You can create schedules under Firewall -> Settings -> Schedules and set your needed time.Then create a Firewall Rule and select the created Schedules.Best is maybe to set the time the internet should be blocked and create a deny rule on top.You can register the MAC in the DHCP Server and assing a static IP. So you can create the rule only for the single device via the IP-Adress.