ZigBee Democase User Guide 1vv Rev.2 25/03/2010

Transcription

1

2 This document is related to the following product : Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 1 of 41

3 DISCLAIMER The information contained in this document is the proprietary information of Telit Communications S.p.A. and its affiliates ( TELIT ). Th e contents are confidential and any discl osure to persons othe r than the officers, employees, agents or su bcontractors of the owner or li censee o f this do cument, without t he p rior written consent of Telit, is strictly prohibited. Telit makes every effort to en sure the quality of t he inform ation it make s av ailable. Notwithstandi ng t he foregoing, Telit does not make any warranty as to the information contained herein, and does not accept any liability for any injury, loss or damage of any kind incurred by use of or reliance upon the information. Telit disclaims any and all responsibility for the application of the devices characterized in this document, and notes that the application of the device must comply with the safety standards of the applicable country, and where applicable, with the relevant wiring rules. Telit reserves the right to make modifications, additions and deletions to this document due to typographical errors, ina ccurate info rmation, or imp rovements to programs a nd/or e quipment at any time and without notice. Such changes will, nevertheless be incorporated into new editions of this document. Copyright: Transmittal, reproduction, dissemination and/or editing of this document as well as utilization of its contents and communication thereof to others without express authorization are prohibited. Offenders will be held liable for payment of damages. All rights are reserved. Copyright Telit RF Technologies Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 2 of 41

4 CONTENTS CHAPTER I. INTRODUCTION 4 I.1. AIM OF THE DOCUMENT... 4 I.2. REFERENCE DOCUMENTS... 4 I.3. DOCUMENT CHANGE LOG... 4 I.4. GLOSSARY... 5 CHAPTER II. DESCRIPTION 6 II.1. GENERAL DESCRIPTION... 6 II.2. LIST OF EQUIPMENTS... 8 CHAPTER III. HARDWARE DESCRIPTION 9 III.1. THE ZE50/ZE MODULE... 9 III.2. THE DEMOBOARD CHAPTER IV. FUNCTIONAL DESCRIPTION 16 IV.1. NETWORK CONSTRUCTION IV.2. DEVICE CONFIGURATION CHAPTER V. ANNEXES 41 Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 3 of 41

5 CHAPTER I. INTRODUCTION I.1. Aim of the Document The goal of the ZigBee DemoCase proposed by Telit is: to show to customers the possibilities offered by the ZigBee technology to show to customers the know-how of Telit regarding this emerging technology to allow customers to start the development of their own application I.2. Reference documents [1] ZE RF Module User Guide 1vv [2] ZTC User Guide 1vv [3] Z-One Protocol Stack User Guide 1vv [4] ZE RF Module User Guide 1vv [5] ZigBee Demo case Getting Started 1vv I.3. Document change log Revision Date Changes ISSUE # 0 29/07/09 First Release ISSUE # 1 27/10/09 Updated equipment list Added ZE ISSUE # 2 25/03/10 Updated democase software Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 4 of 41

6 I.4. Glossary ARIB BER Bits/s CER CEPT CFR Chips dbm EMC DSSS EPROM ERC ESR ETR ETSI FCC IEEE ISM KB kbps LBT LNA MAC MHz Mchip/s PCB PROM PER PHY NRZ RF RoHS RSSI Rx SRAM SRD SMD Tx Via WPANs Association of Radio Industries and Businesses Bit Error Rate Bits per second (1000 bits/s = 1Kbps = 1Kbaud) Character Error Rate European Conference of Postal and Telecommunications Administrations Code of Federal Regulations Chip or chip sequence refers to a spre ading-code used to tran sform the original data to DSSS Power level in decibel milliwatt (10 log (P/1mW)) Electro Magnetic Compatibility Direct Sequence Spread Spectrum Electrical Programmable Read Only Memory European Radiocommunications Committee Equivalent Series Resistance ETSI Technical Report European Telecommunication Standard Institute Federal Communications Commission Institute of Electrical and Electronics Engineers Industrial, Scientific and Medical 1024 bytes (1 byte = 8 bits) kilobits/s Listen Before Talk Low Noise Amplifier Medium Access Control Mega Hertz (1 MHz = 1000 khz) Mega chip s per second (A measu re o f the speed with whi ch chips a re generated in DSSS) Printed Circuit Board Programmable Read Only Memory Packet Error Rate Physical Layer Non return to Zero Radio Frequency Restriction of Hazardous Substances Receive Strength Signal Indicator Reception Static Random Access Memory Short Range Device Surface Mounted Device Transmission Metal Hole on a printed circuit board Wireless Personal Area Networks Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 5 of 41

