User Tools

Site Tools


toh:xiaomi:mir3c

Xiaomi Mi WiFi 3C (Mi Wifi Router 3C / R3C / R3L)

Xiaomi Mi WiFi Router 3C is 802.11n wireless router based on the MediaTek MT7628N SoC. It has three Ethernet ports and one radio (2T2R MiMo).

Supported Versions

This device is currently (May 2018) not supported.

LEDE forum thread: https://forum.lede-project.org/t/support-for-xiaomi-miwifi-3c/11643

Hardware Highlights

CPU Ram Flash Network WLAN USB Serial JTag
Mediatek MT7628N @ 575MHz 64 MiB 16 MiB 3x 10/100 bgn 1x 2.0 Yes ?

https://wikidevi.com/wiki/Xiaomi_MiWiFi_3C

Hardware

Info

Instruction set MIPS
Vendor MediaTek
bootloader U-Boot + Xiaomi U-Boot
System-On-Chip Mediatek MT7628N
CPU @Freq MIPS 24KEc V5.0 @575 MHz
Flash size 16MB NorFlash
Flash Chip Spansion S34ML01G100TF100 Winbound W25Q128JV
RAM size 64 MiB DDR2 @ 800 Mhz
RAM Chip NT5TU64M16HG-AC
Wireless No1 SoC-integrated: MT7628N 2×2 MIMO 802.11b/g/n (2.4 GHz)
switch MT7620 built-in 10/100 switch w/ vlan support
USB 1x USB2.0
Serial Yes

Photos

Xiaomi Wifi router 3C (board top view) Xiaomi Wifi router 3C (board top view)

Serial

port.serial general information about the serial port, serial port cable, etc.

Attaching 3 pins to J1 and connecting with a USB to TTL (CP2102 module) on COM4 115200bps using Putty console From the COM 4:

1 —— VCC (3.3V) (DO NOT CONNECT!)
2 —— RX
3 —— GND
4 —— TX

Serial port works in one-way only (no input going through pin4).

