You've misconfigured your FreeRadius server to send attribute the Cisco can't obey, specifically the Filter-Id
The cisco sees the reply: > *May 22 15:43:52.088: RADIUS: Filter-Id [11] 9 then says > *May 22 15:43:52.088: RADIUS/DECODE: invalid ACL type; FAIL and sure enough, the ACL you are returning doesn't exist in the Cisco config you show. Don't send back a Filter-Id reply unless the named ACL exists. Either create the ACL, or don't send it. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html