Unfortunately I can't see the attached file you sent in. One issue I think you may be running into is that you're missing the tunnel tag for tunnel-private-group-id:
Per RFC 3580:
When Tunnel attributes are sent, it is necessary to fill in the Tag field. As noted in
The Tag field is one octet in length and is intended to provide a means of grouping attributes in the same packet which refer to the same tunnel. Valid values for this field are 0x01 through 0x1F, inclusive. If the Tag field is unused, it MUST be zero (0x00)
Can you send a screenshot of the hex output for the Egress-VLAN AVP?