Couldn't you do this with your router/firewall? Of course, this would mean managing devices by MAC instead of DHCP, but one of the wifi routers (maybe a Tomato upgrade) allowed designating blocks of time to allow/deny WAN access