Mikrotik disable wired client (ip) temporarily?

Question

Mikrotik

In general, this is the case, you need to restrict access to the Internet for a while for an employee in the office, there is a gateway, from the gateway to the managed mikrotik (24port) the network diverges throughout the office, through unmanaged hubs to each office.
Through ip> firewall does not channel for some reason... There are options what? And where can I see a list of all connected (LAN) employees?

Answer 1

Given the unmanaged hubs, you have no other options, only a firewall.

Answer 2

who is the gateway?

Answer 3

Managed Mikrotik who exactly is this? And how is it configured?
I'll try my finger in the sky - the rules do not work for you because use-ip-firewall=yes is not enabled in the bridge properties, I assume this based on the fact that all 24 ports are there in the bridge.