During a security review of an access-layer switch, an analyst discovers that any device plugged into an open conference-room port immediately gains network access, and one port was observed learning over 200 MAC addresses within minutes—consistent with a MAC flooding attack that overflowed the CAM table. Management wants a switchport-level control that both limits the number of MACs per port and takes automatic action on violations. Which hardening measure should the analyst recommend?