- Preface
- Using the Command-Line Interface
-
- IP Multicast Routing Technology Overview
- Configuring IGMP
- Configuring IGMP Proxy
- Constraining IP Multicast in Switched Ethernet
- Configuring PIM
- Configuring PIM MIB Extension for IP Multicast
- Configuring MSDP
- Configuring Wireless Multicast
- Configuring SSM
- Configuring Basic IP Multicast Routing
- Configuring the Service Discovery Gateway
- IP Multicast Optimization: Optimizing PIM Sparse Mode in a Large IP Multicast Deployment
- IP Multicast Optimization: Multicast Subsecond Convergence
- IP Multicast Optimization: IP Multicast Load Splitting across Equal-Cost Paths
- IP Multicast Optimization: SSM Channel Based Filtering for Multicast
- IP Multicast Optimization: PIM Dense Mode State Refresh
- IP Multicast Optimization: IGMP State Limit
-
- Configuring the Device for Access Point Discovery
- Configuring Data Encryption
- Configuring Retransmission Interval and Retry Count
- Configuring Adaptive Wireless Intrusion Prevention System
- Configuring Authentication for Access Points
- Converting Autonomous Access Points to Lightweight Mode
- Using Cisco Workgroup Bridges
- Configuring Probe Request Forwarding
- Optimizing RFID Tracking
- Configuring Country Codes
- Configuring Link Latency
- Configuring Power over Ethernet
-
- Preventing Unauthorized Access
- Controlling Switch Access with Passwords and Privilege Levels
- Configuring TACACS+
- Configuring RADIUS
- Configuring Kerberos
- Configuring Local Authentication and Authorization
- Configuring Secure Shell (SSH)
- X.509v3 Certificates for SSH Authentication
- Configuring Secure Socket Layer HTTP
- Configuring IPv4 ACLs
- Configuring IPv6 ACLs
- Configuring DHCP
- Configuring IP Source Guard
- Configuring Dynamic ARP Inspection
- Configuring IEEE 802.1x Port-Based Authentication
- Configuring Web-Based Authentication
- Configuring Port-Based Traffic Control
- Configuring IPv6 First Hop Security
- Configuring Cisco TrustSec
- Configuring Control Plane Policing
- Configuring Wireless Guest Access
- Managing Rogue Devices
- Classifying Rogue Access Points
- Configuring wIPS
- Configuring Intrusion Detection System
-
- Administering the Switch
- Performing Device Setup Configuration
- Configuring Right-To-Use Licenses
- Configuring Administrator Usernames and Passwords
- Configuring 802.11 parameters and Band Selection
- Configuring Aggressive Load Balancing
- Configuring Client Roaming
- Configuring Application Visibility and Control
- Configuring Voice and Video Parameters
- Configuring RFID Tag Tracking
- Configuring Location Settings
- Cisco Hyperlocation
- Monitoring Flow Control
- Configuring SDM Templates
- Configuring System Message Logs
- Configuring Online Diagnostics
- Managing Configuration Files
- Configuration Replace and Configuration Rollback
- Working with the Flash File System
- Upgrading the Switch Software
- Conditional Debug and Radioactive Tracing
- Troubleshooting the Software Configuration
- Finding Feature Information
- Restrictions for EtherChannels
- Information About EtherChannels
- Configuring Layer 2 EtherChannels (CLI)
- Configuring Layer 3 EtherChannels (CLI)
- Configuring EtherChannel Load-Balancing (CLI)
- Configuring EtherChannel Extended Load-Balancing (CLI)
- Configuring the PAgP Learn Method and Priority (CLI)
- Configuring LACP Hot-Standby Ports
- Configuring LACP Fast Rate Timer
- Configuring Auto-LAG Globally
- Configuring Auto-LAG on a Port Interface
- Configuring Persistence with Auto-LAG
Configuring EtherChannels
Finding Feature Information
Your software release may not support all the features documented in this module. For the latest caveats and feature information, see Bug Search Tool and the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the feature information table at the end of this module.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
Restrictions for EtherChannels
The following are restrictions for EtherChannels:
Information About EtherChannels
EtherChannel Overview
EtherChannel provides fault-tolerant high-speed links between switches, routers, and servers. You can use the EtherChannel to increase the bandwidth between the wiring closets and the data center, and you can deploy it anywhere in the network where bottlenecks are likely to occur. EtherChannel provides automatic recovery for the loss of a link by redistributing the load across the remaining links. If a link fails, EtherChannel redirects traffic from the failed link to the remaining links in the channel without intervention.
An EtherChannel consists of individual Ethernet links bundled into a single logical link.

The EtherChannel provides full-duplex bandwidth up to 8 Gb/s (Gigabit EtherChannel) or 80 Gb/s (10-Gigabit EtherChannel) between your switch and another switch or host.
Each EtherChannel can consist of up to eight compatibly configured Ethernet ports.
The number of EtherChannels is limited to 128.
The LAN Base feature set supports up to 24 EtherChannels.
All ports in each EtherChannel must be configured as either Layer 2 or Layer 3 ports. The EtherChannel Layer 3 ports are made up of routed ports. Routed ports are physical ports configured to be in Layer 3 mode by using the no switchport interface configuration command. For more information, see the Configuring Interface Characteristics chapter.
