Which two commands must the network administrator configure on the 2950 Catalyst switch to meet this policy?