9f9477b275
Also known as the "Xiaomi Router AX3200" in western markets, but only the AX6S is widely installation-capable at this time. SoC: MediaTek MT7622B RAM: DDR3 256 MiB (ESMT M15T2G16128A) Flash: SPI-NAND 128 MiB (ESMT F50L1G41LB or Gigadevice GD5F1GQ5xExxG) WLAN: 2.4/5 GHz 4T4R 2.4 GHz: MediaTek MT7622B 5 GHz: MediaTek MT7915E Ethernet: 4x 10/100/1000 Mbps Switch: MediaTek MT7531B LEDs/Keys: 2/2 (Internet + System LED, Mesh button + Reset pin) UART: Marked J1 on board VCC RX GND TX, beginning from "1". 3.3v, 115200n8 Power: 12 VDC, 1.5 A Notes: U-Boot passes through the ethaddr from uboot-env partition, but also has been known to reset it to a generic mac address hardcoded in the bootloader. However, bdata is also populated with the ethernet mac addresses, but is also typically never written to. Thus this is used instead. Installation: 1. Flash stock Xiaomi "closed beta" image labelled 'miwifi_rb03_firmware_stable_1.2.7_closedbeta.bin'. (MD5: 5eedf1632ac97bb5a6bb072c08603ed7) 2. Calculate telnet password from serial number and login 3. Execute commands to prepare device nvram set ssh_en=1 nvram set uart_en=1 nvram set boot_wait=on nvram set flag_boot_success=1 nvram set flag_try_sys1_failed=0 nvram set flag_try_sys2_failed=0 nvram commit 4. Download and flash image On computer: python -m http.server On router: cd /tmp wget http://<IP>:8000/factory.bin mtd -r write factory.bin firmware Device should reboot at this point. Reverting to stock: Stock Xiaomi recovery tftp that accepts their signed images, with default ips of 192.168.31.1 + 192.168.31.100. Stock image should be renamed to tftp server ip in hex (Eg. C0A81F64.img) Triggered by holding reset pin on powerup. A simple implementation of this would be via dnsmasq's dhcp-boot option or using the vendor's (Windows only) recovery tool available on their website. Signed-off-by: Richard Huynh <voxlympha@gmail.com>
53 lines
1.2 KiB
Plaintext
53 lines
1.2 KiB
Plaintext
#
|
|
# Copyright (C) 2021 OpenWrt.org
|
|
#
|
|
|
|
[ -e /etc/config/ubootenv ] && exit 0
|
|
|
|
touch /etc/config/ubootenv
|
|
|
|
. /lib/uboot-envtools.sh
|
|
. /lib/functions.sh
|
|
|
|
board=$(board_name)
|
|
|
|
case "$board" in
|
|
linksys,e8450-ubi)
|
|
ubootenv_add_uci_config "/dev/ubi0_0" "0x0" "0x1f000" "0x1f000" "1"
|
|
ubootenv_add_uci_config "/dev/ubi0_1" "0x0" "0x1f000" "0x1f000" "1"
|
|
;;
|
|
bananapi,bpi-r64)
|
|
. /lib/upgrade/common.sh
|
|
export_bootdevice
|
|
export_partdevice rootdev 0
|
|
case "$rootdev" in
|
|
mmc*)
|
|
local envdev=$(find_mmc_part "ubootenv" $rootdev)
|
|
ubootenv_add_uci_config "$envdev" "0x0" "0x80000" "0x80000" "1"
|
|
ubootenv_add_uci_config "$envdev" "0x80000" "0x80000" "0x80000" "1"
|
|
;;
|
|
*)
|
|
ubootenv_add_uci_config "/dev/ubi0_0" "0x0" "0x1f000" "0x1f000" "1"
|
|
ubootenv_add_uci_config "/dev/ubi0_1" "0x0" "0x1f000" "0x1f000" "1"
|
|
;;
|
|
esac
|
|
;;
|
|
buffalo,wsr-2533dhp2)
|
|
ubootenv_add_uci_config "/dev/mtd3" "0x0" "0x1000" "0x20000"
|
|
;;
|
|
ruijie,rg-ew3200gx-pro)
|
|
ubootenv_add_uci_config "/dev/mtd3" "0x0" "0x20000" "0x20000"
|
|
;;
|
|
ubnt,unifi-6-lr-ubootmod)
|
|
ubootenv_add_uci_config "/dev/mtd2" "0x0" "0x4000" "0x10000"
|
|
;;
|
|
xiaomi,redmi-router-ax6s)
|
|
ubootenv_add_uci_config "/dev/mtd3" "0x0" "0x10000" "0x40000"
|
|
;;
|
|
esac
|
|
|
|
config_load ubootenv
|
|
config_foreach ubootenv_add_app_config ubootenv
|
|
|
|
exit 0
|