You would just set up the second ESXi host normally. The only difference would be that it is connected to the network for which the first ESXi host is the firewall. Once you get the first ESXi host network working, I would consider connecting a switch to the LAN NIC and you can use it as the network connection for the second host. It should behave normally.