EtherChannel Modes
You can configure an EtherChannel in one of these modes: Port Aggregation Protocol (PAgP), Link Aggregation Control Protocol (LACP), or On. Configure both ends of the EtherChannel in the same mode:
-
When you configure one end of an EtherChannel in either PAgP or LACP mode, the system negotiates with the other end of the channel to determine which ports should become active. If the remote port cannot negotiate an EtherChannel, the local port is put into an independent state and continues to carry data traffic as would any other single link. The port configuration does not change, but the port does not participate in the EtherChannel.
-
When you configure an EtherChannel in the on mode, no negotiations take place. The switch forces all compatible ports to become active in the EtherChannel. The other end of the channel (on the other switch) must also be configured in the on mode; otherwise, packet loss can occur.
EtherChannel on Devices
You can create an EtherChannel on a device, on a single device in the stack, or on multiple devices in the stack (known as cross-stack EtherChannel).


EtherChannel Link Failover
If a link within an EtherChannel fails, traffic previously carried over that failed link moves to the remaining links within the EtherChannel. If traps are enabled on the switch, a trap is sent for a failure that identifies the switch, the EtherChannel, and the failed link. Inbound broadcast and multicast packets on one link in an EtherChannel are blocked from returning on any other link of the EtherChannel.
Channel Groups and Port-Channel Interfaces
An EtherChannel comprises a channel group and a port-channel interface. The channel group binds physical ports to the port-channel interface. Configuration changes applied to the port-channel interface apply to all the physical ports bound together in the channel group.
The channel-group command binds the physical port and the port-channel interface together. Each EtherChannel has a port-channel logical interface numbered from 1 to 128. This port-channel interface number corresponds to the one specified with the channel-group interface configuration command.

-
With Layer 2 ports, use the channel-group interface configuration command to dynamically create the port-channel interface.
You also can use the interface port-channel port-channel-number global configuration command to manually create the port-channel interface, but then you must use the channel-group channel-group-number command to bind the logical interface to a physical port. The channel-group-number can be the same as the port-channel-number, or you can use a new number. If you use a new number, the channel-group command dynamically creates a new port channel.
-
With Layer 3 ports, you should manually create the logical interface by using the interface port-channel global configuration command followed by the no switchport interface configuration command. You then manually assign an interface to the EtherChannel by using the channel-group interface configuration command.
-
With Layer 3 ports, use the no switchport interface command to configure the interface as a Layer 3 interface, and then use the channel-group interface configuration command to dynamically create the port-channel interface.
Port Aggregation Protocol
The Port Aggregation Protocol (PAgP) is a Cisco-proprietary protocol that can be run only on Cisco devices and on those devices licensed by vendors to support PAgP. PAgP facilitates the automatic creation of EtherChannels by exchanging PAgP packets between Ethernet ports.
By using PAgP, the device or device stack learns the identity of partners capable of supporting PAgP and the capabilities of each port. It then dynamically groups similarly configured ports (on a single device in the stack) into a single logical link (channel or aggregate port). Similarly configured ports are grouped based on hardware, administrative, and port parameter constraints. For example, PAgP groups the ports with the same speed, duplex mode, native VLAN, VLAN range, and trunking status and type. After grouping the links into an EtherChannel, PAgP adds the group to the spanning tree as a single device port.
PAgP Modes
|
Mode |
Description |
|---|---|
|
auto |
Places a port into a passive negotiating state, in which the port responds to PAgP packets it receives but does not start PAgP packet negotiation. This setting minimizes the transmission of PAgP packets. |
|
desirable |
Places a port into an active negotiating state, in which the port starts negotiations with other ports by sending PAgP packets. This mode is supported when the EtherChannel members are from different switches in the switch stack (cross-stack EtherChannel). |
Switch ports exchange PAgP packets only with partner ports configured in the auto or desirable modes. Ports configured in the on mode do not exchange PAgP packets.
Both the auto and desirable modes enable ports to negotiate with partner ports to form an EtherChannel based on criteria such as port speed. and for Layer 2 EtherChannels, based on trunk state and VLAN numbers.
Ports can form an EtherChannel when they are in different PAgP modes as long as the modes are compatible. For example:
-
A port in the desirable mode can form an EtherChannel with another port that is in the desirable or auto mode.
-
A port in the auto mode can form an EtherChannel with another port in the desirable mode.
A port in the auto mode cannot form an EtherChannel with another port that is also in the auto mode because neither port starts PAgP negotiation.
Silent Mode
If your switch is connected to a partner that is PAgP-capable, you can configure the switch port for nonsilent operation by using the non-silent keyword. If you do not specify non-silent with the auto or desirable mode, silent mode is assumed.
Use the silent mode when the switch is connected to a device that is not PAgP-capable and seldom, if ever, sends packets. An example of a silent partner is a file server or a packet analyzer that is not generating traffic. In this case, running PAgP on a physical port connected to a silent partner prevents that switch port from ever becoming operational. However, the silent setting allows PAgP to operate, to attach the port to a channel group, and to use the port for transmission.
PAgP Learn Method and Priority
Network devices are classified as PAgP physical learners or aggregate-port learners. A device is a physical learner if it learns addresses by physical ports and directs transmissions based on that knowledge. A device is an aggregate-port learner if it learns addresses by aggregate (logical) ports. The learn method must be configured the same at both ends of the link.
When a device and its partner are both aggregate-port learners, they learn the address on the logical port-channel. The device sends packets to the source by using any of the ports in the EtherChannel. With aggregate-port learning, it is not important on which physical port the packet arrives.
