Xiaomi AX3600 INT firmware

grymster · October 31, 2020, 3:25pm

It's strange cause I also have Chinese version with INT firmware 3.0.22 and in log it shows next:
========== iwinfo wl0 txpowerlist >> /tmp/xiaoqiang.log
0 dBm ( 1 mW)
6 dBm ( 3 mW)
10 dBm ( 10 mW)
14 dBm ( 25 mW)
18 dBm ( 63 mW)
22 dBm ( 158 mW)
26 dBm ( 398 mW)
30 dBm (1000 mW)
========== iwinfo wl0 freqlist >> /tmp/xiaoqiang.log
5.180 GHz (Channel 36)
5.200 GHz (Channel 40)
5.220 GHz (Channel 44)
5.240 GHz (Channel 48)
5.260 GHz (Channel 52)
5.280 GHz (Channel 56)
5.300 GHz (Channel 60)
5.320 GHz (Channel 64)
5.500 GHz (Channel 100)
5.520 GHz (Channel 104)
5.540 GHz (Channel 108)
5.560 GHz (Channel 112)
5.580 GHz (Channel 116)
5.600 GHz (Channel 120)
5.620 GHz (Channel 124)
5.640 GHz (Channel 128)
5.660 GHz (Channel 132)
5.680 GHz (Channel 136)
5.700 GHz (Channel 140)
========== wlanconfig wl0 list >> /tmp/xiaoqiang.log

grymster · October 31, 2020, 3:27pm

are you serious???
this router cannot produce such amount of power because 50 dBm = 100 W

perceival · October 31, 2020, 5:32pm

Well, mine (same origin, same firmware) says:

========== iwinfo wl0 txpowerlist >> /tmp/xiaoqiang.log
   0 dBm (   1 mW)
   4 dBm (   2 mW)
   6 dBm (   3 mW)
   8 dBm (   6 mW)
  10 dBm (  10 mW)
  12 dBm (  15 mW)
  14 dBm (  25 mW)
* 16 dBm (  39 mW)
========== iwinfo wl0 freqlist >> /tmp/xiaoqiang.log
  5.180 GHz (Channel 36)
* 5.200 GHz (Channel 40)
  5.220 GHz (Channel 44)
  5.240 GHz (Channel 48)
  5.260 GHz (Channel 52)
  5.280 GHz (Channel 56)
  5.300 GHz (Channel 60)
  5.320 GHz (Channel 64)
  5.500 GHz (Channel 100)
  5.520 GHz (Channel 104)
  5.540 GHz (Channel 108)
  5.560 GHz (Channel 112)
  5.580 GHz (Channel 116)
  5.600 GHz (Channel 120)
  5.620 GHz (Channel 124)
  5.640 GHz (Channel 128)
  5.660 GHz (Channel 132)
  5.680 GHz (Channel 136)
  5.700 GHz (Channel 140)

What does your say on the status page about region? Also might be good to see your values of region and aregion fields from /etc/config/wireless.
And the most interesting part is probably in bdata file.
EDIT: I know the difference and bdata it is. Forgot I was messing a bit with mtd9 partition and changed CN to EU.

--- bdata_mtd9_backup.txt	2020-10-31 19:46:28.625699600 +0100
+++ bdata_mtd9_20201031.txt	2020-10-31 19:48:30.432541800 +0100
@@ -1 +1 @@
-SS]"color=101CountryCode=CNSN=22222/E000000000model=R3600miot_did=333333333miot_key=VVVVVVVVVVVVVVVVtelnet_en=0ssh_en=0uart_en=0wl0_ssid=Xiaomi_BBBB_5Gwl1_ssid=Xiaomi_BBBBwl2_ssid=Xiaomi_BBBB
+Ȝb�color=101CountryCode=EUSN=22222/E00000000model=R3600miot_did=333333333miot_key=VVVVVVVVVVVVVVVVtelnet_en=1ssh_en=1uart_en=1wl0_ssid=Xiaomi_BBBB_5Gwl1_ssid=Xiaomi_BBBBwl2_ssid=Xiaomi_BBBB

