Need to use DNS service for allowed IP range.

There are several ways to solve this, depending on which modules are available to you.

If all you have is a BIG-IP DNS you could limit access to the listener by writing an irule that only accepted connections from IP-prefixes defined in a datagroup that you populate with the ranges from your customer, or you could do the same by defining a Packet Filter