[{"data":1,"prerenderedAt":793},["ShallowReactive",2],{"\u002Fposts\u002Faf0f6a8a":3,"surround-\u002Fposts\u002Faf0f6a8a":787},{"id":4,"title":5,"body":6,"categories":759,"comment":761,"date":762,"description":763,"donation":761,"draft":764,"extension":765,"image":766,"meta":767,"navigation":761,"path":769,"permalink":769,"postfooter":761,"published":770,"readingTime":771,"recommend":770,"references":770,"seo":776,"sitemap":777,"stem":778,"tags":779,"type":784,"updated":785,"__hash__":786},"content\u002Fposts\u002F2026\u002FCMCC RAX3000QY路由器TTL刷机与OpenWrt解锁全记录.md","CMCC RAX3000QY路由器TTL刷机与OpenWrt解锁全记录",{"type":7,"value":8,"toc":736},"minimark",[9,13,17,21,24,78,85,89,92,97,148,152,155,234,238,242,245,290,294,297,436,440,443,472,483,486,525,529,532,538,542,594,598,630,634,637,643,647,674,678,704,708],[10,11,12],"h2",{"id":12},"开篇",[14,15,16],"p",{},"CMCC RAX3000QY是中国移动推出的一款入门级WiFi 6路由器，主打高性价比。其最大特点是硬件配置与红米AX3000几乎一致，而价格在二手市场通常只需几十元，因此被许多爱好者称为“捡垃圾”神器。为了让这款路由器具备更强的可玩性，本教程将详细介绍如何通过TTL方式为其刷入第三方系统Nwrt。",[10,18,20],{"id":19},"一准备","一、准备",[14,22,23],{},"在开始之前，请确保准备好以下软硬件：",[25,26,27,47,67],"ol",{},[28,29,30,31,39,40,39,43,46],"li",{},"硬件工具：",[32,33,34,35,38],"strong",{},"CH340C（USB转TTL模块）",[32,36,37],{},"及","杜邦线（公对母）","、",[32,41,42],{},"螺丝刀",[32,44,45],{},"塑料拨片（用于拆机）","。",[28,48,49,50,39,53,39,56,59,60,63,64,66],{},"软件工具：",[32,51,52],{},"CH340驱动",[32,54,55],{},"TFTPD64",[32,57,58],{},"PuTTY","或",[32,61,62],{},"MobaXterm","（选择一个即可，推荐",[32,65,62],{},"）。",[28,68,69,70,73,74,77],{},"固件文件：提前下载好所需的",[32,71,72],{},"Nwrt","固件及后续步骤需要用到的",[32,75,76],{},"Uboot","文件。",[79,80],"link-card",{"description":81,"icon":82,"link":83,"title":84},"TTL刷机工具、Nwrt固件、Uboot文件。","https:\u002F\u002Fstatics.123pan.com\u002Fimg\u002Flogo_top.svg","https:\u002F\u002Fwww.123865.com\u002Fs\u002FgzD6jv-XJZCh?pwd=HSeD","CMCC RAX3000QY TTL刷机工具",[10,86,88],{"id":87},"二电脑网络设置","二、电脑网络设置",[14,90,91],{},"首先，对电脑的网络和防火墙进行设置，以确保刷机过程顺利进行。",[93,94,96],"h3",{"id":95},"_21-关闭防火墙","2.1 关闭防火墙",[25,98,99,110,116,122,136],{},[28,100,101,102,105,106,109],{},"打开Windows控制面板，将窗口右上角的“",[32,103,104],{},"查看方式","”设置为“",[32,107,108],{},"大图标","”。",[28,111,112,113,109],{},"找到并点击“",[32,114,115],{},"Windows Defender防火墙",[28,117,118,119,109],{},"在左侧菜单中，点击“",[32,120,121],{},"启用或关闭Windows Defender防火墙",[28,123,124,125,128,129,132,133,109],{},"分别将“",[32,126,127],{},"专用网络设置","”和“",[32,130,131],{},"公用网络设置","”下方的选项，都设置为“",[32,134,135],{},"关闭Windows Defender防火墙(不推荐)",[28,137,138,139,142,143],{},"点击“",[32,140,141],{},"确定","”保存设置。\n",[144,145],"img",{"alt":146,"src":147},"防火墙设置","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac15a6c8f40.webp",[93,149,151],{"id":150},"_22-设置静态ip地址","2.2 设置静态IP地址",[14,153,154],{},"操作步骤：",[156,157,158,168,174,184,193,228],"ul",{},[28,159,160,161,164,165],{},"步骤1：回到控制面板，打开“",[32,162,163],{},"网络和共享中心","”。