Modify an existing standard vSwitch for a monitoring port

Steps:

1. Log on to the ESX as the root user in VMware vSphere Web Client.

   

2. Select the required ESX server and select Configure → Networking → Virtual switches.

   

3. Select the required vSwitch and click on the EDIT tab.

4. Go to Security section, make sure the fields are set to the values mentioned below, and click OK.

   • Promiscuous mode — Accept

   • MAC Address Changes — Accept

   • Forged Transmits — Accept

     Note

     Select the Override check-box to be able to change the state of an option.

   

5. Modify the port group that you are using for the VMs in this switch.

   For example, in scenario 2, this is the port group that you use for the 10.10.10.15 client.

   Note

   This step might be relevant only for scenario 2.

   1. Scroll down to the required switch and click the ellipsis icon next to the switch port group that you created and click Edit Settings.

      

   2. In the Properties section, modify the Network label if required.

   3. In the VLAN ID (Optional) field, you can specify the required VLAN. For the scenarios in this section, select All (4095).

      

   4. Go to Security section make changes in the fields as per your requirement, and click OK. In this scenario, the following settings have been implemented:

      • Promiscuous mode — Accept

      • MAC address changes — Accept

      • Forged transmits — Accept

      Note

      Select the Override check-box to be able to change the state of an option.

      

6. Create a port group to connect the monitoring port of a Sensor.

   1. Scroll to the corresponding vSwitch, expand the node, and click the ADD NETWORKING tab.

   2. In the Select connection type section, select Virtual Machine Port Group for a Standard Switch and click NEXT.

      

   3. In the Select target device section, select Select an existing standard switch and make sure the vSwitch that you created is selected. Then, click NEXT.

      

   4. In the Network Label field, enter the required name

      For example, enter VIPS Client Port.

   5. Make sure VLAN ID is set to All (4095), click NEXT and then FINISH.

      

   6. Scroll down to the switch where the switch port group has been created, click the ellipsis icon next to it and click Edit Settings.

      In this example, it is VIPS Client Port.

      

   7. In the Security section, make sure the fields are set with the following values, and click OK.

      • Promiscuous mode — Accept

      • MAC Address Changes — Accept

      • Forged Transmits — Accept

      Note

      Select the Override check-box to be able to change the state of an option.

      This setting is mandatory for the port group that you will use for any Sensor monitoring port.