Refer to the exhibit. An engineer is deploying a policy-based redirect service insertion for a firewall. The engineer has completed the bridge-domain configuration for the firewall’s inside interface with these settings: - Hardware proxy: Enabled - ARP flooding: Enabled - Unicast routing: Enabled Additionally, the bridge domain is associated with a subnet using IP address `172.16.100.254/24`. Communication must be allowed between EPG-1 and external-EPG-1. Which configuration set completes the configuration?