This old chestnut again! It ran and ran on routerie.com some time back, even though an early poster got the answer...
access-list 5 permit 10.1.1.1
switchport mode access
no ip address
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address 0009.e879.2ce1
ip access-group 5 in
The trick is that the 3550 supports an inbound IP ACL on a layer-2 (i.e. switchport) port. All you need is to add port security and voila!
Is this question appearing again and again because it is being posed in the exams now?