mediumMultiple Choice
CCNP Practice Question: Given the configuration: interface Port-channel1…
Given the configuration:
interface Port-channel1 switchport mode trunk switchport trunk allowed vlan 10-20
!
interface GigabitEthernet0/1 switchport mode trunk channel-group 1 mode passive
!
interface GigabitEthernet0/2 switchport mode trunk channel-group 1 mode passive
What is missing for this EtherChannel to form with a neighbor that uses LACP active?
⚠ Common exam trap
Cisco often tests the misconception that both sides must use the same LACP mode (active/active or passive/passive), when in fact LACP requires one side to be active and the other can be passive to successfully form an EtherChannel.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Nothing is missing; the configuration is valid and the EtherChannel will form with the neighbor.
The configuration is valid because LACP uses a negotiation system where one side must be in active mode and the other in passive mode to form an EtherChannel. Here, the neighbor is configured with LACP active, and the local member interfaces are configured with 'channel-group 1 mode passive', which is the correct counterpart. The 'switchport trunk allowed vlan' command is only needed on the port-channel interface, not on the member interfaces, as the port-channel interface inherits and propagates the VLAN list to the member ports.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The member interfaces must also have the 'switchport trunk allowed vlan 10-20' command.
Why it's wrong here
This is incorrect because member ports in an EtherChannel inherit their Layer 2 configuration from the logical port-channel interface. The 'switchport trunk allowed vlan 10-20' command should be applied only to the port-channel interface; each physical member automatically adopts the same allowed VLAN list. Adding it per-interface is redundant and, if the lists ever differ, can cause the channel to fail consistency checks. The configuration as described is valid without this command on the member ports.
- ✗
The port-channel interface must be configured with 'channel-group 1' to associate the member ports.
Why it's wrong here
This is wrong because the 'channel-group' command is never applied to the port-channel interface itself; it is entered on each physical member interface to bind it to a logical port-channel. When you configure 'channel-group 1 mode active' on a physical interface, Cisco IOS automatically creates the corresponding port-channel interface (e.g., Port-channel1). There is no need to manually create or associate the port-channel interface with a separate 'channel-group' command on the logical interface.
- ✓
Nothing is missing; the configuration is valid and the EtherChannel will form with the neighbor.
Why this is correct
The member interfaces already have the necessary physical and logical configuration (trunk mode, same VLAN allowed list inherited from the port-channel, and LACP mode), and the port-channel interface is created automatically when the member interfaces are configured with channel-group. The neighbor is presumably configured compatibly, so the EtherChannel will successfully form. Nothing is missing from the configuration.
- ✗
The member interfaces must use LACP active mode to form the channel.
Why it's wrong here
This is incorrect because LACP has two modes: active and passive. In passive mode, the interface does not initiate LACP PDUs but does respond to them. As long as the neighbor is configured active, a passive interface will form a working EtherChannel. A requirement for both sides to be active is a common misconception; only one side needs to be active for LACP negotiation to succeed. Static mode (channel-group ... mode on) would also work if both sides are statically configured.
Visual reference
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.