\n",[144,166],{"alt":163,"src":167},"https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac160b92fa8.webp",[28,169,170,171,109],{},"步骤2：点击左侧的“",[32,172,173],{},"更改适配器设置",[28,175,176,177,180,181,109],{},"步骤3：找到当前连接的网络（Win10\u002F11通常为“",[32,178,179],{},"以太网","”），右键点击它，选择“",[32,182,183],{},"属性",[28,185,186,187,164,190],{},"步骤4：在弹出的属性窗口中，双击“",[32,188,189],{},"Internet 协议版本 4 (TCP\u002FIPv4)",[144,191],{"alt":189,"src":192},"https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac1654dbcad.webp",[28,194,195,196],{},"步骤5：在弹出的窗口中，进行以下设置：\n",[156,197,198,204],{},[28,199,200,201,109],{},"选择“",[32,202,203],{},"使用下面的IP地址",[28,205,206,207],{},"在对应栏目中填入以下信息：\n",[156,208,209,216,222],{},[28,210,211,212,215],{},"IP地址：\"",[32,213,214],{},"192.168.1.10","\"",[28,217,218,219,215],{},"子网掩码：\"",[32,220,221],{},"255.255.255.0",[28,223,224,225,215],{},"默认网关：\"",[32,226,227],{},"192.168.1.1",[28,229,230,231,233],{},"步骤6：点击“",[32,232,141],{},"”保存所有设置。",[10,235,237],{"id":236},"三硬件连接与软件配置","三、硬件连接与软件配置",[93,239,241],{"id":240},"_31-硬件连接","3.1 硬件连接",[14,243,244],{},"请按照以下顺序完成硬件连接：",[25,246,247,258,265,283],{},[28,248,249,250,254],{},"拆机：使用螺丝刀和塑料拨片拆开路由器外壳。\n",[144,251],{"alt":252,"src":253},"螺丝孔位置","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac111dca099.webp",[144,255],{"alt":256,"src":257},"路由器拆机图","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac13bb78f50.webp",[28,259,260,261],{},"设置TTL模块电压：将CH340C模块上的跳线帽调整到1.8V电压档位。\n",[144,262],{"alt":263,"src":264},"CH340C和杜邦线","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac10cd9ffc8.webp",[28,266,267,268],{},"连接TTL线：根据图片上的标注，用杜邦线连接CH340C与路由器。连接关系为：\n",[156,269,270,273,276],{},[28,271,272],{},"CH340C GND -> 路由器 GND",[28,274,275],{},"CH340C TX -> 路由器 RX",[28,277,278,279],{},"CH340C RX -> 路由器 TX\n",[144,280],{"alt":281,"src":282},"TTL接线图","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac140529253.webp",[28,284,285,286],{},"连接网线：用一根网线，将电脑的网口与路由器的WAN口连接。\n",[144,287],{"alt":288,"src":289},"WAN口","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac11d6cae2d.webp",[93,291,293],{"id":292},"_32-软件配置","3.2 软件配置",[14,295,296],{},"在电脑上进行以下设置：",[25,298,299,349,398],{},[28,300,301,302],{},"安装驱动与查看端口：\n",[156,303,304,311,314,332],{},[28,305,306,307,310],{},"运行“",[32,308,309],{},"CH341SER.EXE","”安装CH340C的USB转TTL驱动。",[28,312,313],{},"将CH340C模块插入电脑USB口。",[28,315,316,317,320,321,320,324,327,328,331],{},"打开设备管理器（右键“",[32,318,319],{},"此电脑","” -> “",[32,322,323],{},"管理",[32,325,326],{},"设备管理器","”），展开“",[32,329,330],{},"端口(COM和LPT)","”，记下CH340C对应的COM端口号（例如COM4）。",[28,333,334,335,320,337,340,341,344,345],{},"右键点击该端口，选择“",[32,336,183],{},[32,338,339],{},"端口设置","”，将“",[32,342,343],{},"每秒位数","”设置为115200，其余保持默认。