I found a fix for my issue but it may be unique. Prior to using NAC to set up ports for our APs we had other methods that left the config having tagging on ports for the APs. I found that the issue was not happening on our new AP ports which only had an untagged VLAN on them before NAC added the tagging. I tried powering down the AP, removing the tagging that was still there, and powering it back up.
That seems to have done the trick. After that change we no longer have extra devices showing up on the ports. I did find however that in some cases (model 505 APs for example) if the device was in End Systems already then they show up on the wired port but as Disconnected. I was able to remove the extra devices from our End Systems and that fixed that problem as well.
