Port-Channel between ASR1001X & 3560G Switch

[lucas.shelton1]

We have an ASR1001X on the edge of our network with a single gig interface going to a 3560 switch.  I need to add a second interface between the ASR and switch, but am having trouble getting the port-channel to come up.

Note:  I am testing this in VIRL

ASR Config:

interface GigabitEthernet2
no ip address
negotiation auto
channel-group 1 mode active
end

host-10-255-0-47#sh run int gi3
Building configuration...

Current configuration : 96 bytes
!
interface GigabitEthernet3
no ip address
negotiation auto
channel-group 1 mode active
end

host-10-255-0-47#sh run int port-cha 1
Building configuration...

Current configuration : 92 bytes
!
interface Port-channel1
ip address 192.168.1.1 255.255.255.252
no negotiation auto
end

Switch config:

Switch#sh run int gi0/1
Building configuration...

Current configuration : 144 bytes
!
interface GigabitEthernet0/1
switchport trunk encapsulation dot1q
switchport mode trunk
negotiation auto
channel-group 1 mode active
end

Switch#sh run int gi0/2
Building configuration...

Current configuration : 144 bytes
!
interface GigabitEthernet0/2
switchport trunk encapsulation dot1q
switchport mode trunk
negotiation auto
channel-group 1 mode active
end

Switch#sh run int port-cha 1
Building configuration...

Current configuration : 92 bytes
!
interface Port-channel1
switchport trunk encapsulation dot1q
switchport mode trunk
end

I've attached a simple diagram.

Any ideas?

[Reza Sharifi]

Are you trying to create a layer-3 Portchannel? if yes, the switch config is layer-2 (trunk) and no IP.

Try changing the config on the switch from trunk to access and also an IP on the Portchannel in the same subnet as the ASR and test again.

HTH

[lucas.shelton1]

Yes, but the switch is just a pass through to the Palo Alto.  What I had to do was delete the "channel-group 1 mode active" on the ASR and change it to "channel-group 1".

Also, on the switch ports I had to remove "channel-group 1 mode active" and change it to "channel-group 1 mode on".  It now works.

[Reza Sharifi]

Ok, I did not have a clear picture of what you are trying to do. So, layer-3 is between Palo Alto and the ASR.

Glad to know its all working.