So we are wanting to deploy an IDS device to capture EAST-WEST traffic in a LAN.
We are attempting to configure SPAN sessions from the many VLANS to the ports connected to the IDS.
However, to prevent the IDS from receiving multiple packets for the same traffic, we attempted to configure the two links in vPC (virtual port channel), which, I think, would ensure the traffic isn't being duplicated twice from the two switches.
However, the IDS solution does not support link aggregation of any kind, so teaming the NICs to allow for vPC does not work.
Is there any other solution to configuring redundant SPAN sessions?
These are Cisco Switches and a FireEye NX (IDS/IPS).