Serial connection parameters
for Xiaomi Mi WiFi 3C
115200, 8N1

Bootlogs

OEM(?) bootlog

[04040D08][04040C0A] DDR Calibration DQS reg = 0000878A U-Boot 1.1.3 (Jun 6 2017 - 17:00:22) Board: Ralink APSoC DRAM: 64 MB Power on memory test. Memory size= 64 MB...OK! relocate_code Pointer at: 83fa8000 RT2880_RSTSTAT_REG 0xc0030000 *************************** Board power on Occurred *************************** flash manufacture id: ef, device id 40 18 find flash: W25Q128BV Enable eLNA env is right! ============================================ Ralink UBoot Version: 4.3.0.0 -------------------------------------------- ASIC 7628_MP (Port5<->None) DRAM component: 512 Mbits DDR, width 16 DRAM bus: 16 bit Total memory: 64 MBytes Flash component: SPI Flash Date:Jun 6 2017 Time:17:00:22 ============================================ icache: sets:512, ways:4, linesz:32 ,total:65536 dcache: sets:256, ways:4, linesz:32 ,total:32768 ##### The CPU freq = 575 MHZ #### estimate memory size =64 Mbytes RESET MT7628 PHY!!!!!! Please choose the operation: 1: Load system code to SDRAM via TFTP. 2: Load system code then write to Flash via TFTP. 3: Boot system code via Flash (default). 4: Entr boot command line interface. 5: Load system2 code then write to Flash via TFTP. 7: Load system code via web. 9: Load Boot Loader code then write to Flash via TFTP. n3: System Boot system code via Flash. Booting System 1 Erasing SPI Flash... raspi_erase: offs:30000 len:10000 . Writing to SPI Flash... . done ## Booting image at bc140000 ... Image Name: MIPS OpenWrt Linux-3.10.14 Image Type: MIPS Linux Kernel Image (lzma compressed) Data Size: 1409285 Bytes = 1.3 MB Load Address: 80000000 Entry Point: 80000000 Verifying Checksum ... OK Uncompressing Kernel Image ... OK commandline uart_en=0 factory_mode=0 mem=64m root=/dev/mtdblock9 No initrd ## Transferring control to Linux (at address 80000000) ... ## Giving linux memsize in MB, 64 Starting kernel ... LINUX started... THIS IS ASIC [ 0.000000] Linux version 3.10.14 (jenkins@szy-rommaker) (gcc version 4.6.3 2 0120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 MiWiFi-R3L-2.13.7 Fri Dec 8 1 2:21:49 CST 2017 [ 0.000000] [ 0.000000] The CPU feqenuce set to 575 MHz [ 0.000000] [ 0.000000] MIPS CPU sleep mode enabled. [ 0.000000] CPU0 revision is: 00019655 (MIPS 24KEc) [ 0.000000] Software DMA cache coherency [ 0.000000] Determined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] User-defined physical RAM map: [ 0.000000] memory: 04000000 @ 00000000 (usable) [ 0.000000] Zone ranges: [ 0.000000] Normal [mem 0x00000000-0x03ffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x00000000-0x03ffffff] [ 0.000000] Primary instruction cache 64kB, 4-way, VIPT, linesize 32 bytes. [ 0.000000] Primary data cache 32kB, 4-way, PIPT, no aliases, linesize 32 byt es [ 0.000000] Built 1 zonelists in Zone order, mobility grouping on. Total pag es: 16256 [ 0.000000] Kernel command line: console=ttyS1,115200n8 uart_en=0 factory_mod e=0 mem=64m root=/dev/mtdblock9 [ 0.000000] PID hash table entries: 256 (order: -2, 1024 bytes) [ 0.000000] Dentry cache hash table entries: 8192 (order: 3, 32768 bytes) [ 0.000000] Inode-cache hash table entries: 4096 (order: 2, 16384 bytes) [ 0.000000] Writing ErrCtl register=00074e2e [ 0.000000] Readback ErrCtl register=00074e2e [ 0.000000] Memory: 60756k/65536k available (2916k kernel code, 4780k reserve d, 895k data, 220k init, 0k highmem) [ 0.000000] SLUB: HWalign=32, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 [ 0.000000] NR_IRQS:128 [ 0.000000] console [ttyS1] enabled [ 0.110000] Calibrating delay loop... 385.84 BogoMIPS (lpj=1929216) [ 0.170000] pid_max: default: 32768 minimum: 301 [ 0.170000] Mount-cache hash table entries: 512 [ 0.180000] NET: Registered protocol family 16 [ 0.180000] RALINK_GPIOMODE = 570544c4 [ 0.190000] RALINK_GPIOMODE = 570444c4 [ 0.290000] ***** Xtal 40MHz ***** [ 0.290000] start PCIe register access [ 0.790000] RALINK_RSTCTRL = 2400000 [ 0.800000] RALINK_CLKCFG1 = fdbfffc0 [ 0.800000] [ 0.800000] *************** MT7628 PCIe RC mode ************* [ 1.300000] PCIE0 no card, disable it(RST&CLK) [ 1.330000] bio: create slab <bio-0> at 0 [ 1.340000] cfg80211: Calling CRDA to update world regulatory domain [ 1.340000] Switching to clocksource Ralink Systick timer [ 1.350000] NET: Registered protocol family 2 [ 1.350000] TCP established hash table entries: 512 (order: 0, 4096 bytes) [ 1.360000] TCP bind hash table entries: 512 (order: -1, 2048 bytes) [ 1.370000] TCP: Hash tables configured (established 512 bind 512) [ 1.370000] TCP: reno registered [ 1.380000] UDP hash table entries: 256 (order: 0, 4096 bytes) [ 1.380000] UDP-Lite hash table entries: 256 (order: 0, 4096 bytes) [ 1.390000] NET: Registered protocol family 1 [ 1.390000] Load Kernel WDG Timer Module [ 1.410000] squashfs: version 4.0 (2009/01/31) Phillip Lougher [ 1.420000] jffs2: version 2.2. (ZLIB) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc. [ 1.430000] msgmni has been set to 118 [ 1.430000] io scheduler noop registered [ 1.440000] io scheduler deadline registered (default) [ 1.440000] MIWIFI panic notifier registered [ 1.450000] Serial: 8250/16550 driver, 2 ports, IRQ sharing disabled [ 1.460000] serial8250: ttyS0 at MMIO 0x10000d00 (irq = 21) is a 16550A [ 1.460000] serial8250: ttyS1 at MMIO 0x10000c00 (irq = 20) is a 16550A [ 1.470000] led=44, on=4000, off=1, blinks,=1, reset=1, time=4000 [ 1.480000] Ralink gpio driver initialized [ 1.480000] flash manufacture id: ef, device id 40 18 [ 1.490000] W25Q128BV(ef 40180000) (16384 Kbytes) [ 1.490000] mtd .name = raspi, .size = 0x01000000 (16M) .erasesize = 0x00010000 (64K) .numeraseregions = 0 [ 1.500000] Creating 10 MTD partitions on "raspi": [ 1.510000] 0x000000000000-0x000001000000 : "ALL" [ 1.510000] 0x000000000000-0x000000030000 : "Bootloader" [ 1.520000] 0x000000030000-0x000000040000 : "Config" [ 1.530000] 0x000000040000-0x000000050000 : "Bdata" [ 1.530000] 0x000000050000-0x000000060000 : "Factory" [ 1.540000] 0x000000060000-0x000000070000 : "crash" [ 1.550000] 0x000000070000-0x000000080000 : "cfg_bak" [ 1.550000] 0x000000080000-0x000000140000 : "overlay" [ 1.560000] 0x000000140000-0x0000008a0000 : "OS1" [ 1.570000] mtd: try split OS1 partition [ 1.570000] mtd: split_firmware [ 1.570000] mtd: firmware_partition->size 0x760000 [ 1.580000] mtd: firmware_partition->offset 0x140000 [ 1.580000] mtd: uimage_len 1409349 [ 1.590000] mtd: uimage_len 1441792 [ 1.590000] mtd: rootfs_partition->size 0x600000 [ 1.600000] mtd: rootfs_partition->offset 0x2a0000 [ 1.600000] mtd: partition "rootfs" created automatically, ofs=2A0000, len=600000 [ 1.610000] 0x0000002a0000-0x0000008a0000 : "rootfs" [ 1.610000] 0x0000008a0000-0x000001000000 : "OS2" [ 1.620000] PPP generic driver version 2.4.2 [ 1.630000] PPP MPPE Compression module registered [ 1.630000] NET: Registered protocol family 24 [ 1.640000] PPTP driver version 0.8.5 [ 1.640000] GMAC1_MAC_ADRH -- : 0x00005064 [ 1.650000] GMAC1_MAC_ADRL -- : 0x2b4ea325 [ 1.650000] Ralink APSoC Ethernet Driver Initilization. v3.1 256 rx/tx descriptors allocated, mtu = 1500! [ 1.660000] GMAC1_MAC_ADRH -- : 0x00005064 [ 1.660000] GMAC1_MAC_ADRL -- : 0x2b4ea325 [ 1.670000] PROC INIT OK! [ 1.670000] Mirror/redirect action on [ 