Add separator between tabbed content

Author: pauldotyu

articles/aks/limit-egress-traffic.md

@@ -227,6 +227,8 @@ You'll define the outbound type to use the UDR that already exists on the subnet
 >
 > You can add the AKS feature for [**API server authorized IP ranges**](api-server-authorized-ip-ranges.md) to limit API server access to only the firewall's public endpoint. The authorized IP ranges feature is denoted in the diagram as optional. When enabling the authorized IP range feature to limit API server access, your developer tools must use a jumpbox from the firewall's virtual network, or you must add all developer endpoints to the authorized IP range.
 
+---
+
 ### [Create an AKS cluster with system-assigned identities](#tab/aks-with-system-assigned-identities)
 
 > [!NOTE]
@@ -316,6 +318,8 @@ az aks create -g $RG -n $AKSNAME -l $LOC \
   --assign-kubelet-identity <kubelet-identity-resource-id>
 ```
 
+---
+
 ## Enable developer access to the API server
 
 If you used authorized IP ranges for your cluster in the previous step, you need to add your developer tooling IP addresses to the AKS cluster list of approved IP ranges so you access the API server from there. You can also configure a jumpbox with the needed tooling inside a separate subnet in the firewall's virtual network.