Allow specfic list of IP address to connect to VIP

Hi,

 

I have BigIP ltm 3900 (no ASM) for load balancing.

 

i want to allow only specfic IP addresses ( from different ranges) to be connected to this VIP.

 

ex: list of IP's (10.10.10.1, 192.168.1.2, 172.16.1.1) to be allowed to access VIP 172.30.1.1

 

other users (10.0.0.0/8, 192.168.1.0/24 , 172.16.0.0/16) should not be allowed to access the VIP

 

how can i achieve this ??

 

I have search and found that some people are using iRules ( i am new to iRules) if i configure iRule for 900 IP address to be allowed does it affect BigIP performance ??

 

 

thankssssssssssssssssssssssssssssssssss