hi,
i'll create VLAN backed Network Pools for my vcloud testcase and i'm not sure that i understand all correctly.
The Portgroups will be created automaticly with a VLAN ID of the given VLAN Range (e.g. 200-300). This Organisation Network is connected to an external network through a vshield Edge (NAT/FW). The external Network with the vlan ID 102 is linked to a Firewall. So i will configure the switch ports with vlan access to 200-300,102. VLAN 200-300 are only important for the communication between the esxi Hosts. From Outside only vlan102 has to be configured on the firewall. Correct? I hope everybody understand me what i try do describe 
greets
Steffen