A network engineer notices that a Catalyst switch experiences high CPU utilization during a burst of ARP and routing protocol traffic directed at the device itself, causing management sessions to time out. The engineer wants to rate-limit traffic destined to the router's control plane without affecting transit data traffic. Which feature should be implemented to accomplish this?