So I’ve created an ERSPAN on a VMWare vDS to forward traffic to my Extrahop appliance. And I see that you can only add ports as the source(s). There’s no option to select the entire distributed switch as the source (or a VLAN).
I checked with VMWare support - that wasn’t too helpful. One suggestion they had was to add a range of ports (e.g. ports 0-4096). Problem with that is it will sweep the physical host uplink ports as well.
Has anyone found a better way to do this? Right now I’m down to perhaps scripting the addition of sources - and putting in a process to add new VMs to the source list.