1.670000] u32 classifier [ 1.680000] input device check on [ 1.680000] Actions configured [ 1.680000] Netfilter messages via NETLINK v0.30. [ 1.690000] nfnl_acct: registering with nfnetlink. [ 1.690000] nf_conntrack version 0.5.0 (949 buckets, 3796 max) [ 1.700000] ipip: IPv4 over IPv4 tunneling driver [ 1.710000] gre: GRE over IPv4 demultiplexor driver [ 1.710000] ip_tables: (C) 2000-2006 Netfilter Core Team [ 1.720000] Type=Restricted Cone [ 1.720000] TCP: cubic registered [ 1.730000] NET: Registered protocol family 10 [ 1.730000] NET: Registered protocol family 17 [ 1.740000] l2tp_core: L2TP core driver, V2.0 [ 1.740000] l2tp_ppp: PPPoL2TP kernel driver, V2.0 [ 1.750000] l2tp_netlink: L2TP netlink interface [ 1.750000] 8021q: 802.1Q VLAN Support v1.8 [ 1.770000] Failed to lock mtd reserved0 [ 1.780000] VFS: Mounted root (squashfs filesystem) readonly on device 31:9. [ 1.790000] Freeing unused kernel memory: 220K (803b9000 - 803f0000) config core 'version' # ROM ver option ROM '2.13.7' # channel option CHANNEL 'stable' # hardware platform R1AC or R1N etc. option HARDWARE 'R3L' # CFE ver option UBOOT '1.0.0' # Linux Kernel ver option LINUX '0.0.1' # RAMFS ver option RAMFS '0.0.1' # SQUASHFS ver option SQAFS '0.0.1' # ROOTFS ver option ROOTFS '0.0.1' #build time option BUILDTIME 'Fri, 08 Dec 2017 12:16:21 +0800' #build timestamp option BUILDTS '1512706581' #build git tag option GTAG 'commit 135692be299b01b1f76aecf48b1e7fda72cffd51' [ 3.840000] Raeth v3.1 (Tasklet,SkbRecycle) [ 3.840000] [ 3.840000] phy_tx_ring = 0x03f92000, tx_ring = 0xa3f92000 [ 3.850000] [ 3.850000] phy_rx_ring0 = 0x03f93000, rx_ring0 = 0xa3f93000 [ 3.870000] config 7628 esw as WLLLL [ 3.950000] GMAC1_MAC_ADRH -- : 0x00005064 [ 3.950000] GMAC1_MAC_ADRL -- : 0x2b4ea325 [ 3.950000] RT305x_ESW: Link Status Changed - preinit - Fri Dec 8 12:21:49 UTC 2017 - regular preinit - /lib/preinit.sh: line 1: pi_indicate_led: not found jffs2 not ready yet; using ramdisk - init - [ 5.450000] ra2880stop()...Done [ 5.450000] Free TX/RX Ring Memory! init started: BusyBox v1.19.4 (2017-12-08 12:14:06 CST) Please press Enter to activate this console. rcS S boot: INFO: rc script run time limit to 65 seconds. [ 7.220000] ip_gre: GRE over IPv4 tunneling driver [ 7.310000] xt_time: kernel timezone is +0800 [ 7.470000] ip6_tables: (C) 2000-2006 Netfilter Core Team [ 7.860000] nf_nat_amanda: Unknown symbol nf_nat_amanda_hook (err 0) [ 8.100000] ip_set: protocol 6 [ 8.220000] Traffic lan port is eth0 [ 8.310000] dev_redirect load success. [ 9.470000] [ 9.470000] [ 9.470000] === pAd = c06a0000, size = 1762848 === [ 9.470000] [ 9.480000] <-- RTMPAllocTxRxRingMemory, Status=0, ErrorValue=0x [ 9.490000] <-- RTMPAllocAdapterBlock, Status=0 [ 9.490000] RtmpChipOpsHook(492): Not support for HIF_MT yet! [ 9.500000] mt7628_init()--> [ 9.500000] mt7628_init(FW(8a00), HW(8a01), CHIPID(7628)) [ 9.510000] e2.bin mt7628_init(1117)::(2), pChipCap->fw_len(63984) [ 9.510000] mt_bcn_buf_init(218): Not support for HIF_MT yet! [ 9.520000] <--mt7628_init() Fri Dec 8 17:51:55 CST 2017 netconfig[706]: INFO: loading exist /etc/config/network. Fri Dec 8 17:51:55 CST 2017 netconfig[706]: config interface 'loopback' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option ifname 'lo' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option proto 'static' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option ipaddr '127.0.0.1' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option netmask '255.0.0.0' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: config interface 'lan' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option