I have VMs on 3 hosts. I created a distributed vswitch. I want mirror the traffic of some of the VMs on 2 out of 3 hosts to a physical IDS. I went into Port Mirroring and selected Remote Mirroring source on the sources I selected the VM on each host that I wanted to monitor example. VM ingress/Egress on port ID 12 on host 192.168.1.0.10 etc. On the destination section, I selected uplink 2. I am thinking that I need to run cables from the vmnics up to my physical switch and assign them to the same VLAN as my IDS. Is this the prefered setup?
