Your company runs an HA VPN connection between an on-premises data center and a Google Cloud VPC. The Cloud Router uses the default (base) advertisement mode and currently advertises only the subnets in the local VPC over BGP. You recently configured Private Google Access and now need the on-premises hosts to reach Google APIs through the VPN using the restricted VIP range (199.36.153.4/30), which is NOT a subnet in the VPC. What is the correct way to make the Cloud Router advertise this range to the on-premises peer?