I got a unit with disabled telnet and UART. But it was possible for me to start the TFTP recovery process and interrupt it after loading the image when it starts erasing the flash by just pulling the power cord.
After power on it is not able to load anything and falls back into UBoot with a working UART terminal that can be used not only for enabling telnet and SSH, but also for loading an OpenWRT image and starting it.
4 Likes
Is it an RB01 or RB03 device? Which command did you use to load OpenWRT directly from uBoot? Thanks!
1 Like
Don't go getting any ideas and trying this on their entire product line now... This model does not ship uboot.bin in the firmware images, others do. There's probably a non-zero chance of bricking if you don't check the image contents beforehand on some models.
Presumably you'd have to pull the power after it does the erase and before it finishes writing the new image in order to reach this state, which would be pretty hard to do without UART output telling you.
tftpboot the initramfs image.
2 Likes
This is an RB01 device.
Regarding UART, you would anyhow need it to load the image and write it to flash. So better connect the UART before doing anything and power it off after loading the image and before writing it.
Image can be loaded with tftpboot.
You are right, if there would be a UBoot update in this image and it erases this partition and you power it off before it is written back, you are lost and have to reprogram the flash externally.
1 Like
which channel are you using?
I'm confirming here. AX3200 RB01 1.0.0.35 version bought in EU just couple days ago. Installed completely succesfully openwrt. Seeing correct speeds in ethernet and wifi.
Used instructions on:
| Firmware Version | OpenWrt SNAPSHOT r19115-41be1a2de2 / LuCI Master git-22.058.70382-d29400e |
|---|---|
| Kernel Version | 5.10.104 |
Anyone using the official images?
I'm using the official image and update it through attended-sysupgrade
1 Like
Where did you bought your AX3200 RB01?
I tried to buy one model AX3200 RB01 11/2021 release and it was telnet=0 (disabled).
I just received my router today. I ordered on Aliexpress. I had selected the AX6S (RB03) model, but when selecting the plug type I selected the European plug. This way they ended up sending me an AX3200 (RB01) international model.
Luckly it came with Telnet enabled. I did not even configured the stock firmware, and flashed OpenWRT 22.03 (my own build from official OpenWRT git) out of the box.
I've followed the flash instructions at the official wiki here. Everything went fine, and I did not had to use the option nvram set "boot_fw1=run boot_rd_img;bootm".
After the initial factory.bin flash, I flashed the sysupgrade.bin image, with and without preserving settings for testing purposes. All worked perfectly! Now it is just a matter of finishing the configuration and I will replace an Archer C6 v3.2 with this new one!
1 Like
Bought it from xiaomi official reseller mistore.fi.
Which productiod date have you on box written?
Mine was 11/2021, telnet disabled unfortunatelly.
i have big difference between mt76 and mtk driver. Mtk driver is stronger at all bands.
Check latest post at github
Production date 09/2021
Where can I find a build using mtk drivers?
i use this version
Also most bands work with 160mhz
Just wondering: has anyone already checked if RB01 has telnet open before starting the configuration of the stock firmware?
I mean, when I first powered on my RB01, initially telnet did not connect. I then connected to it via a browser, then clicked an option to select the country/region (stock web UI) but I did not move forward with the stock firmware configuration. Then before giving up I tried telnet again and voilà! Connection established. I did not think twice and installed OpewnWrt right away (so I have never ever used the stock firmware past the initial configuration step).
So I am wondering if the production date is what determines if telnet is open for RB01 or it may be anything else (such as telnet may be open just before the initial setup of stock firmware). Anyway, I'm away from home now, but when I come back I will check the production date and share here.
Edited: per @cliobrando explanation below, having telnet enabled or not really depends on a factory configuration. It is not related to the configuration phase at all. More details below:
1 Like
I bought myself a Xiaomi AX3200 router that is RB01 international (English) version on the other day, but never realise it is supported under OpenWRT firmware, so I tried to telnet the router, and it does work(Telnet is enabled)
So, I would say, any router that is manufactured before August 2021, will most likely have Telnet port 23 open on the LAN side.
What are the current issues if I do install OpenWRT?
- Wireless coverage is smaller due to the wifi signal being weaker?
- Is 160MHz suppose to work? I can see the stock OEM firmware, the maximum = 80MHz channel.
- etc....etc.....
Thanks for this interesting hint!
I'll buy one soon and verify.
The units that have telnet enabled from the factory (RB01), it is due to a flag in the bdata partition, it's not related to the web ui configuration.
Even if you update the firmware, telnet will still be enabled. So it seems that xiaomi flashed the wrong firmware in the early RB01 units.
1 Like