I am migrating a local SQL server to the cloud. I will be setting up a site to site VPN to access it. I need to restrict access to that server to a specific internal VLAN. Any ideas on how to do that?