This video provides a step-by-step tutorial for installing the open-source OpenWrt firmware on a Xiaomi AX3000T router, chosen for its low cost and official OpenWrt support. The primary motivation is to replace the feature-limited and potentially privacy-invasive stock firmware with a more secure, customizable, and feature-rich operating system.
The installation process requires circumventing the manufacturer's locked SSH access. This is achieved by first downgrading the stock firmware to a specific vulnerable version (1.0.47). Using a temporary session token from the router's web interface, curl commands are executed to permanently enable SSH. Once shell access is gained, the tutorial explains the router's dual-partition layout. The OpenWrt image is copied to the router and flashed onto the inactive firmware partition. Finally, the bootloader's environment variables are modified to instruct the router to boot from the newly installed OpenWrt partition. The video also demonstrates how this method preserves the original stock firmware, creating a dual-boot system that allows switching between OpenWrt and the stock OS.
Installing OpenWrt on the Xiaomi AX3000T Router
0:25 The AX3000T Router: The video introduces the Xiaomi AX3000T as an ideal router for OpenWrt due to its low price ($30-$40), MediaTek processor, and official OpenWrt support.
1:04 Why Use OpenWrt?: The creator advocates for OpenWrt over stock firmware because it is open-source, more secure, offers more features (like ad-blocking), and does not secretly track user internet activity.
2:48 Downgrade for SSH Access: The first critical step is to downgrade the router's stock firmware to version 1.0.47, as this version contains a vulnerability that can be exploited to enable SSH.
3:43 Unlocking SSH with Commands: After downgrading, a series of curl commands must be run from a computer. These commands use a temporary token found in the router's web admin URL to permanently open the SSH port (port 22).
6:06 Understanding the Dual-Partition System: The router has two identical firmware partitions (ubi0 and ubi1). It boots from one while the other remains inactive. The installation targets the inactive partition to preserve the stock firmware as a backup.
6:38 Flashing OpenWrt: Once connected via SSH, the user must identify the active partition. The OpenWrt firmware image is then copied to the router (using scp) and flashed to the inactive partition using the ubiformat command.
8:03 Setting the Boot Sequence: After flashing, bootloader commands are executed to change the boot sequence, instructing the router to load the operating system from the partition where OpenWrt was just installed.
9:23 First Boot and Success: The router reboots into OpenWrt in less than a minute. A successful installation is confirmed by getting an IP address and accessing the new OpenWrt web interface.
10:14 Creating a Dual-Boot System: Because the stock firmware was never erased, the router can be switched back to its original firmware by using SSH to change the boot sequence back to the other partition, effectively creating a dual-boot router.
13:51 Future Possibilities: The creator mentions the potential for a future project involving the installation of a fully open-source bootloader, which would provide even greater control and system recovery options.