Ubiquti USG unifi security gateway adopt settings via ssh cli command line for parental control purposes

Login to your USG/unifi security gateway via ssh secure shell port 22 with putty on windows or ssh shell on your favourite  *nix derivate.

Destination ip address should be in case you not changed the default.


In case you haven't installed and setup the unifi controller for the USG until now:



Use the credentials as seen due the installation of the unifi controller.

You can't use the credentials for the unifi controller UI/user interface. During the installation process there was displayed a 2nd set of credentials, default user name in this dialog was "admin" - password was obfuscated by asterik signs. This is the right one.

Once you are logged in type


You are now a in a subshell and enabled to configure the USG via the cli (command line interface) level

do your changes, e.g.

set firewall name Parental-Control rule 10000 description "Block teenager based on time."
set firewall name Parental-Control rule 10000 action drop
set firewall name Parental-Control rule 10000 time  starttime 20:00:00
set firewall name Parental-Control rule 10000 time stoptime 11:00:00
set firewall name Parental-Control rule 10000 time weekdays Mon,Tue,Wed,Thu
set interfaces ethernet eth1 vif 30 firewall in name Time

to apply these settings type

commit; save ; exit

Cross your fingers and know what you're doing.

Otherwise type

exit discard

To take effect reboot the USG.

This worked for me, no guarantees it works for you.

The file that will get modified in this procedure is 


So it's sound like a good idea to get a backup of it via scp before applying any settings.

Disclaimer: Try it at your own risk, understand what i wrote and be aware that you can brick your device due such settings. And again, backup the file mentioned above. Good luck.


Popular Posts