How to Change a VLAN ID on the vSphere Management Network and Virtual Machine Port Groups
search cancel

How to Change a VLAN ID on the vSphere Management Network and Virtual Machine Port Groups

book

Article ID: 443299

calendar_today

Updated On:

Products

VMware vSphere ESXi

Issue/Introduction

Modifying a VLAN ID on an active vSphere management interface (vmknic) or virtual machine port group can result in an immediate loss of host connectivity, disconnection from vCenter Server inventory, and a disruption to running virtual machine network paths if applied incorrectly.This article outlines the safe procedure for updating the VLAN ID across standard or distributed switch infrastructure.

Environment

 

VMware vSphere ESXi 7.x, 8.x, 9.x

VMware vCenter Server 7.x, 8.x, 9.x

 

Cause

Improper modification of network properties on virtual switches without ensuring upstream physical switch tag alignment or local switch redundancy paths leads to administrative lockouts.

Resolution

NOTE: Upstream physical switch ports (ToR switches) must be configured for the new VLAN tags (Trunk or Access mode) before altering virtual switch configuration to prevent a total loss of connectivity.

Part 1: Changing the VLAN ID on the ESXi Management Network

To prevent locking yourself out of the ESXi host during a management network migration, temporarily move the management VMkernel adapter (vmk0) to a standard switch. This ensures a localized network restore can be performed natively via the console if upstream or virtual center configuration connectivity fails.

Step 1: Migrate vmk0 to a Temporary Standard Switch (vSS)

  1. Log into the vSphere Client.

  2. Follow the documentation to migrate vmk0 and an assigned physical network adapter (uplink) away from the vSphere Distributed Switch: Migrate Virtual Machines (VMs) and VMkernel Adapters from Distributed Switch (vDS) to Standard Switch (vSS).

  3. Ensure management connectivity remains functional via the temporary vSS before continuing.

Step 2: Update the VLAN on the vCenter Distributed Portgroup

  1. In the vSphere Client, navigate to the Networking inventory view.

  2. Locate the target Management Distributed Virtual Switch (vDS) and select the original Management Distributed Portgroup.

  3. Right-click the portgroup and select Edit Settings.

  4. Navigate to VLAN and modify the configuration to the desired new VLAN ID. Click OK.

    • Note: Ensure this new VLAN is tagged correctly on the vDS portgroup across all inventory instances before proceeding.

Step 3: Modify VLAN Configuration on the Host via DCUI

  1. Establish a direct remote console session (KVM/IPMI/iLO/iDRAC) to the physical ESXi host.

  2. Press F2 and log into the Direct Console User Interface (DCUI).

  3. Navigate to Configure Management Network and select Network Adapters to ensure the appropriate interface is designated.

  4. Select VLAN (optional).

  5. Modify the configuration to the desired new VLAN ID and press Enter.

  6. Press ESC to exit. When prompted to save changes and restart the management network, select Y (Yes).

  7. Optional: If network parameters fail to apply cleanly to the interface, restart the ESXi host to reinitialize the network stack configuration with the new VLAN parameters.

  8. Repeat these sub-steps for all remaining ESXi hosts in the cluster.

Step 4: Revert Management Infrastructure to the vSphere Distributed Switch (vDS)

  1. Once management connectivity is validated under the new VLAN ID across all hosts, log back into the vSphere Client.

  2. Migrate the management infrastructure and uplinks from the temporary vSS back to the primary vDS by referencing: Migrating from Standard to Distributed vSwitch.

Part 2: Changing the VLAN ID on Virtual Machine Port Groups

Scenario 1: Using Standard Switches (vSS)

  1. Navigate to the ESXi host > Configure > Networking > Virtual switches.

  2. Find the target Virtual Machine Port Group and click Edit.

  3. Modify the VLAN ID field to match the new destination segment. Click OK.

Scenario 2: Using Distributed Virtual Switches (vDS)

  1. Select the Networking tab from the vSphere Client sidebar.

  2. Expand your Distributed Switch and click on the target Distributed Port Group.

  3. Go to Configure > Properties > Edit.

  4. Under the VLAN section, update the VLAN ID value.

  5. Click OK. The modification immediately applies to all virtual machines connected to this distributed port group across all cluster hosts.

Powered by Wolken Software