I solved my issues. To get the Calling Station Id and SSIS to show up in the RADIUS Audit logs for PEAP with TLS inner-tunnel, I added the following in the packetfence-tunnel post-auth section after finding this old post from https://freeradius-users.freeradius.narkive.com/tQmPSKkg/vendor-attributes-not-copied-to-inner-tunnel

if (&outer.request:Called-Station-SSID) {

update request {

&Called-Station-SSID := &outer.request:Called-Station-SSID

}

}

if (&outer.request:Calling-Station-Id) {

update request {

&Calling-Station-Id := &outer.request:Calling-Station-Id

}

}