Add support for Xiaomi AX1800 Wifi 6 router

Are you sure this is for the AX1800? I see no reference to it anywhere in the repo.

1.0 rc1 has support for qualcomm ax ipq60xx and ax1800 is on devices list
it does compile but cant boot

i still have to try this relase

1 Like

I had a go at getting it to boot a few weeks back without luck.

I contacted one of the Devs but was told that the devices memory is too low for ATH11k and more than likely it bails out for that.

Only 256MB of RAM, which is way too low for ath11k without serious patching.

3 Likes

Could someone update the wiki? Recovery instructions aren't correct and wiki registration is currently impossible.

You need to set TFTPd to 192.168.31.100 and rename firmware file to "miwifi.bin". Also light isn't solid on AX5/AR67, it's blinking blue once flashing is finished.

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.XF.0.3-00077-IPQ60xxLZB-2
S - IMAGE_VARIANT_STRING=IPQ6018LA
S - OEM_IMAGE_VERSION_STRING=crm-ubuntu64
S - Boot Interface: NAND
S - Secure Boot: Off
S - Boot Config @ 0x000a602c = 0x000002e5
S - JTAG ID @ 0x000a607c = 0x001390e1
S - OEM ID @ 0x000a6080 = 0x00000000
S - Serial Number @ 0x000a4128 = 0x76c4a45a
S - OEM Config Row 0 @ 0x000a4188 = 0x0000000000000000
S - OEM Config Row 1 @ 0x000a4190 = 0x0000000000000000
S - Feature Config Row 0 @ 0x000a4130 = 0x0000800018200021
S - Feature Config Row 1 @ 0x000a4138 = 0x02c3e83783000009
S - PBL Patch Ver: 1
S - I-cache: On
S - D-cache: On
B -      3413 - PBL, Start
B -       592 - bootable_media_detect_entry, Start
B -      4339 - bootable_media_detect_success, Start
B -      5147 - elf_loader_entry, Start
B -      5319 - auth_hash_seg_entry, Start
B -      7787 - auth_hash_seg_exit, Start
B -      8284 - elf_segs_hash_verify_entry, Start
B -    110431 - elf_segs_hash_verify_exit, Start
B -    114857 - auth_xbl_sec_hash_seg_entry, Start
B -    115000 - auth_xbl_sec_hash_seg_exit, Start
B -    121547 - xbl_sec_segs_hash_verify_entry, Start
B -    121548 - xbl_sec_segs_hash_verify_exit, Start
B -    122477 - PBL, End
B -    103242 - SBL1, Start
B -    243359 - GCC [RstStat:0x0, RstDbg:0x600000] WDog Stat : 0x4
B -    245799 - clock_init, Start
D -      2836 - clock_init, Delta
B -    254339 - boot_flash_init, Start
D -     29981 - boot_flash_init, Delta
B -    287554 - sbl1_ddr_set_default_params, Start
D -       213 - sbl1_ddr_set_default_params, Delta
B -    294172 - boot_config_data_table_init, Start
D -      4758 - boot_config_data_table_init, Delta - (575 Bytes)
B -    304054 - CDT Version:2,Platform ID:8,Major ID:3,Minor ID:2,Subtype:0
B -    308843 - Image Load, Start
D -      6618 - OEM_MISC Image Loaded, Delta - (0 Bytes)
B -    318206 - Image Load, Start
D -      5093 - PMIC Image Loaded, Delta - (0 Bytes)
B -    326075 - sbl1_ddr_set_params, Start
B -    331047 - CPR configuration: 0x366
B -    334249 - Pre_DDR_clock_init, Start
D -       183 - Pre_DDR_clock_init, Delta
D -         0 - sbl1_ddr_set_params, Delta
B -    370910 - Image Load, Start
D -       427 - APDP Image Loaded, Delta - (0 Bytes)
B -    383995 - Image Load, Start
D -       457 - QTI_MISC Image Loaded, Delta - (0 Bytes)
B -    386435 - Image Load, Start
D -       884 - Auth Metadata
D -       610 - Segments hash check
D -     22661 - QSEE Dev Config Image Loaded, Delta - (36354 Bytes)
B -    411048 - Image Load, Start
D -      6649 - Auth Metadata
D -     10614 - Segments hash check
D -    343735 - QSEE Image Loaded, Delta - (1470632 Bytes)
B -    755210 - Image Load, Start
D -       671 - Auth Metadata
D -       976 - Segments hash check
D -     35563 - RPM Image Loaded, Delta - (102664 Bytes)
B -    792481 - Image Load, Start
D -       732 - Auth Metadata
D -      3141 - Segments hash check
D -    120963 - APPSBL Image Loaded, Delta - (544096 Bytes)
B -    929030 - SBL1, End
D -    826093 - SBL1, Delta
S - Flash Throughput, 4000 KB/s  (2154993 Bytes,  443307 us)
S - Core 0 Frequency, 800 MHz
S - DDR Frequency, 466 MHz


