This read-write boolean configures how the switch handles ACL-related errors when applying RADIUS-supplied attributes, specifically whether such an error causes the session to be rejected. An administrator enables this when a strict security posture is desired, ensuring a session isn't allowed through with only a partially applied RADIUS ACL policy. For example, enabling this OID means that if a RADIUS-assigned ACL name can't be resolved on the switch, the client's session is rejected outright rather than granted access without the intended access restriction.