Set the VLAN policy on an uplink port with the vSphere Client to handle VLAN traffic through the port in a different way than for the parent uplink port group.

Use the VLAN policy at the uplink port to propagate a trunk range of VLAN IDs to the physical network adapter for traffic filtering. The physical network adapter drops packets from the other VLANs if the adapter supports filtering by VLAN. Setting a trunk range improves networking performance because the physical network adapter filters traffic instead of the uplink port.

If you have a physical network adapter which does not support VLAN filtering, the VLANs might still not be blocked. In this case, configure VLAN filtering on a distributed port group or on a distributed port.

See the technical documentation from the adapter vendor for information about VLAN filtering support.

Launch the vSphere Client and log in to a vCenter Server system.


To override the VLAN policy at the port level, enable the port-level overrides. See Edit Advanced Distributed Port Group Settings.


  1. Log in to the vSphere Client and select the Networking inventory view.
  2. Select the vSphere distributed switch in the inventory pane.
  3. On the Ports tab, right-click the port to modify and select Edit Settings.
  4. Under Policies, select VLAN and click Override.
  5. Type a VLAN trunk range to propagate to the physical network adapter.
    For trunking of several ranges and individual VLANs, separate the entries with commas.
  6. Click OK.