I have setup a port mirroring scheme using ERSPAN at a physical level with Cisco switches.
The ERSPAN destination port is connected to a vmware host (vSphere 6.7) and the hosted vm server is installed with Wireshark to monitor the mirrored traffic.
I have put the related vSwitch to accept promiscuous mode. However, no ERSPAN traffic is getting observed on Wireshark.
I know ERSPAN setup itself is not an issue because it tested successfully with a physical server with Wireshark installed.
Interestingly, when I set up a SPAN port mirroring on the same destination port (Cisco switch), putting the vSwitch on promiscuous mode allows the SPAN traffic to go through and is observed on Wireshark.
What am I missing here? Is there a special provision I need to consider when putting ERSPAN through vSwitch other than putting it into a promiscuous mode?
Thanks in advance!