Xiaomi Mi Router Redmi AX6S (AX3200)

From TechInfoDepot
Jump to navigationJump to search
multiple revisions of this device, use caution
abgn+ac+ax (AX3200)
Xiaomi AX3200 Wireless Wi-Fi 6 Router
Homepage Product page
WikiDevi.wi-cat.ru Xiaomi Mi Router Redmi AX6S (AX3200)
3rd Party Firmware
dd-wrt Status Unknown
OpenWrt Supported
Tomato any flavor Incompatible
Gargoyle Status Unknown
Platform
BrandModelRev Xiaomi Mi Router Redmi AX6S
Serial number prefix RB03-MB01-VER:0103
FCC ID none specified
Board ID H92504PN186C4
Type wireless router
CPU1 checkY MediaTek MT7622BV
CPU1 Type ARM Cortex-A53
CPU1 Speed 1.35 GHz ( 2 cores ) 64-bit
Flash1 Chip ESMT F50L1G41LB-104
Flash1 Size 128 MiB 134,217,728 B <br />1,048,576 Kib <br />131,072 KiB <br />1,024 Mib <br />0.125 GiB <br /> (SPI NAND)
RAM1 Size 256 MiB 268,435,456 B <br />2,097,152 Kib <br />262,144 KiB <br />2,048 Mib <br />0.25 GiB <br /> (DDR3)
RAM1 Chip ESMT M15T2G16128A
ETH chip1 MediaTek MT7622BV
Switch MediaTek MT7531BE
Ethernet Port Count 1-1GbE-WAN
3-1GbE-LAN
Wired Standard IEEE 802.3i/3u/3ab

802dot11 OUI: 5C:53:C3 (5 E, 5 W)
Ethernet OUI: 5C:53:C3 (5 E, 5 W)

Stock bootloader U-Boot
Expansion IF types none specified
Power 12 VDC, 1.5 A
Connector type barrel
Serial Port (UART) yes, 4-pin header, J1, 3.3V TTL, (115200 8N1)
Other

Default SSID: Xiaomi_XXXX (19 addl. devices)
, Xiaomi_XXXX_5G (16 addl. devices)
Default IP address: 192.168.31.1
the IP 192.168.31.1 is used by 20 additional devices
of which 19 are Xiaomi devices

3rd Party Firmware Support OpenWrt • (List | Dev | DLs)
Retail
(Est.) release date 02 July 2021
Country of manuf China
Radio 1
Chip1 MediaTek MT7622BV
Wireless interface OUI 5C:53:C3
Antenna Connector Type none specified
MIMO status 4x4:4
Wireless Standard IEEE 802.11b/g/n
n-QAM up to 800 Mbps
802.11n up to 600 Mbps
802.11g up to 54 Mbps
802.11b up to 11 Mbps
WiFi Operating Frequency 2.4 GHz
Radio 2
Chip1 MediaTek MT7911AN
Chip2 MediaTek MT7975AN
Wireless interface OUI 5C:53:C3
Antenna Connector Type none specified
MIMO status 4x4:4
Wireless Standard IEEE 802.11a/n/ac/ax
802.11ax up to 2402 Mbps
802.11ac up to 1733 Mbps
802.11n up to 600 Mbps
802.11a up to 54 Mbps
WiFi Operating Frequency 5 GHz
 CPU1 brandRadio1 chip1 brandRadio2 chip1 brand
Xiaomi Mi Router Redmi AC2100 (RM2100)MediaTekMediaTekMediaTek
Xiaomi Mi Router Redmi AX5 (AX1800)QualcommQualcommQualcomm
Xiaomi Mi Router Redmi AX6 (AX3000)QualcommQualcommQualcomm
Xiaomi Mi Router Redmi AX6E (AX6000)MediaTekMediaTekMediaTek
Xiaomi Mi Router Redmi AX6S (AX3200)MediaTekMediaTekMediaTek

For a list of all currently documented MediaTek chipsets with specifications, see MediaTek.

For a list of all currently documented Xiaomi devices with specifications, see Xiaomi.

800 Mbps - 4SS 2.4GHz 802.11n (40MHz chan., 256-QAM),
2402 Mbps - 4SS 5GHz 802.11ax (80MHz chan., 1024-QAM) = AX3200 class

Overview

Flashing

Flashing OpenWrt

Target: mediatek
Subtarget: mt7622
Package architecture: aarch64_cortex-a53
Supported Since Commit
Support started version: 22.03.0
Current supported version: 25.12.4
LAN Hardware: MediaTek MT7531B
WLAN Hardware: MediaTek MT7622B, MediaTek MT7915E
WLAN Comment: MU-MIMO, OFDMA, 802.11s
Installation method(s):
see devicepage, see git-commit
Recovery method(s):
see git-commit
Comment:
Xiaomi AX6S same device
git • >>
mediatek: Add support for Xiaomi Redmi Router AX6S
Also known as the "Xiaomi Router AX3200" in western markets,
but only the AX6S is widely installation-capable at this time.

SoC: MediaTek MT7622B
RAM: DDR3 256 MiB (ESMT M15T2G16128A)
Flash: SPI-NAND 128 MiB (ESMT F50L1G41LB or Gigadevice GD5F1GQ5xExxG)
WLAN: 2.4/5 GHz 4T4R
2.4 GHz: MediaTek MT7622B
5 GHz: MediaTek MT7915E
Ethernet: 4x 10/100/1000 Mbps
Switch: MediaTek MT7531B
LEDs/Keys: 2/2 (Internet + System LED, Mesh button + Reset pin)
UART: Marked J1 on board VCC RX GND TX, beginning from "1". 3.3v, 115200n8
Power: 12 VDC, 1.5 A

Notes:
U-Boot passes through the ethaddr from uboot-env partition,
but also has been known to reset it to a generic mac address
hardcoded in the bootloader.

However, bdata is also populated with the ethernet mac addresses,
but is also typically never written to. Thus this is used instead.

Installation:
1. Flash stock Xiaomi "closed beta" image labelled
'miwifi_rb03_firmware_stable_1.2.7_closedbeta.bin'.
(MD5: 5eedf1632ac97bb5a6bb072c08603ed7)

2. Calculate telnet password from serial number and login

3. Execute commands to prepare device
nvram set ssh_en=1
nvram set uart_en=1
nvram set boot_wait=on
nvram set flag_boot_success=1
nvram set flag_try_sys1_failed=0
nvram set flag_try_sys2_failed=0
nvram commit

4. Download and flash image
On computer:
python -m http.server
On router:
cd /tmp
wget http://<IP>:8000/factory.bin
mtd -r write factory.bin firmware

Device should reboot at this point.

Reverting to stock:
Stock Xiaomi recovery tftp that accepts their signed images,
with default ips of 192.168.31.1 + 192.168.31.100.
Stock image should be renamed to tftp server ip in hex (Eg. C0A81F64.img)
Triggered by holding reset pin on powerup.

A simple implementation of this would be via dnsmasq's
dhcp-boot option or using the vendor's (Windows only)
recovery tool available on their website.

Signed-off-by: Richard Huynh

See also

List of Xiaomi Wireless Devices
CPU: MediaTek MT7986A @2.0GHz (Filogic 830) • AC|WiFi (CN)