Ie0nard0 · October 31, 2020, 5:46pm

are you sure that rc.local path is /etc/config? i can find rc.local find in /etc
I'm trying your settings, thx

grymster · October 31, 2020, 6:54pm

Very strange....
I did reset my router after update and I selected region Russia but in wireless.config I have DE:

config wifi-device 'wifi0'
option type 'qcawificfg80211'
option macaddr '88:c3:97:c9:64:c9'
option hwmode '11axa'
option htmode 'HT80'
option disabled '0'
option txbf '3'
option ax '1'
option country 'DE'
option bw '0'
option txpwr 'max'
option channel '0'
option autoch '2'

config wifi-iface
option device 'wifi0'
option ifname 'wl0'
option network 'lan'
option mode 'ap'
option wpsdevicename 'XiaoMiRouter'
option channel_block_list '52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,144,165'
option miwifi_mesh '0'
option disabled '0'
option wscconfigstatus '2'
option bsd '0'
option rrm '0'
option wnm '0'
option ssid 'jghouse-5g'
option encryption 'psk2'
option hidden '0'

perceival · October 31, 2020, 6:58pm

I am sure in bdata file you will see CN means China. See my edit above.
And unless in your country 30 dBm is legal that would mean your router is still "in China".

grymster · October 31, 2020, 7:15pm

You are right.
==========bdata
color=101
CountryCode=CN

perceival · October 31, 2020, 7:26pm

Now I need someone with INT version to share their bdata contents.

grymster · October 31, 2020, 8:10pm

Russia(Region selected during router configuration, changes are not supported)

But in Mi WiFi application it looks like I can change region.

grymster · October 31, 2020, 8:15pm

==========bdata
color=101
CountryCode=CN
SN=77777/E0P000000
model=R3600
miot_did=000000000
miot_key=some_key
telnet_en=0
ssh_en=0
uart_en=0
wl0_ssid=Xiaomi_4726_5G
wl1_ssid=Xiaomi_4726
wl2_ssid=Xiaomi_4726

I did change sensitive data.

perceival · October 31, 2020, 8:17pm

I'm curious if it is possible to transform our CN version into INT by editing mtd9 partition. For that I need the same non-sensitive fields from INT version.

grymster · October 31, 2020, 8:19pm

Which one?
And why do you want to do it?

perceival · October 31, 2020, 8:21pm

I would guess difference is in CountryCode. So might be good to know how is it set on original INT version.
Just out of curiosity plus that would suggest hardware for CN and INT is the same.

Leniek · October 31, 2020, 9:48pm

Does mi WiFi Application connects to EU servers when AX3600 is flashed to INT firmware? Can You see router in EU servers in Xiaomi Home app, and does AIoT with EU smart devices work?

grymster · October 31, 2020, 10:03pm

Yes if you reset it and select EU region. It works with Russian server for sure.

Not sure.

I don't have one. Only Chinese.
But I will ask for one for Russian server and check it out.
Upd: Cannot check cause my router is not connected to Mi Home and I believe it should be for AIoT to work.

tt2g · November 1, 2020, 9:38am

With INT 3.0.22 I still have 30dBm:

root@XiaoQiang:~# iwinfo wifi1 txpowerlist
   0 dBm (   1 mW)
   6 dBm (   3 mW)
  10 dBm (  10 mW)
  14 dBm (  25 mW)
  18 dBm (  63 mW)
  22 dBm ( 158 mW)
  26 dBm ( 398 mW)
  30 dBm (1000 mW)

Region is DE done with @Double-G's configuration.

@Ie0nard0 Nope, you're right. It is rc.local is located in /etc folder.

After having changed the location to DE, MiWifi wants me to change the location there, too and wants to relink to my router, which fails having the correct password (test with a wrong password resulted in wrong password . Anyone else having this issue, too?

Ie0nard0 · November 1, 2020, 10:08am

So I have a Chinese model flashed to global 3.0.22, everything seems to working better than previous Chinese fw I tried this by ssh because the only problem is that I can’t pair the router to MiWiFi app:

root@XiaoQiang:~# nvram get CountryCode
ES

root@XiaoQiang:~# nvram set CountryCode=CN

root@XiaoQiang:~# nvram commit

After reboot:

root@XiaoQiang:~# nvram get CountryCode
CN

The web admin page is in Spanish but the region is China but I can’t still pair the router to MiWiFi, same thing, if I enter a wrong password the app shows a “wrong password” text and if I enter the real router password it says “Couldn’t pair device”

Double-G · November 2, 2020, 9:16am

My nvram is stable and the country setting survives a reboot:

root@XiaoQiang:~# nvram get CountryCode
DE

The webinterfaces shows Region=Germany too

My script sets "iw reg set DE" after reboot, but I see the same txpowerlist-entries as you do. The last one is 30dm (1000mW).
To be honest, I do not think that this is wrong, as 1000 mW are allowed in Germany in the UNII-2 Extended (5470 - 5725)-band unter the following conditions:

