Xiaomi WiFi 7 Router Setup guide and configuration (+ Docker performance)

The Xiaomi BE7000 router interface is not offered in English, so I thought an installation and configuration guide would be useful. I also delved a bit into the Docker abilities.
Music from #Uppbeatuppbeat.io/t/d... code: LTFRVE0HEMOW6FXW
#xiaomi #docker #guide #installation

[@GrizzlaBear-24]

woah, thats would be gamechanger that it supports docker containers fully. i would really love to use the BE7000 for pi-hole or some adblock solutions. still a promising product!

[@129samuel]

Oi tentei instalar o zabbix, até conseguir instalar todas as imagens necessárias, mais não consegui configurar pela interface e pelo terminal os comandos não foram aceito. Pode me ajudar?

[@revlisbullet]

Hello, thanks for providing useful information. I have this device and I am trying to install wireguard. I have been able to install wireguard through the image manager or so I think and I have tried to create the Wireguard container but I'm not sure if I did it correctly. The procedure I do is as follows: I click on the wireguard boot image button and then click on simple mode. But there I get a series of parameters that I have no idea if I have to put something. I just put the name of the container and press run. Then I go to the container management section and click on the start wireguard container button. Once this is done, I click on the terminal button and there I try to put the wireguard configuration in which I add my public IP and a password as indicated in their GitHub. What happens is that nothing happens. And looking at what you do at minute 5:06, I see that you put docker pull frapsoft/snort And if I try to do that the terminal spits out this: sh: docker: not found

[@elpsykongrooo]

I was able to install and get adguardhome working, I used the simpledocker graphical interface(Professional mode, installed it as a host, default env variables) however when I was in the Adguard web setup, it said that port 53 was not available, to fix this, I ran xmir-patcher to gain Root SSH access and changed the dnsmasq port to 54, also followed the first steps from the openwrt adguardhome guide, (the first 4 steps) You can configure DNS forwarding with the router web interface, but it won't block ads for the guest wifi or (any other custom SSID you add using UCI thru SSH, I created another one for IoT devices), it is better to setup DNS forwarding using UCI commands or modifying the files using SCP and your preferred editor. So once you get SSH access follow the Adguardhome Openwrt documentation to further optimize the configuration(DNS hijacking, etc)

[@titoepfx4272]

Would the steps be about the same for pihole?, I'm able to get the container using the simpledocker ui with the pull option but when I turn it on it wont let me go to the website and im assuming this is the issue? Also what's the difference from host and bridge, not sure what to choose im too new to this. Edit: gonna do adguard home, thought it was a paid thing. Will still need help with the dnsmasq port thing

[@titoepfx4272]

Im still confsued about the root ssh access thing and changing the port, I did uci set dhcp.@dnsmasq[0].port="54" but it still didn't work. NVM I didn't realize i had to to restart the router.

[@elpsykongrooo]

@@titoepfx4272 some of it applies, after making changes, don't forget to commit and restart the services uci commit dhcp /etc/init.d/dnsmasq restart BTW if you google "4pda be7000", you will find a forum thread for this router, full of tips and fixes, is in russian but google translate helps, I was able to set up portainer, adguard home, homebridge, etc, disable the hidden wifis(IoT, mesh), enable permanent SSH, winscp also helps with editing the config files, I even got htop from generic arch64 releases and ran it from /data/auto/

[@zijadalic5964]

I have an issue when I restart router I've lost docker configuration. I can see the files on usb stick but it seems that Xiaomi didn't mount it properly

[@titoepfx4272]

@@zijadalic5964 I havent had that issue on my ssd personally idk how to fix that myself

[@JohnBoy79]

do you have any guides on how to install home assistant on that thing? I've managed to install it but I cant access it. It seems the ips are not the local lan ones but other external ones . (My network is as follows: isp router in bridge mode and then be7000 routing to my lan) nvm that too, managed to make it work . all cause of your little video. tyvm

[@zijadalic5964]

I have Xiaomi BE10000 router which is based on the same A73 Qualcomm chip. The Xiaomi firmware does not offer the same level of freedom as OpenWRT even with Docker integration as docker packages has to support Aarch64/8 architecture. I have managed to unlock SSH (following tutorial on Chinese site), and operate with docker from there but OpenWRT is not yet available publicly and that is my preferred way. I saw that that such firmware exist but it is not public and don't know why. Does anybody know how to get this QWRT firmware and why this firmware is not in public yet?