\n",[144,346],{"alt":347,"src":348},"计算机管理","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac148100c19.webp",[28,350,351,352],{},"配置串口终端：\n",[156,353,354,376],{},[28,355,356,357,360,361,364,365,368,369,164,372],{},"使用PuTTY：选择“",[32,358,359],{},"Serial","”，设置“",[32,362,363],{},"Serial line","”为对应的COM端口（如COM4），速度设为",[32,366,367],{},"115200","，点击“",[32,370,371],{},"Open",[144,373],{"alt":374,"src":375},"PuTTY设置","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac14e27edf5.webp",[28,377,378,379,320,382,320,385,388,389,368,391,164,394],{},"使用MobaXterm：点击“",[32,380,381],{},"会话",[32,383,384],{},"会话设置",[32,386,387],{},"串口","”，选择对应的COM端口，速度设为",[32,390,367],{},[32,392,393],{},"确认",[144,395],{"alt":396,"src":397},"MobaXterm设置","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac156534bcc.webp",[28,399,400,401],{},"配置TFTP服务器：\n",[156,402,403,410,417,426],{},[28,404,405,406,409],{},"打开“",[32,407,408],{},"tftpd64.exe","”软件。",[28,411,412,413,416],{},"在“",[32,414,415],{},"Current Directory","”一栏，选择你存放Nwrt固件文件的文件夹。",[28,418,412,419,422,423,425],{},[32,420,421],{},"Server Interfaces","”下拉菜单中，确保选择的是你电脑的IP地址：\"",[32,424,214],{},"\"。",[28,427,428,429,432],{},"其他设置保持默认即可，软件窗口保持打开。\n",[144,430],{"alt":55,"src":431},"https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac16bfc5b2b.webp",[144,433],{"alt":434,"src":435},"TFTPD64文件夹","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac17cbdf6f0.webp",[10,437,439],{"id":438},"四通过-ttl-刷入初始固件","四、通过 TTL 刷入初始固件",[14,441,442],{},"完成以上设置后，可以开始执行刷机命令。",[25,444,445,464],{},[28,446,447,448],{},"通电并中断启动：\n",[156,449,450,453],{},[28,451,452],{},"在串口终端（Putty或MobaXterm 的窗口）打开的状态下，给路由器通电。",[28,454,455,456,459,460],{},"通电瞬间，在终端窗口里连续、快速地按回车键，直到界面出现命令行提示符 \"",[32,457,458],{},"#ipq5018","\"。\n",[144,461],{"alt":462,"src":463},"串口终端窗口","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac19cf2637e.webp",[28,465,466,467],{},"执行刷机命令：\n",[156,468,469],{},[28,470,471],{},"依次输入以下命令（每输入一行按一次回车）：",[473,474,480],"pre",{"className":475,"code":477,"language":478,"meta":479},[476],"language-shell","setenv serverip 192.168.1.10\n\nsetenv ipaddr 192.168.1.1\n\ntftpboot 0x44000000 Nwrt-QSDK12.2-2024-04-16-ipq50xx-ipq50xx_32-cmcc_rax3000qy-squashfs-nand-factory.bin\n\nflash rootfs\n","shell","",[481,482,477],"code",{"__ignoreMap":479},[14,484,485],{},"注意：第三行命令中的固件文件名，请根据实际下载的固件名称进行修改。如果嫌文件名太长，可以将其重命名为简短名称，但命令中必须使用重命名后的准确名称。",[25,487,489,503,511],{"start":488},3,[28,490,491,492],{},"完成刷写：\n",[156,493,494],{},[28,495,496,497,499,500],{},"命令执行完毕后，终端会再次出现 \"",[32,498,458],{},"\" 提示符，此时拔掉路由器电源。