Mayak blog

VPN on a Xiaomi router: stock firmware, OpenWrt and which models fit

You can put a VPN on a Xiaomi router with its stock tools, but only with the protocols its firmware knows, and Mayak runs on AmneziaWG. Below: what Xiaomi's stock firmware can do according to Xiaomi's own help, which Xiaomi and Redmi models OpenWrt supports, what you risk when you replace the firmware and when it is simpler to leave the router alone. Everything here is as of 22 October 2026.

In short. Our file will not work on Xiaomi's stock firmware: according to Xiaomi's help it connects to a VPN over PPTP and L2TP, and there is no AmneziaWG. There is an option if OpenWrt supports the model: for example the AX3000T, Redmi AX6S, Redmi AX6000, AX3600 and Mi Router 4A Gigabit. On OpenWrt 24.10.8 we tested our file with a live connection — in a virtual machine, not on a Xiaomi. OpenWrt goes onto a Xiaomi through a vulnerability in the stock firmware, and that risk is yours.

We make Mayak. The router file is issued on your account page, a router takes one slot in the plan, and for phones and Android TV there is our app. 3 days free after you confirm your email, no card needed.

What Xiaomi's stock firmware can do

According to Xiaomi's help, the router connects to a VPN server like this: open miwifi.com or 192.168.31.1 in a browser → Additional settings → VPN → Add service, and pick the protocol.

  • The protocols are PPTP and L2TP. That is how Xiaomi's help names them for the AC1200 router. We found no other protocols in Xiaomi's official help.
  • There is no AmneziaWG in the stock firmware. So it will not take our file.
  • We do not issue PPTP or L2TP files. They have no masking, and without it the connection does not come up on some carriers — those are our measurements.

Why you cannot just delete the extra lines from our file and load it as plain WireGuard is explained in the TP-Link article: header protection only works together with the server. We have never had a Xiaomi router in our hands: everything in this section comes from the official help.

Which Xiaomi and Redmi models OpenWrt supports

OpenWrt is open firmware for routers. AmneziaWG packages exist for it, and on it our file loads with a standard button. Below are popular models according to their pages in the OpenWrt table of hardware, read on 22 October 2026. Packages: the awg-openwrt release for OpenWrt 24.10.8, whose files were re-uploaded on 22 September 2026.

ModelPlatform and memoryHow OpenWrt goes onAmneziaWG packages
Xiaomi AX3000T mediatek/filogic; 256 MB RAM, 128 MB flash via commands in the stock firmware to get SSH access; OpenWrt does not officially support the new RD03v2 version (OpenWrt page) available
Redmi AX6S mediatek/mt7622; 256 MB, 128 MB via the stock firmware's telnet; if it is closed, harder, up to connecting to the board (OpenWrt page) available
Redmi AX6000 mediatek/filogic; 512 MB, 128 MB via a vulnerability in the stock firmware (OpenWrt page) available
Xiaomi AX3600 qualcommax/ipq807x; 512 MB, 256 MB via a vulnerability in the stock firmware (SSH access), then an intermediate image (OpenWrt page) available
Mi Router 4A Gigabit ramips/mt7621; 128 MB, 16 MB via a vulnerability in the stock firmware; version v3 cannot take OpenWrt (OpenWrt page) available
Mi Router 4C ramips; 64 MB, 16 MB less memory than OpenWrt advises (16 MB flash and 128 MB RAM) (OpenWrt page) not checked

Your model is not in the table? Look it up in the OpenWrt table of hardware by model and hardware version together: different versions of one model can have different hardware inside. Then check that the awg-openwrt releases have files for its platform (the Target Platform line in OpenWrt).

How to put Mayak on a Xiaomi with OpenWrt

  1. Check the model and version against your router's OpenWrt page: model, hardware version and the warnings on the page.
  2. Install OpenWrt following the guide on that page. Each model has its own procedure; we have not gone through it on any Xiaomi.
  3. Check the release. We tested our file on OpenWrt 24.10.8. For the AX3000T, OpenWrt's page advises 25.12 to cover all hardware variants; AmneziaWG packages for 25.12.5 exist too, but we have not tested that release.
  4. Then the seven steps we went through ourselves: three awg-openwrt packages for your platform (for the AX3000T and Redmi AX6000 the names end in _mediatek_filogic.ipk), a reboot, the file from your account page (the “File for Linux” card), import, MTU, the wan zone and “Route Allowed IPs” — in detail in the router article.

