Switch VLANS no shutdown not work, wont come up

[hfakoor222]

config t

hostname D1

no ip domain lookup
ip routing
ipv6 unicast-routing
line con 0
exec-timeout 0 0
logging synchronous
exit

line vty 0 4
privilege level 15
exec-timeout 0 0
password cisco123
login
exit

vlan 2
name SECOND_VLAN
exit

vlan 3
name THIRD_VLAN
exit

interface vlan 1
ip address 192.168.1.1 255.255.255.0
ipv6 address fe80::d1:1 link-local
ipv6 address 2001:db8:acad:1000::1/64
no shutdown
exit

interface vlan 2
ip address 192.168.2.1 255.255.255.0
ipv6 address fe80::d1:2 link-local
ipv6 address 2001:db8:acad:2000::1/64
no shutdown
exit

interface vlan 3
ip address 192.168.3.1 255.255.255.0
ipv6 address fe80::d1:3 link-local
ipv6 address 2001:db8:acad:3000::1/64
no shutdown
exit

interface g0/2
spanning-tree portfast
switchport mode access
no shutdown
exit

interface range g0/0, g0/1
switchport trunk encap dot1q
switchport mode trunk
channel-group 1 mode active
no shutdown
exit

exit

end

Any suggestions on how to fix?

I tried it on both 3650 and 4500

[MHM Cisco World · Accepted solution]

there is no L2 port connect for VLAN 2 and VLAN 3,
config L2 port mode access vlan 2 & 3
or 
allow these vlan in trunk

[hfakoor222]

Is there a specific reason why a VLAN interface needs to be assigned to a port to be in an up state, like a security reason? Or a reason related to how the software/hardware is created? Can someone explain this to me?

Thank you

[Jon Marshall]

I think the logic is that if there are no L2 ports active in the vlan then there is no reason to bring the L3 interface up. 

Think of it in physical terms ie. a L3 interface on a router will only come up if you connect something to it and that is the same behaviour you see with a L3 virtual interface in effect. 

As mentioned either an access port in that vlan or a trunk link allowing that vlan on the switch will bring the L3 interface up. 

Jon