3.2.5.1.10 HCAP-User-Groups
When the RADIUS server receives this VSA, it MUST search the PolicyConfiguration.HCAPUserGroup ADM element specified in section 3.2.1 for the value of the VSA. If a match is not found, the server SHOULD send an Access-Reject message to the NAS and stop processing.
For more details about this attribute, see section 2.2.1.22.