PAgP cannot automatically detect when the partner device is a physical learner and when the local device is an aggregate-port learner. Therefore, you must manually set the learning method on the local device to learn addresses by physical ports. You also must set the load-distribution method to source-based distribution, so that any given source MAC address is always sent on the same physical port.
You also can configure a single port within the group for all transmissions and use other ports for hot-standby. The unused ports in the group can be swapped into operation in just a few seconds if the selected single port loses hardware-signal detection. You can configure which port is always selected for packet transmission by changing its priority with the pagp port-priority interface configuration command. The higher the priority, the more likely that the port will be selected.
![]() Note | The device supports address learning only on aggregate ports even though the physical-port keyword is provided in the CLI. The pagp learn-method command and the pagp port-priority command have no effect on the device hardware, but they are required for PAgP interoperability with devices that only support address learning by physical ports, such as the Catalyst 1900 switch. When the link partner of the device is a physical learner, we recommend that you configure the device as a physical-port learner by using the pagp learn-method physical-port interface configuration command. Set the load-distribution method based on the source MAC address by using the port-channel load-balance src-mac global configuration command. The device then sends packets to the physcial learner using the same port in the EtherChannel from which it learned the source address. Only use the pagp learn-method command in this situation. |
PAgP Interaction with Other Features
The Dynamic Trunking Protocol (DTP) and the Cisco Discovery Protocol (CDP) send and receive packets over the physical ports in the EtherChannel. Trunk ports send and receive PAgP protocol data units (PDUs) on the lowest numbered VLAN.
In Layer 2 EtherChannels, the first port in the channel that comes up provides its MAC address to the EtherChannel. If this port is removed from the bundle, one of the remaining ports in the bundle provides its MAC address to the EtherChannel. For Layer 3 EtherChannels, the MAC address is allocated by the active device as soon as the interface is created (through the interface port-channel global configuration command).
PAgP sends and receives PAgP PDUs only from ports that are up and have PAgP enabled for the auto or desirable mode.
Link Aggregation Control Protocol
The LACP is defined in IEEE 802.3ad and enables Cisco devices to manage Ethernet channels between devices that conform to the IEEE 802.3ad protocol. LACP facilitates the automatic creation of EtherChannels by exchanging LACP packets between Ethernet ports.
By using LACP, the device or device stack learns the identity of partners capable of supporting LACP and the capabilities of each port. It then dynamically groups similarly configured ports into a single logical link (channel or aggregate port). Similarly configured ports are grouped based on hardware, administrative, and port parameter constraints. For example, LACP groups the ports with the same speed, duplex mode, native VLAN, VLAN range, and trunking status and type. After grouping the links into an EtherChannel, LACP adds the group to the spanning tree as a single device port.
The independent mode behavior of ports in a port channel is changed. With CSCtn96950, by default, standalone mode is enabled. When no response is received from an LACP peer, ports in the port channel are moved to suspended state.
LACP Modes
|
Mode |
Description |
|---|---|
|
active |
Places a port into an active negotiating state in which the port starts negotiations with other ports by sending LACP packets. |
|
passive |
Places a port into a passive negotiating state in which the port responds to LACP packets that it receives, but does not start LACP packet negotiation. This setting minimizes the transmission of LACP packets. |
Both the active and passive LACP modes enable ports to negotiate with partner ports to an EtherChannel based on criteria such as port speed, and for Layer 2 EtherChannels, based on trunk state and VLAN numbers.
Ports can form an EtherChannel when they are in different LACP modes as long as the modes are compatible. For example:
LACP and Link Redundancy
LACP port-channel operation, bandwidth availability, and link redundancy can be further refined with the LACP port-channel min-links and the LACP max-bundle features.
The LACP port-channel min-links feature:
Configures the minimum number of ports that must be linked up and bundled in the LACP port channel.
Prevents a low-bandwidth LACP port channel from becoming active.
Causes an LACP port channel to become inactive if there are too few active members ports to supply the required minimum bandwidth.
The LACP max-bundle feature:
LACP Interaction with Other Features
The DTP and the CDP send and receive packets over the physical ports in the EtherChannel. Trunk ports send and receive LACP PDUs on the lowest numbered VLAN.
In Layer 2 EtherChannels, the first port in the channel that comes up provides its MAC address to the EtherChannel. If this port is removed from the bundle, one of the remaining ports in the bundle provides its MAC address to the EtherChannel. For Layer 3 EtherChannels, the MAC address is allocated by the active device as soon as the interface is created through the interface port-channel global configuration command.
LACP sends and receives LACP PDUs only from ports that are up and have LACP enabled for the active or passive mode.
EtherChannel On Mode
EtherChannel on mode can be used to manually configure an EtherChannel. The on mode forces a port to join an EtherChannel without negotiations. The on mode can be useful if the remote device does not support PAgP or LACP. In the on mode, a usable EtherChannel exists only when the devices at both ends of the link are configured in the on mode.
Ports that are configured in the on mode in the same channel group must have compatible port characteristics, such as speed and duplex. Ports that are not compatible are suspended, even though they are configured in the on mode.
![]() Caution | You should use care when using the on mode. This is a manual configuration, and ports on both ends of the EtherChannel must have the same configuration. If the group is misconfigured, packet loss or spanning-tree loops can occur. |
Load-Balancing and Forwarding Methods
EtherChannel balances the traffic load across the links in a channel by reducing part of the binary pattern formed from the addresses in the frame to a numerical value that selects one of the links in the channel. You can specify one of several different load-balancing modes, including load distribution based on MAC addresses, IP addresses, source addresses, destination addresses, or both source and destination addresses. The selected mode applies to all EtherChannels configured on the device.
