Only allow vlan for cisco plugin + add some validation

I guess the "mode" setting is just ignored VMware plugin? Then this should be ok.