Config Lab: L3 EtherChannel 1

 In 200-301 V1 Ch17: Routing in LANs, 200-301 V1 Part 5: IPv4 Routing, 200-301 V1 Parts, Config Lab, Config Lab CCNA Vol 1 Part 5, Hands-on

Layer 3 switches, SVIs, routed ports, and L3 EtherChannels. Those topics alone make this lab fairly advanced for CCNA prep. Today’s lab focuses on the L3 EtherChannel, but also gives you a chance to configure the rest of the features in the initial list as well.

All about Config Labs

The blog has a series of lab exercises called “Config Labs.” Each lab presents a topology with the relevant initial configuration for each device. The lab also lists new requirements, after which you should create the additional configuration to meet those requirements. You can do the lab on paper, in a text editor, or use software tools like Cisco Packet Tracer or Cisco Modeling Labs.

Once you have created your answer, you can click various tabs at the bottom of this post to see the lab answers, comments about the lab, and other helpful information.

The Lab Exercise

Requirements

In this lab, you will add configuration to distribution switches Dist1 and Dist2. These two layer 3 switches will route packets for several subnets. Dist1 connects to the subnets supported by VLANs 10 and 20, while Dist2 connects to those supported by VLANs 30 and 40. The two distribution switches connect with a layer 3 EtherChannel with two links.

Your job: configure the SVIs (VLAN interfaces) necessary for routing the connected subnets on the access VLANs. The IP addresses on these SVIs will be used by the PCs in the network as their default gateway IP addresses. Then configure the layer 3 EtherChannel between the switches, providing a layer 3 link between the two distribution switches so that they can route packets to each other.

This lab begins with several key features pre-configured. Make sure to pay close attention to the initial configurations to get your bearings before starting to do the lab. These items are preconfigured:

  • The links connecting the Access switches with their Distribution switches are preconfigured as static trunks using 802.1q encapsulation.
  • The access and distribution switches have been pre-configured with the VLAN IDs listed in the figure.
  • All interfaces shown in the figure have been administratively enabled.
  • Layer 3 switches Dist1 and Dist2 have been pre-configured with OSPF so that once the lab has been configured, Dist1 and Dist2 will exchange IPv4 routes.

The following list details your work for this lab:

  • Configure Layer 3 switching with SVIs on the two distribution switches as follows:
    • Switch Dist1 routes for VLANs 10 and 20
    • Switch Dist2 routes for VLANs 30 and 40
  • Configure a layer 3 EtherChannel for the two links between switches Dist1 and Dist2 so that IPv4 packets can be routed between the two switches, as follows:
    • Configure the two links between the distribution switches as a static layer 3 EtherChannel with port-channel interface number 10.
    • Make the EtherChannel a routed port instead of a switch port.
    • Configure the IP addresses per the figure for the PortChannel interface

Figure 1: Switch Square w/L3 EtherChannel Topology

 

Initial Configuration

Examples 1, 2, 3, and 4 show the beginning configuration state of Dist1, Dist2, Access1, and Access2.

hostname Dist1
!
interface GigabitEthernet1/1/1
 no shutdown
!
interface GigabitEthernet1/1/2
 no shutdown
!
interface GigabitEthernet1/1/3
 no shutdown
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
router ospf 1
 network 0.0.0.0 255.255.255.255 area 0

Example 1: Dist1 Config

 

hostname Dist2
!
interface GigabitEthernet1/1/1
 no shutdown
!
interface GigabitEthernet1/1/2
 no shutdown
!
interface GigabitEthernet1/1/3
 no shutdown
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
router ospf 1
 network 0.0.0.0 255.255.255.255 area 0 

Example 2: Dist2 Config

 

hostname Access1
!
vlan 10,20
!
interface GigabitEthernet1/1/1
 no shutdown
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/2
 no shutdown
 switchport access vlan 10
!
interface GigabitEthernet1/0/3
 no shutdown
 switchport access vlan 20

Example 3: Access1 Config

 

hostname Access2
!
vlan 30,40
!
interface GigabitEthernet1/1/1
 no shutdown
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface GigabitEthernet1/0/2
 no shutdown
 switchport access vlan 30
!
interface GigabitEthernet1/0/3
 no shutdown
 switchport access vlan 40

Example 4: Access2 Config

Answer Options - Click Tabs to Reveal

You can learn a lot and strengthen real learning of the topics by creating the configuration – even without a router or switch CLI. In fact, these labs were originally built to be used solely as a paper exercise!

