commenting out the 'description := "Authenticated at %S" from the post-auth update section seemed to do the trick. I also uncommented out the "reply:Tunnel-Private-Group-ID :=
'radiusTunnelPrivategroupId'" to get my vlan tag value. I'll do more testing next week.

Thanks for the help!