Xiaomi ax3600 recovery

Hello,

can you help me recover ax3600 yellow light, the serial connection works but I can't activate the network tftpboot, message network cable not connected.

EDMA ver 1 hw init
Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7)
RxDesc:1 (15-15) RxFill:1 (7-7)
ipq807x_edma_alloc_rings: successfull
ipq807x_edma_setup_ring_resources: successfull
ipq807x_edma_configure_rings: successfull
ipq807x_edma_hw_init: successfull
board_eth_init: ipq807x_edma_init successed
eth0
IPQ807x# tftpboot
ipq807x_eth_halt: done
Phy ops not mapped
Phy ops not mapped
Phy ops not mapped
Phy ops not mapped
Phy ops not mapped
Phy ops not mapped
ipq807x_eth_halt: done
IPQ807x#

Read 0 bytes from volume kernel to 44000000
Volume kernel not found!
ubi0: detaching mtd1
ubi0: mtd1 is detached
System is in factory mode.
System is in factory mode. U-Boot BOOT ERROR!

tried all ports ?

Yes, tried all ports

the cable not connected error is coming from where ?
TFTP server host, or u-boot ?

post a tftboot or bootm sequence, perhaps ?

IPQ807x# bootm
Wrong Image Format for bootm command
ERROR: can't get kernel image!
IPQ807x#

PQ807x# tftpboot
ipq807x_eth_halt: done
Phy ops not mapped
Phy ops not mapped
Phy ops not mapped
Phy ops not mapped
Phy ops not mapped
Phy ops not mapped
ipq807x_eth_halt: done
IPQ807x#

ok, and what does printenv say ?

and perhaps try the commands posted in Adding Support for Verizon CR1000A - #155 by meisterlone

IPQ807x# printenv
CountryCode=EU
Router_unconfigured=0
SN=29010/E0RV61729
boot_wait=on
bootargs=ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs rootwait
bootcmd=bootmiwifi
bootdelay=5
color=101
eth1addr=28:d1:27:fc:30:e2
eth2addr=9c:9d:7e:75:1c:24
eth3addr=9c:9d:7e:75:1c:24
eth4addr=9c:9d:7e:75:1c:24
ethact=eth0
ethaddr=9c:9d:7e:75:1c:24
fdt_high=0x4A400000
fdtcontroladdr=4a979d90
flag_boot_rootfs=0
flag_boot_success=1
flag_boot_type=2
flag_last_success=0
flag_ota_reboot=0
flag_try_sys1_failed=0
flag_try_sys2_failed=0
flash_type=2
fsbootargs=ubi.mtd=rootfs root=mtd:ubi_rootfs rootfstype=squashfs
ipaddr=192.168.31.1
machid=8010010
miot_did=381989701
miot_key=n8AuGu3YbGMG0kg1
mode=Router
model=R3600
mtddevname=fs
mtddevnum=0
mtdids=nand0=nand0
mtdparts=mtdparts=nand0:0x23c0000@0xa00000(fs),
no_wifi_dev_times=0
nv_sys_pwd=1dd9a252ab053314ffb363dabcead118258b36de
nv_wan_type=dhcp
partition=nand0,0
restore_defaults=0
serverip=192.168.31.100
soc_version_major=2
soc_version_minor=0
ssh_en=1
stderr=serial@78B3000
stdin=serial@78B3000
stdout=serial@78B3000
telnet_en=1
uart_en=1
wl0_radio=1
wl0_ssid=Xiaomi_30E2_CF1D_5G
wl1_radio=1
wl1_ssid=Xiaomi_30E2_CF1D
wl2_ssid=Xiaomi_30E2

Environment size: 1284/65532 bytes
IPQ807x#

I have an rt809h programmer and an adapter for nand.
Can someone help me with a backup file?