If it's tagged on the physical switch, you need to put VLAN there.
a last question: my vSwitch0 has 3 port groups
can I add a physical network interface to a single port group within the same vSwitch?
As far as I see all connected physical network interfaces are connected to all port groups (same vSwitch).
You can do it with "teaming and failover" in the port group settings.
However I don't really see the point of doing so. It would be cleaner to give that nic a new vSwitch.
Yes you can assign a physical network interface to a single port group within a vSwitch, but prior to do that you have to make sure that NIC is available to the vSwitch.
Then just go to the "Edit settings" menu of the port group and then in "Teaming and failover" you can select the vmnic required as "active, standby or unused".
In your case you will have just one vmnic as Active.
Hope that helps.