7 CHAPTER II. DESCRIPTION II.1. General Description II.1.1. The DemoCase philosophy The goal of the ZigBee DemoCase proposed by Telit is: to show to customers the possibilities offered by the ZigBee technology, to show to customers the know-how of Telit regarding this emerging technology, to allow customers to start the development of their own application. This DemoCase represents a co mplete ZigBee solution in term s of ha rdware, integration, firmware and managing software. It allows customers to create a complete ZigBee network and to start developing their own application thanks to the numerous interfaces available on the DemoCase devices. DemoCase can be ordered in two different versions: based on the ZE modules based on the ZE modules Both versions embed the Telit ZCP 2007 stack (Z-One). This technical manual gives a detailed description of the Demo Case regarding the hardware and th e software. It also gives a functional description of how creating and managing a ZigBee network with the different elements of the DemoCase. Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 6 of 41

8 II.1.2. The ZE50/ZE module Telit has developed two complete ZigBee -ready solution integ rated in a miniaturized SMD module, referenced ZE and ZE This module contains the radio part a nd the micro controller with the ZigBee stack in only 26x15x3 mm 3. It includes the complete ZigBee stack described below : APPLICATION PROFILE SECURITY ZigBee R Alliance NETWORK Layer Star/Cluster/Mesh Stack from IEEE MAC Layer MAC Layer PHY 2.4 GHz Star/Cluster/Mesh RFIC from Find below its main characteristics: Radio Chip : Chipcon CC2430 Microcontroller : SoC with 8051 Frequency Band : 2.4 GHz, worldwide Serial Interface : RS232 TTL Channels : 16 Serial Data Rate : bauds Radio Data Rate : 250 kbps Power Supply : 2.4 to 3.6V Output Power : 1 mw (ZE50) Consumption : 3.6V (ZE50) 100 mw (ZE60) 3.6V (ZE60) Stand-by Mode : 2µA Sensitivity : -92 dbm (ZE50) -98 dbm (ZE60) Typical Range : up to 200m (ZE50) Temperature : -40 to +85 C Up to 1500m(ZE60) II.1.3. The DemoCase devices Complying with the Zi gbee sp ecifications, th e D emocase in cludes 4 typ es o f de vices: th e Coordinator, the Router, the End device and the Supervisor. It contains: 1 Coordinator, 2 Routers, 2 End devices, 1 Supervisor Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 7 of 41

9 which allows a 3-stage network building, network sniffing and over-the-air reflashing. Telit democase is fully compatible with Perytons Network Analyser which helps getting a quick and complete picture of RF environment and activity of the network allowing to view the network structure and members, easily identify erroneous or problematic messages, inspect message contents down to the bit level. It can be downloaded from the following link: as a 30 days free trial. Telit PC software tool (ZTC) allows setting of the parameters and firmware upgrade and is available on Telit official web site under download zone together with dedicated Use r Guide and latest firmware for re-flash/upgrade. Finally, all accessories necessary to the network implementation (serial cables, power supplies ) are provided in the DemoCase. II.2. List of equipments REF ITEM QTY DemoCase COORD Coordinator Demoboard (1) 1 ROUTER Router Demoboard (1) 2 RFD End Device Demoboard (1) 2 SUPERVISOR Supervisor USB Dongle 1 I/O REPORT I/O Demonstration Board 5 CB01 Demoboard Serial Cable 6 PS01 AC/DC Block for Demoboard (+12V) 5 IT01 9V Cells 2 (1) Boards can be re-flashed to change their type Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 8 of 41

10 CHAPTER III. HARDWARE DESCRIPTION III.1. The ZE50/ZE module III.1.1. External description J18 J10 J30 J19 J28 15mm J27 J1 J9 26mm Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 9 of 41

11 III.1.2. Generic Pin out of the module This pino ut reflects the capability of t he m odule. Some fun ction a re not av ailable with standard software, but can be included with a custom development. All Analog Inputs can be used as Digital I/O Pin Pin name DIR Signal level Function J30 GND - Ground connection for External antenna J29 Ext_Antenna - External antenna connection J28 GND - Ground connection for External antenna J27 GND - Ground J26 GND - Ground J25 VDD - Digital and Radio part supply pin J24 CTS I Clear To Send J23 RESET I µc reset J22 RTS O Request To Send J21 RXD I RxD UART Serial Data Reception J20 GND - Ground J19 TXD O TxD UART Serial Data Transmission J18 STAND_BY I Standby J17 GND - Ground J16 PROG J15 GND - Ground J14 DEBUG _D I/O J13 GND - Ground J12 GND - Ground J11 GND - Ground J10 DEBUG _C I/O J9 RESERVED J8 RESERVED J7 IO7_A I/O Analog Input N 7 (Digital I/O capability) J6 IO6_A I/O Analog Input N 6 (Digital I/O capability) J5 IO5_A I/O Analog Input N 5 (Digital I/O capability) J4 IO4_A I/O Analog Input N 4 Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 10 of 41

