Most routers allow the creation of firewall rules to control Internet access. By default everyone on the LAN side has access. But you should be able to limit access based on IP address, perhaps even MAC address. It just depends on the features available w/ your router. I can't be more specific since you didn't mention a make & model.