You have a hub-and-spoke design. The hub VNet contains a VPN gateway connected to an on-premises network. A spoke VNet is peered to the hub. Users in the spoke must reach on-premises resources through the hub gateway without deploying another gateway in the spoke. Which configuration is required on the spoke peering?