Xiaomi AC2100: full-time router configuration 10 minute

Introduction: Why Xiaomi AC2100 requires proper adjustment

Dual-band router Xiaomi Router AC2100 (model R2100) — One of the most popular networking devices in Xiaomi’s lineup, thanks to its combination of price, performance and functionality, but it doesn’t work at full capacity out of the box. Factory settings often leave security vulnerabilities, do not optimize Wi-Fi coverage, and do not take full advantage of MiWiFi firmware capabilities. ROM.

This article will help avoid common mistakes, from basic Internet installation to fine-tuning QoS, guest networking and parental control. We will examine both standard features through the web interface and hidden features (such as activation). SSH We will focus on problems specific to this model, such as 5 GHz connection breaks or conflicts with the IP-Xiaomi cameras.

⚡ Important: If you update your firmware from a version older than 3.0.27, pre-reset to factory settings via the Reset button (hold 10 seconds). New versions have changed the password encryption algorithm, and without reset, authentication errors may occur.

1. Connection and first start of the router

Before setting up, make sure you have:

• 📦 Delivery kit: router AC2100, feed-in 12V/1A, cable Cat.5e (short, it is better to use your length 1-2 ).
• 💻 Device for setting up: PC/laptop with Ethernet port or smartphone with Wi-Fi 5 support (802.11ac).
• 📄 Data from the provider: type of connection (PPPoE, DHCP, Static IP), login/password (if necessary), VLAN ID (for some operators, for example, Rostelecom).

Connect the router according to the scheme:

1. Insert the provider cable into the port WAN (blue connector on the back panel).
2. Put one of them together. LAN-Ports (yellow) with your computer with Ethernet cable or connect to the network Xiaomi_XXXX Wi-Fi (password is indicated on the sticker below the router).
3. Connect the power supply to the router and plug it into the socket. Wait for the System indicator to light up in blue (ready mode).

Many users make a mistake: ignoring the indicators on the front panel. If the Internet LED flashes orange, the problem is on the provider's side (for example, the port is inactive or the lock on the Internet is blocked). MAC-If it's on red, you've entered the PPPoE login/password incorrectly.

2. Web interface login and basic setting

Open your browser and go to the address http://miwifi.com or 192.168.31.1. If the page doesn't open:

• 🔄 Check if you are connected to a router (not another network).
• 🛠️ Turn it off. VPN/browser-based proxy.
• 🔍 Try another browser (Chrome, Edge, or Firefox – Safari may have display issues).

When you first log in, the system will offer to create an administrator account:

1. Create a password (at least 8 characters, with numbers and letters) Do not use a password from Wi-Fi - these are separate credentials!
2. Choose the region of Russia (important for proper work) DNS).
3. Click Next and wait for the reboot (takes) ~2 minutes).

After you log in, you'll see the main panel with the connection information.

• 🌐 Type WAN (Current mode of connection to the provider).
• 📶 Wi-Fi status (active 2.4 GHz and 5 GHz networks).
• 🔄 Firmware version (current at the time of writing - 3.0.35).

3. Set up an Internet connection

Go to the Settings section → Internet. You need to specify the parameters provided by your ISP. Let's look at the main types of connections:

For PPPoE (most common case):

1. Select the PPPoE type.
2. Enter your login and password (registration is important!).
3. If the provider requires VLAN ID (For example, Rostelecom in some regions, specify it in the field Identifier VLAN.
4. In the section DNS Select Automatically or manually (e.g. 1.1.1.1 and 8.8.8.8 for Cloudflare and Google).
5. Click Save and wait for the reconnection (~30 seconds).

💡

If the internet is not connected, try manually prescribing. MAC-address of your old router or computer in settings WAN. Some providers link access to a specific MAC-address.

⚠️ Note: if the Internet indicator flashes orange after saving the settings, and the status says "Authentication error", check it:

• 🔑 Correctness of the entered password (frequent error - unnecessary spaces).
• 🔄 Register of letters in the login (for example, ivanov)@rt.ru ≠ Ivanov@RT.RU).
• 📞 Relevance of the tariff (sometimes the provider blocks access when payment is late).

4. Wi-Fi Optimization: Speed and Coverage

By default. AC2100 creates two networks: Xiaomi_XXXX (2.4 GHz and Xiaomi_XXXX_5G (5 GHz. They can be combined into one or configured separately for different tasks.

Recommended parameters for maximum speed:

• 📶 Range. 2.4 GHz: Mode: 11n/g/b (for compatibility with older devices. Channel width: 20/40 MHz (auto). Channel: 6 or 11 (Less busy in apartment buildings).
• 🚀 Range. 5 GHz: Mode: 11ac/n/a (turn off 11a, if there are problems with connection. Channel width: 80 MHz (for maximum speed) Channel: 36, 40, 44 or 48 (In Russia, it is allowed without a license).

