Captive Portal DB Issue (Active Users VS Active Vouchers )

[wazim4u]

We are facing a persistent Captive Portal database desynchronization issue on our pfSense 2.6.0 CE firewalls.

The problem manifests as a discrepancy between the "Active Users" and "Active Vouchers" counts. For instance, we see 2837 Active Users but only 2651 Active Vouchers—a difference of 186 entries. On some sites, this mismatch can sometimes be over 1000s

This becomes a user-facing problem when someone disconnects to switch devices (e.g., due to randomized MAC addresses). Upon trying to reconnect, they are incorrectly told their voucher has "expired," even if plenty of time remains, because the voucher record is missing from the active database.

This has happened randomly across multiple sites. The only workaround so far is to restore a previous configuration backup.

We would like to know: Is anyone else experiencing this database desynchronization on pfSense 2.6.0 or any later version (like 2.8.0/2.8.1), especially with a high number of captive portal users? Any insight or shared experience would be helpful.