What is a required configuration step for an 802.1X capable switch to support dynamic VLAN and ACL assignments?