If you are not using any Network Management Systems that can support things like Policies or using 802.1x with a NAC, I think you are only going to be able to use port security and lock it by source MAC.
So basically what you want to do is, tell the switch that on Port X, only devices with a MAC source of X is allowed to use the port.
Configures a single authorized source MAC addre
ss for a port that belongs to a specified VLAN.
port-security slot/port mac mac_address [vlan vlan_i]
You might want to look at the action that is taken when the port detects a MAC address that is not authorized so you can tell the switch to disable the port or simply alert only, so that it can sent a SNMP trap.
Please be mindful that this isn't 100% secure as any user with technical know-how, will be able to change their MAC address to the one specified and still get access.
Alternatively what you could also do, if you are using a specific VLAN for the access points, disable any form of DHCP for this VLAN and statically assign the IP addresses to your access points. And if a user does try to get on that particalular port, without DHCP they will be stuck. Unless, of course they are clever enough to know whatIP range to assign themselves, including gateway, etc.
Hope this helps you on your quest.