Installing on Multiple-NIC VM

How to assign Rancher URL to specifig physical port or IP address?

I’m installing Rancher on Kubernetes-on-VM according to HA installation document. The VM has 3 vNICs to: service-segment, controll-segment and management-segment.

I want Rancher UI accept requests only from service segment and reject requests from controll/management seg. But kube-apiserver endpoint is on controll-seg so Rancher might use both NICs. There might no specific method to do this. Should use iptables?