U-Boot 2016.01 (Aug 06 2020 - 11:50:22 +0000), Build: jenkins-common_router_openwrt_ota_publish-159

DRAM:  smem ram ptable found: ver: 2 len: 4
256 MiB
NAND:  ONFI device found
ID = 1580a1c8
Vendor = c8
Device = a1
qpic_nand: changing oobsize to 64 from 128 bytes
SF: Unsupported flash IDs: manuf 00, jedec 0000, ext_jedec 0000
ipq_spi: SPI Flash not found (bus/cs/speed/mode) = (0/0/48000000/0)
128 MiB
MMC:   sdhci: Node Not found, skipping initialization

PCI0 is not defined in the device tree
In:    serial@78B1000
Out:   serial@78B1000
Err:   serial@78B1000
machid: 8030200
eth0 MAC Address from ART is not valid,use random ethaddr
bootwait is on, bootdelay=5
### main_loop: bootcmd="bootmiwifi"
Hit any key to stop autoboot:  0 
 detect button press, continue check 5 secs 
 detect button pressed 5 secs !
 confirm to launch xq_upgrade ! 
 cmd=dhcp

Net:   MAC0 addr:0:3:7f:ba:db:ad
PHY ID1: 0x4d
PHY ID2: 0xd0b1
EDMA ver 1 hw init
Num rings - TxDesc:1 (0-0) TxCmpl:1 (0-0)
RxDesc:1 (15-15) RxFill:1 (7-7)
ipq6018_edma_alloc_rings: successfull
ipq6018_edma_setup_ring_resources: successfull
ipq6018_edma_configure_rings: successfull
ipq6018_edma_hw_init: successfull
eth0
Warning: eth0 MAC addresses don't match:
Address in SROM is         00:03:7f:ba:db:ad
Address in environment is  52:f9:ac:96:90:b3

Trying to ping server.....
ipq6018_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
ipq6018_eth_halt: done
ping failed; host 192.168.31.100 is not alive
ipq6018_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
ipq6018_eth_halt: done
ping failed; host 192.168.31.100 is not alive
ipq6018_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
ipq6018_eth_halt: done
ping failed; host 192.168.31.100 is not alive
ipq6018_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
ipq6018_eth_halt: done
ping failed; host 192.168.31.100 is not alive
Ping test fail
ipq6018_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :1000 Full duplex
eth0 PHY4 Down Speed :10 Half duplex
ipq6018_eth_halt: done
======== dhcp failed, retry !========
 confirm to launch xq_upgrade ! 
 cmd=dhcp

Net:   MAC0 addr:0:3:7f:ba:db:ad
EDMA ver 1 hw init
Num rings - TxDesc:1 (0-0) TxCmpl:1 (0-0)
RxDesc:1 (15-15) RxFill:1 (7-7)
ipq6018_edma_alloc_rings: successfull
ipq6018_edma_setup_ring_resources: successfull
ipq6018_edma_configure_rings: successfull
ipq6018_edma_hw_init: successfull
, eth0
Warning: eth0 MAC addresses don't match:
Address in SROM is         00:03:7f:ba:db:ad
Address in environment is  9c:9d:7e:49:f0:51

