OpenWrt support for Xiaomi AX3000T

alexq · July 2, 2025, 4:28pm

Informative explanation about why using a backup of partitions from another RD03/RD23 router isn't a good idea:

flosx-talca · July 3, 2025, 4:31am

https://www.youtube.com/watch?v=WvVIT3gXZak this work for me download firmware for ax3000at from https://cdn.cnbj1.fds.api.mi-img.com/xiaoqiang/rom/rd03/miwifi_rd03_firmware_14680_1.0.64.bin chine version

brada4 · July 3, 2025, 6:02am

What was the original shipped firmware version?

flosx-talca · July 3, 2025, 6:26am

1.0.90 reléase date: 2025/02

brada4 · July 3, 2025, 6:37am

OK, you cannot downgrade from that, if the ssh exploit does not work update just one version at a time.

flosx-talca · July 4, 2025, 4:22am

yes, i did. Thanks

alexq · July 6, 2025, 2:23pm

Fix for the Foresee NAND bug has finally been accepted and is already available in the official Snapshot builds.

Backporting to the 24.10 branch is awaiting to be accepted into the official stable 24.10.x release:

PR 19297 - for stock bootloader
or PR 19307 - for OpenWrt U-boot bootloader

Updated:
PR #19297 has been accepted as well, so the fix should be available in the next stable 24.10.3 release.

But the fix for the U-Boot bootloader likely won't be included...

Lexeyko · July 6, 2025, 2:47pm

Less than half a year has passed! Lightning McQueen))).

csharper2005 · July 6, 2025, 4:40pm

With your involvement, everything could have happened sooner.

Merged.

We need testers here.

d687r02j8g · July 6, 2025, 5:06pm

I have a forsee nand ax3000t running uboot mod / snapshot uboot.

Is there a build I can test? Do I just need to flash the BL2 and FIP?

csharper2005 · July 6, 2025, 5:12pm

Here is my build of that PR. Flash FIP is enough. Need to test tftp recovery process and ensure that we can write and run OpenWrt.
https://mega.nz/folder/ks4R2S4D#g1l_wH-nBOMONrDqOkeEvQ/folder/U1hXELQR

d687r02j8g · July 6, 2025, 5:23pm

So to confirm

Flashing fip from your file (adjusting name)

mtd write /tmp/openwrt-mediatek-filogic-xiaomi_mi-router-ax3000t-ubootmod-bl31-uboot.fip FIP

Then for testing tftp? I could test flashing the latest stable build using the below instructions? Or do I need to do it from uart?

csharper2005 · July 6, 2025, 5:32pm

Yes.

Yes. You can use this guide (don't pay attention that it's for another device) https://openwrt.org/toh/netis/nx31#openwrt_u-boot
Then just flash sysupgrade image (the better is latest SNAPSHOT with FORESEE fix).

UART is necessary only if something will go wrong.

d687r02j8g · July 6, 2025, 5:36pm

How does uboot determine what filename to look for?

Snapshot

openwrt-mediatek-filogic-xiaomi_mi-router-ax3000t-ubootmod-initramfs-recovery.itb

24.10.2

openwrt-24.10.2-mediatek-filogic-xiaomi_mi-router-ax3000t-ubootmod-initramfs-recovery.itb

csharper2005 · July 6, 2025, 5:42pm

U-Boot is always searching for openwrt-mediatek-filogic-xiaomi_mi-router-ax3000t-ubootmod-initramfs-recovery.itb on tftp server.

github.com/openwrt/openwrt

package/boot/uboot-mediatek/patches/440-add-xiaomi_mi-router-ax3000t.patch

openwrt-24.10


      
          +++ b/xiaomi_mi-router-ax3000t_env
          @@ -0,0 +1,55 @@
          +ipaddr=192.168.1.1
          +serverip=192.168.1.254
          +loadaddr=0x46000000
          +console=earlycon=uart8250,mmio32,0x11002000 console=ttyS0
          +bootargs=console=ttyS0,115200n8 console_msg_format=syslog
          +bootcmd=if pstore check ; then run boot_recovery ; else run boot_ubi ; fi
          +bootconf=config-1
          +bootdelay=0
          +bootfile=openwrt-mediatek-filogic-xiaomi_mi-router-ax3000t-ubootmod-initramfs-recovery.itb
          +bootfile_bl2=openwrt-mediatek-filogic-xiaomi_mi-router-ax3000t-ubootmod-preloader.bin
          +bootfile_fip=openwrt-mediatek-filogic-xiaomi_mi-router-ax3000t-ubootmod-bl31-uboot.fip
          +bootfile_upg=openwrt-mediatek-filogic-xiaomi_mi-router-ax3000t-ubootmod-squashfs-sysupgrade.itb
          +bootled_pwr=yellow:status
          +bootled_rec=blue:status
          +bootmenu_confirm_return=askenv - Press ENTER to return to menu ; bootmenu 60
          +bootmenu_default=0
          +bootmenu_delay=0
          +bootmenu_title=      [0;34m( ( ( [1;39mOpenWrt[0;34m ) ) )
          +bootmenu_0=Initialize environment.=run _firstboot

Lexeyko · July 6, 2025, 5:53pm

It has long been tested on assemblies collected by enthusiasts, as soon as PR appears, they compile assemblies based on them and post them. Almost 99% of the Russian-speaking Internet sits on these assemblies and does not know any problems, but the assembly is not official - this is not an official assembly. What is the Snapshot branch for? Is it not to check exactly what really needs to be checked and if OK, then immediately implement it into the stable branch?
Probably not? (((.
And you also need to check not only the boot via TFTP, but also the boot from the recovery partition, the one that is ~10 MB.

d687r02j8g · July 6, 2025, 6:19pm

So I flashed the fip, then booted openwrt using the tftp recovery method, then flashed the latest snapshot via ssh. All seemed to go OK.

I have restored the device back to its previous image/settings now. I guess there's no harm in running the new fip?

csharper2005 · July 6, 2025, 6:22pm

That's ok. Thanks for the test!

Lexeyko · July 11, 2025, 6:54am

The information on the Xiaomi website has been updated, now v2 is official.

r0bb10 · July 11, 2025, 5:54pm

is it safe to update from 23.05.5 to the latest 24.10.2? or does it destroy something? i've attempted a log time ago and it broke i think wifi in /etc/config/wireless

is it handled now?

EDIT: ok nvm upgraded and fixed the /etc/config/wireless manually, everything works.