\n",[144,501],{"alt":502,"src":463},"TTL刷机完成",[28,504,505,506],{},"切换接口并启动：\n",[156,507,508],{},[28,509,510],{},"将连接电脑的网线从路由器 WAN 口换到任意一个 LAN 口，再插上路由器电源。",[28,512,513,514],{},"进入后台：\n",[156,515,516],{},[28,517,518,519,521,522,425],{},"等待路由器启动，然后在浏览器中访问 \"",[32,520,227],{},"\"，即可进入Nwrt的后台管理界面，默认密码为 \"",[32,523,524],{},"password",[10,526,528],{"id":527},"五刷入第三方uboot","五、刷入第三方Uboot",[14,530,531],{},"首次刷入的系统可能无法使用全部闪存空间。通过刷入第三方Uboot重新刷入固件即可解决此问题，并方便未来刷机。",[14,533,534],{},[144,535],{"alt":536,"src":537},"首次刷入的系统","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac1ae8b100c.webp",[93,539,541],{"id":540},"_51-ssh连接路由器","5.1 SSH连接路由器",[25,543,544,558,581],{},[28,545,546,547,320,549,320,551,164,554],{},"打开连接工具：打开 MobaXterm，点击“",[32,548,381],{},[32,550,384],{},[32,552,553],{},"SSH",[144,555],{"alt":556,"src":557},"MobaXterm设置SSH连接","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac1cdd2534a.webp",[28,559,560,561],{},"配置连接参数：\n",[156,562,563,568,574],{},[28,564,565,566,215],{},"远程主机：\"",[32,567,227],{},[28,569,570,571,215],{},"用户名：\"",[32,572,573],{},"root",[28,575,576,577,580],{},"端口保持默认",[32,578,579],{},"22","不变",[28,582,583,584,586,587,164,590],{},"连接并登录：点击“确认”，在弹出的窗口中输入密码 \"",[32,585,524],{},"\"，是否保存密码选择“",[32,588,589],{},"否",[144,591],{"alt":592,"src":593},"MobaXterm是否保存密码选择","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac1d6d0a575.webp",[93,595,597],{"id":596},"_52-上传uboot文件","5.2 上传Uboot文件",[25,599,600,611],{},[28,601,602,603,606,607,610],{},"进入目录：连接成功后，在 MobaXterm 左侧的文件浏览器中，点击“",[32,604,605],{},"SSH 浏览器","”（橙色地球图标），进入 \"",[32,608,609],{},"\u002Ftmp","\" 目录。",[28,612,613,614,617,618,621,622,625,626],{},"上传文件：点击“",[32,615,616],{},"上传到当前文件夹","”按钮（从左往右数第三个），将\n\"",[32,619,620],{},"nwrt_rax3000qy_uboot.mbn","\" 和\n\"",[32,623,624],{},"nwrt_rax3000qy_mibib.bin","\" 两个文件上传到此处。\n",[144,627],{"alt":628,"src":629},"上传Uboot文件","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac1de305fa7.webp",[93,631,633],{"id":632},"_53-执行刷入命令","5.3 执行刷入命令",[14,635,636],{},"在 SSH 命令行中，依次输入以下两条命令（每次输入后按回车）：",[473,638,641],{"className":639,"code":640,"language":478,"meta":479},[476],"mtd write \u002Ftmp\u002Fnwrt_rax3000qy_uboot.mbn \u002Fdev\u002Fmtd11\n\nmtd write \u002Ftmp\u002Fnwrt_rax3000qy_mibib.bin \u002Fdev\u002Fmtd1\n",[481,642,640],{"__ignoreMap":479},[93,644,646],{"id":645},"_54-进入uboot界面","5.4 进入Uboot界面",[25,648,649,656],{},[28,650,651,652,655],{},"重启并中断：两条命令执行成功后，输入 \"",[32,653,654],{},"reboot","\" 命令重启路由器，并立即拔掉电源。",[28,657,658,659,662,663,665,666,669,670],{},"进入恢复模式：用卡针或杜邦线按住路由器的",[32,660,661],{},"Reset","按钮不放，然后再插上电源。持续按住",[32,664,661],{},"按钮约",[32,667,668],{},"10","秒后松开。