LACP notes and restrictions
802.1X (Port-based access control) configured on a port
To maintain security, LACP is not allowed on ports configured for 802.1X authenticator operation. If you configure
port security on a port on which LACP (active or passive) is configured, the switch removes the LACP
configuration, displays a notice that LACP is disabled on the port, and enables 802.1X on that port.
switch(config)# aaa port-access authenticator b1
LACP has been disabled on 802.1x port(s).
switch(config)#
The switch does not allow you to configure LACP on a port on which port access (802.1X) is enabled. For
Example:
switch(config)# int b1 lacp passive
Error configuring port < port-number > : LACP and 802.1x cannot
be run together.
switch(config)#
To restore LACP to the port, you must first remove the 802.1X configuration of the port and then re-enable LACP
active or passive on the port.
Port security configured on a port
To maintain security, LACP is not allowed on ports configured for port security. If you configure port security on a
port on which LACP (active or passive) is configured, the switch removes the LACP configuration, displays a
notice that LACP is disabled on the port, and enables port security on that port. For example:
switch(config)# port-security a17 learn-mode static address-
limit 2 LACP has been disabled on secured port(s).
switch(config)#
The switch does not allow you to configure LACP on a port on which port security is enabled. For example:
switch(config)# int a17 lacp passive
Error configuring port A17: LACP and port security cannot be
run together.
switch(config)#
To restore LACP to the port, you must remove port security and re-enable LACP active or passive.
Changing trunking methods
To convert a trunk from static to dynamic, you must first eliminate the static trunk.
Static LACP trunks
When a port is configured for LACP (active or passive), but does not belong to an existing trunk group, you can
add that port to a static trunk. Doing so disables dynamic LACP on that port, which means you must manually
configure both ends of the trunk.
Dynamic LACP trunks
You can configure a port for LACP-active or LACP-passive, but on a dynamic LACP trunk you cannot configure
the other options that you can on static trunks. If you want to manually configure a trunk, use the
trunk
command.
Chapter 5 Port Trunking
147
