Because you're treating the primary as a client just like the others.See raddb/sites-available/README. You can have a *separate* virtual server on the secondary that handles packets from the primary. Configure it to log to the detail file, and to *not* proxy the request at all.
Great thanks Alan, Ill give that a bash. Patric - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
