To configure VLAN traffic processing generally for all member uplinks, you must set the VLAN policy on an uplink port. To handle VLAN traffic through the port in a different way than for the parent uplink port group, you must set the VLAN policy on an uplink .

Use the VLAN policy at the uplink port level to propagate a trunk range of VLAN IDs to the physical network adapters for traffic filtering. The physical network adapters drop the packets from the other VLANs if the adapters support filtering by VLAN. Setting a trunk range improves networking performance because physical network adapters filter traffic instead of the uplink ports in the group.

If you have a physical network adapter that does not support VLAN filtering, the VLANs still might not be blocked. In this case, configure VLAN filtering on a distributed port group or on a distributed port.

For information about VLAN filtering support, see the technical documentation from the adapter vendors.


To override the VLAN policy at the port level, enable the port-level overrides. See Configure Overriding Networking Policies on Port Level.


  1. In the vSphere Client, navigate to a distributed switch.
  2. On the Networks tab, click Uplink Port Groups.
  3. Navigate to the VLAN policy is on the uplink port group or port.
    Option Action
    Uplink port group
    1. Right-click an uplink port group in the list and select Edit Settings.
    2. Click VLAN.
    Uplink port
    1. Double-click an uplink port group.
    2. On the Ports tab, select a port and click the Edit distributed port settings tab.
    3. Click VLAN and select Override.
  4. Enter a VLAN trunk range value to propagate to the physical network adapters.
    For trunking of several ranges and individual VLANs, separate the entries with commas.
  5. Click OK.