I tried to restore via MIWIFIRepairTool.x86 and tftpd64. The firmware process passes, then the white led blinking, but after reset power, this error pops up again (in first setup router).
Such impression that an error in other area of the data.
Will it work if the correct files [1-3].bin are flashed via tftpd64?
You can use the de-bricking instructions for ax3600: https://openwrt.org/toh/xiaomi/ax3600#debricking
Worked nicely for me, I used tftpd64 on windows, ensure to connect the router and your PC to a switch since the router may not acquire an IP quickly during the emergency window period.
I suggest you go though this thread a bit to learn more about the restore process but if you still run into any more issues, you could search for replies/responses to my posts on this thread.
Note: telnet should still work after the restore.
HAHAHAHA
I restored my router just by clicking on the link http://router.miwifi.com/init.html#/dhcp !!!!
Ignored the error instead of the script !!!
and telnet was work
1 Like
I had more issues with the wifi, installing the the public sysupgrade image from openwrt fixed the issue: https://downloads.openwrt.org/snapshots/targets/ipq807x/generic/
After that, I installed Luci via ssh, then installed mwan3, openvpn, attend sysupgrade etc...
You could attempt to do the same
Is it possible to completely restore to factory firmware and settings?
I did restore to factory fw using the instructions I posted above, in my case I wanted to have telnet in order to install openwrt, but you could try the following on the wiki in case you're no longer interested in openwrt installation
Thanks 
I try
Thanks @dpeti and @TempestJunior for the guidance. I am now running OpenWrt on AX9000 and the install was quite flawless via UART. Steps below:
- Use the SSH hack,
hdr2version. When it asks for region, do NOT change anything. Leave it as is and hit Enter; - Upgrade firmware with the generated
1.bin,2.binand3.binin order. Router will restart after each. In my case I received an error after each upgrade but just ignored it; - Reset to factory defaults using the WebUI and NOT the physical button;
- Use the second hack script for password calculation on the very first WebUI screen (before even configuring the router. When asked for Serial Number, input the full Serial Number (with slashes and case sensitive);
- Test with a telnet
root@YourRouterIPAddressand leave default port for telnet (21). If you get telnet access, you're in; - Enable SSH and the rest of the stuff (one line at a time):
sed -i 's/channel=.*/channel=\"debug\"/g' /etc/init.d/dropbear
/etc/init.d/dropbear start
nvram set uart_en=1
nvram set atf=1
nvram set boot_wait=on
nvram commit
- Test SSH with root and the same password used for telnet;
- If all is ok, follow the diagram and connect the pins to the UART interface. You will need a UART to USB converter of max 1.8V. Do NOT connect the VCC cable. Notation is physics style, so Router TX goes into Adapter RX and Router RX goes into adapter TX. GND goes to GND;
- Connect via UART on USB and also via Ethernet on LAN1 port. Assign a static IP of
192.168.1.100, connect using either Putty or your favorite SSH tool with 115200 baud rate, 8 Data Bits, 1 Stop Bits, NO parity and NO flow control and power on the router. If everything was done well, you should see text on the terminal; - While starting up, the router will have a 5 seconds boot wait, where you can press any key to cancel booting and instead load U-Boot mode. Once you have a shell prompt on Putty serial connection, fire up any TFTP server on your machine and follow the original steps;
- You should now be on OpenWrt. Wi-Fi is disabled by default so you need to configure it manually.
Has anyone found any ideal setup for Wi-Fi antennas? I have replaced my board-2.bin as per the guide, and, while the router is now connectable, the speed is lacking quite hard.
On the Xiaomi Firmware, there was a setting called "Tri-Band" where I could set the name of the Wi-Fi network and the router would dynamically switch the networks from 2.4Ghz to 5GHz. Besides having WMM mode enabled, is there something I need to set to make things faster? What are your experiences with this router in terms of Wi-Fi speeds? I get a quarter of the bandwidth I used to have on OEM firmware (I have 1Gbit connection but can't do more than 150Mbit download speed and I don't have any QOS module installed, it purely the power of the antenna.
Would appreciate some help with this.
1 Like
Our pleasure!
Just a small remark on point number 4. If you set pwd and you log in, the serial number is automatically read by the js 
This is limited by my connection, never ran iperf as i am capped by my ISP (the same on missus iPhone)
Using "lower band" 5g radio with quite default settings:
option device 'radio1'
option network 'lan'
option mode 'ap'
option encryption 'psk2'
option key 'password of my net'
option ssid 'ssid of my net'
option ieee80211r '1'
option ft_over_ds '1'
option ft_psk_generate_local '1'
option nasid '12345'
option mobility_domain 'ab34'
option wds '1'
option disabled '1'
As we are discussing wifi.. did anyone managed with 802.11r?
For me it does not seem to work.
Thanks
That (802.11r) I plan to test tomorrow when the twin (ax9000) router arrives
You could test your wireless speed without the 802.11r to determine if 802.11r is the culprit.
I see Radio1 is disabled @dpeti (option disabled '1'). Here's what I have I've made 3 different connections for each radio having the same name (I only exemplified the 2.4GHz network but the rest are the same):
The only difference I see on your end @TempestJunior is that your country is set to US. I've set mine to `NL' since I live there.
I can't seem to get connected via radio1. Has anyone managed to configure Dual Channel Wi-Fi?
Country matters a lot, my actual cc is SE but I choose US to get around radio compliance
Check the thread for more. radio1 should be activated if you choose US and the right frequencies
Here's my radio1 settings, you'll need to switch to 80Mhz, if you check this thread you'll notice that radio1 currently has some limitations
I did switch to 80MHz and am aware of the issue with radio1. However, this is my actual issue:
.
The download speed used to be at minimum 750Mbps on OEM firmware compared to OpenWrt. Yes, the latency is lower on OpenWrt but this is a huge difference. On direct cable and no router I get around 950+ MBps (I have Gigabit contract) so there is something definitely wrong with OpenWrt.
I don't have QoS. At least nothing enabled by me. Any idea how to improve this part?
1 Like