To answer, just think about the lab. Refer to your primary learning material for CCNA, your notes, and create the configuration on paper or in a text editor. Then check your answer versus the answer post, which is linked at the bottom of the lab, just above the comments section.

You can also implement the lab using the Cisco Packet Tracer network simulator. With this option, you use Cisco’s free Packet Tracer simulator. You open a file that begins with the initial configuration already loaded. Then you implement your configuration and test to determine if it met the requirements of the lab.

(Use this link for more information about Cisco Packet Tracer.)

Use this workflow to do the labs in Cisco Packet Tracer:

  1. Download the .pkt file linked below.
  2. Open the .pkt file, creating a working lab with the same topology and interfaces as the lab exercise.
  3. Add your planned configuration to the lab.
  4. Test the configuration using some of the suggestions below.

Download this lab’s Packet Tracer File

You can also implement the lab using Cisco Modeling Labs – Personal (CML-P). CML-P (or simply CML) replaced Cisco Virtual Internet Routing Lab (VIRL) software in 2020, in effect serving as VIRL Version 2.

If you prefer to use CML, use a similar workflow as you would use if using Cisco Packet Tracer, as follows:

  1. Download the CML file (filetype .yaml) linked below.
  2. Import the lab’s CML file into CML and then start the lab.
  3. Compare the lab topology and interface IDs to this lab, as they may differ (more detail below).
  4. Add your planned configuration to the lab.
  5. Test the configuration using some of the suggestions below.

Download this lab’s CML file!

 

Network Device Info:

This table lists the interfaces listed in the lab exercise documentation versus those used in the sample CML file.

Device Lab Port  CML Port
Dist1 G1/1/1 G0/1
Dist1 G1/1/2 G0/2
Dist1 G1/1/3 G0/3
Dist2 G1/1/1 G0/1
Dist2 G1/1/2 G0/2
Dist2 G1/1/3 G0/3
Access1 G1/1/1 G0/1
Access1 G1/0/2 G0/2
Access1 G1/0/3 G0/3
Access2 G1/1/1 G0/1
Access2 G1/0/2 G0/2
Access2 G1/0/3 G0/3

 

Host device info:

This table lists host information pre-configured in CML, information that might not be required by the lab but may be useful to you.

Device

IP Address

User/password

PC1

10.100.100.2/27

cisco/cisco

PC2

10.100.100.34/27

cisco/cisco

PC3

10.100.100.66/27

cisco/cisco

PC4

10.100.100.98/27

cisco/cisco

Lab Answers Below: Spoiler Alert

Lab Answers: Configuration (Click Tab to Reveal)

Answers

Figure 1: Switch Square w/L3 EtherChannel Topology

ip routing
!
vlan 10,20
!
interface Port-Channel10
 no switchport
 ip address 100.1.2.1 255.255.255.240
!
interface GigabitEthernet1/1/1
 no switchport
 channel-group 10 mode on
!
interface GigabitEthernet1/1/2
 no switchport
 channel-group 10 mode on
!
interface Vlan10
 ip address 10.100.100.1 255.255.255.224
 no shutdown
!
interface Vlan20
 ip address 10.100.100.33 255.255.255.224
 no shutdown

Example 5: Dist1 Config

 

ip routing
!
vlan 30,40
!
interface Port-Channel10
 no switchport
 ip address 100.1.2.14 255.255.255.240
!
interface GigabitEthernet1/1/1
 no switchport
 channel-group 10 mode on
!
interface GigabitEthernet1/1/2
 no switchport
 channel-group 10 mode on
!
interface Vlan30
 ip address 10.100.100.65 255.255.255.224
 no shutdown
!
interface Vlan40
 ip address 10.100.100.97 255.255.255.224
 no shutdown

Example 6: Dist2 Config

Commentary, Issues, and Verification Tips (Click Tabs to Reveal)

Commentary

In most modern networks, it has become standard that layer 3 switches are typically preferred over their router counterparts in the LAN. Layer 3 switches often support much higher packet forwarding volumes than routers of a similar price-point. Also, performing layer 3 forwarding inside a switch, versus Router-on-a-Stick, removes the trip over a cable to a router and back over the same cable to the switch. In modern enterprise networks, routers often sit only at the edge of the WAN, with switches connecting all the devices in a campus or a Data Center.

