Can you create a new iSCSI Target and place only those LUNs that you want for the 2 ESXi IPs in the Allow and the 0.0.0.0/0 for the Deny. Should work and the other systems should not be able to connect.