OpenWrt support for Xiaomi AX9000

For Developers
1726

It worked ! Thank you very mutch for your help !

1 Like
1727

Any one know howto install last stable openwrt on a international MI AX9000 release without use UART/TFTP access ?

1728

I don't think it is possible.
Unfortunately Xiaomi made it difficult with the international firmware...
Thanks to UART it is still possible to flash OpenWRT ... but until Xiaomi changes things in their international firmware, this seems to be outside OpenWRT control

1729

Proof: https://4pda.to/forum/index.php?showtopic=983152&view=findpost&p=125830050

1730

created a board file for the ax9000 and it feels i get better performance out of this commit - also 160mhz now works and it unlocks other channels above 64 (haven't tried these...)

1 Like
1731

here are the steps to get an ax9000 board file

  1. git clone https://github.com/qca/qca-swiss-army-knife.git
  2. cd qca-swiss-army-knife/tools/scripts/ath11k
  3. wget the latest board file for qcn9074 - link on the above thread
  4. ath11k-bdencoder -e board-2.bin
  5. create json file - example below
[
    {
        "board": [
            {
                "names": [
                    "bus=pci,qmi-chip-id=0,qmi-board-id=255,variant=Xiaomi-AX9000"
                ],
                "data": "bus=pci,qmi-chip-id=0,qmi-board-id=255.bin,variant=Xiaomi-AX9000"
            }
        ],
        "regdb": [
            {
                "names": [
                    "bus=pci,qmi-chip-id=0,qmi-board-id=255,variant=Xiaomi-AX9000"
                ],
                "data": "bus=pci,qmi-chip-id=0,qmi-board-id=255.regdb,variant=Xiaomi-AX9000"
            }

        ]
    }
]
  1. rename
    'bus=pci,qmi-chip-id=0,qmi-board-id=255.bin' to 'bus=pci,qmi-chip-id=0,qmi-board-id=255.bin,variant=Xiaomi-AX9000'
    'bus=pci,qmi-chip-id=0,qmi-board-id=255.regdb' to 'bus=pci,qmi-chip-id=0,qmi-board-id=255.regdb,variant=Xiaomi-AX9000'
  2. ath11k-bdencoder -c board-2-ax9000.json

you will have a board-2.bin file that can be moved to the ax9000 router to /lib/firmware/ath11k/QCN9074/hw1.0/board-2.bin

make sure to chmod +x the board file and delete the caldata file before rebooting.

I noticed that setting the phy3 to auto helps ...

3 Likes
1732

I have some problems with the IPQ8074, I can’t activate the 5 GHz band. I’m in FR and when I choose my country, all channels are disabled. So far US is the only country I can use, with channels 149 to 165 in AX mode. these channels are banned in France.

There some way to activate the good channels for the IPQ8074 in other country than US ?

The 2,4 band work well with de FR country code, except for the channels 12 & 13 who are absents.

1733

Thank you ! Let's see if a non-developer like me understands the steps to create the board-2.bin file:

  1. For the statement in my quote above, you meant to say 255.bin and not 255, am I right?

  2. You can use any ubuntu-based virtual machine that supports python to clone the git repository and run ath11k-bdencoder?

  3. You can ignore the stuff in IPQ8074/hw2.0 and IPQ9574/hw1.0, and just grab the board-2.bin file from here?

  4. So I assume the board-2-ax9000.json file should be placed in the same folder as the board-2.bin that you have just downloaded, before you run ath11-k-bdencoder for the 2nd time? And after running ath11k-bdencoder -c board-2-ax9000.json, the board-2.bin that you have downloaded before will be replaced with a new board-2.bin file that you will then subsequently move to /lib/firmware/ath11k/QCN9074/hw1.0/?

  5. So this improved board-2.bin file will only benefit radio3, am I right?

Thank you !

1734

Doesn't work for me, there is no wifi with QCN9074 even when device is enabled in Openwrt.

1735
1736

see response above

1 Like
1737

hello..anyone facing speed capped using xioami ax9000 latest openwrt kernel 6 and above??i faced this issue speed capped below 700Mbps eventhough my Internet speed can reach Gbps speed..after reflash back with fw openwrt kernel 5.15 my speed can reach Gbps back..any thoughts??

1738

can confirm this works i can use channel 100 on 160mhz in radio3
image

1739

Would you mind sharing your generated board-2.bin file here

1740

Hi there here it is

2 Likes
1741

just don't use US country the wifi signal is weak on dfs channels

1742

Appreciated, Thanks a bunch!

1743

Hi Ive had the ax9000 global for about a week and read this thread for a month or so. It came with firmware 3.0.48.

the things i had to do to put openwrt in is put in "create_exploit_hdr2.js" to get the 3 .bin files it rebooted each time next the instruction said restore factory defaults to activate what the bin files did. it rebooted all leds working sets dhcp adresses but wont get past the first page where it sets the location.

it will even take firmware via uboot reset on boot up.

Questions..

  1. can it be fixed running a script thru the browser?

  2. can the root password be still gotten on that first page or do you have to log in as admin?

i have a ttl 1.8v coming uboot is active.
from what ive read the serial port is unlocked from ssh...

If someone can help it would be much appreciated.

Thanks.

1744

Hi!

Did you change the country code when the exploit said you can enter country code?

Because if you did, you might have the same error: "Unknown error. Please try again later"

There is a browser proxy solution by a7ypically:

Hope it helps!

1745

Does this device hold the 2.5G on wan ?