Are you using vDS or standard vSwitches? If you're not using vDS, you should consider it. They're much easier to manage. Your best bet is probably to create a new vDS with your 10GbE ports, and you can migrate the VMkernel adapters during the creation.
If we are going to use a different network (IP segment), you can create a new vmkernel port for vSAN and get the vSAN traffic enabled. Make sure they will be able to ping between neighbor vSAN vmkernel with the new subnet with configured MTU.
Once the new vmkernel ports are enabled, you can verify the connectivity and start unchecking the vSAN traffic from the existing vmkernel ports used for vSAN. Go with only one host at a time and make sure you check the vSAN health every time you uncheck the network.
Note: You may have to check the unicast entries for the neighbor hosts before unchecking the vSAN traffic on existing hosts.