12 (Digital I/O capability) J3 IO3_A I/O Analog Input N 3 (Digital I/O capability) J2 IO2_P I/O Digital I/O N 2 with 20mA drive capability J1 IO1_P I/O Digital I/O N 1 with 20mA drive capability NOTE: reserved pins must not be connected III.2. The Demoboard III.2.1. External description ZE50/ZE module soldered on a DIP receptacle subd-9 serial connector AC/DC Block connector 9V battery location III.2.2. The Serial connection and power supply A serial cabl e (CB01) is supplie d for the Demo board: it has a subd-9 so cket for dire ct connection to the serial port of the PC. The power supply is brought : o through the 12V AC/DC conve rter blo ck (PS01) fo r Co ord, Ro uter an d En d device, o through +9V battery for End device. Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 11 of 41

13 III.2.3. DIP Support Pinout 2,54 mm 2,0 mm 32,0 mm 35,5 mm 39,6 mm 67,5 mm Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 12 of 41

14 IO6_A IO5_A IO9_I IO2_P IO1_P IO4_A IO3_A Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 13 of 41

15 III.2.4. The I/O connection All the I/Os of the ZE50/ ZE module a re ava ilable on t he DIP re ceptacle a nd o n the digital interface. Refer to the module pin-out ( III.1.2). Name on Module Description End Point IO6 RTS IO3 IO4 Send on each rising edge and off on each falling edge. Have to be wake up. 6: Switching Load 5: Switching Load 7: Analogical Sensor 2: Switch Remote Control IO1 ->Yell ow LED - IO2 -> Red LED - IO5 Interruptible Pin. Send toggl e on each rising edge. 4: Switch Remote Control III.2.5. The antenna The a ntenna use d for DemoBoard is SMA rubb er antenna refe renced Titani s from Gig aant. Find below its main characteristics : Bandwidth : GHz VSWR : < 1:1.5 Gain : 4 dbi Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 14 of 41

16 III.2.6. I/O Report ZigBee Democase User Guide This board is used for an easy access to the control switches as well as to the Inputs/Outputs used for demonstration. It is very u seful for a qu ick sta rt-up of a net work, allowin g to asso ciate, b ind an d te st the boa rd features in a very short time. It is mounted between the Demoboard itself and the DIP support Inter. IN -EP 4- Digital. IN -EP 3- Digital. IN -EP 2- Analog. In -EP 7- Interrupt. On Sticker ZE50/ZE on DIP support Action Ctrl LED 1 Association Ctrl LED 2 Bindings Action Switch Selector Temp - Pot Tmp Pot TMP On PROG Switch Digital. OUT -EP 5- Config. Digital. OUT -EP 6- Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 15 of 41

17 CHAPTER IV. FUNCTIONAL DESCRIPTION IV.1. Network construction IV.1.1. DEMOCASE setup Before all operations it i s necessa ry to ch oose th e extende d PAN-ID, the Channel M ask, u sing security, the Nwk Key and the mo de Preconfig ured, by ZT C in Intern al Regi ster sheet in Management Registers window. Once this co nfigured, the module is ready to ent er or to begin a network. Whe n the de vice a re connected at the network all the information ab out the network is sto red, so the device kee ps th e network information and takes the same place in the network after a Switching on/off. To reset the device it is n ecessary to put the ST BY pin at high and after pu t the PROG pin at high. During the blinking LD1 release all pin. To re set the device with the default value it is necessary to put the STBY pin at high durin g 20 seconds. During the blinking LD1 release all pin. IV Coordinator To start a network, send the Start command on the serial link, or switch on/off the STBY Pin; from then the coordinator scans the selected channels and selects a non-noisy channel. The LD1 led blinks and stays red when the network is done. By default the coordinator accepts association, so all devices can make an association on its. IV Router To associate a DemoCase in FF D mode, send the S tart command on th e serial link, or switch on/off the STBY Pin. The LD1 led blinks and stays red when the association is done. By default the FFD accepts association, so all devices can make an association on its. Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 16 of 41

