As noted above, there is no IPv6 support in CP. (Also, I don't create any "default" any->any IPv6 rule on CP interfaces, so the traffic will get blocked by pf no matter what ipfw does.)

@Ferry: …. i disabled dhcp in my linksys router It's not an idea. It was the only solution. If the DHCP server on AP was running then your clients could get a IP that the portal didn't assign. That is NOT good. But, never ever the client can pass the portal interface. It would mean that a client could assign himself an IP (static IP) in the net mask of the portal interface, and he would have a free ride. No way. If a second clients can pass through  the portal right away after a first client did login (with a password, voucher, whatever) then all your visitors are using the same IP and MAC. This means that your AP is in router mode. You probably deactivated the "router-mode" of you AP. That's why every thing works now as advertised  ;)

Thanks a lot.How can I use radius proxy?I did not find any instruction.

Thanks @Gertjan for that.  I'm actually using the stable version of squid.  I think squid3 beta is the best option for me now though I would prefer the stable version.  I actually need captive portal users to use the proxy server which we heavily do caching.  Thank you everyone!

Explain your setup more clearly. U can limit the amount of MBs with RADIUS. Doesn't Mather if yoiu use a AP or not.

Just keep in mind that CNA might not support 'javascript'.

When the portal page doesn't come up it is almost always: HTTPS set as browser's home page (go to a regular http site - just type 10.10.10.10 in the browser or something) DNS (usually static DNS servers in the client even though they're DHCP) Find out what port your portal is on and try connecting directly to that.  (eg http://192.168.10.1:8002)

in this moment we have connected 11596 users , not all this users is online simultaneously.

Thanks.  That still doesn't make it entirely clear that your port 8000/8001 portal is going to be changed to 8002/8003, etc.

Hello Gertjan! Thanks for the reply. with squid non transparent I am sure downloading continues after disconnecting via CP. In transparent squid everything is ok. I am using pfsense 2.0.3 only because in this version I can use non transparent squid with CP login option as using non transport squid I can block https traffic and also able to cache https traffic.

@ermal: You are sure this is still true on 2.2? Not sure if MAC passthrough is still slow when new users join and there are already thousands in the list, but just allowing them through, the database appears to be cleared on reboot.

When you upload a customised CP login page it does get backed up as part of the XML config file (I've done it so I know it works). The pictures ought to be included as well, assuming you uploaded them via the 'file upload' section of the captive portal configuration pages.

Solved my issue. https://forum.pfsense.org/index.php?topic=85695.msg481877#msg481877

Yes but its easier for me to add a whole subnet in captiveportal.inc since I have no control what IPs the servers will get. I only supply a pre configured pfsense.

The symptom is the same, the crash is quite a bit different from the looks of your crash report. 2.2 release is now out, upgrading to it is your next best step.