There is a second way on OpenWrt too — by subscription link, without a file; it is in the same article.

What you risk when you replace the firmware

  • This is not a normal update. On a Xiaomi, OpenWrt goes on through a vulnerability or service access in the stock firmware — that is what OpenWrt's pages say for all the models in the table.
  • A mistake can leave the router dead. A wrong image or a power cut while writing — and the router has to be recovered, sometimes by connecting to the board.
  • Going back to the stock firmware is described on each model's page in its own way. We have not tested it.
  • Xiaomi's features go away: the management app and everything that exists only in the MiWiFi firmware. The router is then set up through OpenWrt's web page.

In Mayak, a router is one more device on the same account. Create an account, take the file on your account page and load it into a router with OpenWrt — or start with the app on your phone. We do not ask for payment details for the trial. A confirmed email opens the access — 3 free days.

When it is simpler to leave the router alone

A router is needed to cover devices you cannot install the app on: a Samsung or LG TV, a game console. If you have none, apps on the devices themselves are simpler:

DeviceHow to connect without a router
Android phone and tablet Our app: Google Play or a file from our site (how to install)
Android TV sets and boxes, Xiaomi Mi Box and Mi TV included The same app (on Xiaomi TVs)
iPhone, Windows, Mac Subscription link in Happ or INCY (in the help centre)
Linux The settings file from your account page

The phone app also has things the router lacks with our guide: Russian apps can go past the tunnel, and when the network changes it looks for a working path by itself.

What a router gives and what it costs

  • The whole home through one country. Everything goes through the tunnel, banks included: they will see the address of the country you chose.
  • When access ends, the whole home loses the internet. That is what happened in our test after the device was deleted on the account page (what to do).
  • Speed depends on the router's processor. We have not measured it on a real router.
  • One slot in the plan, like a phone. The trial has two slots: a phone and a router both fit.

What we tested

  • Xiaomi's help — the pages on connecting the router to a VPN and on the AC1200 protocols, read on 22 October 2026.
  • OpenWrt's pages for the six models in the table — read on 22 October 2026.
  • The awg-openwrt release for 24.10.8 — on 22 October 2026 we checked that it has files for mediatek/filogic, mediatek/mt7622, qualcommax/ipq807x and ramips/mt7621, re-uploaded on 22 September.
  • Our file on OpenWrt 24.10.8 — a live connection in a virtual machine on 24 September 2026 (details).

What we do not know

  • We have not tested a single Xiaomi router — neither on stock firmware nor on OpenWrt. Menu paths come from Xiaomi's official help.
  • Whether some Xiaomi models have other protocols besides PPTP and L2TP. We did not find them in the official help.
  • How to install OpenWrt on your model. Each model and version has its own procedure; we have not gone through it.
  • Speed on a real router. Not measured.

Put Mayak on a Xiaomi with OpenWrt — write to us with the model, hardware version and what happened: we will add it to the article.

Short answers

Can I put a VPN on a Xiaomi router? With the stock firmware — only over PPTP and L2TP. The stock firmware will not take our AmneziaWG file; the way for Mayak is OpenWrt.

How do I set up a VPN on a Xiaomi router? According to Xiaomi's help: miwifi.com or 192.168.31.1 → Additional settings → VPN → Add service. For Mayak the way is different: OpenWrt and seven steps.

Will the Xiaomi AX3000T work? According to OpenWrt's page, yes, except the new RD03v2 version. AmneziaWG packages for its platform exist.

Can I put AmneziaWG on a Xiaomi router without OpenWrt? The stock firmware has no AmneziaWG, and we have not tested third-party add-ons for it.

Do you have an app for routers? No. A router takes a file or a subscription link from your account page and uses one slot in the plan.

Which router should I buy for a VPN? We do not recommend models and do not sell routers. There is one criterion: it takes OpenWrt of the right release, or its firmware knows AmneziaWG 3.

Try Mayak

The router file is on your account page, and a router takes one slot in the plan. For phones and Android TV there is our app, and measurements we publish as they are. 3 days free once you confirm your email, no card needed.

The account is created right in the app or on the account page. A confirmed email opens the access — 3 free days.