With this lab, you were tasked with configuring two distribution switches to act as layer 3 switches. Two access layer switches, operating only with layer 2 features, were pre-configured with those features and VLANs. Two two distribution switches act as the default gateway for the hosts in the VLANs shown in the figure.

First, looking at switch Dist1, it has three different interfaces. Two interfaces will be grouped together into a layer 3 EtherChannel link that connects to switch Dist2. Dist1’s other interface is the pre-configured trunk port that connects to switch Access1.

First, to configure the EtherChannel on the two links between the two distribution switches, you could start with the interface range gigabitethernet1/1/1 – 2 command so that upcoming interface subcommands would apply to both interfaces. Then add the no switchport command to convert the interfaces into a routed layer 3 interface and the channel-group 10 mode on command to group them together into an EtherChannel. Note that the channel-group command automatically creates the Port-Channel 10 interface.

The PortChannel interface also needs to be configured as a routed port, and then it also needs an IPv4 address. To do so, use the interface port-channel 10 command to get into interface config mode and configure the no switchport command to make the port-channel interface a routed port. Then configure the IP address using the ip address 100.1.2.1 255.255.255.240 command.

The configuration of the L3 EtherChannel on switch Dist2 follows the same basic steps: configure the physical ports to be in the same channel-group (using the channel-group command), making the ports routed ports (no switchport), making the port-channel interface a routed port, and assigning the port-channel interface an IPv4 address.

To configure switch Dist1 to have a layer 3 interface connected to the subnets in VLANs 10 and 20, the switch needs configuration for both the VLANs and the associated VLAN interfaces. Configuring the VLANs requires two simple global commands: vlan 10 and vlan 20. Switch Dist1 must then configure VLAN interfaces 10 and 20. To configure the interface for VLAN 10, use the interface vlan 10 command, with an IP address configured with the ip address 10.100.100.1 255.255.255.224 command to match the information in the figure. Similarly, use the interface vlan 20 command and the ip address 10.100.100.33 255.255.255.224 command to configure the SVI for VLAN 20.

Switch Dist2 again follows a similar pattern, but for VLANs 30 and 40 in this case. Configuring the VLANs requires the vlan 30 and vlan 40 global commands. To configure the VLAN 30 interface, use the interface vlan 30 command, and to configure the IP address, use the ip address 10.100.100.65 255.255.255.224 command. To configure the VLAN 40 interface, use the interface vlan 40 command, and to configure its IP address, use the ip address 10.100.100.97 255.255.255.224 command.

Known Issues in this Lab

This section of each Config Lab Answers post hopes to help with those issues by listing any known issues with Packet Tracer related to this lab. In this case, the issues are:

# Summary Detail
1 None No known issues related to this lab.

 

Why Would Cisco Packet Tracer Have Issues?

(Note: The below text is the same in every Config Lab.)

Cisco Packet Tracer (CPT) simulates Cisco routers and switches. However, CPT does not run the same software that runs in real Cisco routers and switches. Instead, developers wrote CPT to predict the output a real router or switch would display given the same topology and configuration – but without performing all the same tasks, an actual device has to do. On a positive note, CPT requires far less CPU and RAM than a lab full of devices so that you can run CPT on your computer as an app. In addition, simulators like CPT help you learn about the Cisco router/switch user interface – the Command Line Interface (CLI) – without having to own real devices.

CPT can have issues compared to real devices because CPT does not run the same software as Cisco devices. CPT does not support all commands or parameters of a command. CPT may supply output from a command that differs in some ways from what an actual device would give. Those differences can be a problem for anyone learning networking technology because you may not have experience with that technology on real gear – so you may not notice the differences. So this section lists differences and issues that we have seen when using CPT to do this lab.

Beyond comparing your answers to this lab’s Answers post, you can test in Cisco Packet Tracer (CPT) or Cisco Modeling Labs (CML). In fact, you can and should explore the lab once configured. For this lab, once you have completed the configuration, try these verification steps. 

  1. Check that the VLANs have been created using the show vlan brief and show interfaces interface switchport commands on the distribution switches.
  2. Check that the VLAN interfaces were configured with the show ip interfaces brief and/or show running-config commands.
  3. Check that the trunks are operational using the show interfaces trunk command.

 

For the layer 3 specifics, check on the L3 EtherChannel, the SVIs, and make sure OSPF is working:

  1. Verify the state of the L3 EtherChannel using the show etherchannel summary command.
  2. Check the port-channel interface using the show interfaces port-channel10 command.
  3. The show interfaces status command should list the physical ports in the channel and interface portchannel10 as a routed port rather than being assigned to a VLAN.
  4. Also, each distribution (layer 3) switch should list three connected IPv4 routes in the output of the show ip route command.