![]() Note | Layer 3 Equal-cost multi path (ECMP) load balancing is based on source IP address, destination IP address, source port, destination port, and layer 4 protocol. Fragmented packets will be treated on two different links based on the algorithm calculated using these parameters. Any changes in one of these parameters will result in load balancing. |
You configure the load-balancing and forwarding method by using the port-channel load-balance and the port-channel load-balance extendedglobal configuration commands.
MAC Address Forwarding
With source-MAC address forwarding, when packets are forwarded to an EtherChannel, they are distributed across the ports in the channel based on the source-MAC address of the incoming packet. Therefore, to provide load-balancing, packets from different hosts use different ports in the channel, but packets from the same host use the same port in the channel.
With destination-MAC address forwarding, when packets are forwarded to an EtherChannel, they are distributed across the ports in the channel based on the destination host’s MAC address of the incoming packet. Therefore, packets to the same destination are forwarded over the same port, and packets to a different destination are sent on a different port in the channel.
With source-and-destination MAC address forwarding, when packets are forwarded to an EtherChannel, they are distributed across the ports in the channel based on both the source and destination MAC addresses. This forwarding method, a combination source-MAC and destination-MAC address forwarding methods of load distribution, can be used if it is not clear whether source-MAC or destination-MAC address forwarding is better suited on a particular device. With source-and-destination MAC-address forwarding, packets sent from host A to host B, host A to host C, and host C to host B could all use different ports in the channel.
IP Address Forwarding
With source-IP address-based forwarding, packets are distributed across the ports in the EtherChannel based on the source-IP address of the incoming packet. To provide load balancing, packets from different IP addresses use different ports in the channel, and packets from the same IP address use the same port in the channel.
With destination-IP address-based forwarding, packets are distributed across the ports in the EtherChannel based on the destination-IP address of the incoming packet. To provide load balancing, packets from the same IP source address sent to different IP destination addresses could be sent on different ports in the channel. Packets sent from different source IP addresses to the same destination IP address are always sent on the same port in the channel.
With source-and-destination IP address-based forwarding, packets are distributed across the ports in the EtherChannel based on both the source and destination IP addresses of the incoming packet. This forwarding method, a combination of source-IP and destination-IP address-based forwarding, can be used if it is not clear whether source-IP or destination-IP address-based forwarding is better suited on a particular device. In this method, packets sent from the IP address A to IP address B, from IP address A to IP address C, and from IP address C to IP address B could all use different ports in the channel.
Load-Balancing Advantages
Different load-balancing methods have different advantages, and the choice of a particular load-balancing method should be based on the position of the device in the network and the kind of traffic that needs to be load-distributed.

Use the option that provides the greatest variety in your configuration. For example, if the traffic on a channel is going only to a single MAC address, using the destination-MAC address always chooses the same link in the channel. Using source addresses or IP addresses might result in better load-balancing.
EtherChannel and Device Stacks
If a stack member that has ports participating in an EtherChannel fails or leaves the stack, the active device removes the failed stack member device ports from the EtherChannel. The remaining ports of the EtherChannel, if any, continue to provide connectivity.
When a device is added to an existing stack, the new device receives the running configuration from the active device and updates itself with the EtherChannel-related stack configuration. The stack member also receives the operational information (the list of ports that are up and are members of a channel).
When two stacks merge that have EtherChannels configured between them, self-looped ports result. Spanning tree detects this condition and acts accordingly. Any PAgP or LACP configuration on a winning device stack is not affected, but the PAgP or LACP configuration on the losing device stack is lost after the stack reboots.
Device Stack and PAgP
With PAgP, if the active device fails or leaves the stack, the standby device becomes the new active device. A spanning-tree reconvergence is not triggered unless there is a change in the EtherChannel bandwidth. The new active device synchronizes the configuration of the stack members to that of the active device. The PAgP configuration is not affected after an active device change unless the EtherChannel has ports residing on the old active device.
Device Stacks and LACP
With LACP, the system ID uses the stack MAC address from the active device. When an active device fails or leaves the stack and the standby device becomes the new active device change, the LACP system ID is unchanged. By default, the LACP configuration is not affected after the active device changes.
Default EtherChannel Configuration
|
Feature |
Default Setting |
|---|---|
|
Channel groups |
None assigned. |
|
Port-channel logical interface |
None defined. |
|
PAgP mode |
No default. |
|
PAgP learn method |
Aggregate-port learning on all ports. |
|
PAgP priority |
128 on all ports. |
|
LACP mode |
No default. |
|
LACP learn method |
Aggregate-port learning on all ports. |
|
LACP port priority |
32768 on all ports. |
|
LACP system priority |
32768. |
|
LACP system ID |
LACP system priority and the device or stack MAC address. |
|
Load-balancing |
Load distribution on the device is based on the source-MAC address of the incoming packet. |
EtherChannel Configuration Guidelines
If improperly configured, some EtherChannel ports are automatically disabled to avoid network loops and other problems. Follow these guidelines to avoid configuration problems:
-
Do not try to configure more than 128 EtherChannels on the device or device stack.
-
Configure a PAgP EtherChannel with up to eight Ethernet ports of the same type.
