You need to establish an IPSec tunnel between your on-premises network and a VPC through Cloud VPN. To limit connectivity over the tunnel to certain local subnets, and considering the absence of a device supporting Border Gateway Protocol (BGP), which routing method should you opt for?