More Labs with Related Content!

Config Lab: Layer 3 Switching w/ Routed Ports
Config Lab: OSPF Interface Config 1
Subscribe
Notify of
guest

28 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments
Emil

Am I the only one who sees yellow dots on the interfaces that are part of the etherchannel in packet tracer? My version is 8.1.0.0722.

Clear

I see those dots too. I think it’s PacketTracer’s way of denoting that not all the interfaces are “up” in the way that individual interfaces would be.

Evgeniy

Command “no switchport” does not working when i trying to implement this command on PortChannel
Dist1(config-if)#no switchport
% Incomplete command.

certskills

Evgeniy,
Not sure what’s happening. First, clarify:
1) What tool? Packet Tracer (if so, the version), CML (if so, the version), real gear (model, version)
2) what interface?

FYI, here’s what I get when just trying the “no switchport” commands from Packet Tracer- both are accepted.

Dist1>ena
Dist1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Dist1(config)#int g1/1/1
Dist1(config-if)#no switchport
Dist1(config-if)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/1/1, changed state to down

%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/1/1, changed state to up

Dist1(config-if)#int po1
Dist1(config-if)#no switchport
Dist1(config-if)#
Dist1(config-if)#

Jonas

I’m using packet tracer 8.1.1.0022 and also getting error when executing “no switchport” on the interface. On the port-channel it is working.
ist1(config)#interface range gi 1/1/1-2
Dist1(config-if-range)#no switchport
Command rejected (Port-channel): Either port is L2 and port-channel is L3, or vice-versa
Command rejected (Port-channel): Either port is L2 and port-channel is L3, or vice-versa
Dist1(config)#interface gi 1/1/1
Dist1(config-if)#no switchport
Command rejected (Port-channel): Either port is L2 and port-channel is L3, or vice-versa

Tewa

Hello Wendell,

I am using Packer Tracer Version 8.2.1.0118 and I get the same error message as Evgeniy. I was however able to ping all PCs from PC1. Please see below:

Dist1(config-if)#int po10
Dist1(config-if)#no sw
% Incomplete command.
Dist1(config-if)#no switchport
% Incomplete command.
Dist1(config-if)#

Dist2(config-if)#int po10
Dist2(config-if)#no sw
% Incomplete command.
Dist2(config-if)#no switchport
% Incomplete command.
Dist2(config-if)#

KG

Hello Wendell!

Thanks again for your labs! I receive the same message “incomplete command” that Evgeniy gets. I am running packet tracer 8.1.1.0022. However, when I put port-channel 10 in up/up status, OSPF still recognizes the port-channel and advertises routes successully. Perhaps a slight difference in PT as compared to real gear or CML?

certskills

Sure thing, KG.
Are you in portchannel interface mode or Gigabit/whatever mode? My recent test (in my recent earlier comment above) was in Gigabit1/1/1 mode. Maybe the PT logic issue is it not accepting the command after getting into portchannel interface mode? If you see this, let me know, as I’m not where I can test this week. Thanks…

Vicente Torres

Hi Wendell,

I have two doubts while doing this lab in Packet Tracer v 8.2.0.0162

1. I get the same 2 amber dots in one of the links of the etherchannel, as Emil and Clear comment. Is that normal?
2. The output of “show interfaces port-channel 10” shows Half-duplex, 2100Mb/s. Is that normal too?

Thanks for sharing your knowledge with us all.

GJM

Hi Wendell not sure if this is the expected outcome but I enabled the routed interface on the port channel interface before doing so on the physical interfaces and received an error –

Dist1(config)#int range g1/1/1-2
Dist1(config-if-range)#no switchport
Command rejected (Port-channel): Either port is L2 and port-channel is L3, or vice-versa

I had to remove both interfaces from the etherchannel then I was able to input the no switchport command and readd them to the port channel after and everything worked as expected.

Jay Mahannah

Thanks for this tip; I was scratching my head at L2 and L3 until I put it together that the L3 switch was allowing an IP address on a “switchport”. To fix this, I ran the following

no interface port-channel 10
no ip address

Jay Mahannah

Thanks for this tip!

