ACL for sub-website?

As Deb suggested before, you'd actually want to define the class as a type of 'address' to avoid doing a string comparison against the client IP address. This also allows you to define networks instead of individual hosts.

The bigip.conf entry should look like:

 
 class myIPs {  
    host 10.10.1.1  
    network 192.168.1.1 255.255.255.0  
 } 
 

And make sure you don't have a space in the class references. They should be $::allow and $::subsite.

Aaron