Is the Redmi AX6S still worth buying? You can easily flash OpenWrt for 100 yuan second-hand flashing; it and Xiaomi AX3200 are essentially the same machine

Liu spent half a month on Xianyu, bought a Redmi AX6S for just 100 yuan, and came to ask me if it was worth it before paying. I didn't answer the price first; I had him recognize the names clearly—Redmi AX6, Redmi AX6S, Xiaomi AX3200. These three names are often mixed up in the second-hand market, but in reality, they are two phones with three different names. Admit mistake, following the tutorial will definitely fail.

three names, two machines—recognize them clearly before paying

Redmi AX6 is the flagship of 2020, with Qualcomm IPQ8071A quad-core. Last year, I got one for 2.4G private networks, and I've written about about that machine. The AX6S is a downgraded model from 2021, with the platform entirely replaced by MediaTek: MT7622B dual-core 1.35GHz, 5G MT7911A. The two machines look like real brothers—one with a white case, one with a black case. The chips are completely different, and the firmware, flashing route, and gameplay are completely different. I've debated the differences in positioning between Redmi and Xiaomi before, want to see the brand line, check that .

Xiaomi AX3200 is another story. The device page on OpenWrt's official website is very straightforward: the Xiaomi AX3200 (model RB01, overseas version) and Redmi AX6S (model RB03, domestic version) have exactly the same hardware. The same machine has two labels: in China it's called Redmi AX6S for 299, and overseas it uses the Xiaomi logo as AX3200. So if you search for overseas tutorials for flashing AX3200s, the steps can basically be applied directly to the AX6S. Only the firmware package itself cannot be flashed together. I'll explain this in detail when discussing the pitfall.

I copied a table for Da Liu and looked at it before putting it away:

5G that 2402M is the agreed value for 4x4 running 80MHz bandwidth, but this machine's hardware doesn't support 160MHz—the ceiling is fixed here. Friends who are negotiating at higher prices should think carefully: I've written a separate about bandwidth account.

Why is

called a flashing miracle phone: the old door is still open, and the entire cycle has never changed the chip

the title of 'Flashing Miracle Machine' is well deserved. Before I started, I flipped through my home inventory and found that the AX6S has three things other machines can't match.

first, OpenWrt's support for it is too mature. The MT7622 platform has been fed by OpenWrt for five or six years, with the device page listed on the official website. The stable firmware is installed directly, so there's no need to rely on manual compilation like for niche models. the pre-flash OpenWrt tips can be summed up in one sentence: just flash it casually, and it's hard to break it.

second, the official unlock channel is still alive. AX6S is an older machine, so flashing doesn't require disassembly or flashing. Breed: upgrade the developer firmware in the background, enter the SN code on the webpage to get the root password, and connect to Telnet—just connect. I've written before Xiaomi has two ways to unlock SSH: the new device requires both tools and Breed, while the AX6S goes through the official old door and goes straight in.

third and most valuable item in the second-hand market: the chip has never been replaced throughout its entire lifecycle. I've written about AX3000T SN code recognizing version : MediaTek with numbers ending in 49850 can be reused, but the new version with 64595 is completely discouraged by Qualcomm; 4A are divided into 100Mbps and gigabit , and even the firmware of V1 and V2 is not interchangeable. The AX6S doesn't have these pitfalls; from launch to discontinuation, it's all on one platform. You can buy with your eyes closed, and every batch is the same. The biggest fear of using second-hand flashing machines is the same model but different chips—it's immune.

After finishing

four steps, I sat with Da Liu all afternoon

the day I flashed the phone, I sat at Big Liu's house all afternoon, walking four steps the whole time, which was smoother than I expected.

Step one: upgrade the developer firmware version. 31.1 In the backend, go to Common Settings and System Status, click Manual Upgrade, select the pre-downloaded development package with a file name starting with miwifi_rb03. The developer version has Telnet enabled by default, which is the door to the system later.

Step two, calculate the root password. Open the miwifi.dev/ssh browser, enter the SN code displayed on the backend homepage, and click to get the root password for this machine. Telnet connects to 192.168.31.1, port 23, username root, and the password is the one just calculated.