18 IV End Device To associate a DemoCase in RFD mode, send the Start co mmand on th e serial link, or switch on/off the STBY Pin. The LD1 led blinks and stays red when the association is done. Binding: To bind end point there is 2 possibilities: - Binding with the ZTC - Binding with End Device Binding command: once devi ces are associated to the network, keeps the STBY pin at high until the choose End Point on the first device. The First blinking of the L D4 corresponds to the First End Point, the second blinking to th e second End point Makes the same operation on the other device before 20 seconds. The LD4 stays ON while the binding is not mad e and it switch es off at the end of the process. If at the end the LD1 blinks then the process didn t have worked. Unbinding: - Unbinding with the ZTC - Unbinding with End Device Binding: makes the same operation that binding. End Point: There is 7 End Points by default on each device. The 1 st End Point is the serial Link. The 2 nd and 3 rd are a switch remote control, when the Pin is high the ON comma nd is sent an d when the Pin is Lo w the OFF command is sent. The 4 th is a switch remote control too, but it send s a TOGGLE command on rising edge. The 5 th and 6 th are a switching load End Points. The 7 th is an analog End Point. End Point Functionality Comments 1 Serial link Payload h as to b e < 8 0 bytes 2 Switch remote Send O N o n High L evel and Se nd OFF o n Lo w level. 3 Switch remote Send O N o n High L evel and Se nd OFF o n Lo w level. 4 Switch remote Interruptible, send TOGGLE on rising edge. 5 Switch Load - 6 Switch Load - 7 Analogical sensor Value on 2 bytes Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 17 of 41

19 IV.1.2. DEMOCASE Profile This p rofile i s de signed t o demo nstrate ho w to u se the Zigb ee Stack 2007 with some applications: On/Off Analogi cal Measure Data exchange different The Profile ID is 0xC07C IV Device Descriptions Device de scriptions specified in this p rofile are su mmarized i n the next table alon g wi th their respective Device IDs. Device DeviceID On/Off Switch 0x 0000 On/Off Ouput 0x 0002 Analogical Measure 0x 0020 Data Exchange 0x 0010 Tool 0x 0030 IV Device Specifications On/Off Switch The On/Off Switch device is capable of sending command to control a remote Output. Supported Clusters: Server side Client side None On/Off On/Off Output The On/Off Output device is capable to switch our own Output regarding a received command. Supported Clusters: Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 18 of 41

20 Server side On/Off None Client side ZigBee Democase User Guide Analogical Measure The Analogical Measure device is capable to read an analogical input. Supported Clusters: Server side Client side Analogical Non e Data Exchange The Data exchange device is capable to send and receive data from/to RS232. Supported Clusters: Server side Client side Serial Data Serial Data Tool The Tool device is capable to control and manage Analogical Measure or On/Off Output devices. Supported Clusters: Server side Client side None On/Off Analogical IV Cluster specifications The differe nt cluste rs are deve loped on Zigbee Cluster Lib rary ( r02ZB_AFG- ZigBee_Cluster_Library_Specification.pdf ) except the Serial Data Cluster. For other it is necessary to use the fo rmat of frame described in ZCL (Chapter 2.3). In thi s ZCL it i s described how to re ad an attribute or how to send a command to a cluster. On/Off Attributes and commands for switching devices between On and Off states. ClusterID: 0x0004 Attributes: Identifier Name Type Range Access 0x0000 OnOff Boolean 0x00-0x01 Read Only Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 19 of 41

21 Command: Off 0x00 On 0x01 Toggle 0x02 Read ZCL specification for the using of the Cluster. Analogical Attributes for reading the analogical input of remote devices. ClusterID: 0x0020 Attributes: Identifier Name Type Range Access 0x0000 Analogical Value UINT-16 0x0000-0x03FF Read Only Command: None Effect on Receipt: At the recepti on of the reading attribute, the application read the analogical input on 10 bits and sends the answer. Serial Data ClusterID: 0x0060 The format of the afdu frame is specific and very simple as following: Afdu Serial Data (MSB First) Frame Generated: The client generates the frame at reception of data on serial link. Effect on Receipt: At the reception of this frame, application sends afdu on the serial link. Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 20 of 41

22 IV Applications Framework of Device All devices of the demo case have the following applications: EP1 Data Exchange EP2 On/Off Switch EP3 On/Off Switch Serial Serial On/Off On/Off EP4 On/Off Switch EP5 On/Off Output EP6 On/Off Output On/Off On/Off On/Off EP7 Analogical Measure EP10 Tools Analog On/Off Analog Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 21 of 41

