A small business owner reports that an unknown device keeps connecting to the office Wi-Fi even though the WPA2 passphrase was recently changed. The owner suspects a former employee shared the password before leaving. Which router feature should the technician configure to allow ONLY the company's approved laptops and phones to associate with the access point, regardless of who knows the passphrase?