Step 3: Enable SSH, pass packets, and flash the transition firmware. Enter Telnet, first run a few nvram commands to enable SSH services, then use WinSCP to transfer the OpenWrt factory.bin to the router's /tmp directory, and run three commands in succession: point the boot partition to the first system partition, write, and restart:

nvram set flag_last_success=0 & nvram set flag_boot_rootfs=0
nvram commit
mtd -r write /tmp/ factory.bin firmware

Step 4: Cure. After restarting, the router will be an OpenWrt transition system. Enter 192.168.6.1 in your browser—not 31.1 or 192.168.1.1. This is the default address for the transition package, don't think it's corrupted. The default account root password is password. In System and Backup/Upgrade, flash the official firmware and uncheck the reserved configuration box. Only after this step is it settled in.

two reminders. Plug in the network cable throughout the process, and if WiFi drops, you'll be blinded; Before swiping, write down your broadband account password, the three things to copy before changing routers I've made a list, and following them is the easiest way.

Settle the

256MB accounts: there are plenty of things you can do, but don't force yourself to think about what you can't

after finishing the swiping, Da Liu asked me what this machine could do, and I did the math for him.

Let's list the tasks

can do: when the main router dials in and hardware forwarding is enabled, gigabit broadband can reach just over 900 km. Although MT7622B only has dual-core, it's still a step better than the perennial MT7621A. I've written about when router CPUs have bottlenecks Install SQM and set up speed limits and queue up. Once your family downloads the game, the 460 Mbps problem can be cured. The principles and methods of QoS are in that article; Install AdGuard Home and FamilyMart to remove ads; this service consumes tens of megabytes of memory and can handle 256MB; DDNS and WireGuard tunnels run even at home, and the MT7622 comes with AES hardware acceleration, so encryption and decryption don't rely on the CPU to handle it.

accept three things I can't do: Don't even think about Docker—128MB flash can't even fit a mirror; 160MHz is not available, but 5G RF is limited to 80MHz, with negotiations to cap at 2402; There are no 2.5G ports, and all four ports are gigabit. There's another wireless shortcoming—it doesn't have a dedicated 2.4G or 5G amplifier, and the signal is just adequate, not excessive. The teardown community told it that unless you flash the device, it's just another reason to choose. On the other hand, if you spend 100 yuan on an original 300 yuan wireless device plus an All-in-One OpenWrt system, this is definitely not a loss.

the Liu family's 300Mbps broadband, the AX6S is used as the main router after flashing, the optical modem is converted to bridge at the front, and both OpenWrt and practical terminals are occupied.

three pits, go through them before you start

first pitfall: the overseas firmware cannot be flashed. As mentioned earlier, the Xiaomi AX3200 is the RB01, and the Redmi AX6S is the RB03. The hardware is the same, but the factory partition information is different. Overseas devices that flash the domestic version will produce real bricks, and there are ready-made cases on forums. When collecting the machine, check the bottom shell and pay only if you recognize the three characters RB03; It's really RB01; you need to find the corresponding version for tutorials and firmware.

second pit, the old door still open doesn't mean it will stay open forever. The developer version adds a password, which is Xiaomi's door not yet closed; it's not a promise to flash your phone. My advice is: don't just keep the machine for it. If you want to farm, get your SSH early—once the channel closes, your machine will have to take a long detour just like the new AX3000T.

third pitfall: after finishing the game, you break up with the Mijia ecosystem. The router is offline in the Mijia app, but Xiaomi Mesh can't be assembled with it. When selling second-hand, you need to clearly inform the buyer about the flashing process. restoring the factory you can only return to the initial OpenWrt state. You can't revert to the official firmware, so if you want to go back, you have to run through mtd again to write it back. By the way, its power supply is 12V/1.5A, which is not compatible with a phone charger. I've had a with the power adapter before, so if you're buying second-hand ones, remember to bring the original adapter.

who buys it with their eyes closed, who takes a detour

here's the criterion: if you want to learn OpenWrt, 100 yuan is cheaper than anything else, and if the flash breaks, it's only enough for a meal. I pick up a CR8809 to practice and flash an old Xiaomi 3 Padavan the same method; If your home has broadband below 500 Mbps and you want a master router you can tinker with; If you already have a main router or want to get a free bypass router or AP—these three options are worth your eyes on. Full-house Mijia Mesh users need full wireless bandwidth, and those with after-sales service—these three detours are all used to avoid using FamilyMart, and the official agreement states that root means no protection.

finish with a clear order: three things to check upon receipt: bottom shell RB03, SN code that can calculate passwords, confirm firmware status→ use official firmware for two days to confirm hardware is fine→ copy broadband →accounts, upgrade to development version→ calculate passwords, enable SSH→ flash transition packages→ solidify official firmware→ and change the default password. Big Liu's device ran for two weeks, and as the main router, it carried over twenty devices, with just over 50% memory usage. His exact words were 'Playing for 100 yuan and getting 500 yuan.' After hearing it, I thought that wasn't an exaggeration.