Ip Restrict then client cert check

So this is what I did and it seems not to work...both profiles work but not the Irule.

 

 

when CLIENT_ACCEPTED {  
    if { [matchclass [IP::client_addr] equals $::Test_IPs]} {  
      SSL::profile NoBrowserCert  
    } else {  
      SSL::profile BrowserCert  
    }  
  }  
    
  when HTTP_REQUEST {  
    SSL::renegotiate  
  }

 

 

I got this from http://devcentral.f5.com/wiki/default.aspx/iRules/SSL__profile.html

 

 

*edit...Fix the code too many brackets. But I have another issue..It continues to use my noBrowserCert when I try and switch.