DFS/TPC must be enabled
max. 1000mW = 30dBm
TPC may be deactivated if transmit power is max. 500mW = 27dBm, but DFS must be enabled anytime.
Outdoor use allowed.
Source: https://wiki.freifunk-franken.de/w/WLAN_Frequenzen

When issuing the dmesg-command, I can see that the device is first initialized with a unset-region

[   10.664921] cfg80211: World regulatory domain updated:
[   10.664946] cfg80211:  DFS Master region: unset
[   10.669112] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[   10.673555] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[   10.683127] cfg80211:   (2457000 KHz - 2482000 KHz @ 20000 KHz, 92000 KHz AUTO), (N/A, 2000 mBm), (N/A)
[   10.690954] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
[   10.700301] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (N/A)
[   10.708284] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s)
[   10.718033] cfg80211:   (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s)
[   10.727497] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[   10.735543] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)

After "iw reg set DE" is set, it reports the region as DE and it looks like this:

[   24.731630] cfg80211: Regulatory domain changed to country: DE
[   24.731666] cfg80211:  DFS Master region: ETSI
[   24.736408] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[   24.740888] cfg80211:   (2400000 KHz - 2483000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[   24.750477] cfg80211:   (5150000 KHz - 5250000 KHz @ 80000 KHz, 200000 KHz AUTO), (N/A, 2000 mBm), (N/A)
[   24.758281] cfg80211:   (5250000 KHz - 5350000 KHz @ 80000 KHz, 200000 KHz AUTO), (N/A, 2000 mBm), (0 s)
[   24.768050] cfg80211:   (5470000 KHz - 5725000 KHz @ 160000 KHz), (N/A, 2700 mBm), (0 s)
[   24.777493] cfg80211:   (5725000 KHz - 5875000 KHz @ 80000 KHz), (N/A, 1400 mBm), (N/A)
[   24.785603] cfg80211:   (57000000 KHz - 66000000 KHz @ 2160000 KHz), (N/A, 4000 mBm), (N/A)

These settings should be fine, but they are NOT, local regulations are violated.
When I manually switch channel to 36, the output power must be reduced to max 200mW = 23dBm, unfortunately this is not the case

root@XiaoQiang:~# iwinfo wl0 freqlist
* 5.180 GHz (Channel 36)
  5.200 GHz (Channel 40)
  5.220 GHz (Channel 44)
  5.240 GHz (Channel 48)
  5.260 GHz (Channel 52)
  5.280 GHz (Channel 56)
  5.300 GHz (Channel 60)
  5.320 GHz (Channel 64)
  5.500 GHz (Channel 100)
  5.520 GHz (Channel 104)
  5.540 GHz (Channel 108)
  5.560 GHz (Channel 112)
  5.580 GHz (Channel 116)
  5.600 GHz (Channel 120)
  5.620 GHz (Channel 124)
  5.640 GHz (Channel 128)
  5.660 GHz (Channel 132)
  5.680 GHz (Channel 136)
  5.700 GHz (Channel 140)
root@XiaoQiang:~# iwinfo wl0 txpowerlist
   0 dBm (   1 mW)
   6 dBm (   3 mW)
  10 dBm (  10 mW)
  14 dBm (  25 mW)
  18 dBm (  63 mW)
  22 dBm ( 158 mW)
  26 dBm ( 398 mW)
* 30 dBm (1000 mW)

30dBm / 1000 mW is more than allowed on channel 36, it should be reduced to 200mW = 23dBm.

Is this a firmware bug??

snowwolf · November 3, 2020, 7:33am

I think there is a bug with txpower. Ran "wl wl0 info" and txpower value is way off.

root@XiaoQiang:~# iw wl0 info
Interface wl0
        ifindex 32
        wdev 0x8
        addr xx:xx:xx:xx:xx:xx
        ssid xxxxx
        type AP
        wiphy 0
        channel 40 (5200 MHz), width: 160 MHz, center1: 5250 MHz
        txpower 42949607.96 dBm
root@XiaoQiang:~# iwinfo wl0 txpowerlist
   0 dBm (   1 mW)
   6 dBm (   3 mW)
  10 dBm (  10 mW)
  14 dBm (  25 mW)
  18 dBm (  63 mW)
  22 dBm ( 158 mW)
  26 dBm ( 398 mW)
* 30 dBm (1000 mW)

lantis1008 · November 3, 2020, 8:26am

That is suspiciously close to 2^32. Some kind of error or overflow situation.
Assuming an overflow, that's 66dBm which still doesn't seem right.