This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

CC2652RB: is it possible to make the zigbee network joining process in manual

Part Number: CC2652RB
Other Parts Discussed in Thread: Z-STACK

Hello Everyone,

I am currently working on a home automation project and I am new to the TI environment. I am using the CC2652RB controller with CCS 20.3.1.

My requirement is as follows:
There is one coordinator and multiple routers. On the coordinator side, I need to read the router’s IEEE address and either accept or reject it based on that address. If a router is rejected, it should leave the network. Once a router leaves the network, it should blacklist that coordinator. When the router tries to join again, if the coordinator is blacklisted, it should not send a join request.

I would like to understand whether it is possible to make the joining process manual. Specifically, the router should join the network only if the coordinator accepts it, and should not attempt to join if rejected.

Kindly guide me on how to implement this functionality.

Thank you,
Srinivasa

  • Hello Srinivasa,

    Please see Part 2 (Implementing a Deny/Allow List) of the Zigbee Security Features SimpleLink Academy Lab.

    Regards,
    Ryan

  • Hi Rayan,

    Thank you for the response. I will check.

    Regards,

    Srinivasa

  • Hi Rayan,

    I reviewed the Deny and Allow list, but it not giving the clarity. my idea  is at coordinator side, when ever router tries to join the network coordinator should read the IEEE address of router and send to the master. the master will check the IEEE address of that router and send command like ALLOW or REJECT to the coordinator. based on the command coordinator should allow or reject the router. As of know at coordinator side I read the router IEEE address after device announce and send to master via uart. based on that reject and allow is happening. here device already joined the network. but my requirement is before device join to the network i should read the device IEEE address and send to the master. till that router should be in some undefined state until proper ALLOW command.

    Thank you,

    Srinivasa

  • Hi Srinivasa,

    Thanks for the response with detailed information as to your setup, as it was not clear to me before that you are using a two-chip implementation with a host (aka master) and theCC2652RB (likely a ZNP but could be a MT-enabled ZC).  The SLA still has valid elements, except that the processing from the ZC zstackmsg_CmdIDs_ZDO_DEVICE_ANNOUNCE case will now be handled as MT APIs on the host side, both the ZDO_END_DEVICE_ANNCE_IND ZDO callback and ZDO_MGMT_LEAVE_REQ ZDO command. 

    You are correct in that the ZR will be momentarily joined to the network before the denial is processed, however there is no Z-Stack implementation available to filter joining devices during active commissioning.  For extra security you could consider implementing install codes for each joining device, that way the devices are already approved before being allowed to join.

    Regards,
    Ryan