Specifications

Access Layer April 2014
34
Cisco Catalyst 2960-S and 2960-X Series Switches do not require the switchport command, and the Cisco
Catalyst 4500 does not use the logging event bundle-status command.
interface [interface type] [port 1]
description Link to Distribution Layer Port 1
interface [interface type] [port 2]
description Link to Distribution Layer Port 2
interface [interface type] [port 3]
description Link to Distribution Layer Port 3
interface [interface type] [port 4]
description Link to Distribution Layer Port 4
!
interface range [interface type] [port 1], [interface type] [port 2], [interface
type] [port 3], [interface type] [port 4]
switchport
macro apply EgressQoS
channel-protocol lacp
channel-group [number] mode active
logging event link-status
logging event trunk-status
logging event bundle-status
Step 2: Configure the VLAN trunk interface to the upstream device.
An 802.1Q trunk is used for the connection to this upstream device, which allows the uplink to provide Layer 3
services to all the VLANs defined on the access layer switch. Using a trunk even for a single access VLAN allows
for easier VLAN additions in the future. Prune the VLANs allowed on the trunk to only the VLANs that are active
on the access switch. Set DHCP Snooping and ARP Inspection to trust.
Because the upstream device is a distribution switch, you use an EtherChannel—the interface type is port-
channel and the number must match channel-group configured in Step 1.
The Cisco Catalyst 3750 Series Switch requires the switchport trunk encapsulation dot1q command.
interface [interface type] [number]
description EtherChannel Link to Distribution Layer
switchport trunk allowed vlan [data vlan],[voice vlan],
[mgmt vlan]
switchport mode trunk
ip arp inspection trust
ip dhcp snooping trust
logging event link-status
logging event trunk-status
no shutdown
exit
If the interface type is not a port-channel, you must configure an additional command macro apply EgressQoS
on the interface.
In the next step, you mitigate VLAN hopping on the trunk for switch-to-switch connections.