Your proxy config is just plain radius. You need to read the radsec parts of the config and ensure you have not only properly defined radeec clients on the central box but also radsec proxy statements on the leaf nodes alan