Only allow users from specific Ip address to gain access

I tried this rule but I got an error in my logs saying

 

 

TCL error: rule client_allow - invalid command name

 

"{10.1.1.0/24}{10.1.2.0/24}" while executing "$::Allowed_Clients"

 

 

I have a datagroup called Allowed_Clients and it contains

 

10.1.1.0 255.255.255.0

 

10.1.2.0 255.255.255.0

 

 

When I tried to connect from a different network I was allowed. I put a

 

log local0. "IP [client::IP_addr]tried to log in" statement into my rule to see who is trying to log into the server and my IP from my local machine showed up in the logs as well as the above error message. So it did not block me from gaining access and I received and error as well.