Enable the traffic filtering and marking policy on a port group if you want to configure traffic security and marking on all virtual machine network adapters or uplink adapters that are participating in the group.

Note: You can disable the traffic filtering and marking policy on a particular port to avoid processing the traffic flowing through the port. See Disable Traffic Filtering and Marking on a Distributed Port or Uplink Port
Note: The traffic filtering and marking policy does not support vSphere Distributed Switch configured with Network Offloads Capability.

Procedure

  1. Locate a distributed port group or an uplink port group in the vSphere Client.
    1. Select a distributed switch and click the Networks tab.
    2. Click Distributed Port Groups to see the list of distributed port groups, or click Uplink Port Groups to see the list of uplink port groups.
  2. Click a distributed port group or an uplink port group and select the Configure tab.
  3. Under Settings, select Traffic Filtering And Marking.
  4. Click the Enable and reorder button.
  5. Click Enable all traffic rules.
  6. Click OK.

What to do next

Set up traffic marking or filtering on the data that is flowing through the ports of the distributed port group or through the uplink port group. See Mark Traffic on a Distributed Port Group or Uplink Port Group and Filter Traffic on a Distributed Port Group or Uplink Port Group.