how do limit VM or CT port