L2 likely wouldn’t allow an IP address and L3 would allow it without having to use “no switchport” so to back it out use:

no interface port-channel 10

Panagiotis Manolakos

Hi Wendell,

In my case I faced too the green dot but after restarting the Packet tracer, it was removed.
But I have another issue, as I cannot bring VSI up on both distro switches

p.e.
“`
Dist1#show interfaces Vlan 10
Vlan10 is down, line protocol is down
Hardware is CPU Interface, address is 0005.5e3d.5a01 (bia 0005.5e3d.5a01)
Internet address is 10.100.100.1/27
“`

Here is my running config:
“`
Dist1#show running-config
Building configuration…

Current configuration : 1937 bytes
!
version 16.3.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Dist1
!
no ip cef
ip routing
!
no ipv6 cef
!
no ip domain-lookup
!
!
vtp mode transparent
!
spanning-tree mode pvst
!
interface Port-channel10
no switchport
ip address 100.1.2.1 255.255.255.240
!
interface GigabitEthernet1/0/1
………………………………………………..
interface GigabitEthernet1/0/24
!
interface GigabitEthernet1/1/1
no switchport
no ip address
channel-group 10 mode on
duplex auto
speed auto
!
interface GigabitEthernet1/1/2
no switchport
no ip address
channel-group 10 mode on
duplex auto
speed auto
!
interface GigabitEthernet1/1/3
switchport mode trunk
!
interface GigabitEthernet1/1/4
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
mac-address 0005.5e3d.5a01
ip address 10.100.100.1 255.255.255.224
!
interface Vlan20
mac-address 0005.5e3d.5a02
ip address 10.100.100.33 255.255.255.224
!
router ospf 1
log-adjacency-changes
network 0.0.0.0 255.255.255.255 area 0
!
ip classless
!
ip flow-export version 9
!
line con 0
exec-timeout 0 0
!
line aux 0
!
line vty 0 4
login
!
end
“`

Panagiotis Manolakos

Also, I cant ping any host from PC1….

Panagiotis Manolakos

I assume that this caused by the vlan10 int being down:

1. The frame destination MAC address is broadcast. The Multilayer Switch processes the frame.
2. The frame’s destination MAC address matches the receiving port’s MAC address, the broadcast address, or a multicast address.
3. The device decapsulates the PDU from the Ethernet frame.
4. The frame is an ARP frame. The ARP process processes it.
5. The active VLAN interface is not up. The ARP process ignores the frame.

Panagiotis Manolakos

Its seems that finally I have fixed that. Among with others, we need also to configure vlans on dist switches as well. There is no need to assigned any port on them. Just creating them and then svis become up and everything works ok.

Panagiotis Manolakos

Many thanks sir! Always a great teacher! 🙂

Angel Munoz

Hello, is the no shutdown required for the interface VLANs? I mean, aren’t they enabled by default? (considering the fact that Dist1 & Dist2 know about those VLANs, and that they are allowed by default in the trunks).

David

Hello Grand Master,

great lab! one callout under > Lab Commentary:

The PortChannel interface also needs to be configured as a routed port, and then it also needs an IPv4 address. To do so, use the interface port-channel 10 command to get into interface config mode and configure the IP address using the ip address 100.1.2.1 255.255.255.240 command. Then add the no switchport command to make the port-channel interface a routed port.”

… the sequence of the underlined texts should be transposed.

TY!

Sam

Hi Wendell,
Apart from the connected routes, are we meant to see OSPF-learnt routes in the routing table as well? If not, what was the purpose of OSPF being enabled?
Thanks,
Sam

Simon

Hey Wendell, I noticed a few other people having similar issues when attempting to make the port-channel a routed port. Now with PT version 8.2.2.0400, I get “Incomplete command.” when attempting to do so. I’m not sure if I’m missing something? I double checked with your configuration and it seems everything else is in order for this to work properly… Thanks for the invaluable resources!

Simon

Thought I would just give an update… as stated earlier it seems the no switchport command in an EtherChannel interface only works if the ports that were placed in there weren’t previously made into Layer 3 interfaces. Or vise versa. If you set them up as Layer 3 interfaces, place them in the port-channel, and then try the command you’ll get the error as per above. It seems PT automatically applies the “no switchport” command to the port-channel. Ultimately, the issue I was having was my own mistake. Sometimes taking a break helps!

Contact Us

We're not around right now. But you can send us an email and we'll get back to you, asap.

28
0
Would love your thoughts, please comment.x
()
x