ifname 'eth0.1' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option type 'bridge' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option proto 'static' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option netmask '255.255.255.0' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option ip6assign '64' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option ipaddr '20.20.20.113' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option gateway '20.20.20.1' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option mtu '1500' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: list dns '8.8.8.8' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: list ip6class 'ifb' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: list ip6class 'ipv66' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: config interface 'wan' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option ifname 'eth0.2' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option proto 'dhcp' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option auto '0' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: config interface 'ifb' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option ifname 'ifb0' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: config interface 'ready' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option proto 'static' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option ipaddr '169.254.29.1' Fri Dec 8 17:51:55 CST 2017 netconfig[706]: option netmask '255.255.255.0' [ 13.680000] Raeth v3.1 (Tasklet,SkbRecycle) [ 13.690000] [ 13.690000] phy_tx_ring = 0x035ad000, tx_ring = 0xa35ad000 [ 13.690000] [ 13.690000] phy_rx_ring0 = 0x035a2000, rx_ring0 = 0xa35a2000 [ 13.720000] config 7628 esw as WLLLL [ 13.790000] GMAC1_MAC_ADRH -- : 0x00005064 [ 13.790000] GMAC1_MAC_ADRL -- : 0x2b4ea325 [ 13.800000] RT305x_ESW: Link Status Changed [ 13.840000] device eth0.1 entered promiscuous mode [ 13.850000] device eth0 entered promiscuous mode [ 13.860000] br-lan: port 1(eth0.1) entered forwarding state [ 13.860000] br-lan: port 1(eth0.1) entered forwarding state [ 14.180000] TX_BCN DESC a354f000 size = 320 [ 14.190000] RX[0] DESC a3553000 size = 2048 [ 14.190000] RX[1] DESC a3556000 size = 1024 [ 14.210000] E2pAccessMode=2 [ 14.210000] cfg_mode=9 [ 14.220000] cfg_mode=9 [ 14.220000] wmode_band_equal(): Band Equal! [ 14.650000] 40:96:43:35:be:b0:02:1c:e3:ae:af:29:51:ae:c2:0f: [ 14.650000] ee:a7:fb:9c:e8:db:98:32:82:63:51:90:d2:c7:b1:67: [ 14.660000] [ 14.700000] load fw image from fw_header_image [ 14.710000] AndesMTLoadFwMethod1(2181)::pChipCap->fw_len(63984) [ 14.720000] CmdAddressLenReq:(ret = 0) [ 14.720000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.720000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.730000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.730000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.740000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.740000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.750000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.760000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.760000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.770000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.770000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.780000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.780000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.790000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.790000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.800000] AndesInitCmdMsg:cmd_type:238,ExtCmdType:0 [ 14.800000] CmdFwStartReq: