There is a filter system on the airport routers.
Go to Network and enable access control.
By default everything is unlimited access. Click the plus + control at the bottom and create a new filter.
You can put the MAC address of the wireless clients you do not wish connected into this filter.
And set either a timed access or no access.
Only wireless clients were included so it is really in the wrong place and should be under wireless.
It is also primitive.. Apple routers never had more controls than you can number on one hand.. built by geniuses for idiots.. Apple's motto.
There are lots of posts about it in the past that have strangely disappeared.. I guess people have finally moved to more functional routers if they have kids who need controlling.
https://www.youtube.com/watch?v=btfZYLiMb2M