Set the VLAN policy on an uplink port to handle VLAN traffic through the port in a different way than for the parent uplink port group.

Use the VLAN policy at the uplink port to propagate a trunk range of VLAN IDs to the physical network adapter for traffic filtering. The physical network adapter drops packets from the other VLANs if the adapter supports filtering by VLAN. Setting a trunk range improves networking performance because the physical network adapter filters traffic instead of the uplink port.

If you have a physical network adapter which does not support VLAN filtering, the VLANs might still not be blocked. In this case, configure VLAN filtering on a distributed port group or on a distributed port.

See the technical documentation from the adapter vendor for information about VLAN filtering support.


To override the VLAN policy at the port level, enable the port-level overrides. See Edit Advanced Distributed Port Group Settings with the vSphere Web Client.


  1. Locate an uplink port group in the vSphere Web Client.
    1. To locate an uplink port group, select a distributed switch and click the Related Objects tab.
    2. Select the Uplink Port Groups tab and double-click an uplink port group from the list.
      The uplink port group appears at the top level of the navigator on the left.
  2. Click the Manage tab and select Ports.
  3. Select an uplink port from the list and click Edit distributed port settings.
  4. Click VLAN and select the Override check box.
  5. Type a VLAN trunk range to propagate to the physical network adapter.
    For trunking of several ranges and individual VLANs, separate the entries with commas.
  6. Click OK.