RadarG
Enthusiast
Enthusiast

3 hosts into one 1 IDS

I have VMs on 3 hosts. I created a distributed vswitch. I want mirror the traffic of some of the VMs on 2 out of 3 hosts to a physical IDS. I went into Port Mirroring and selected Remote Mirroring source on the sources I selected the VM on each host that I wanted to monitor example. VM ingress/Egress on port ID 12 on host 192.168.1.0.10 etc.  On the destination section, I selected uplink 2. I am thinking that I need to run cables from the vmnics up to my physical switch and assign them to the same VLAN as my IDS.  Is this the prefered setup?

Labels (2)
0 Kudos
0 Replies