Not able to change the port-channel mode from active to passive

[mathew.kc1]

Not able to change the port-channel mode from active to passive in Nexus 9504, getting below error.

Other end of the interface is connected to Palo Alto Firewall and its configured as LACP mode active. As per the design, Firewall interface should be in active and Nexus switch interface in Passive, we tried to change the Nexus switch interface Eth1/25 to passive and received the below error.

Appreciate your inputs/comments

Error: Cannot add passive-mode port to active-mode port-channel

CGNWKSW01(config)# interface Ethernet1/25

CGNWKSW01(config-if)# channel-group 60 mode passive
Cannot add passive-mode port to active-mode port-channel
CGNWKSW01(config-if)#

Nexus 9504 Configs:

interface port-channel60
  description ## Spine 1 to PaloAlto Firewall 1 ##
  switchport
  switchport mode trunk
  mtu 9216
  vpc 60

interface Ethernet1/25
  description ## Spine 1 to PaloAlto Firewall 1 ##
  switchport
  switchport mode trunk

mtu 9216
  channel-group 60 mode active   -----------> Tried changing to Passive and received the above error
  no shutdown

CGNWKSW01# sh port-channel summ
Flags:  D - Down        P - Up in port-channel (members)
        p - Up in delay-lacp mode (member)
        M - Not in use. Min-links not met
--------------------------------------------------------------------------------
Group Port-       Type     Protocol  Member Ports      Channel
--------------------------------------------------------------------------------
60    Po60(SU)    Eth      LACP        Eth1/25(P)

sh lacp interface Ethernet1/25
Interface Ethernet1/25 is up
  Channel group is 60 port channel is Po60
  PDUs sent: 447006
  PDUs rcvd: 447004
  Markers sent: 0
  Markers rcvd: 0
  Marker response sent: 0
  Marker response rcvd: 0
  Unknown packets rcvd: 0
  Illegal packets rcvd: 0
Lag Id: [ [(7f9b, 0-23-4-ee-be-64, 803c, 8000, 161), (8000, 8-30-6b-b6-b8-1, 10, 8000, 54)] ]
Operational as aggregated link since Thu Feb 27 20:15:29 2020

Local Port: Eth1/25   MAC Address= 70-70-8b-a9-29-ff
  System Identifier=0x8000,  Port Identifier=0x8000,0x161
  Operational key=32828
  LACP_Activity=active
  LACP_Timeout=Long Timeout (30s)
  Synchronization=IN_SYNC
  Collecting=true
  Distributing=true
  Partner information refresh timeout=Long Timeout (90s)
Actor Admin State=61
Actor Oper State=61
Neighbor: 0x54
  MAC Address= 8-30-6b-b6-b8-1
  System Identifier=0x8000,  Port Identifier=0x8000,0x54
  Operational key=16
  LACP_Activity=active
  LACP_Timeout=Long Timeout (30s)
  Synchronization=IN_SYNC
  Collecting=true
  Distributing=true
Partner Admin State=61
Partner Oper State=61
Aggregate or Individual(True=1)= 1

Thanks 

Mathew

[Jason Leschnik · Accepted solution]

Hi Mathew

Give this a try

Leaf-5(config-if)# channel-group 88 mode active 
Leaf-5(config-if)# channel-group 88 mode passive 
Cannot add passive-mode port to active-mode port-channel
Leaf-5(config-if)# no channel-group 88 mode active    <<<<<<<<<<< 
Leaf-5(config-if)# channel-group 88 mode passive

 HTH!

[mathew.kc1]

Thanks Jason, it worked 

Regards 

Mathew