Set the VLAN policy on an uplink port group with the vSphere Client to configure VLAN traffic processing generally for all member uplinks.

Use the VLAN policy at the uplink port level to propagate a trunk range of VLAN IDs to the physical network adapters for traffic filtering. The physical network adapters drop the packets from the other VLANs if the adapters support filtering by VLAN. Setting a trunk range improves networking performance because physical network adapters filter traffic instead of the uplink ports in the group.

If you have a physical network adapter which does not support VLAN filtering, the VLANs might still not be blocked. In this case, configure VLAN filtering on a distributed port group or on a distributed port.

See the technical documentation from the adapter vendors for information about VLAN filtering support.


Launch the vSphere Client and log in to a vCenter Server system.


  1. Log in to the vSphere Client and select the Networking inventory view.
  2. Right-click the uplink port group in the inventory pane, and select Edit Settings.
  3. Under Policies, click VLAN and type a VLAN trunk range to propagate to the physical network adapters.
    For trunking of several ranges and individual VLANs, separate the entries with commas.
  4. Click OK.