override = 1, address = 1048576 [ 14.810000] CmdStartDLRsp: WiFI FW Download Success [ 14.840000] MtAsicDMASchedulerInit(): DMA Scheduler Mode=0(LMAC) [ 14.840000] efuse_probe: efuse = 10000012 [ 14.850000] RtmpChipOpsEepromHook::e2p_type=2, inf_Type=4 [ 14.850000] RtmpEepromGetDefault::e2p_dafault=2 [ 14.860000] RtmpChipOpsEepromHook: E2P type(2), E2pAccessMode = 2, E2P default = 2 [ 14.860000] NVM is FLASH mode [ 14.870000] 1. Phy Mode = 14 [ 15.040000] Country Region from e2p = ffff [ 15.040000] tssi_1_target_pwr_g_band = 34 [ 15.040000] 2. Phy Mode = 14 [ 15.050000] 3. Phy Mode = 14 [ 15.050000] NICInitPwrPinCfg(11): Not support for HIF_MT yet! [ 15.060000] NICInitializeAsic(652): Not support rtmp_mac_sys_reset () for HIF_MT yet! [ 15.070000] mt_mac_init()--> [ 15.070000] MtAsicInitMac()--> [ 15.090000] mt7628_init_mac_cr()--> [ 15.090000] MtAsicSetMacMaxLen(1279): Set the Max RxPktLen=1024! [ 15.090000] <--mt_mac_init() [ 15.100000] WTBL Segment 1 info: [ 15.100000] MemBaseAddr/FID:0x28000/0 [ 15.110000] EntrySize/Cnt:32/128 [ 15.110000] WTBL Segment 2 info: [ 15.110000] MemBaseAddr/FID:0x40000/0 [ 15.120000] EntrySize/Cnt:64/128 [ 15.120000] WTBL Segment 3 info: [ 15.120000] MemBaseAddr/FID:0x42000/64 [ 15.130000] EntrySize/Cnt:64/128 [ 15.130000] WTBL Segment 4 info: [ 15.130000] MemBaseAddr/FID:0x44000/128 [ 15.140000] EntrySize/Cnt:32/128 [ 15.140000] AntCfgInit(2921): Not support for HIF_MT yet! [ 15.150000] MCS Set = ff ff 00 00 00 [ 15.150000] MtAsicSetChBusyStat(846): Not support for HIF_MT yet! [ 15.860000] br-lan: port 1(eth0.1) entered forwarding state [ 17.970000] MtAsicSetRalinkBurstMode(2971): Not support for HIF_MT yet! [ 17.970000] MtAsicSetPiggyBack(783): Not support for HIF_MT yet! [ 18.000000] MtAsicSetTxPreamble(2950): Not support for HIF_MT yet! [ 18.010000] MtAsicAddSharedKeyEntry(1346): Not support for HIF_MT yet! [ 18.020000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0 [ 18.030000] Main bssid = 50:64:2b:xx:xx:xx [ 18.030000] <==== rt28xx_init, Status=0 [ 18.040000] set_obtw_delta_proc: found cck1m_, DeltaVal = 6 [ 18.040000] set_obtw_delta_proc: found cck5m_, DeltaVal = 6 [ 18.050000] set_obtw_delta_proc: found ofdm6m_, DeltaVal = 6 [ 18.060000] set_obtw_delta_proc: found ofdm12m_, DeltaVal = 6 [ 18.060000] set_obtw_delta_proc: found ht20mcs0_, DeltaVal = 6 [ 18.070000] set_obtw_delta_proc: found ht20mcs1_, DeltaVal = 6 [ 18.070000] set_obtw_delta_proc: found ht40mcs0_, DeltaVal = 6 [ 18.080000] set_obtw_delta_proc: found ht40mcs32_, DeltaVal = 6 [ 18.090000] set_obtw_delta_proc: found ht40mcs1_, DeltaVal = 6 [ 18.090000] AndesInitCmdMsg:cmd_type:237,ExtCmdType:47 [ 18.100000] set_obtw_delta_proc: anyEnable=1 [ 18.110000] CmdSlotTimeSet start [ 18.110000] CmdSlotTimeSet end [ 18.600000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0 [ 18.610000] MtAsicSetPiggyBack(783): Not support for HIF_MT yet! [ 18.810000] MtAsicSetRalinkBurstMode(2971): Not support for HIF_MT yet! [ 18.820000] MtAsicSetPiggyBack(783): Not support for HIF_MT yet! [ 18.850000] MtAsicSetTxPreamble(2950): Not support for HIF_MT yet! [ 18.860000] MtAsicAddSharedKeyEntry(1346): Not support for HIF_MT yet! [ 18.870000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0 [ 18.880000] Main bssid = 50:64:2b:xx:xx:xx [ 20.030000] device wl1 entered promiscuous mode [ 20.040000] br-lan: port 2(wl1) entered forwarding state [ 20.040000] br-lan: port 2(wl1) entered forwarding state [ 20.080000] ##### mbss_cr_enable, BssId = 1 [ 21.650000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0 [ 21.650000] MtAsicSetPiggyBack(783): Not support for HIF_MT yet! [ 