Creating LAB environments within ESXi with access from network, and to Internet

Hi,

I am wanting to create a "lab" style environment on a single standalone ESXi host (licensed)

I am wanting 6 seperate environments that have the following requirements

Each environment can talk to virtual machines within its envrionment only
Each environment can talk to the internet via dedicated VLAN provided on the firewall which is just an outbound internet only service

My challenge is, short of allowing staff in using vSphere client and seeing the whole environment, how do i allow staff to say RDP into their assigned environment and manage their own VMs? is there a "proxy" style machine that can be used for this?

I did consider a dual nic Win7 machine per environment that has one nic for their environment and another nic to our prod lan that allows RDP in only

Thank you