23 IV.2. Device configuration To communicate with a device which has a serial interface (PAN-C, FFD, Demoboard), a configuration interface has been done. The serial configuration has to be ,8,1,N. To go to the serial configuration mode there is 2 possibilities: To exit this mode: - send +++ / the device responds [0x0D] - Put the Pin PROG at 1. - send [0x01][0x00] / the device responds [0x02][0x00][0x00] - Put the Pin PROG at 0. With this configuration interface, it is possible to manage the inte rnal register of the device and with the coordinator to manage the network. IV.2.1. General format The general format of the serial frame is: Frame Length (1 Byte) Command (1 Byte) Payload (Variable) With Frame Length = 1 + Length of the Payload. IV.2.2. Internal Registers IV Primitives Set Request 0 Frame Length - 1 Comm and 0x12 2 Attribute 0x00-0xFF Defined by users 3 Attribute Length 0x01-0xFF The number of byte of the attribute 4 and more Attribute Value - Set of octets Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 22 of 41

24 Set Confirm ZigBee Democase User Guide 0 Frame Length 3 1 Comm and 0x13 2 Status 0x00-0xFF 0x00: Success 3 Attribute 0x00-0xFF Attribute defined by users G et Request 0 Frame Length 2 1 Comm and 0x14 2 Attribute 0x00-0xFF Defined by users Get Confirm 0 Frame Length AttributeLength +4 1 Comm and 0x15 2 Status 0x00-0xFF 0x00: Success 3 Attribute 0x00-0xFF Defined by users 4 Attribute Length 0x01-0xFF The number of byte of the attribute 5 and more Attribute Value - The Set of octets IV Attribute All attributes are listed below. Access Attribute Length Name Description R 0x6F 8 IEEE Address The Extended Address of the device R/W 0x9A 8 Extended PanID Identify the network on which the device can be connected. R/W R/W 0X52 0X56 1 RxOnWhenIdle Only on the RFD. This parameter indicates whether the device can be expected to receive packets over the air during idle portions. 1 Sleeping Time Only on the RFD. This parameter indicates how much time in second the RFD makes its synchronization with its parent. The value have to be between 1 and 7 seconds. R/W 0x01 2 Radio Channel Manages the mask channel in which the device will try to associate. It is on 2 bytes representing the channel 11 to 26. It is writable only before association. bit Read/wri te Chann el 26 Chann el 25 Chann el Chann el 12 Chann el 11 Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 23 of 41

25 Reset R 0x00 1 Current Channel Return the current channel of the device R 0x04 2 Version Stack R 0x05 5 Version Bootloader R 0x0A 7 Version Application R/W 0xC4 8 ExtendedPanID ExtendedPanID used to start or to associate to a network. R/W 0x99 1 USB device Define if the device is a USB dongle. (0: normal 1: USB) R 0x06 1 Type of device 00= Pan-C, 01= FFD, 02=RFD 80= Pan-C on USB, 81= FFD on USB, 82= RFD on USB R 0x07 1 Is associated 1=associated, 0=not associated R 0x96 2 Nwk address The 16-bit address of the module Security R/W 0xA3 1 Use Security Identify if the device uses security R/W 0xE4 1 HasPreconfiguredNwk Identify if the device has a Nwk Preconfigured Key Key W 0xA4 16 Nwk Key Configure the Key for all devices if are in Preconfigured Key else just the Coordinator must be configured. R/W 0xE5 1 HasPreconfiguredLink Indentify if the device has a Link Preconfigured key Key W 0xA5 24 Link Key(16) + IEEE address(8) Configure the link Key shared with the device of the defined IEEE address. Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 24 of 41

26 IV.2.3. Network Management To configure and manage the network i t is po ssible to use pri mitives listed below. All primitives a re possible on the Supervisor. For the other devices (Coordinator, FFD, RFD) only The Start Request is defined. IV Start This primitive is used to start the network or to associate the device to the network. Start request 0 FrameLength 1 1 Command 0x16 Start confirm 0 FrameLength 2 1 Command 0x17 2 Status SUCCESS,ERROR_ACQ_COORD, ERROR_SCANNING,ERROR_JOIN_ROUTER, ERROR_ACQ_DEVICE Confirm Status Table Join indication 0 FrameLength 13 1 Command 0x Short Address(Little IEEEAddress (Little - 12 Capability Info - 13 S ecurejoin - IV Network Address This primitive is use d to inquire a s to the 16- bit address of the Remote Devi ce based on its kn own IEEE address, and know which devices are associated at the Remote Device. Nwk Addr request 0 FrameLength 11 1 Command 0xC0 2-9 IEEEAddress (Little - Defined by users 10 RequestType 0x00-0xFF Defined by users 11 Start index 0x00-0xFF Defined by users Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 25 of 41

