How to use irules to do like this

Let us say that you are operating on the client IP:

set reduced [string range $ip 0 [expr { [string last . [IP::client_addr]] - 1 }]]

This is ~20% faster than a variant:

set reduced [join [lrange [split [IP::client_addr] .] 0 2] .]