Nested Home Lab network issue

[mummonth]

Hello, guys!

Building nested home lab, bought poweredge r720 with 64GB RAM, installed ESXi 6.7, configured mgmt IP 10.1.1.10/16

Then deployed nested ESXi with 24GB RAM, configured mgmt IP 10.1.1.50/16.

Then inside it deployed VCSA and configured IP 10.1.1.100.

From my workstation 10.1.1.1/16 all ESXi mgmt IPs are reachable, except VCSA (no pings, no https).

When I SSH to 10.1.1.50, I can ping both desktop 10.1.1.1/16 and VCSA  10.1.1.100/16.

Ffom VCSA desktop 10.1.1.1/16 is unreachable.

Please suggest.

Thank you.

[daphnissov]

Change port group security policy to allow forged transmits and MAC address changes.

[mummonth]

Thanks for advice.

Allowed MAC address changes and Forged transmits at vSwitch level on both ESXi vSwitches (poergroups inherit it from vSwitch) and still no ping passes through.

Any other suggestions?

[mummonth]

Ok, it was Promiscuous Mode on the physical ESXi which solved the issue when was enabled.

Thank you.