27 Nwk Addr confirm 0 FrameLength 14+2* NumAssocDev 1 Comm and 0xC1 2 Status SUCCESS, ZDP Confirm Status Table Enumeration 3-10 IEEEAddrRemoteDev - IEEE address of the remote device NWKAddrRemoteDev - NWK address of the remote device 13 NumAssocDev - Number of Devices associated to the remote device 14 StartIndex - Index of the first associated device 15 (14 + 2* NumAssocDev) NWKAddrAssocDevList - List of the associated devices IV IEEE Address This primitive is used to i nquire as to the IEEE ad dress of the Remote Device based on its known NWK address, and know which devices are associated at the Remote Device. IEEE Addr request 0 FrameLength 5 1 Command 0xC2 2-3 NWKAddrOfInterest - Defined by users (Little 4 RequestType 0x00-0xFF Defined by users 5 Start index 0x00-0xFF Defined by users IEEE Addr confirm 0 FrameLength 14+2* NumAssocDev 1 Comm and 0xC3 2 Status SUCCESS, ZDP Confirm Status Table Enumeration 3-10 IEEEAddrRemoteDev - IEEE address of the remote device NWKAddrRemoteDev - NWK address of the remote device 13 NumAssocDev - Number of Devices associated to the remote device Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 26 of 41

28 14 StartIndex - Index of the first associated device 15 (14 + 2* NWKAddrAssocDevList - List of the associated NumAssocDev) devices IV Node Descriptor This primitive is used to inquire as the node descriptor of the remote device. The node descriptor contains information about the capabilities of the ZigBee Node. Node desc request 0 FrameLength 3 1 Command 0xC4 2-3 NWKAddrOfInterest (Little - Defined by users Nod e desc Confirm 0 FrameLength 14 1 Command 0xC5 2 Status SUCCESS, ZDP Confirm Status Table Enumeration 3-4 DeviceAddress (Little - NWK address of the remote device 5-14 NodeDescriptor - (See the chapter in the ZigBee specification r13) IV Power Descriptor This primitive is used to inquire as the node descriptor of the remote device. The node power descriptor gives a dynamic indication of the power status of the Node. Power desc request 0 FrameLength 3 1 Command 0xC6 2-3 NWKAddrOfInterest (Little - Defined by users Powe r desc confirm Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 27 of 41

29 0 FrameLength 6 1 Command 0xC7 2 Status SUCCESS, ZDP Confirm Status Table Enumeration 3-4 DeviceAddress (Little - NWK address of the remote device 5-6 PowerDescriptor - (See the chapter in the ZigBee specification r13) IV Simple Descriptor This primitive is used to inquire as the Simple descriptor on a specified Endpoint of the remote device. The simple descriptor contains information specific to each endpoint contained in this remote node. Simple desc request 0 FrameLength 4 1 Command 0xC8 2-3 NWKAddrOfInterest - Defined by users (Little 4 Endpoint 0x00-0xFF Defined by users Simple desc confirm 0 FrameLength 5+ Lenght 1 Command 0xC9 2 Status SUCCESS, ZDP Confirm Status Table Enumeration 3-4 DeviceAddress (Little - NWK address of the remote device 5 Length Length of the Simple Descriptor 6-(5+Length) SimpleDescri ptor - (See the chapter in the ZigBee specification r13) Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 28 of 41

30 IV Active Endpoint ZigBee Democase User Guide This primitive is used to inquire for the list of Endpoints on the Remote device. Active EP request 0 FrameLength 3 1 Command 0xCA 2-3 NWKAddrOfInterest (Little - Defined by users Active EP confirm 0 FrameLength 5+ ActiveEPCount 1 Command 0xCB 2 Status SUCCESS, ZDP Confirm Status Table Enumeration 3-4 DeviceAddress (Little - NWK address of the remote device 5 ActiveEPCount Number of active Endpoint 6-(5+ ActiveEPCount) ActiveEPList - List of Endpoints IV User Descriptor These p rimitives a re u sed to inqui re o r set the user descriptor of the re mote. The u ser d escriptor contains information that a llows the user to ide ntify the devi ce using a user-friendly character string, such as Bedroom TV or Stairs light. User desc request 0 FrameLength 3 1 Command 0xD0 2-3 NWKAddrOfInterest (Little - Defined by users User desc confirm 0 FrameLength 5+ Lenght 1 Command 0xD1 2 Status SUCCESS, ZDP Confirm Status Table Enumeration 3-4 DeviceAddress (Little - NWK address of the remote device 5 Length Length of the User Descriptor 6-(5+Length) UserDe scriptor - (See the chapter in the ZigBee specification r13) Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 29 of 41

