Attach your virtual machine in a different networking"port-group" and avoid using the same vlan as other EPGs.
But I am still confused how to configure the "path" to the fabric.
I have the same scenario, actually I am connecting a virtual CSR to the fabric,
It is clear now that I should use a different vlan, but I have no sense on how to configure the "path" of Interface profile.
Could you tell me how you set this?