Deny access to Drupal admin execpt for declared IP range

I am trying to deny access to drupal admin except for a /24 and I can't get it to work.

I am using this code:

location /admin/* {
allow 10.102.130.0/24;
deny all;
}

Is my syntax incorrect?
Does it need to be in a different location in the file? It is currently right after my server_name and root declarations.