Trying to ping server.....
ipq6018_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
ipq6018_eth_halt: done
ping failed; host 192.168.31.100 is not alive
ipq6018_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
ipq6018_eth_halt: done
ping failed; host 192.168.31.100 is not alive
ipq6018_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
ipq6018_eth_halt: done
ping failed; host 192.168.31.100 is not alive
ipq6018_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 Down Speed :10 Half duplex
ipq6018_eth_halt: done
ping failed; host 192.168.31.100 is not alive
Ping test fail
ipq6018_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 Down Speed :10 Half duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 up Speed :1000 Full duplex
eth0 PHY4 Down Speed :10 Half duplex
ipq6018_eth_init: done
BOOTP broadcast 1
DHCP client bound to address 192.168.31.1 (3156 ms)
Using eth0 device
TFTP from server 192.168.31.100; our IP address is 192.168.31.1
Filename 'miwifi.bin'.
Load address: 0x44000000
Loading: *
Got TFTP_OACK: TFTP remote port: changes from 69 to 56828
#################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         #################################################################
         ##########################################################
         3.6 MiB/s
done
Bytes transferred = 25653096 (1876f68 hex)
ipq6018_eth_halt: done
LoadAddr=44000000 NetBootFileXferSize= 1876f68
CRC verify success!
RSA signature verify success!
Erasing NAND...
Erasing at 0x7e0000 -- 100% complete.
Writing to NAND... OK
Upgrade xiaoqiang_version... 
Upgrade uboot.bin... 
 --- xq_flash_erase Erasing Nand...0x00800000~+0x00180000
Erasing at 0x960000 -- 100% complete.
common/proc_xqimage.c xqimage_upgrade 541 start:0x440002b0,subh->flash_addr:0xffffffff,len:0x180000
Upgrade root.ubi... 
 --- xq_flash_erase Erasing Nand...0x01180000~+0x02400000
Erasing at 0x3560000 -- 100% complete.
 --- xq_flash_erase Erasing Nand...0x03580000~+0x02400000
Erasing at 0x5960000 -- 100% complete.
common/proc_xqimage.c xqimage_upgrade 541 start:0x44096e58,subh->flash_addr:0xffffffff,len:0x17e0000
Erasing NAND...
Erasing at 0x7e0000 -- 100% complete.
Writing to NAND... OK
========Upgrade success!========
Erasing NAND...
Erasing at 0x7e0000 -- 100% complete.
Writing to NAND... OK
1 Like

See Applying for OpenWrt wiki account

1 Like

may be a lead
https://shopee.vn/%28-Padavan-Openwrt-%29-B%E1%BB%99-Ph%C3%A1t-Wifi-Mesh-Wifi-6-Xiaomi-CR6608-AX1800-i.170669167.10903009900

that is one strange looking ax1800, seems like you can buy one with openwrt preinstalled

Did some research, while looking very similar on the exterior, this may be based on mediatek mt7621.

The mediatek mt7621 is wifi 5 (AC) not wifi 6 (AX) !

mediatek mt7621 is the soc, nothing to do with wifi

So I was having some fun considering buying an AX1800 as a project and thought I'd dump the devicetree to see what the status is in mainline Linux (master branch, currently in the middle of the 5.15 merge window).

I've dumped the devicetree here, for your hacking perusal. Note that there are actually 3 DTBs bundled in the firmware (this is the 1st of 3), however the only real difference is the addition/subtraction of ethernet ports, LEDs, buttons, and an SD card reader.

A cursory pass through this tree and what's currently in mainline 5.15 (still in the merge window) suggests that ethernet and USB3 drivers might not yet be present. It might, otherwise, be possible to boot a 5.15 kernel on this at least...

3 Likes

any idea about the wifi driver? someone mentioned above in this thread that ath11k might have issues running with 256mb memory.

1 Like

I'm not sure, I have no experience with ath11k and very little experience with wifi drivers in general. That said, if a driver needs more than 256MB of RAM that sounds like a driver problem to me (GPU drivers possibly being the exception).

How do I will change my Redmi ax5 router region. My router current firmware version is 1.0.44 I badly need to change my router current region. Help please.

Hello everyone and thank you for all your support with this stuff. I gained SSH access with 3.0.34 global firmware an I would want to know two things:

  1. How could I enable the highest numer of WiFi channels in 5 GHz? I tried CN country code and wifi code and another combinations like EU but the channels between 100 and 144 are missed.
  2. How could I reach the highest persistent (it stays after router's reboot) WiFi TX power in 2,4 and 5 GHz? I tried some combinations/mixes but the most I got was 23 dB in 2,4 GHz and 20 dB in 5GHz and as I read before the maximum is 28 dB for 2,4 GHz and 26 dB for 5 Ghz...
    Thank you in advance!

"Xiaomi hasn't released the global firmware for AX1800 yet. And there is a confusion because Xiaomi rebranded the Redmi AX5 and released it as Global AX1800 router. So we aren't sure which is which now."
Orginal (CN):
orginal

Just a quick one. I'm on 3.0.34 and did the steps of Xiaomi ax3600 ssh guide with resulting code:0 -s. Still I didn't get ssh access this time.
Is there anything I've missed? Thank you...

Hello @hurjup, I was able to gain SSH access in AX5/AX1800/RA67 with 3.0.34 global stock Xoaimi's firmware using another Openwrt router and the following guide:

Do you have another router with Openwrt installed? This way is the easiest one I found to achieve that goal...

Hi, Can you take a backup of the flash partitions and post somewhere? I'd like to run the international version of the firmware but there is no firmware download available yet for 3.0.34 version :confused:

That is not the Mi Router AX1800. It's a custom-made model CR6608 for China Mobile (a Chinese ISP).

That model is supported by OpenWrt: https://github.com/openwrt/openwrt/pull/4118

(It is MediaTek btw... AX1800 is Qualcomm lol)