prevent non-esx servers configure lun masking

To prevent non-ESX Servers from seeing VMFS datastores, where shouldLUN masking be configured?