Customer Onboarding with VMware NSX L2VPN Service : Management Components and Feature Design : 5.3 VMware NSX L2VPN Service Components : 5.3.4 Trunk Port
   
5.3.4 Trunk Port
Both the NSX Edge and the standalone NSX Edge appliance require the configuration of a trunk port interface. This interface is used to connect the NSX Edge appliances to the local VLANs or VXLANs that will be stretched between the on-premises data center and the VMware Cloud Provider. Some of the design considerations to consider with the trunk port configuration on the NSX Edge are as follows:
Port group security – The port group configured for trunk port usage requires one of the following configurations:
o VLAN setting of VLAN trunk, with the specified VLANs configured
o Promiscuous mode and forged transmits
Note When configuring the NSX Edge appliance, port group security settings are configured automatically by VMware NSX.
Considerations when configuring the trunk port configuration for the standalone NSX Edge appliance are as follows:
Port group security – The port group configured for trunk port usage requires one of the following configurations:
o VLAN setting of VLAN trunk, with the specified VLANs configured
o Sink port configuration (recommended) or promiscuous mode enabled
o Forged transmits
For full details on the configuration of trunk ports for VMware NSX L2VPN services, see the VMware NSX Administration Guide. Also, see the Layer 2 VPN to the Cloud blog post for additional configuration details for the VMware NSX L2VPN service.