Not sure if the SMC has any parental controls built in?
If not then you would have to create a static DHCP reservation so the phone gets the same IP always and then add a firewall rule to block the outbound access from that IP. Not sure if the SMC can do static DHCP reservations though.
