Fun fun.
Oke so there are a couple of things I can think of right now.
# ARP spoof him to a non existing address, wrong adress or alike.
# Close certain ports, listen to his outgoing traffic and block port 12345 or whatever.
# Lock him down on the router with access restriction.
# kick him off the DHCP client table and do a DHCP starvation attack.
# Report him to the authorities