21.860000] MtAsicSetRalinkBurstMode(2971): Not support for HIF_MT yet! [ 21.870000] MtAsicSetPiggyBack(783): Not support for HIF_MT yet! [ 21.890000] MtAsicSetTxPreamble(2950): Not support for HIF_MT yet! [ 21.900000] MtAsicAddSharedKeyEntry(1346): Not support for HIF_MT yet! [ 21.910000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0 [ 21.910000] Main bssid = 50:64:2b:xx:xx:xx [ 22.040000] br-lan: port 2(wl1) entered forwarding state [ 23.450000] device apcli0 entered promiscuous mode [ 23.450000] br-lan: port 3(apcli0) entered forwarding state [ 23.460000] br-lan: port 3(apcli0) entered forwarding state [ 24.160000] /home/jenkins/romdaily/system/build_dir/linux-ramips_mt7628/mt7628-p4rev-120395/build/../src/embedded/common/scan.c:78 assert (ch != 0)failed [ 24.170000] /home/jenkins/romdaily/system/build_dir/linux-ramips_mt7628/mt7628-p4rev-120395/build/../src/embedded/common/scan.c:123 assert (ch != 0)failed [ 24.180000] [ApCliAutoConnectExec] Set EXTCHA addHtInfo in Channel=3 [ 24.200000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0x0 [ 24.200000] MtAsicSetPiggyBack(783): Not support for HIF_MT yet! [ 24.410000] MtAsicSetRalinkBurstMode(2971): Not support for HIF_MT yet! [ 24.420000] MtAsicSetPiggyBack(783): Not support for HIF_MT yet! [ 24.450000] MtAsicSetTxPreamble(2950): Not support for HIF_MT yet! [ 24.460000] MtAsicAddSharedKeyEntry(1346): Not support for HIF_MT yet! [ 24.470000] MtAsicSetPreTbtt(): bss_idx=0, PreTBTT timeout = 0xf0 [ 24.470000] Main bssid = 50:64:2b:xx:xx:xx [ 25.440000] dev_redirect: add(+) dev redirect mapping: src:eth0.2->dst:ifb0 [ 25.460000] br-lan: port 3(apcli0) entered forwarding state [ 31.960000] Rcv Wcid(1) AddBAReq [ 31.960000] Start Seq = 00000000 [ 32.080000] Rcv Wcid(1) AddBAReq [ 32.080000] Start Seq = 00000000 Fri Dec 8 17:52:18 CST 2017 boot_check[2470]: INFO: Wireless OK [ 38.760000] nf_tcp_proxy: module license 'Proprietary' taints kernel. [ 38.770000] Disabling lock debugging due to kernel taint [ 38.780000] tcpproxy_init, succeed! [ 40.250000] dev_redirect: add(+) dev redirect mapping: src:eth0.2->dst:ifb0 [ 47.150000] xqfp: forward hooks init success! [ 47.150000] xqfp:extend init success! [ 47.160000] xqfp: register_netdevice_notifier! [ 47.160000] xqfp: module V2 init success! rcS S boot: INFO: rcS S boot timing 42 seconds. Fri Dec 8 17:52:34 CST 2017 INFO: rcS S boot timing 42 seconds. rcS S boot: system type(R3L/2): SQUASH/3 Fri Dec 8 17:52:34 CST 2017 system type(R3L/2): SQUASH/3 rcS S boot: ROOTFS: /dev/root on / type squashfs (ro,relatime) Fri Dec 8 17:52:34 CST 2017 ROOTFS: /dev/root on / type squashfs (ro,relatime) [ 50.080000] led=37, on=1, off=4000, blinks,=1, reset=1, time=4000 [ 50.090000] led=44, on=1, off=4000, blinks,=1, reset=1, time=4000 [ 50.100000] led=11, on=4000, off=1, blinks,=1, reset=1, time=4000 [ 50.230000] beginning erase nvram region! [ 50.380000] end erase nvram region! mknod: /dev/gpio: File exists [ 50.780000] beginning erase nvram region! [ 50.940000] end erase nvram region! Unlocking cfg_bak ... Erasing cfg_bak ... Unlocking cfg_bak ... Writing from /tmp/cfg_bak.tgz to cfg_bak ... Fri Dec 8 17:52:36 CST 2017 boot_check[4272]: Booting up finished.


Software Mods

Dump SPI Flash

Since XiaoMi doesn't provide Open SSH firmware for Mi3C like Mi3, Mi router mini… Therefore a programmer is needed to backup current SPI flash data, modify bootloader and install OpenWrt. After performing the full backup, save backup file in safe place.

CH341A

Bootloader Mods

You need use a programmer to unlock uBoot.

Tags

toh/xiaomi/mir3c.txt · Last modified: 2018/05/12 09:44 by tmomas