This setting defines how the switch behaves if it loses its connection to the OpenFlow controller: 'failSecure' (the default) drops traffic destined to the controller while existing flows keep expiring on schedule, while 'failStandalone' makes the switch fall back to acting like an ordinary Ethernet switch or router. An admin in a network where losing controller connectivity should not black-hole traffic would choose failStandalone.