Cisco Catalyst 3850 Manual page 56

Configure Uplink Interface Connectivity
EtherChannel Connection to Router 1
interface
description
switchport mode trunk
switchport trunk native vlan
switchport trunk allowed vlan
spanning-tree portfast trunk
channel-protocol lacp
channel-group
interface
description
switchport mode trunk
switchport trunk native vlan
switchport trunk allowed vlan
spanning-tree portfast trunk
channel-protocol lacp
channel-group
EtherChannel Connection to Router 2
interface
description
switchport mode trunk
switchport trunk native vlan
switchport trunk allowed vlan
spanning-tree portfast trunk
channel-protocol lacp
channel-group
interface
description
switchport mode trunk
switchport trunk native vlan
switchport trunk allowed vlan
spanning-tree portfast trunk
channel-protocol lacp
channel-group
Configure Security Features on an Uplink EtherChannel Interface
Configure IPv4 and IPv6 security features on uplink EtherChannel interfaces.
Step 2
The uplink EtherChannel interfaces to distribution routers and switches should be configured to trust
router advertisements and IP response, because Layer 3 routing and server functionality resides on the
distribution switches and routers. This step is different from the access interface-to-end device
configuration, which should not be trusted, as specified in the
The policies that should be applied are defined in the
In the following example, security is applied to the uplink interfaces connecting to VPC, VSS, or
standalone switch.
Best Practice User Guide for the Catalyst 3850 and Catalyst 3650 Switch Series
48
GigabitEthernet 1/1/1
connection to Distribution router 1
1 mode active
GigabitEthernet 2/1/1
connection to Distribution router 1
1 mode active
GigabitEthernet 1/1/2
connection to Distribution router 2
2 mode active
GigabitEthernet 2/1/2
connection to Distribution router 2
2 mode active
999
10,11,12,100,200
999
10,11,12,100,200
999
10,11,12,100,200
999
10,11,12,100,200
"Access Interface Connectivity"
"Global System Configuration"
Uplink Interface Connectivity
workflow.
workflow.