6.0

n
Create a vSphere distributed switch with one or more port groups.
Procedure
1 Log in to the vSphere Client and select the Networking inventory view.
2 Right-click the distributed switch and select Manage Port Groups.
3 Select the policy categories to modify.
Option Description
Security
Set MAC address changes, forged transmits, and promiscuous mode for
the selected port groups.
Traffic Shaping
Set the average bandwidth, peak bandwidth, and burst size for inbound
and outband traffic on the selected port groups.
VLAN
Configure how the selected port groups connect to physical VLANs.
Teaming and Failover
Set load balancing, failover detection, switch notification, and failover
order for the selected port groups.
Resource Allocation
Set network resource pool association for the selected port groups. This
option is available for vSphere distributed switch versions 5.0.0 and later
only.
Monitoring
Enable or disable NetFlow on the selected port groups. This option is
available for vSphere distributed switch versions 5.0.0 and later only.
Miscellaneous
Enable or disable port blocking on the selected port groups.
4 Click Next.
5 Select one or more port groups to modify and click Next.
The policy configuration page appears. Only the policy categories you previously selected are
displayed.
6 (Optional) In the Security group, select whether to reject or accept the Security policy exceptions.
Option Description
Promiscuous Mode
n
Reject — Placing a guest adapter in promiscuous mode has no effect
on which frames are received by the adapter.
n
Accept — Placing a guest adapter in promiscuous mode causes it to
detect all frames passed on the vSphere distributed switch that are
allowed under the VLAN policy for the port group that the adapter is
connected to.
MAC Address Changes
n
Reject — If you set the MAC Address Changes to Reject and the guest
operating system changes the MAC address of the adapter to anything
other than what is in the .vmx configuration file, all inbound frames
are dropped.
If the Guest OS changes the MAC address back to match the MAC
address in the .vmx configuration file, inbound frames are passed
again.
n
Accept — Changing the MAC address from the Guest OS has the
intended effect: frames to the new MAC address are received.
Forged Transmits
n
Reject — Any outbound frame with a source MAC address that is
different from the one currently set on the adapter are dropped.
n
Accept — No filtering is performed and all outbound frames are
passed.
7 (Optional) In the Traffic Shaping group, you can configure both Ingress Traffic Shaping and Egress
Traffic Shaping.
When traffic shaping is disabled, the tunable features are dimmed.
vSphere Administration with the vSphere Client
280 VMware, Inc.