall. L3Outs and BGP have been configured toward the firewall, but the VMs still cannot communicate. Which BGP control must be enabled to permit traffic between the two VRFs?