To change the settings:

1. Go to Settings. → Wi-Fi.
2. Select the range (2.4G or 5G).
3. Give me the name of the network (SSID) (Latin, no gaps).
4. Choose the type of security – only WPA2-PSK (don't use WPA3, If you have devices older than 2018).
5. Create a password (at least 12 characters, with numbers and special characters).
6. Save the settings and reconnect all devices.

⚠️ Note: If the devices are not connected to 5 GHz after the changes, check:

• 🔧 Does your smartphone/laptop support? 802.11ac (iPhone 6 and older, for example, no).
• 📱 In the Wi-Fi settings on the device, disable the option "Autoconnect to the device" 2.4 GHz" (available on some Xiaomi/Redmi smartphone).
• 🔄 Restart the router (sometimes helps with the "hang" of the radio module).

5.Security: Protection against hacking and leakage

Factory settings AC2100 They leave a few vulnerabilities:

1. Weak administrator passwords – many people leave admin/admin.
2. Open access to SSH — In firmware older than 3.0.20, port 22 may be accessed from a local network.
3. Outdated protocols - included WPS UPnP can be used for attacks.

Safety checklist:

How to turn off dangerous functions:

1. WPS: Settings → Wi-Fi → Additionally. → Shut down. WPS.
2. UPnP: Settings → Redirection → Disable UPnP.
3. Remote access: Settings → System system → Remote control → Shut down.
4. SSH: If not, turn off the settings. → Additionally. → SSH-server.

For advanced users, activate the guest network for visitors' devices, which isolates them from your local network:

1. Go to Settings → Wi-Fi → Guest network.
2. Enable the option and specify a separate SSID (for example, Guest_Xiaomi).
3. Set a speed limit (e.g. 10 Mbps).
4. Turn on the option "Isolate guests".

💡

Never use the same password for the host and guest network. The guest network should have a simple password (e.g., a password for the host network, welcome123), You can communicate to your visitors without risking the main network.

6 Additional functions: QoS, parental control, IPv6

Xiaomi AC2100 Supports several useful features that are often ignored:

Quality of Service (QoS): allows you to prioritize traffic for certain devices or applications (e.g., Zoom or online gaming).

1. Go to Settings. → QoS.
2. Enable the option and select the priority type: IP-port or address.
3. Add a rule, for example, for Steam (ports) 27015-27030, protocol UDP).

Parental controls: restricts Internet access on a schedule or blocks certain sites, such as the 22:00 to 8:00 ban on social media:

1. Go to Settings. → Parental control.
2. Add the device to the MAC-Address (you can find it in the list of connected customers).
3. Please specify time limits or blocked sites (e.g. vk.com, tiktok.com).

IPv6: If your provider supports IPv6 (For example, Beeline or MTS in some regions, include it in Settings → Internet → IPv6. This will speed up access to modern services (e.g. YouTube or Netflix).

💡

To check if it works IPv6, open it on the computer test-ipv6.com. If the test shows errors, contact the provider – additional adjustments on their side may be required.

7. Update firmware and reset settings

Regular firmware updates fix vulnerabilities and add new features. Check your version's relevance in Settings → Status. → Firmware version.

How to update:

1. Go to Settings → Update firmware.
2. Click Check for updates.
3. If a new version is available, click Update and wait until it is completed (the router will restart automatically).

⚠️ Warning: If after updating the router "hangs" at the boot stage (red indicator burns), reset:

1. Press and hold the Reset button (10).+ seconds) until the indicators are turned off.
2. Connect to the router via cable and repeat the setup from scratch.
3. If the problem persists, download the firmware manually from the official website and download it through the Update section. → Local Update.

8 Advanced settings: SSH, VPN and alternative firmware

For experienced users AC2100 Offering additional opportunities:

Activation. SSH: allows you to control the router via the command line (for example, to configure OpenVPN or WireGuard:

1. Go to Settings. → Additionally. → SSH-server.
2. Enable the option and specify the port (default 22).
3. Connect to the SSH from the computer: ssh root@192.168.31.1 The password is the same as for the web interface.

OpenWRT installation: alternative firmware with advanced features (e.g. AdGuard Home or Pi-hole support) Official support AC2100 OpenWRT experimental - use at your own risk:

1. Download the firmware for Xiaomi R2100 official website.
2. Go to Settings. → Update → Local Update.
3. Download the firmware file and wait for completion (~5 minutes).

⚠️ Note: after installing OpenWRT, you will lose access to Xiaomi’s branded features (for example, management through the Mi WiFi app). TFTP emergency.

FAQ: Answers to Frequent Questions