31 User desc set request ZigBee Democase User Guide 0 FrameLength 4+ Lenght 1 Command 0xE8 2-3 DeviceAddress (Little - NWK address of the remote device 4 Length Length of the User Descriptor 5-(4+Length) UserDe scriptor - 16 Bytes Max (See the chapter in the ZigBee specification r13) User desc set confirm 0 FrameLength 4 1 Command 0xE9 2 Status SUCCESS, ZDP Confirm Status Table 3-4 DeviceAddress (Little Enumeration - NWK address of the remote device IV Match Descriptor To find remote devices supporting a specific simple descriptor match criterion. Match Desc request 0 FrameLength 7+2*NumInClusters+2* NumOutClusters 1 Command 0xCC 2-3 DeviceAddress (Little - NWK address of the remote device 4-5 ProfileID(Little - Defined by users 6 NumInClusters - Defined by users 7-(6+2*NumInClusters) InClusterList - Defined by users 7+2*NumInClusters NumO utclusters - Defined by users (8+2*NumInClusters)- (7+2*NumOutClusters+2*NumOutClusters) OutClusterList - Defined by users Match Desc confirm 0 FrameLength 5+MatchLength 1 Command 0xCD 2 Status SUCCESS, Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 30 of 41

32 DEVICE_NOT_FOUND, INV_REQUESTTYPE, NO_DESCRIPTOR 3-4 DeviceAdd ress (Little - 5 MatchL ength - 6-(5+MatchLength) MatchLi st - IV System Server Discovery Discover the location of a particular system server as defined. System Server Discovery request 0 FrameLength 3 1 Command 0x ServerMask (Little - Defined by users System Server Discovery confirm 0 FrameLength 4 1 Command 0x21 2 Status SUCCESS 3-4 ServerM ask (Little - Defined by users Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 31 of 41

33 IV Bind/Unbind These primitives are used to bind and unbind a remote device with another remote device. Bin d request 0 FrameLength 16 or 22 1 Command 0xD8 2-9 SrcAddress ( Little - Defined by users 10 SrcEndpoint 0x00-0xFF Defined by users ClusterID( Little - Defined by users 13 DstAddrMode 0x01 :Group Address Defined by users 0x03: IEEE Address ( for group address) DstAddress( Little - Defined by users ( for 64-bit address) 22 (for 64-bit address) 16 (for group address) DstEndpoint 0x00-0xFF Defined by users Bind confirm 0 FrameLength 2 1 Command 0xD9 2 Status SUCCESS, ZDP Enumeration Confirm Status Table Unbi nd request 0 FrameLength 16 or 22 1 Command 0xDA 2-9 SrcAddress ( Little - Defined by users 10 SrcEndpoint 0x00-0xFF Defined by users ClusterID( Little - Defined by users 13 DstAddrMode 0x01 :Group Address Defined by users 0x03: IEEE Address ( for group address) DstAddress( Little - Defined by users ( for 64-bit address) 22 (for 64-bit address) 16 (for group address) DstEndpoint 0x00-0xFF Defined by users Unbi nd confirm 0 FrameLength 2 1 Command 0xDB 2 Status SUCCESS, ZDP Enumeration Confirm Status Table Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 32 of 41

34 IV End Device Bind request These primitives are used to do an End device bind. End Device Bind request 0 FrameLength 16 +2*NumInClusters+2*NumOutClusters 1 Command 0xD6 2-3 BindingTarget ( Little 0x0000 Always the coordinator 4-11 SrcAdd ress( Little - Defined by users 12 SrcEndpoint 0x00-0xFF Defined by users ProfileID( Little - Defined by users 15 NumInClusters - Defined by users 16- (15+2*NumInClusters) InClusterList( Little - Defined by users 16+2*NumInClusters NumO utclusters 0x00-0xFF Defined by users (17+2*NumInClusters)- (16+2*NumInClusters +2*NumOutClusters) OutClusterList(Little - Defined by users End Device Bind confirm 0 FrameLength 2 1 Command 0xD7 2 Status SUCCESS, NOT_SUPPORTED, INVALID_EP, TIMEOUT, NO_MATCH Confirm Status Table IV Group These primitives are used to add or remove group to an endpoint. Add Group Request 0 FrameLength 4 1 Command 0xAB 2-3 Grou paddress (Little - Defined by users 4 EndPoint - Defined by users Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 33 of 41

