Add OpenWrt support for Xiaomi "Redmi AX6000"

Hello? I flashed with stock image instead of recommended one.

After flashing my redmi ax6000 become brick.

Thus, I decided to go serial to rewind the flash and I wanted to upload right flash image and run flashing through ssh using serial port.

Luckly I successfully see init boot logs and through serial port.
But some how I cannot write commands through serial port.
So I cannot login or selext uboot options.

I verified that my usb serial chip do transmit signals by checking loopback test(connect tx and rx) and its LED indicators blinks.
(Currently I am using cp2102 chip to bridge serial and usb port.)

Is there any other thing I am missing?

  1. Your device should already running OpenWrt. If not, follow the instructions to flash OpenWrt: #11115

Thank you for reply but can you more elaborate the answer? It is hard to catch the point that I should follow.

The situation is a little bit tricky so it makes me confused and I dont know what should I follow.
Specifically, instruction in the link kinda assumes that I can manipulate the machine somehow e.g. either ssh or serial.

But I don't have any ways to manipulate my machine.

I already followed the installation instructions but with wrong image.(stock layout version)
I realized I used wrong image after flashing.
Until flashing I manipulated it with ssh and web ui.

After flashing I couldn't access the machine with SSH since DHCP server wouldn't work.

I went with serial method to save the machine.
I could verify that my machine runs Openwrt through serial port (serial rx works) but I cannot send any signals(serial tx not works).
Thus I couldn't upload my new image or manipulate OpenWrt through serial.

If OpenWrt is already working, you don't need to use serial. It should have default OpenWrt IP (192.168.1.1). Just configure another static IP in your computer (let's say 192.168.1.2), connect it to one of the LAN ports (the 3 ones in the middle) and you should be able to ping and ssh the router.

I think after brick, you entered Xiaomi recovery method but not flashed Openwrt image, since you mention you don't have access on SSH, Serial input.

Flashed U-Boot or Openwrt image?

Double check your ground cable and make sure the serial settings are correct in your software.

[OpenWrt Wiki] Xiaomi Redmi AX6000

Actually, I had same serial issue right after Xiaomi U-boot recovery, the serial input lags and became erratic until it totally stopped respond from the keyboard input.

I flashed U-boot (new layout) and installed Openwrt using SSH, but Serial input not working anymore... I even re-soldered pins on the port to make sure no loose pin, USB serial adapter is working fine with other routers.

I started thinking that @sleepyeye is getting the same scenario as mine. Lets see whats the update from him.

Actually, I had same serial issue right after Xiaomi U-boot recovery, the serial input lags and became erratic until it totally stopped respond from the keyboard input.

Ah, I haven't tried serial since I did my initial install of the original layout. I had a bunch of jumper cable extensions and didn't notice the ground came loose on one of them. It also "broke" my keyboard input. I'm glad I got the recovery image on there and that it will boot when appropriate. I briefly thought I was bricked before I discovered the recovery image was loading when I was migrating my setup.

Instead having 192,168.x.x, the local ip was 168.254.x.x which is not assigned by the router.
As far as I know this is a fallback ip which indicates DHCP server failure.

I manually assigned 192.168.x.x to the connected interface and ping 192.168.1.1 and 192.168.31.1, 192.168.10.1 but no luck.

Initially I flashed with initframs-factory.ubi in https://firmware-selector.openwrt.org/?version=SNAPSHOT&target=mediatek%2Ffilogic&id=xiaomi_redmi-router-ax6000-stock

I connected jumper cables from the back thus left-right is reversed
My current connection setup is right now as follows

Pin layout
router: TX, GND, RX, VCC
CP2101: RX, GND, TX

Connections (Left board, Right CP2101)
TX<-> RX
GND<->GND
RX <-> TX

But maybe I was wrong about the GND pin position.
I'll check the ground pin once again tomorrow.
Thanks for advice.

Please be aware that you need to assign to the PC an address from 192.168.1.x (third number needs to be 1).

Also, you can use an sniffer (tcpdump, wireshark) to check for any traffic coming from the router. That'll give you a hint of its status.

To be more specific, I followed steps in https://github.com/openwrt/openwrt/pull/11115
almost exactly.
After I have followed step 4 (+reboot) with wrong INITRAMFS-FACTORY.UBI (link in below),
the router became brick.
(https://firmware-selector.openwrt.org/?version=SNAPSHOT&target=mediatek%2Ffilogic&id=xiaomi_redmi-router-ax6000-stock)

Thanks, I'll check tcpdump and wireshark.

In that case, trying to reboot it 6 times or more should switch to the original firmware, and you can just start over. Also, if you're unable to fix it, Xiaomi recovery tools should work (haven't tried them myself).

If I remember correctly, this what I did to recover from soft brick after boot failure.

  1. Setup a DHCP to serve Xiaomi OEM firmware (rename the file to "RB06.BIN") at 192.168.31.xxx (ur fixed ethernet address)

  2. Power ON+RESET for more than 20sec (Im not sure how many sec exactly), just observe the LED lights blinking status changes.

  3. You will see dnsmasq output message says the file have been uploaded (There is no output from Serial, so I can't see if it is asking for file, I just made broad guess and it was correct)

  4. Restart AX6000, and try to access 192.168.31.1 Xiaomi login URL.

  5. Redo the flash, but observe that active firmware partition might changed. (firmware0/firmware1) and apply corresponding changes in commands.

1 Like

Hello,

My ISP offered me a speed and router upgrade for cheap, so I took them up on their offer. Now I need a faster OpenWRT router to go with it...:wink:

I am considering the Xiaomi AX6000, which looks pretty slick, but I also see a newer [I think] version that has a 2.5 Gbps WAN port and different case shape.

E.g: https://www.router-switch.com/xiaomi-mi-ax6000-wifi-6-router.html

Before I pull the trigger on this version, has anyone else been able to get OpenWRT on it, or perhaps has had trouble?

I read how getting OpenWRT loaded requires exploiting a bug in the stock firmware, so I'm concerned this bug may no longer be exploitable.

Thanks in advance for any insight.

-Bob

If you can spare a little more cash and speed is below 1Gbps, Bananapi-BPI-R3 is a better choice and less trouble IMHO.

1 Like

This is the thread for that model:

As you may see, there's no focus on it right now.

While the bug in the stock firmware may be a issue, looks like there's a downgrade path to be able to use it. Anyway, all the units I've got came with firmware 1.0.48, so they were exploitable right away.