\n",[144,671],{"alt":672,"src":673},"UBoot刷入成功","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac1e6d98955.webp",[93,675,677],{"id":676},"_55-在uboot中重新刷机","5.5 在Uboot中重新刷机",[25,679,680,686,689],{},[28,681,682,683,685],{},"访问界面：在电脑的浏览器中再次访问 \"",[32,684,227],{},"\"，此时会进入Uboot的 Web 界面。",[28,687,688],{},"选择固件：在此界面中选择你希望刷入的固件文件。",[28,690,691,692,695,696,700],{},"开始刷写：点击“",[32,693,694],{},"Update firmware","”按钮开始刷写。\n",[144,697],{"alt":698,"src":699},"Uboot上传固件","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac205a8c8c6.webp",[144,701],{"alt":702,"src":703},"Uboot刷写固件中","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac20c8ab8b5.webp",[93,705,707],{"id":706},"_56-完成与恢复设置","5.6 完成与恢复设置",[25,709,710,713,723],{},[28,711,712],{},"等待启动：等待 1-5 分钟，刷新浏览器页面，即可看到Nwrt管理界面。",[28,714,715,716,718,719],{},"登录系统：输入默认密码 \"",[32,717,524],{},"\" 登录，将拥有一个存储空间完全解放、功能完整的第三方固件路由器。\n",[144,720],{"alt":721,"src":722},"第二次刷入的系统","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac1a8944c60.webp",[28,724,725,726,728,729,164,732],{},"恢复网络设置：一切操作完成后，请将“",[32,727,189],{},"”改回“",[32,730,731],{},"自动获得 IP 地址",[144,733],{"alt":734,"src":735},"自动获取IP","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac22595fb53.webp",{"title":479,"searchDepth":737,"depth":737,"links":738},4,[739,741,742,746,750,751],{"id":12,"depth":740,"text":12},2,{"id":19,"depth":740,"text":20},{"id":87,"depth":740,"text":88,"children":743},[744,745],{"id":95,"depth":488,"text":96},{"id":150,"depth":488,"text":151},{"id":236,"depth":740,"text":237,"children":747},[748,749],{"id":240,"depth":488,"text":241},{"id":292,"depth":488,"text":293},{"id":438,"depth":740,"text":439},{"id":527,"depth":740,"text":528,"children":752},[753,754,755,756,757,758],{"id":540,"depth":488,"text":541},{"id":596,"depth":488,"text":597},{"id":632,"depth":488,"text":633},{"id":645,"depth":488,"text":646},{"id":676,"depth":488,"text":677},{"id":706,"depth":488,"text":707},[760],"智能硬件",true,"2026-03-07 22:03:25","详细记录CMCC RAX3000QY路由器拆机TTL刷机全过程，从刷入初始Nwrt固件到解锁Uboot释放全部内存，彻底解决运营商定制机限制。",false,"md","https:\u002F\u002Fbu.dusays.com\u002F2026\u002F03\u002F07\u002F69ac4139bdfcf.webp",{"slots":768},{},"\u002Fposts\u002Faf0f6a8a",null,{"text":772,"minutes":773,"time":774,"words":775},"9 min read",8.835,530100,1767,{"title":5,"description":763},{"loc":769},"posts\u002F2026\u002FCMCC RAX3000QY路由器TTL刷机与OpenWrt解锁全记录",[780,781,782,783],"路由器刷机","TTL刷机","RAX3000QY","OpenWrt","tech","2026-03-10 18:22:25","CF1YVkBYWFR6GnfRqJ10s_loWqCx4pkKLwao6JuAJBQ",[788,770],{"title":789,"path":790,"stem":791,"date":792,"type":784,"children":-1},"晨星9385芯片设备免拆包自修改教程","\u002Fposts\u002F307022ac","posts\u002F2026\u002F晨星9385芯片设备免拆包自修改教程","2026-02-15 16:16:55",1775804774044]