ASUS GT-AX6000

Overview

 * • 4804 Mbps - 8SS 5GHz 802.11ax (80MHz chan.),
 * • 1148 Mbps - 4SS 2.4GHz 802.11ax (40MHz chan.) = AX6000 class

May also be known as the GT-AX6000N or GT-AX6000S.

A Declaration of Model Names document at the FCC states that the ASUS GT-AC5400 is
 * identical except for its lack of the 10G copper (RJ45) port found in this GT-AX6000.

The detailed internal photos at the FCC are of the GT-AC5400 so they do not show the chip
 * which provides the 10G copper interface. It is presumed to be an Aquantia AQR109.

A note in the user manual says, "The SFP+ interface only operates at a 10Gbps speed
 * and is not compatible with a 1 Gigabit data rate."

This is an unannounced/unreleased product that was initially spotted
 * in ASUSWRT source code for the RT-AC86U on Github.

Flashing
Standard Uboot ; has serial and tftp boot prompt so loading should be easy. Debricking

→ generic.debrick Update: Successful debrick can be accomplished with the default uboot ; meaning easy recovery is possible !

Method:

Setup interface on Host PC with ip 192.168.50.75/24 (not the Router will ONLY accept tftp put over this IP) ; $ip a a 192.168.50.75/24 dev  The HostNIC and recovery is performed ONLY over the 1G WAN port NIC (this is the 'blue') NIC port next to the 10G Copper port. Find valid recovery .trx Run tftp to 192.168.50.1 ; $tftp 192.168.50.1 Unplug DC barrel jack whilst holding down the reset switch with a pointy thing Leave Power Button Depressed(on) Replug DC barrel jack whilst still holding reset switch with a pointy thing ; release after first LED indication Power LED will flash slowly Use TFTP client to put target firmware in bin mode; set trace to show progess; $tftp>trace ; $tftp>bin; $tftp>put .trx Trace will show transfer ; wait for router to reboot.

Note - this WILL NOT clear the NVRAM ; meaning you will need to connect with the user-pass/network setup previously. A reset can be performed with the stock firmware, with a 30/30/30 reset method from powered up state.

JTAG-Serial Info
There is a JTAG port with male headers soldered, there also appears to be a free and exposed set of I2C pins in addition to the JTAG meaning there are free GPIO's on the SoC. Router requires DC powering so leave the VCC pin unconnected.