A provider of MPLS services configures MPLS Layer-3 VPN services for two customers. Each customer has three branch offices that will be interconnected by MPLS Layer-3 VPNs. The Route-Distinguisher…

A provider of MPLS services configures MPLS Layer-3 VPN services for two customers. Each customer has three branch offices that will be interconnected by MPLS Layer-3 VPNs. The Route-Distinguisher and VPN-Target used for each customer is shown in the following chart: Customer Route-Distinguisher VPN-Target Cust-A, Site-1 100:81 100:91 Cust-A, Site-2 100:81 100:91 Cust-A, Site-3 100:81 100:91 Cust-B, Site-1 100:82 100:92 Cust-B, Site-2 100:82 100:92 Cust-B, Site-3 100:82 100:92 All Customer A sites can ping each other; all Customer B sites can ping each other. Customer A Site 1 needs access to Customer B Site 3. Other Customer A sites should not be able to access any Customer B site. Without changing the configuration of PE-2, which configuration changes should be made to achieve this goal?