In Radius auth, how to allow second attempt of token input when the first input is incorrect?

Thanks for helping to test out in lab env! Please check the below image of our access policy, our radius authentication is in one marco and being called in another big marco where the login page resides. We even tried to make a message box in the fallback branch of the radius but it never goes there when the radius token is input incorrectly or in other ways.