Users on a corporate VLAN report intermittent connectivity and are receiving IP addresses from an unknown gateway. Investigation reveals an employee plugged in a consumer wireless router that is handing out DHCP leases. Which switch security feature should the network administrator enable to prevent unauthorized devices from distributing DHCP addresses in the future?