Adding OpenWrt support for Xiaomi "Redmi Router AX6S"/"Xiaomi Router AX3200"

For Developers
267

Yeah, about that... I'm changing the layout YET AGAAAAAAIN. :partying_face:

So don't sysupgrade from new images you build, if you're following my branch.

I really need to stop waffling between partition layouts. If you're on an older image built after I push yet another indecisive partition/image change (4mb kernel and a ubifs straight after), you'll probably have to mtd write the factory.bin in order not to soft-brick. Or better yet just go back to stock and start from the beginning.

The problem being that depending on that old beta image is a bit :thinking: , since Xiaomi could in theory go around waving the takedowns, in true hypocritical manner.

Bit of an oopsie for that image to leak though. They probably shouldn't have signed it with the same key, but then they wouldn't be able to upgrade their test users to full version.

Feels bad for the AX3200 buyers though. I don't think anyone would be looking too hard for a way in on their images anymore.

Anyway, how do we feel about these installation instructions for the AX6S? I avoided linking directly to the whole password calculator and leaked image though, as it would be pretty hard to guarantee keeping those both up somewhere.

I did however do a run-through from the stock image with these instructions and it worked, so it should be the last time... Probably...

Installation:
    1. Flash stock Xiaomi "closed beta" image labelled
    'miwifi_rb03_firmware_stable_1.2.7_closedbeta.bin'.
    (MD5: 5eedf1632ac97bb5a6bb072c08603ed7)
    
    2. Calculate telnet password from serial number and login
    
    3. Execute commands to prepare device
    nvram set ssh_en=1
    nvram set uart_en=1
    nvram set boot_wait=on
    nvram set flag_boot_success=1
    nvram set flag_try_sys1_failed=0
    nvram set flag_try_sys2_failed=0
    nvram commit
    
    4. Download and flash image
    On computer:
    python -m http.server
    On router:
    cd /tmp
    wget http://<IP>:8000/factory.bin
    mtd -r write factory.bin firmware
    
    Device should reboot at this point.

It's probably a bit presumptive with only putting the python3 http.server in there, but on the other hand it is 2022...

2 Likes