VMware VLAN Tagging Methods – EST, VST and VGT

Within VMware there are 3 methods around VLAN tagging. They are EST, VST and VGT.

Below shows the differences between the 3,

TypePhysical (VNIC)Virtual (vSwitch)
ESTAccess portAccess port
VSTTrunk portAccess port
VGTTrunk portTrunk port

EST

Within EST (External Switching Tagging) VLAN tags are not handled[1]. The physical switchport is configured as an access-port and no vlan id is configured on the port-group.  Traffic is sent to onto the port group without any vlan tagging occurring.

VST

Within VST (Virtual Switch Tagging) the physical switchport is configured as a trunk port. The port-group is then configured with a VLAN ID of 1-4094. Traffic is received on the vnic tagged, the VLAN tag is then removed and the traffic sent onto the corresponding port-group untagged.

VGT

Within VGT (Virtual Guest Tagging) only vlan tagged traffic is handled. The physical switchport is configured as a trunk port and the port-group is then configured with a VLAN ID of 4095 (All). Traffic is received on the vnic tagged. The traffic is then sent onto the port-group still tagged.

Reference

[1] https://communities.vmware.com/people/raffic_ncc/blog/2013/04/04/vlan-tagging-vst-est-vgt-on-vmware-vsphere

Rick Donato

Want to become a VMware expert?

Here is our hand-picked selection of the best courses you can find online:
Complete VMware Administration course
VMware vSphere 7 – Install, Configure, Manage
and our recommended certification practice exams:
AlphaPrep Practice Tests - Free Trial