In an Azure subscription with a storage account 'account1', you need to configure network access to upload VM disk files from an on-premises network with IP space 131.107.1.0/24 and to attach these disks to a new VM 'VM1' within a VNet 'VNet1' (IP space 192.168.0.0/24). What steps should be taken to meet these requirements while restricting all other access?