I think is time to put some effort over such basic functionality as portswitch port security.
In general this is what mac-learning+mac-binding+interface-set can do together and in addition have to recognize associated MAC address in the table by the originated interface.
Well I know that even if seems simple is not that simple.
But I have my trust in you guys...
This will help a lots when stepping in more corporate environments.