Adding OpenWrt support for Xiaomi "Redmi Router AX6S"/"Xiaomi Router AX3200"

fr33tk · 2022-04-07T08:44:39.555Z

Which productiod date have you on box written?
Mine was 11/2021, telnet disabled unfortunatelly.

alexanderk · 2022-04-07T09:45:22.459Z

i have big difference between mt76 and mtk driver. Mtk driver is stronger at all bands.
Check latest post at github

Eal · 2022-04-07T09:49:20.018Z

Production date 09/2021

thorsten97 · 2022-04-07T10:21:11.446Z

Where can I find a build using mtk drivers?

alexanderk · 2022-04-07T10:22:22.332Z

https://www.right.com.cn/forum/forum.php?mod=viewthread&tid=8187405&extra=page%3D1%26filter%3Dtypeid%26typeid%3D94

i use this version

Also most bands work with 160mhz

dsouza · 2022-04-07T10:56:44.375Z

Just wondering: has anyone already checked if RB01 has telnet open before starting the configuration of the stock firmware?

I mean, when I first powered on my RB01, initially telnet did not connect. I then connected to it via a browser, then clicked an option to select the country/region (stock web UI) but I did not move forward with the stock firmware configuration. Then before giving up I tried telnet again and voilà! Connection established. I did not think twice and installed OpewnWrt right away (so I have never ever used the stock firmware past the initial configuration step).

So I am wondering if the production date is what determines if telnet is open for RB01 or it may be anything else (such as telnet may be open just before the initial setup of stock firmware). Anyway, I'm away from home now, but when I come back I will check the production date and share here.

Edited: per @cliobrando explanation below, having telnet enabled or not really depends on a factory configuration. It is not related to the configuration phase at all. More details below:

Adding OpenWrt support for Xiaomi "Redmi Router AX6S"/"Xiaomi Router AX3200" For Developers

The units that have telnet enabled from the factory (RB01), it is due to a flag in the bdata partition, it's not related to the web ui configuration. Even if you update the firmware, telnet will still be enabled. So it seems that xiaomi flashed the wrong firmware in the early RB01 units.

wepee · 2022-04-07T11:36:51.319Z

I bought myself a Xiaomi AX3200 router that is RB01 international (English) version on the other day, but never realise it is supported under OpenWRT firmware, so I tried to telnet the router, and it does work(Telnet is enabled)

So, I would say, any router that is manufactured before August 2021, will most likely have Telnet port 23 open on the LAN side.

What are the current issues if I do install OpenWRT?

Wireless coverage is smaller due to the wifi signal being weaker?
Is 160MHz suppose to work? I can see the stock OEM firmware, the maximum = 80MHz channel.
etc....etc.....

IMG_20220407_1909373000×2382 423 KB

xabolcs · 2022-04-07T12:01:47.049Z

Thanks for this interesting hint!

I'll buy one soon and verify.

cliobrando · 2022-04-07T14:10:06.599Z

The units that have telnet enabled from the factory (RB01), it is due to a flag in the bdata partition, it's not related to the web ui configuration.
Even if you update the firmware, telnet will still be enabled. So it seems that xiaomi flashed the wrong firmware in the early RB01 units.

dsouza · 2022-04-07T14:13:41.644Z

Thank you for the explanation! I've just edited my previous post to mention your answer for future reference.

dsouza · 2022-04-07T14:16:19.273Z

So, one question out of curiosity: how in the RB03 units with telnet disabled it is possible to enable it by installing the beta stock firmware? Does it mean that it is not the flashing itself, but it is the beta firmware that when loaded explicitly enables telnet by changing a flag in the bdata partition?

cliobrando · 2022-04-07T14:27:19.191Z

I don't think so, because the bdata partition modification is permanent. I think that the RB03 beta firmware just enables the telnet service via service configuration.
If you want to enable telnet permanently in the RB03 units, flash the beta firmware, mod bdata to enable telnet, and then flash any official version you want, telnet will be enabled.

fr33tk · 2022-04-07T14:48:15.576Z

Any suggestions for those who have RB01 and telnet completely disabled?

dekomote · 2022-04-07T14:52:30.280Z

fr33tk:

Any suggestions for those who have RB01 and telnet completely disabled?

Check this post

johnd2:

I got a unit with disabled telnet and UART. But it was possible for me to start the TFTP recovery process and interrupt it after loading the image when it starts erasing the flash by just pulling the power cord.
After power on it is not able to load anything and falls back into UBoot with a working UART terminal that can be used not only for enabling telnet and SSH, but also for loading an OpenWRT image and starting it.

Just make sure you use an image without bootloader.

Eal · 2022-04-07T15:17:30.297Z

Installed yesterday. Haven't noted any issue at all, works as it should.

bigboo · 2022-04-07T20:47:24.809Z

Hi,

I received an AX6S from Aliexpress today and installation went fine using guides from here, thanks!

Everything is working fine (latest official snapshot) except one thing:
I have a Windows 10 laptop with a qca61x4a wifi card. Windows can't connect to 5GHz band from the router after I typed the passphrase, but it can connect fine to the 2,4 GHz band.

All others PC/smartphones are OK with the 5GHz band and this laptop is working fine with others 5GHz routers.

I updated to latest wifi drivers from windows update catalog but nothing changed.

Do you know if there are some problems with mt76 drivers and Qualcomm Atheros QCA61x4A wifi cards?

fr33tk · 2022-04-07T22:03:22.313Z

Ok did the written procedure and was succesfully brought to u-boot console.
And after that i have booted through tftpboot initramfs.itb
And now i don't see any mtd firmware layout.

root@OpenWrt:/tmp# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00080000 00020000 "Preloader"
mtd1: 00040000 00020000 "ATF"
mtd2: 00080000 00020000 "u-boot"
mtd3: 00040000 00020000 "u-boot-env"
mtd4: 00040000 00020000 "bdata"
mtd5: 00080000 00020000 "factory"
mtd6: 00040000 00020000 "crash"
mtd7: 00040000 00020000 "crash_log"
mtd8: 00400000 00020000 "kernel"
mtd9: 002a0000 00020000 "kernel"
mtd10: 00160000 00020000 "rootfs"
mtd11: 06f00000 00020000 "ubi"

If i try to mtd write ttto kernel

root@OpenWrt:/tmp# mtd -r write factory.bin kernel
Unlocking kernel ...

Writing from factory.bin to kernel ...  [e]Failed to get erase block status

Which is because partition too small.
How to write image then?

dsouza · 2022-04-07T23:50:19.762Z

My "Xiaomi Router AX3200" (RB01) which came with telnet open has a production date of 09/2021 (purchased on Aliexpress).

wepee · 2022-04-08T05:57:04.706Z

Hi @dsouza can you vouch for your special technique of discovering Telnet really works?

I am thinking of buying another unit of Xiaomi AX3200 RB01 instead of Totolink X5000R, since I am able to buy them cheap, the difference is between the 2 routers is only 10 bucks.

wepee · 2022-04-08T06:05:10.349Z

Hi @dsouza, you mentioned you end up getting an AX3200 model = RB01, correct?

dsouza:

I've followed the flash instructions at the official wiki here .

The link below is for the instruction of flashing model = RB03 and not RB01

Important: There exist two versions: RB01 aka. Xiaomi AX3200, the international version and RB03 aka. Redmi AX6S, the Chinese version. The described installation method only works for RB03, since miwifi_rb03_firmware_stable_1.2.7_closedbeta.bin cannot be flashed on RB01.

I am baffled as how you managed to flash it on a RB01