customer with wrong passwords

[Vects]

Hi there,
I want to implement default 'catch all' rules in radius for customers
with wrong passwords, they suppose to be connected and redirected to
some web proxy. In the same time that default shouldn't concern
customers with correct passwords.

Is below correct for my purpose?

...
DEFAULT Service-Type == Framed-User
    Framed-IP-Address = 255.255.255.254,
    Service-Type = Framed-User,
    Framed-MTU = 1500,
    Fall-Through = Yes


DEFAULT Auth-Type := Reject
    Service-Type = Framed-User,
    Framed-IP-Address = 255.255.255.254,
    Framed-MTU = 1500,
    Cisco-AVPair += "lcp:interface-config=ip route-cache policy\nip policy route-map toproxy"
...

Thank you, Vects