Your task involves configuring your organization's Google Cloud environment to connect to your on-premises network, which lacks support for Border Gateway Protocol (BGP). The on-premises network comprises 30 CIDR ranges that must be accessible from Google Cloud. Additionally, your VPN gateway generates a unique child security association (SA) per CIDR. It's imperative to ensure the reachability of all 30 CIDR ranges from Google Cloud, following Google's recommended practices. Which two methods can achieve this goal? (Select two options.)