Winbox access only from L2TP/IPSec VPN

Hello!

I got a RB951G-2HnD a month ago and I started playing around with it. Right now, I have access to Winbox through the Internet via port 8291, but I would like to limit access to only allow Winbox access from within the L2TP/IPSec VPN. Can anyone help me with this?

Thank you so much!

Fixed by adding my LAN and VPN IP’s to IP-Services-Winbox to Allowed address.