Which configuration setting would resolve this issue?

You have recently deployed a dynamic VPN. The remote users are complaining that
communications with devices on the same subnet as the SRX device are intermittent and
often fail. The tunnel is stable and up, and communications with remote devices on different
subnets work without any issues. Which configuration setting would resolve this issue?

A.
adding local-redirect at the [edit security nat] hierarchy

B.
adding local-redirect at the [edit interfaces <interface-name>] hierarchy

C.
adding proxy-arp at the [edit security nat] hierarchy

D.
adding proxy-arp at the [edit interfaces <interface-name>] hierarchy