Adding OpenWrt support for Xiaomi "Redmi Router AX6S"/"Xiaomi Router AX3200"

It is after the initial mtd write of factory image.

BOARD_NAME := xiaomi,redmi_router_ax6s needs to be added in the definition of the target for the router in target/linux/mediatek/image/mt7622.mk (round line 250ish)
After creating an image with this change, I successfully upgraded with sysupgrade image.
Good thing that it only affects the sysupgrade image and it doesn't break the installed one.

root@OpenWrt:/tmp# sysupgrade -u openwrt-mediatek-mt7622-xiaomi_redmi-router-ax6s-squashfs-sysupgrade.bin 
Sat Mar  5 11:42:49 CET 2022 upgrade: Saving config files...
Sat Mar  5 11:42:50 CET 2022 upgrade: Commencing upgrade. Closing all shell sessions.
Command failed: Connection failed
root@OpenWrt:/tmp# Connection to 192.168.0.1 closed by remote host.
Connection to 192.168.0.1 closed.
1 Like

I bought three units of this (RB01 / global), when they arrive I'll be able to assist in installation testing (assuming they have telnet enabled).

1 Like

@dekomote I've used your latest build and overwrote the existing single partition layout sysupgrade image install using mtd -r write factory.bin firmware. I am seeing config is persisting post reboot now.

1 Like

Yo, can u share the "miwifi_rb03_firmware_stable_1.2.7_closedbeta.bin" firmware? :slight_smile:

@XiaoliChan you can find it up here - https://github.com/YangWang92/AX6S-unlock

After the latest changes @namidairo, I can confirm that sysupgrade is working without any issues now.

2 Likes

Thanks, bro. :slight_smile:

But I wonder to know if can Chinese version ax6s flash this firmware?

If you have RB03 then yes :wink:

You can follow my tutorial from github, all questions should be answered there.

EDIT: I published a new release: https://github.com/mikeeq/xiaomi_ax3200_openwrt/releases/tag/v20220306

2 Likes

That was very sweet! :slight_smile:

There's a fresh build of my fat image which includes the latest change that fixes the sysupgrade in the gdrive folder

https://drive.google.com/drive/u/0/folders/1fp9PLvn5__fD0Nn_99y-PaIOI66q-r43

1 Like

I have successfully flashed the router that was previously flashed with a 2-part image (@thorsten97 original builds) with the latest factory.bin using

mtd -r write factory.bin firmware

It worked, it rebooted and persisted the settings after the second reboot. Sysupgrade also worked and I've restored my backup configuration.

Is this build based on custom branch or from master?

It's based directly of @namidairo 's branch which is based on master and incorporates ax3200 settings and code.

newbie here guys.my english is not that good.i just received my xiaomi ax3200 with telnet disable.mine RB01 with production date 11/2021.still waiting for exploit or any stock fw with telnet enable.tq

1 Like

@clark scroll up in the forum... There is a beta test firmware from YangWang that has telnet enabled.

I read somewhere over the weekend that on 2 partitioned systems, OpenWrt will alternate upgrades between the 2 partitions. This reduces risk of soft-brick and ensures there is a "last known good" config to boot from. I think the post was a few years old, so I'm just wondering if it still the case and applies to the RB03?

Do I need to be concerned about the 2 partitions at all at this point? Or can simply mtd write factory over my current install & partition?

I believe that is for RB03 only (chinese version).

But I think @namidairo have more info that he can't share atm due embargo.

I can tell you the RB01 isn't vulnerable to that.

As for the RB03, if that beta image gets DMCA'd off the face of the planet (notice I've avoided directly linking to it, as there's no direct Xiaomi CDN link to it that I know of), there'll be another installation method that'll come out later, assuming Xiaomi don't purge older versions of firmwares from their CDN.

It's only mentioned because of the obvious hardware similarities, thus the images generation with it as that "model" are just an extra couple lines.

I believe I mentioned earlier, that the RB01 having telnet enabled out of the box was most likely a programming mistake from the factory and not intentional.

Did you found any similar image for RB01 (non release channel) that enable telnet?

I doubt they do the same community/fan testing programs for their EU router variants, so the chances of an image leaking for that are probably nil unless from Xiaomi themselves, or someone manages to force it to upgrade to another model image. (This is partly why it's a different model number now. People kept cross-flashing their EU AX3600 with older chinese builds to gain access.)

1 Like