To configure VLAN traffic processing generally for all member uplinks, you must set the VLAN policy on an uplink port. To handle VLAN traffic through the port in a different way than for the parent uplink port group, you must set the VLAN policy on an uplink .

Use the VLAN policy at the uplink port level to propagate a trunk range of VLAN IDs to the physical network adapters for traffic filtering. The physical network adapters drop the packets from the other VLANs if the adapters support filtering by VLAN. Setting a trunk range improves networking performance because physical network adapters filter traffic instead of the uplink ports in the group.

If you have a physical network adapter that does not support VLAN filtering, the VLANs still might not be blocked. In this case, configure VLAN filtering on a distributed port group or on a distributed port.

For information about VLAN filtering support, see the technical documentation from the adapter vendors.

To override the VLAN policy at the port level, enable the port-level overrides. See Configure Overriding Networking Policies on Port Level.


In the vSphere Web Client, navigate to a distributed switch.


Click the Uplink Port Groups tab.


Navigate to the VLAN policy is on the uplink port group or port.



Uplink port group


Right-click an uplink port group in the list and select Edit Settings.


Click VLAN.

Uplink port


Click an uplink port group.


Select Manage and select Ports.


Select a port and click Edit settings.


Click VLAN and select Override.


Type a VLAN trunk range value to propagate to the physical network adapters.

For trunking of several ranges and individual VLANs, separate the entries with commas.


Click OK.