TCL with iRule in v11.1

Hi Misty,

It would be better to create a new post for a new question. Regardless, you can remove the $:: prefix from the data group and replace matchclass with class match:

when CLIENT_ACCEPTED {
   if { [IP::addr [IP::client_addr] equals 10.10.10.10 ] or [class match [IP::client_addr] equals ext_net ] } {
      pool ssh
   } else {
      discard
   }
}

You could also move the single IP address into the ext_net address data group and remove the IP::addr command.

Aaron