1. Enable Port Security or MAC Address Filtering
2. Enable 802.1x
If you can't do something at Layer 2, your layer 3 options would be along the lines of implementing proper firewall placement or network segmentation (i.e., setting up a Voice DMZ).
Hailey
Please rate helpful posts!