Assuming the router you have works like the router I use to have like a Linksys, you set a rule to block a MAC NIC, then the entire machine is blocked. I would check this out on my WatchGuard as I have never tried it, but I cannot remember the damn password. ;-)
It's time to head back to work.
Later
Duane :)