Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Kind of depends on the setup, but you could use FlowSensors on all VMware Hosts and attach them to SPAN ports. Not sure if ERSPAN or Netflow in VMware is locked to distributed switches.
@ammahend You should have these commands available, indeed from 17.15.X:
Step 1. Create TACACSS server and AAA groups, associate the client (router) trustpoint.
tacacs server svs_tacacs address ipv4 10.225.253.209 single-connection tls port 6049 tls ...