It is possible to edit the security settings for "Promiscuous Mode", "MAC address changes" and "Forged Transmits" in two places:
On the vSwitch and on each individual portgroup on a vSwitch.
Can the settings on a portgroup override the vSwitch settings?
So for example if the vSwitch has "Promiscuous Mode : Reject", what happens if I have a portgroup on the same vSwitch with "Promiscuous Mode : Accept"? Would a VM on that portgroup be able to receive all packets on the VLAN, or only those originating within the vSwitch?
In short, what is the hierarchical relationship between the security settings on a vSwitch and its portgroups?