Restrict access to virtual server by IP address and client certificate authentication

with iRules everything is possible :)

if your client certificates contain a certain CN your can request that and compare it with a list of allowed ones.

there should be enough examples around how to do this.