Is it possible to limit the login for rancher to certain subnets or ip addresses?

Not directly, you'd have to do this at the firewall/reverse proxy level.