-
Configure a LACP EtherChannel with up to 16 Ethernet ports of the same type. Up to eight ports can be active, and up to eight ports can be in standby mode.
-
Configure all ports in an EtherChannel to operate at the same speeds and duplex modes.
-
Enable all ports in an EtherChannel. A port in an EtherChannel that is disabled by using the shutdown interface configuration command is treated as a link failure, and its traffic is transferred to one of the remaining ports in the EtherChannel.
- When a group is first created, all ports follow the parameters set for the first port to be added to the group. If you change the configuration of one of these parameters, you must also make the changes to all ports in the group:
-
Do not configure a port to be a member of more than one EtherChannel group.
-
Do not configure an EtherChannel in both the PAgP and LACP modes. EtherChannel groups running PAgP and LACP can coexist on the same device or on different devices in the stack. Individual EtherChannel groups can run either PAgP or LACP, but they cannot interoperate.
-
Do not configure a secure port as part of an EtherChannel or the reverse.
-
Do not configure a port that is an active or a not-yet-active member of an EtherChannel as an IEEE 802.1x port. If you try to enable IEEE 802.1x on an EtherChannel port, an error message appears, and IEEE 802.1x is not enabled.
-
If EtherChannels are configured on device interfaces, remove the EtherChannel configuration from the interfaces before globally enabling IEEE 802.1x on a device by using the dot1x system-auth-control global configuration command.
-
If cross-stack EtherChannel is configured and the device stack partitions, loops and forwarding issues can occur.
Layer 2 EtherChannel Configuration Guidelines
When configuring Layer 2 EtherChannels, follow these guidelines:
-
Assign all ports in the EtherChannel to the same VLAN, or configure them as trunks. Ports with different native VLANs cannot form an EtherChannel.
-
An EtherChannel supports the same allowed range of VLANs on all the ports in a trunking Layer 2 EtherChannel. If the allowed range of VLANs is not the same, the ports do not form an EtherChannel even when PAgP is set to the auto or desirable mode.
-
Ports with different spanning-tree path costs can form an EtherChannel if they are otherwise compatibly configured. Setting different spanning-tree path costs does not, by itself, make ports incompatible for the formation of an EtherChannel.
Layer 3 EtherChannel Configuration Guidelines
Auto-LAG
The auto-LAG feature provides the ability to auto create EtherChannels on ports connected to a switch. By default, auto-LAG is disabled globally and is enabled on all port interfaces. The auto-LAG applies to a switch only when it is enabled globally.
On enabling auto-LAG globally, the following scenarios are possible:
-
All port interfaces participate in creation of auto EtherChannels provided the partner port interfaces have EtherChannel configured on them. For more information, see the "The supported auto-LAG configurations between the actor and partner devices" table below.
-
Ports that are already part of manual EtherChannels cannot participate in creation of auto EtherChannels.
-
When auto-LAG is disabled on a port interface that is already a part of an auto created EtherChannel, the port interface will unbundle from the auto EtherChannel.
The following table shows the supported auto-LAG configurations between the actor and partner devices:
|
Actor/Partner |
Active |
Passive |
Auto |
|
Active |
Yes |
Yes |
Yes |
|
Passive |
Yes |
No |
Yes |
|
Auto |
Yes |
Yes |
Yes |
On disabling auto-LAG globally, all auto created Etherchannels become manual EtherChannels.
You cannot add any configurations in an existing auto created EtherChannel. To add, you should first convert it into a manual EtherChannel by executing the port-channel<channel-number>persistent.
![]() Note | Auto-LAG uses the LACP protocol to create auto EtherChannel. Only one EtherChannel can be automatically created with the unique partner devices. |
Auto-LAG Configuration Guidelines
Follow these guidelines when configuring the auto-LAG feature.
-
When auto-LAG is enabled globally and on the port interface , and if you do not want the port interface to become a member of the auto EtherChannel, disable the auto-LAG on the port interface.
-
A port interface will not bundle to an auto EtherChannel when it is already a member of a manual EtherChannel. To allow it to bundle with the auto EtherChannel, first unbundle the manual EtherChannel on the port interface.
-
When auto-LAG is enabled and auto EtherChannel is created, you can create multiple EtherChannels manually with the same partner device. But by default, the port tries to create auto EtherChannel with the partner device.
-
The auto-LAG is supported only on Layer 2 EtherChannel. It is not supported on Layer 3 interface and Layer 3 EtherChannel.
-
The auto-LAG is supported on cross-stack EtherChannel.
How to Configure EtherChannels
After you configure an EtherChannel, configuration changes applied to the port-channel interface apply to all the physical ports assigned to the port-channel interface, and configuration changes applied to the physical port affect only the port where you apply the configuration.
- Configuring Layer 2 EtherChannels (CLI)
- Configuring Layer 3 EtherChannels (CLI)
- Configuring EtherChannel Load-Balancing (CLI)
- Configuring EtherChannel Extended Load-Balancing (CLI)
- Configuring the PAgP Learn Method and Priority (CLI)
- Configuring LACP Hot-Standby Ports
- Configuring LACP Fast Rate Timer
- Configuring Auto-LAG Globally
- Configuring Auto-LAG on a Port Interface
- Configuring Persistence with Auto-LAG
Configuring Layer 2 EtherChannels (CLI)
You configure Layer 2 EtherChannels by assigning ports to a channel group with the channel-group interface configuration command. This command automatically creates the port-channel logical interface.
