Restrict access to virtual server by IP address and client certificate authentication

I have tried the following irule but not work.

when CLIENT_ACCEPTED {

set redir 0

if { ! [class match [IP::client_addr] eq EISAllow] } {

log local0. "Dropped connection: client IP [IP::client_addr] is blacklisted."

SSL::enable

set sslenable 0

set redir 1 

SSL::profile Client_Cert_Auth_Policy

#drop

} 

}