It works for the Mija Gateway V2, but we use the Mija Multi Mode Gateway V3 (Model ZNDMWG03LM).
Can you pleae show where you connected the pins since the platine is different and has different connectors.
Were you really able to open the port for this multi mode gateway?
Thanks in advance!
SUGGESTION:
I now read almost all of this thread and I think it contains a lot of useful information but a lot of people seem to mix things up, or maybe I am the only one with this problem…
The correct answer to the original question got already answered and is beautifully summarized with a step by step guide with pictures in post #266
This answer is valid for the “Xiaomi Mijia Gateway V2” and should be marked as the answer to this topic so that everybody sees it instantly.
Then there are a lot of people commenting regarding the “Aqara Gateway” and it’s ssh access. The gateway looks almost the same from the outside and uses the same app but IS NOT the “Xiaomi Mijia Gateway V2” the original question was aimed add.
And now there are more and more people commenting regarding the “Xiaomi Mijia Multimode Gateway 3” which is a new version of the Xiaomi Mijia Gateway. This also adds to the confusion because everybody is posting criss-cross.
I think I would be good if new threads get started for the “Xiaomi Mijia Multimode Gateway 3” and “Aqara Gateway” to discuss those in their own topics?
This would make things easier for everybody in my opinion and people with this issue do not need to read > 300 posts to find the one post with the answer to the original question.
“Xiaomi Mijia Gateway V2” = directly plugged in power socket, MIJIA Logo in the center
“Xiaomi Mijia Multimode Gateway 3” = power via a Micro-USB cable, , MIJIA Logo in the center
“Aqara Gateway” = directly plugged in power socket, AQARA Logo in the center
Hi everyone,
Just a quick reminder to check the zigbee2mqtt project.
Maybe some of you could save a lot of time solving their issue by by-passing the gateway to pair item in Openhab using a CC2531 USB dongle and the zigbee2mqtt project.
Can you please describe the wiring / pins? Which function has which cable?
Was the integration in oh successful?
Where you got the dev key?
@Ingo1977 did you found a solution?
Hello,
I tried to apply this solution:
but during soldering I removed the point of copper of TX, anyone with a multimeter could identify an other entry point for TX (there’s a lot of TPxx point on the board)
thanks for your help
Here you can find a new thread regarding the…
Thank you very much, just one thing about SSH, for me it worked like this:
root@imx6ullxxxxxxxx:/etc/init.d/dropbear start (to test ssh server)
root@imx6ullxxxxxxxx:/etc/rc5.d# cp …/rc2.d/S10dropbear . (to star daemon on startup, check runlevel on boot)
I’m also verry interested for a solution 
Here I posted some Information of hacking ZNDMWG03LM:
I have no idea what you exactly are saying, (Im not a coder) but it sounds awesome if you mange to get the gateway to work 
This looks awesome. 
I will buy one and try. I think you are right when you wrote “This gateway has much more potential that you may think.”
Hi, I’m trying to edit my Mi Home V3 gateway.
I have the token, have managed to enable telnet (php miio-cli.php --ip 192.168.10.195 --token **** --sendcmd ‘{“id”:0,“method”:“enable_telnet_service”, “params”:}’)
Then i telnet 192.168.10.195
Trying 192.168.10.195...
Connected to 192.168.10.195.
Escape character is '^]'.
rlxlinux login: admin
Lumi Linux version 3.0
_ _ _ _
| | |_| | ||_|
| | _ _ _____ _ | | _ ____ _ _ _ _
| || || || \| | | || | _ \| | | |\ \/ /
| || || || | | || | | || | | | | |_| |/ \
|_|\____||_|_|_||_| |_||_|_| |_|\____|\_/\_/
For further information check:
https://www.aqara.com
BusyBox v1.22.1 (2020-03-19 12:38:22 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.
and in /etc/services i find
MijiaRootCert.pem hostapd_1.wps_upnp
avahi-autoipd.action hostapd_none.conf
ble_info hostapd_test.conf
ca-certificates.crt hostapd_wep.conf
ecryptfs-passphrase hostapd_wpa2.conf
ecryptfs-wrap-passphrase hosts
factory_test.conf important.txt
hapd_none-2g init.d
hapd_none-5g inittab
hapd_none-wlan0-2g localtime
hapd_none-wlan0-5g mime.types
hapd_psk.wpa-mix mosquitto
hapd_psk.wpa-tkip motd
hapd_psk.wpa-wps2-mix myhostapd.conf
hapd_psk.wpa2-ccmp myhostapd2.conf
hapd_psk.wpa2-ccmp-wlan0-2g myhostapd3.conf
hapd_psk.wpa2-ccmp-wlan0-5g mywpa-wep.conf
hapd_wep mywpa-wpa2.conf
host.conf mywpa.conf
hostapd.accept passwd
hostapd.conf passwd_default
hostapd.deny ppp
hostapd.eap_user resolv.conf
hostapd.eap_user_sqlite rootfs_fw_info
hostapd.none services
hostapd.none_security shadow
hostapd.radius_clients shadow_default
hostapd.sim_db smb.conf
hostapd.vlan udhcp
hostapd.wpa_psk version
hostapd.wps_upnp wpas.conf
hostapd_0.wps_upnp
Anything useful?
BTW: I have “ Xiaomi Mijia Multimode Gateway 3 ” = power via a Micro-USB cable, , MIJIA Logo in the center
Hey,
What command were you trying to use for this? I am trying to test this out now, as I burnt off my soldersing connection on the board :S
Hi @rothm,
I am trying to test your OTA trick with my lumi gateway lmuk01. I had it all working before but had to do a reset, and this caused me to lose ssh. I burnt off my soldering connection point on the board, so would like to try your OTA method. Any help on the steps would be great! I downloaded both miio software and the python-miio software. with miiocli I can see the info of the device. I also have the token (which I got from the hacked android app).
Thanks!
This is how i managed to enable telnet:
php miio-cli.php --ip 192.168.10.195 --token **** --sendcmd ‘{“id”:0,“method”:“enable_telnet_service”, “params”:}’
But after the last gateway update (1.4.6_0030) this is the response when i use miio-cli: Device 192.168.10.195 is not available or is not responding.
Telnet is disabled as well.
Sorry I never took time to test the proper miio command to flash the firmware.
hi Marc, do you solve it ? tx and rx ?
You can most likely also do this from within openHAB miio binding.
While miio binding has nothing specific to the lumi gateway, it should be possible to send commands to it and get the token from the Xiaomi cloud.
The lumi would show as unsupported device, but will have a command channel There you can send the command like: enable_telnet_service. The miio binding will then indeed send ‘{“id”:0,“method”:“enable_telnet_service”, “params”:}’ to the lumi device.
After that, you don’t need the miio binding anymore to control the lumi.
I don’t have a lumi device to test this, but would be surprised if it would be so different to other devices that it wont work
hi guys, can you help me please, i have a hub Aqara but the rx and tx is not the same pins that the xiaomi gateway, do you know the rx and tx pins for aqara hub? and do you know if this hub also has programming mode?
Thanks ¡
