Ubiquiti UniFi Security Gateway OpenWrt Firmware

CPU: Cavium CN5020
RAM: 512 MB
Flash: 2, 8, 4096 MB

The Ubiquiti UniFi Security Gateway is supported by OpenWrt on the octeon/generic target. 2 firmware images are available from the official OpenWrt 25.12.5 stable release — download one below, or build a custom OpenWrt image for this device with your own package selection.

Specs

Specifications

CPU	Cavium CN5020
CPU cores	2
CPU frequency	500 MHz
RAM	512 MB
Flash	2, 8, 4096 MB
1 Gbit Ethernet ports	3

Hardware data from the OpenWrt Table of Hardware; verify against your unit before flashing.

Build matrix

Supported firmware versions

Distribution	Version	Target	Profile
OpenWrt	25.12.5	octeon/generic	ubnt_unifi-usg

Downloads

Download images

OpenWrt 25.12.5 · octeon/generic

Image	Type	sha256
openwrt-25.12.5-octeon-generic-ubnt_unifi-usg-squashfs-sysupgrade.tar Not sure? Pick this if upgrading from OpenWrt.	sysupgrade	22a7fe403301…
openwrt-25.12.5-octeon-generic-ubnt_unifi-usg-initramfs-kernel.bin Minimal kernel image, useful for first install or recovery.	kernel	8e3de52bf1cc…

Downloads are served by the official OpenWrt mirrors — unchanged upstream stable builds.

Packages & install

Default packages & installation

Default packages

Every image for the Ubiquiti UniFi Security Gateway ships these packages by default. The customize option below lets you add or remove packages before the image is assembled.

Device packages (2)

kmod-gpio-button-hotplug kmod-leds-gpio

Target default packages (27)

apk-mbedtls base-files ca-bundle dnsmasq dropbear e2fsprogs firewall4 fstools kmod-nft-offload kmod-usb-dwc3-octeon libc libgcc libustream-mbedtls logd mkf2fs mtd netifd nftables odhcp6c odhcpd-ipv6only ppp ppp-mod-pppoe procd-ujail uci uclient-fetch urandom-seed urngd

Installation notes

Already running OpenWrt or ImmortalWrt: flash the sysupgrade image from LuCI (System → Backup / Flash Firmware) or with the sysupgrade command.
The kernel / initramfs image boots from RAM without writing to flash — useful for a first install or for recovering from a failed flash.

Verify your download against the published checksum before flashing:

$ sha256sum openwrt-25.12.5-octeon-generic-ubnt_unifi-usg-squashfs-sysupgrade.tar
22a7fe40330126ce772de8c89062844197681276fc0ba452bc3ba3e6f607c7df  openwrt-25.12.5-octeon-generic-ubnt_unifi-usg-squashfs-sysupgrade.tar

Build custom firmware

Need more than the default image for the Ubiquiti UniFi Security Gateway? Pick your packages — LuCI apps, themes, VPN clients — set the basics, and get a ready-to-flash OpenWrt image assembled from official packages in minutes.

Customize firmware for this device

More Ubiquiti devices

More devices on octeon/generic

Upstream

Upstream & source

Images are assembled from packages compiled and published by the upstream OpenWrt and ImmortalWrt projects. The complete corresponding source code is available from those projects under the GPL.