| If distributed switches are not used, this is not applicable. |
From the vSphere Client, go to "Networking".
Select a distributed switch >> Select a distributed port group >> Configure >> Settings >> Policies.
Review the port group VLAN tags and verify that they are not set to a reserved VLAN ID.
From a PowerCLI command prompt while connected to the vCenter server, run the following command:
Get-VDPortgroup | select Name, VlanConfiguration
If any port group is configured with a reserved VLAN ID, this is a finding.