2.
interface
interface-id
3.
switchport mode {access
|
trunk}
4.
switchport access
vlan
vlan-id
5.
channel-group
channel-group-number
mode
{auto [non-silent] |
desirable [non-silent ] |
on } |
{
active
|
passive}
6.
end
DETAILED STEPS
Configuring Layer 3 EtherChannels (CLI)
Follow these steps to assign an Ethernet port to a Layer 3 EtherChannel. This procedure is required.
1.
enable
2.
configure
terminal
3.
interface
interface-id
4.
no
ip
address
5.
no
switchport
6.
channel-group
channel-group-number
mode
{
auto
[
non-silent
] |
desirable
[
non-silent
] |
on
} |
{
active
|
passive
}
7.
end
DETAILED STEPS
Configuring EtherChannel Load-Balancing (CLI)
You can configure EtherChannel load-balancing to use one of several different forwarding methods.
This task is optional.
1.
configure terminal
2.
port-channel load-balance
{
dst-ip
|
dst-mac
| dst-mixed-ip-port | dst-port
| extended [dst-ip |
dst-mac | dst-port | ipv6-label | l3-proto | src-ip |
src-mac | src-port ] | src-dst-ip | src-dst-mac src-dst-mixed-ip-port src-dst-portsrc-ip
|
src-mac
| src-mixed-ip-port | src-port}
3.
end
DETAILED STEPS
Configuring EtherChannel Extended Load-Balancing (CLI)
Configure EtherChannel extended load-balancing when you want to use a combination of load-balancing methods.
This task is optional.
1.
configure terminal
2.
port-channel load-balance extended
[
dst-ip
|
dst-mac
dst-port
| ipv6-label | l3-proto | src-ip |
src-mac | src-port ]
3.
end
DETAILED STEPS
Configuring the PAgP Learn Method and Priority (CLI)
This task is optional.
1.
configure terminal
2.
interface
interface-id
3.
pagp learn-method
physical-port
4.
pagp port-priority
priority
5.
end
DETAILED STEPS
Configuring LACP Hot-Standby Ports
When LACP is enabled, the software, by default, tries to configure the maximum number of LACP-compatible ports in a channel, up to a maximum of 16 ports. Only eight LACP links can be active at one time; the remaining eight links are placed in hot-standby mode. If one of the active links becomes inactive, a link that is in the hot-standby mode becomes active in its place.
You can override the default behavior by specifying the maximum number of active ports in a channel, in which case, the remaining ports become hot-standby ports. For example, if you specify a maximum of five ports in a channel, up to 11 ports become hot-standby ports.
If you configure more than eight links for an EtherChannel group, the software automatically decides which of the hot-standby ports to make active based on the LACP priority. To every link between systems that operate LACP, the software assigns a unique priority made up of these elements (in priority order):
In priority comparisons, numerically lower values have higher priority. The priority decides which ports should be put in standby mode when there is a hardware limitation that prevents all compatible ports from aggregating.
Determining which ports are active and which are hot standby is a two-step procedure. First the system with a numerically lower system priority and system ID is placed in charge of the decision. Next, that system decides which ports are active and which are hot standby, based on its values for port priority and port number. The port priority and port number values for the other system are not used.
You can change the default values of the LACP system priority and the LACP port priority to affect how the software selects active and standby links.
- Configuring the LACP Max Bundle Feature (CLI)
- Configuring LACP Port-Channel Standalone Disable
- Configuring the LACP Port Channel Min-Links Feature (CLI)
- Configuring the LACP System Priority (CLI)
- Configuring the LACP Port Priority (CLI)
Configuring the LACP Max Bundle Feature (CLI)
When you specify the maximum number of bundled LACP ports allowed in a port channel, the remaining ports in the port channel are designated as hot-standby ports.
Beginning in privileged EXEC mode, follow these steps to configure the maximum number of LACP ports in a port channel. This procedure is optional.
1.
configure terminal
2.
interface port-channel
channel-number
3.
lacp max-bundle max-bundle-number
DETAILED STEPS
Configuring LACP Port-Channel Standalone Disable
To disable the standalone EtherChannel member port state on a port channel, perform this task on the port channel interface:
2.
interface port-channel
channel-group
3.
port-channel standalone-disable
4.
end
5.
show etherchannel
DETAILED STEPS
Configuring the LACP Port Channel Min-Links Feature (CLI)
You can specify the minimum number of active ports that must be in the link-up state and bundled in an EtherChannel for the port channel interface to transition to the link-up state. Using EtherChannel min-links, you can prevent low-bandwidth LACP EtherChannels from becoming active. Port channel min-links also cause LACP EtherChannels to become inactive if they have too few active member ports to supply the requiredminimum bandwidth.
To configure the minimum number of links that are required for a port channel. Perform the following tasks.
1.
enable
2.
configure terminal
3.
interface port-channel
channel-number
4.
port-channel min-links
min-links-number
DETAILED STEPS
Configuring the LACP System Priority (CLI)
You can configure the system priority for all the EtherChannels that are enabled for LACP by using the lacp system-priority global configuration command. You cannot configure a system priority for each LACP-configured channel. By changing this value from the default, you can affect how the software selects active and standby links.
You can use the show etherchannel summary privileged EXEC command to see which ports are in the hot-standby mode (denoted with an H port-state flag).
Follow these steps to configure the LACP system priority. This procedure is optional.
