CNA 3.0(1) logging repeatedly in the Passed Auth of ACS 3.3(11)

[anthonyhoar]

When a user logs into a AAA client via CNA, the AAA client sends Passed Authentication information to ACS 3.3 sometimes two and three times a second.

Has anyone ever seen this before?

I have tested CNA by logging into different model switches with different IOS versions and the results are the same, the Passed Authentication log is just crammed with entries from CNA.

[vmoopeung]

which is the platform used with CNA ?

[anthonyhoar]

I'm not too sure what you mean. I am running it on Windows XP Service Pack 2.

In any case, according to Cisco it works this way by design. the HTTP(web client or CNA) access to the Switches will result in an authentication attempt for every element that gets served to the http clients.