If you are using a VSWITCH with a trunk port on the physical switch, you are already doing 802.1q trunking between VM and the network. CP is doing it for you.
Why in heaven's name do they want the Linux guests doing .1q trunking? That's a recipie for VLAN jumping, which they will have fits about.