1.
enable
2.
configure
terminal
3.
lacp system-priority
priority
4.
end
DETAILED STEPS
Configuring the LACP Port Priority (CLI)
By default, all ports use the same port priority. If the local system has a lower value for the system priority and the system ID than the remote system, you can affect which of the hot-standby links become active first by changing the port priority of LACP EtherChannel ports to a lower value than the default. The hot-standby ports that have lower port numbers become active in the channel first. You can use the show etherchannel summary privileged EXEC command to see which ports are in the hot-standby mode (denoted with an H port-state flag).
![]() Note | If LACP is not able to aggregate all the ports that are compatible (for example, the remote system might have more restrictive hardware limitations), all the ports that cannot be actively included in the EtherChannel are put in the hot-standby state and are used only if one of the channeled ports fails. |
Follow these steps to configure the LACP port priority. This procedure is optional.
1.
enable
2.
configure
terminal
3.
interface
interface-id
4.
lacp port-priority
priority
5.
end
DETAILED STEPS
Configuring LACP Fast Rate Timer
You can change the LACP timer rate to modify the duration of the LACP timeout. Use the lacp rate command to set the rate at which LACP control packets are received by an LACP-supported interface. You can change the timeout rate from the default rate (30 seconds) to the fast rate (1 second). This command is supported only on LACP-enabled interfaces.
1.
enable
2.
configure terminal
3.
interface
{
fastethernet |
gigabitethernet
|
tengigabitethernet}
slot/port
4.
lacp rate
{ normal |
fast
}
6.
show lacp internal
DETAILED STEPS
Configuring Auto-LAG Globally
DETAILED STEPS
Configuring Auto-LAG on a Port Interface
1.
enable
3.
interface
interface-id
4.
[no]
channel-group auto
5.
end
6.
show etherchannel
auto
DETAILED STEPS
| Command or Action | Purpose | |||
|---|---|---|---|---|
| Step 1 |
enable
Example:
Device> enable
|
Enables privileged EXEC mode. Enter your password if prompted. | ||
| Step 2 | configure
terminal
Example: Device# configure terminal | |||
| Step 3 | interface
interface-id
Example: Device(config)# interface gigabitethernet 1/0/1
|
Specifies the port interface to be enabled for auto-LAG, and enters interface configuration mode. | ||
| Step 4 | [no]
channel-group auto
Example: Device(config-if)# channel-group auto
|
(Optional) Enables auto-LAG feature on individual port interface. Use the no form of this command to disable the auto-LAG feature on individual port interface.
| ||
| Step 5 | end
Example: Device(config-if)# end
|
Returns to privileged EXEC mode. | ||
| Step 6 |
show etherchannel
auto
Example: Device# show etherchannel auto
|
Displays that EtherChannel is created automatically. |
Configuring Persistence with Auto-LAG
You use the persistence command to convert the auto created EtherChannel into a manual one and allow you to add configuration on the existing EtherChannel.
1.
enable
2.
port-channel
channel-number
persistent
3.
show etherchannel summary
DETAILED STEPS
| Command or Action | Purpose | |
|---|---|---|
| Step 1 |
enable
Example:
Device> enable
|
Enables privileged EXEC mode. Enter your password if prompted. |
| Step 2 | port-channel
channel-number
persistent
Example: Device# port-channel 1 persistent
|
Converts the auto created EtherChannel into a manual one and allows you to add configuration on the EtherChannel. |
| Step 3 | show etherchannel summary
Example: Device# show etherchannel summary
|
Displays the EtherChannel information. |
Monitoring EtherChannel, PAgP, and LACP Status
|
Command |
Description |
|---|---|
|
clear lacp { channel-group-number counters | counters } |
Clears LACP channel-group information and traffic counters. |
|
clear pagp { channel-group-number counters | counters } |
Clears PAgP channel-group information and traffic counters. |
|
show etherchannel [ channel-group-number { detail | load-balance | port | port-channel | protocol | summary }] [detail | load-balance | port | port-channel | protocol | auto | summary ] |
Displays EtherChannel information in a brief, detailed, and one-line summary form. Also displays the load-balance or frame-distribution scheme, port, port-channel, protocol, and Auto-LAG information. |
|
show pagp [ channel-group-number ] { counters | internal | neighbor } |
Displays PAgP information such as traffic information, the internal PAgP configuration, and neighbor information. |
|
show pagp [ channel-group-number ] dual-active |
Displays the dual-active detection status. |
|
show lacp [ channel-group-number ] { counters | internal | neighbor | sys-id} |
Displays LACP information such as traffic information, the internal LACP configuration, and neighbor information. |
|
show running-config |
Verifies your configuration entries. |
|
show etherchannel load-balance |
Displays the load balance or frame distribution scheme among ports in the port channel. |
Configuration Examples for Configuring EtherChannels
- Configuring Layer 2 EtherChannels: Examples
- Configuring Layer 3 EtherChannels: Examples
- Configuring LACP Hot-Standby Ports: Example
- Configuring Auto LAG: Examples
Configuring Layer 2 EtherChannels: Examples
This example shows how to configure an EtherChannel on a single device in the stack. It assigns two ports as static-access ports in VLAN 10 to channel 5 with the PAgP mode desirable:
Device# configure terminal Device(config)# interface range gigabitethernet2/0/1 -2 Device(config-if-range)# switchport mode access Device(config-if-range)# switchport access vlan 10 Device(config-if-range)# channel-group 5 mode desirable non-silent Device(config-if-range)# end
This example shows how to configure an EtherChannel on a single device in the stack. It assigns two ports as static-access ports in VLAN 10 to channel 5 with the LACP mode active:
