Zigbee security

sibin sunny

Intellectual 990 points

Other Parts Discussed in Thread: CC2538, Z-STACK

Hi,

I am using cc2538 for zigbee programming.

When i made following changes in preprocessor

1. SECURE=1 in ZC

2. SECURE=0 in an ZE

then also ZE joined to that ZC i didn't understand why is it so.

please suggest me.

sibin

over 10 years ago

0 YiKai Chen over 10 years ago

Guru 735695 points

I would suggest you using Ubiqua Packet Analyzer to check it.

0 sibin sunny over 10 years ago in reply to YiKai Chen

Intellectual 990 points

Hi YK Chen,

can i give the security key for ZC and ZE in application layer instead of giving it in f8wConfig.cfg
since i needed the user to enter their link key through an GUI

if possible suggest me how.
thanks for response
sibin

0 YiKai Chen over 10 years ago in reply to sibin sunny

Guru 735695 points

I suppose you can change defaultTCLinkKey in application to serve your purpose.

0 sibin sunny over 10 years ago in reply to YiKai Chen

Intellectual 990 points

hi YK.chen,

so is there any variable where i can place the link key that i get from the GUI through UART.
since DEFAULT_KEY is preprocessor directive i can't place it there.

thanks for above reply's
sibin

0 YiKai Chen over 10 years ago in reply to sibin sunny

Guru 735695 points

defaultTCLinkKey is initialized in nwk_globals.c. I think you can get new key from UART and store it to a customized NV area. Then, you can restart device and read it from customized NV area to defaultTCLinkKey in ZDApp_Init.

0 sibin sunny over 10 years ago in reply to YiKai Chen

Intellectual 990 points

defaultTCLinkKey is made CONST so if i try to place my new key in it in ZDApp_Init. It shows error.

0 YiKai Chen over 10 years ago in reply to sibin sunny

Guru 735695 points

Try to remove CONST.

0 sibin sunny over 10 years ago in reply to YiKai Chen

Intellectual 990 points

can i make changes to nwk_globals.c since it is given user definable?

0 YiKai Chen over 10 years ago in reply to sibin sunny

Guru 735695 points

I see no problem to do it.

0 sibin sunny over 10 years ago in reply to YiKai Chen

Intellectual 990 points

Hi YK.Chen,

My ZE is joining ZC even if i make
SECURE =1 in ZC
SECURE = 0 in ZE
According to the theory i studied if security enable ZC should not allow any unsecured ZE or ZR to its network.

i am using CC2538 there is no packet analyser for check it

please help me,
thanks for previous replies
sibin

0 YiKai Chen over 10 years ago in reply to sibin sunny

Guru 735695 points

I think ZR or ZED associated with ZC but it cannot communicate within Zigbee network. You should see ZED or ZR keeps rebooting.

0 sibin sunny over 10 years ago in reply to YiKai Chen

Intellectual 990 points

yes it was rebooting

thanks for reply
sibin

0 YiKai Chen over 10 years ago in reply to sibin sunny

Guru 735695 points

You are welcome.

0 sibin sunny over 10 years ago in reply to YiKai Chen

Intellectual 990 points

Hi YK,Chen,

if i make
1. SECURE =1 in ZE
SECURE = 0 in ZC
the ZE get associated with ZC and do rebooting as you explained earlier

2. SECURE =1 in ZC
SECURE = 0 in ZE
the ZE and ZC get joined to the network and ZE is not reeboting also i don't understand why it is not working as the first case.

i am using CC2538 there is no packet analyser for check it

regards,
sibin

0 YiKai Chen over 10 years ago

Guru 735695 points

I remembered you set SECURE=1 in an ZC and SECURE=0 in an ZED yesterday. Then, you see ZED reboot. Why do you have different result today?

0 sibin sunny over 10 years ago in reply to YiKai Chen

Intellectual 990 points

Acually i checked it with the
SECURE =1 in ZE
SECURE = 0 in ZC
so ZE began rebooting so i acknowledged it.

today when i tested making
SECURE=1 in ZC
SECURE=0 in ZE
it was not behaving like above one

0 YiKai Chen over 10 years ago in reply to sibin sunny

Guru 735695 points

Which Z-Stack version and example do you test this?

0 sibin sunny over 10 years ago in reply to YiKai Chen

Intellectual 990 points

The zstack version iam using is zstack home 1.2.2.42930
I am trying it in sample doorlock example.

Actually i think I figured it out
if i make
SECURE=1 in ZC
SECURE=0 in ZE
ZE will join to ZC and not reboot also
but it can't bind with other ZE also ie not taking part in network traffic, it just make a insecure join to the coordinator.

if i make
SECURE=0 in ZC
SECURE=1 in ZE
then ZE will rebooting at specific intervals.

thanks again for your help.
sibin

0 YiKai Chen over 10 years ago in reply to sibin sunny

Guru 735695 points

You are welcome.

Zigbee & Thread

Zigbee & Thread forum

Zigbee security