option 1...the router has under firewall the option of "client ip filters" here you can restrict the internet per ip.
or if your fed up with his browsing just disable the wireless bit, and he cant get on either.
ow just make sure you put a password on the router otherwise if he's a clever 1 he might just find how to get in and change all settings anyways
