Managed switch drops 802.1Q tagged frames on trunk when MTU set above 1500 to ESXi host

Environment

Small business managed switch (Netgear GS308E FW 2.5.0) connected via 1GbE trunk to an ESXi 7.0 host running multiple VLAN‑tagged VMs and a distributed vSwitch; default MTU 1500 previously, changed to 9000 (jumbo frames) for storage traffic and some VLANs.

Symptoms

After enabling MTU 9000 on the physical switch trunk port and the ESXi physical NIC, VMs on VLAN 100 intermittently lose connectivity to other VLANs and to storage targets; ping with large ICMP payloads (>1500) between hosts on different switches fails with no fragmentation. Smaller packets succeed. The issue is limited to traffic that crosses the managed switch trunk — VMs on the same host can talk at jumbo MTU without problem.

Observations

Captures on the ESXi physical NIC show 1514‑byte frames being forwarded from the host, and the switch egress counters on the trunk port increment but receiving ports drop frames; 'show interfaces status' on the switch reports no link flaps. When the switch MTU is left at 1500 and only the ESXi host uses 9000, hosts can still send large frames internally with offloading, but inter‑switch traffic fails. Lowering MTU on ESXi to 1500 restores full connectivity. Switch firmware is not the latest; vendor documentation warns of limited jumbo frame support when VLAN tagging is enabled on some models.

Already attempted

Reverted MTU to 1500 — problem resolved. Adjusted MTU on all intermediary devices (switch, ESXi pNIC, vmkernel) to 9000 one at a time and tested. Enabled/disabled VLAN tagging on trunk to isolate; issues persist only when both VLAN tagging and MTU >1500 active. Updated NIC driver on ESXi host to latest supported. Performed capture on switch mirror port — saw tagged frames truncated when larger than 1500. Contacted switch vendor support; they noted older switch models may mishandle jumbo frames with 802.1Q tags.

Question

Is this a configuration/MTU mismatch across devices or a known firmware limitation for certain managed switches handling 802.1Q tagged jumbo frames, and what safe diagnostics and mitigations should I use to restore connectivity without disabling VLAN separation or jumbo frames globally?

Post timeline

COMMUNITY RESPONSES

Verified community troubleshooting

0 replies

No answers yet..

Showing 0 of 0 community responses

AI DIAGNOSTICS

Incident analysis

Updated 1w ago• Trouble ID

Most likely causes

Switch firmware/hardware bug that drops tagged jumbo frames or treats 802.1Q-tagged frames as exceeding MTU. 95%

Switch uses CPU-based processing for VLAN tagging that cannot handle large frames at line rate and drops them silently. 75%

NIC offload features on ESXi (GSO/TSO) producing frames larger than the switch can handle, causing network fragmentation failures. 30%

Summary

The behavior indicates an MTU mismatch or device limitation where the switch either does not account for the extra VLAN tag bytes when performing MTU checks or its hardware forwarding path cannot handle jumbo frames that include 802.1Q headers. Some lower-end managed switches compute MTU per physical payload and erroneously drop frames when VLAN overhead pushes frame size beyond internal thresholds, or their CPU-based VLAN processing path cannot handle large frames at wire speed. Since lowering MTU on ESXi fixes the issue, the problem is either a device firmware limitation or a misconfiguration across link endpoints.

Suggested Fixes

Diagnostic step 1

Verify MTU end‑to‑end, accounting for VLAN tag: when testing, use iperf3 with --mtu or ping with large payload and DF flag to locate first-hop drop. Ensure MTU is set consistently on ESXi pNIC, vSwitch, vmkernel interfaces, physical switch trunk ports, and any downstream switches.

Diagnostic step 2

Temporarily set MTU to 9000 on both ends of a single trunk link and test only that link to prove whether the issue is localized to one switch model/port.

Diagnostic step 3

Disable NIC offloads (GSO/TSO/LRO) on ESXi for a test to see if that affects frame sizes sent to the switch.