Refer to the exhibits. Because of security requirements, a network engineer must relocate the default gateway for a subnet from a Cisco Application Centric Infrastructure (ACI) bridge domain to a firewall cluster directly connected to the leaf switches. The same IP address must be used as a virtual IP in the firewall cluster to avoid configuration changes on the servers. The configuration must also ensure that Cisco ACI can learn the MAC addresses of silent hosts and that the firewall cannot be bypassed. Which configuration must be applied to the bridge domain?