[@JohnBoy79]

care to show how did you do that? i'm still trying to install some containers using the simpledocker UI but i'm failing . i can't even find the CLI's to work like docker or pull i think their latest firmware closed the access to a lot of things

[@zijadalic5964]

@@JohnBoy79 In order to operate with docker you need to attach USB stick or drive and then you can install simpledocker. Once you login you can install docker image. Unfortunately, Xiaomi included OPA policy which disable privileged mode as well some features which are required for some applications e.g. OpenVPN server. Also, you can operate Docker with DockerCLI when you unlock SSH. The binary is located on mounted drive / stick. Right now I'm on QWRT firmware which is much better , but some stuff are not supported such as fan, led contoller, nfc ..but those are not important to me anyhow.

[@129samuel]

@@zijadalic5964 Pode me explicar como faz para obter acesso Root SSH?

[@eziogarofalo81]

I bought this unit but from what i understand i need also a wlan Router to connect like a netgear or it is useless right?

[@SamBondor]

I am not sure I understand correctly what you mean. The router does have its own AP built in, you don't need any external devices for WiFi.

[@NirHason]

Any parantial control settings to block manage blocked domains/ keywords ?

[@SamBondor]

Yes. You can get a quick view of the Parental Controls in the review video of the BE7000.

[@xgamerxgold5410]

Hello, I have the same router, I also tried to install apps through docker and I failed, can you detail how you did things here?

[@SamBondor]

Hi. Which apps did you try? If you tried pi-hole and/or adguard, then I have no solution at the moment because the router insists the three ports (80,. 43 and 443) are used by a third-party, even if my tools say that they are not.

[@xgamerxgold5410]

@@SamBondor I tried WireGuard, Sonarr and Radarr

[@gatescob]

Does anyone know how can I run SSH on this router?

[@SamBondor]

Use Putty if you're on Windows. Insert the IP address of the router and then type the router credentials.

[@129samuel]

@@SamBondor O meu deu um erro não consigo acessar via SSH. Pode me ajudar?

[@doppeltegenkidama]

if adguard or pi hole run on the BE7000 would be a real gamechanger. im looking forward for ppl solve this problem.

[@elpsykongrooo]

It's possible, try what I mentioned in the other comment

[@Lucaat]

I think it is best to just wait for xiaomi to release it to different markets.

[@la7dfa]

They will not. The AX6000 is still China only like this one. But it is still usable with Google translate or the English app.

[@jackipiegg]

1:09 I do buy chinese brand wireless electronics from time to time but a router is a bad idea. As a client, xiaomi wifi devices already ping to their chinese servers. As a router, they could easily get more than pinging, like intercept pictures you upload, browser history etc. That's where you gotta stop and think, this is not a good idea.

[@SamBondor]

It was interesting how I could not use some ports regardless of how much I tried. There is a high chance that the DNS queries could be sent towards a third-party, especially if the router is bought from China and made for their users (as the BE7000 is). I am not sure if that's the case with devices specifically made for the International public.

[@jackipiegg]

@@SamBondor No doubt their government blocking 6ghz is already a red flag. Do not be enticed by the price.

[@la7dfa]

@@SamBondor Port 80 seem to be fixed for the WAN accessed GUI. My AX6000 can not disable WAN access on port 80, but I can whitelist only known mac adresses on it. Will test a little when I get the BE7000.

[@SamBondor]

@@la7dfa That's good news. Do let us know if it works for you!

[@PEK-97]

That port issue is indeed strange. On my Xiaomi router port 80 is occupied by sysapihttpd (which is actually just NGINX serving the web panel). There doesn't seem to be a way to change this port in settings but editing /etc/sysapihttp/sysapihttpd.conf will work.

[@SamBondor]

I did try it and lsof confirmed that the port was free to use, but the docker still refused to go through. Were you able to install something like adguard on your Xiaomi router?

[@PEK-97]

@@SamBondor I was able to set up Pi-Hole natively, not through Docker.

[@SamBondor]

@@PEK-97 Interesting, so it could be a SimpleDocker issue. I will have to investigate further (most likely during the weekend). Thank you for the info!

[@allenliang4058]

Speak slowly please, i couldn't understand what you trying to say

[@SamBondor]

Sorry about that. I will create a blog post very soon and will link it here, so you can read it more easily.

[@patelvis4725]

​@@SamBondor I think your English is near perfect. I find you very easy to understand

[@SamBondor]

@@patelvis4725 Thank you! I do try my best.

[@bencannon3131]

@@SamBondor @allenliang4058 I understood every word, you spoke at a perfect pace. allenliang should use the built in playback speed on KZbin to watch at 0.75 speed