Uh, what? How is your firewall going to do that? It is not between your client and your switch.
If you want to block access to a switch's management IP, you need one of the following:
1) have the switch's management port to be on the far side of the firewall (perhaps on a different VLAN routed by the firewall/router)
2) have the switch's management port ACL'd off by the switch's software that defines what hosts are allowed to access it
3) have the switch's silicon do filtering ("on-network firewalling")
These require progressively more advanced switches. The cheapest consumer-grade switches don't offer VLAN's, the lowest tier of IP-enabled switches may not allow ACL's for management, and it takes a mid-tier enterprise grade switch to do filtering.