Device# configure terminal Device(config)# interface range gigabitethernet2/0/1 -2 Device(config-if-range)# switchport mode access Device(config-if-range)# switchport access vlan 10 Device(config-if-range)# channel-group 5 mode active Device(config-if-range)# end
This example shows how to configure a cross-stack EtherChannel. It uses LACP passive mode and assigns two ports on stack member 1 and one port on stack member 2 as static-access ports in VLAN 10 to channel 5:
Device# configure terminal Device(config)# interface range gigabitethernet2/0/4 -5 Device(config-if-range)# switchport mode access Device(config-if-range)# switchport access vlan 10 Device(config-if-range)# channel-group 5 mode passive Device(config-if-range)# exit Device(config)# interface gigabitethernet3/0/3 Device(config-if)# switchport mode access Device(config-if)# switchport access vlan 10 Device(config-if)# channel-group 5 mode passive Device(config-if)# exit
PoE or LACP negotiation errors may occur if you configure two ports from switch to the access point (AP). This scenario can be avoided if the port channel configuration is on the switch side. For more details, see the following example:
interface Port-channel1 switchport access vlan 20 switchport mode access switchport nonegotiate no port-channel standalone-disable <--this one spanning-tree portfast
![]() Note | If the port reports LACP errors on port flap, you should include the following command as well: no errdisable detect cause pagp-flap |
Configuring Layer 3 EtherChannels: Examples
This example shows how to configure a Layer 3 EtherChannel. It assigns two ports to channel 5 with the LACP mode active:
Device# configure terminal Device(config)# interface range gigabitethernet2/0/1 -2 Device(config-if-range)# no ip address Device(config-if-range)# no switchport Device(config-if-range)# channel-group 5 mode active Device(config-if-range)# end
This example shows how to configure a cross-stack Layer 3 EtherChannel. It assigns two ports on stack member 2 and one port on stack member 3 to channel 7 using LACP active mode:
Device# configure terminal Device(config)# interface range gigabitethernet2/0/4 -5 Device(config-if-range)# no ip address Device(config-if-range)# no switchport Device(config-if-range)# channel-group 7 mode active Device(config-if-range)# exit Device(config)# interface gigabitethernet3/0/3 Device(config-if)# no ip address Device(config-if)# no switchport Device(config-if)# channel-group 7 mode active Device(config-if)# exit
Configuring LACP Hot-Standby Ports: Example
This example shows how to configure an Etherchannel (port channel 2) that will be active when there are at least three active ports, will comprise up to seven active ports and the remaining ports (up to nine) as hot-standby ports :
Device# configure terminal Device(config)# interface port-channel 2 Device(config-if)# port-channel min-links 3 Device(config-if)# lacp max-bundle 7
This example shows how to disable the standalone EtherChannel member port state on port channel 42:
Device(config)# interface port-channel channel-group Device(config-if)# port-channel standalone-disable
This example shows how to verify the configuration:
Device# show etherchannel 42 port-channel | include Standalone Standalone Disable = enabled Device# show etherchannel 42 detail | include Standalone Standalone Disable = enabled
Configuring Auto LAG: Examples
This example shows how to configure Auto-LAG on a switch
device> enable device# configure terminal device (config)# port-channel auto device (config-if)# end device# show etherchannel auto
The following example shows the summary of EtherChannel that was created automatically.
device# show etherchannel auto
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
A - formed by Auto LAG
Number of channel-groups in use: 1
Number of aggregators: 1
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SUA) LACP Gi1/0/45(P) Gi2/0/21(P) Gi3/0/21(P)
The following example shows the summary of auto EtherChannel after executing the port-channel 1 persistent command.
device# port-channel 1 persistent device# show etherchannel summary Switch# show etherchannel summary Flags: D - down P - bundled in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use f - failed to allocate aggregator M - not in use, minimum links not met u - unsuitable for bundling w - waiting to be aggregated d - default port A - formed by Auto LAG Number of channel-groups in use: 1 Number of aggregators: 1 Group Port-channel Protocol Ports ------+-------------+-----------+----------------------------------------------- 1 Po1(SU) LACP Gi1/0/45(P) Gi2/0/21(P) Gi3/0/21(P)
Additional References for EtherChannels
Related Documents
| Related Topic | Document Title |
|---|---|
| Layer 2 command reference | Layer 2/3 Command Reference (Catalyst 3650 Switches) |
Error Message Decoder
| Description | Link |
|---|---|
|
To help you research and resolve system error messages in this release, use the Error Message Decoder tool. |
https://www.cisco.com/cgi-bin/Support/Errordecoder/index.cgi |
Standards and RFCs
| Standard/RFC | Title |
|---|---|
|
None |
— |
MIBs
| MIB | MIBs Link |
|---|---|
|
All supported MIBs for this release. |
To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: |
Technical Assistance
| Description | Link |
|---|---|
|
The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies. To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds. Access to most tools on the Cisco Support website requires a Cisco.com user ID and password. |
Feature Information for EtherChannels
|
Release |
Modification |
|---|---|
|
Cisco IOS XE 3.2SECisco IOS XE 3.3SE |
This feature was introduced. |
|
Cisco IOS 15.2(3)E2, Cisco IOS XE 3.7.2E |
Auto-LAG feature was introduced. |


Feedback