IP ranges or VPN

Can the service be configured to be accessible by users from only allowed IP ranges or alternatively through a site to site VPN?