Xiaomi Redmi AX6: OpenSSH and OpenWrt Installation

Specifications

I. Enable SSH

• The Redmi AX6 must run firmware 1.0.16 or 1.0.18 to unlock SSH. If a newer firmware is installed, downgrade directly through the MiWiFi management interface.
• Download stock firmware 1.0.16 and 1.0.18 here .

 Firmware downgrade screenshot

For the SSH steps, follow the detailed OpenSSH CR660x guide , but skip the pb-boot installation step.

To read boot logs, prepare a USB-to-TTL adapter such as this FT232 adapter . Connect only GND, RX, and TX according to the wiring diagram; do not connect VCC until the voltage is confirmed.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

nvram set flag_last_success=0
nvram set flag_boot_rootfs=0
nvram set flag_boot_success=1
nvram set flag_try_sys1_failed=0
nvram set flag_try_sys2_railed=0
nvram set boot_wait=on  # wait for the user a key on boot for UART access
nvram set uart_en=1     # enable serial port for write
nvram set telnet_en=1   # enable telnet
nvram set ssh_en=1      # enable ssh
nvram commit

 Screenshot

To create a backup of the rootfs:

1
2

mkdir /tmp/syslogbackup/
dd if=/dev/mtd9 of=/tmp/syslogbackup/mtd9

 Screenshot

Open http://192.168.31.1/backup/log/mtd9 in a browser to download the backup.

II. OpenWrt firmware by Lean (LEDE)

Requirements

• A Redmi AX6 with SSH enabled and PuTTY . Windows PowerShell can also be used without installing PuTTY.
• OpenWrt for Redmi AX6 (RA69): Google Drive download .
• Find newer Redmi AX6 builds on Robimarko's GitHub .

Source code for building firmware: https://github.com/coolsnowwolf/lede/

Flashing

On Windows, open PowerShell and run:

1
2
3

scp C:\Users\xxxxxx\Desktop\openwrt-ipq807x-nss-redmi_ax6-squashfs-nand-factory.ubi [email protected]:/tmp

# IMPORTANT: change C:\Users\xxxxxx\Desktop\ to the actual firmware path.

Use PuTTY, or ssh [email protected] in PowerShell, to log in with root/admin.

Run nvram get flag_boot_rootfs.

• If it returns 1:

1
2
3
4

ubiformat /dev/mtd12 -y -f /tmp/openwrt-ipq807x-nss-redmi_ax6-squashfs-nand-factory.ubi -s 2048 -O 2048
fw_setenv flag_last_success 0
fw_setenv flag_boot_rootfs 0
reboot

• If it returns 0:

1
2
3
4

ubiformat /dev/mtd13 -y -f /tmp/openwrt-ipq807x-nss-redmi_ax6-squashfs-nand-factory.ubi -s 2048 -O 2048
fw_setenv flag_last_success 1
fw_setenv flag_boot_rootfs 1
reboot

After reboot, open 192.168.1.1 to access OpenWrt.

III. Unbrick the Redmi AX6

If the router is bricked, download Redmi AX6 stock firmware and use MiWiFiRepair Tools to recover it.

• Download stock firmware 1.0.16 and 1.0.18 here .

Good luck. 😉 If you have questions or suggestions, contact me. I will help as far as I can.