35 Add Group Confirm ZigBee Democase User Guide 0 FrameLength 5 1 Command 0xAC 2 Status SUCCESS, Confirm Status Table INVALID_PARAMETER, TABLE_FULL 3-4 Grou paddress (Little - 5 EndPoint - Remove Group Request 0 FrameLength 4 1 Command 0xAD 2-3 Grou paddress (Little - Defined by users 4 EndPoint - Defined by users Remove Group Confirm 0 FrameLength 5 1 Command 0xAE 2 Status SUCCESS, Confirm Status Table INVALID_PARAMETER 3-4 Grou paddress (Little - 5 EndPoint - Remove All Groups Request 0 FrameLength 2 1 Command 0xAF 2 EndPoint - Defined by users Remove All Groups Confirm 0 FrameLength 3 1 Command 0xBE 2 Status SUCCESS, Confirm Status Table INVALID_PARAMETER 3 EndPoint - Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 34 of 41

36 IV Request Key ZigBee Democase User Guide These primitives are used to request a Key. Req uest Key request 0 FrameLength 10 or 18 1 Command 0xBA 2-9 DstAdd ress(little - 10 KeyType PartnerA ddress - IV Management Permit Joining This primitive is used to request that a remote device allow or disallow association. Mgmt permit joining request 0 FrameLength 5 1 Command 0xEA 2-3 DstAddress ( Little - Defined by users 4 PermitDuration 0x00-0xFF Defined by users 0x00: remote device disallow association 0xFF: remote device allow association 0x01-0xFE: time during which remote device allow association 5 TC_Significance 0x00-0x01 Defined by users 0x00: No Trust Centre relevance 0x01: Affects Trust Centre authentication. If Duration is 0xFF, it allows authentication. If Duration is 0x00, then no device will be authenticated. Mgmt permit joining confirm 0 FrameLength 2 1 Command 0xEB 2 Status SUCCESS, ZDP Enumeration Confirm Status Table Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 35 of 41

37 IV Management Leave ZigBee Democase User Guide This primitive is used to ask at a remote device to leave the network. Mgmt leave request 0 FrameLength 10 1 Command 0xE4 2-9 DeviceAddress ( Little - Defined by users 10 Bit0: Rejoin Bit1: RemoveChildren Bit2- Bit7: Reserved - Defined by users Mgmt leave confirm 0 FrameLength 2 1 Command 0xE5 2 Status SUCCESS, ZDP Enumeration Confirm Status Table Mgmt leave indication 0 FrameLength 2 1 Command 0xE6 2-9 DeviceAdd ress ( Little 10 Rejoi n - IV Management Nwk Update This primitive is used to upate or request information from device on network conditions in the local operating environment. Mgmt Nwk Update request 0 FrameLength 11 1 Command 0x Scan Channels - Defined by users 6 Scan Duration - in seconds. Defined by users 7 ScanCount - Defined by users 8-9 Nwk Manager Address( Little - Defined by users Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 36 of 41

38 10-11 DstAddress ( Little - Defined by users Mgmt Nwk Update notify 0 FrameLength 1 Command 0x19 2 Status SUCCESS, NOT_SUPPORTED 3-6 Scann ed Channels Total Tx Tx Failures - 11 ScanLi stcount ScanListCount ScanList - IV List of Binding This primitive is used to ask at a remote device to retrieve the contents of the Binding table. Mgmt bind request 0 FrameLength 2 1 Command 0xE2 2-9 StartIndex 0x00-0xFF Defined by users. Starting Index for the requested elements of the Binding Table Mgmt bind confirm 0 FrameLength - 1 Command 0xE3 2 Status SUCCESS, ZDP Confirm Status Table Enumeration 3 BindingTableEntries - Total Number of binding in the Remote device 4 StartIndex - Starting index within the Binding Table to begin reporting for the BindingTableList. 5 BindingTableListCount - Number of Binding included within BindingTableList 6- BindingTableList - List Of Binding Descriptor (See the Table in the ZigBee specification r13) Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 37 of 41

39 IV Application Frame Direct ZigBee Democase User Guide This primitive is used to communicate with an application of a remote device. AF Direct request 0 FrameLength 10+afdulenght 1 Command 0xF3 2-3 DstAddress ( Little - Defined by users 4 DstEndPoint 0x00-0xFF Defined by users 5 SrcEndPoint 0x00-0xFF Defined by users 6-7 ClusterID( Little - Defined by users 8 afdulenght - Defined by users 9-(8+afduLenght) Afdu - 9+afduLenght Txoption Bit 0: encrypt Defined by users request Bit 2: APS Ack Bit 4: Frag 10+ afdulenght BroadcastRadius - Defined by users AF Direct indication 0 FrameLength 10+afdulenght 1 Command 0xF5 2 DstEndPoint 0x00-0xFF 3-4 SrcAddress ( Little - 5 SrcEndP oint ClusterID( Little - 8 afdule nght - 9-(8+afduLenght) Afdu - 9+afduLenght Wa sbroadcast afdulenght SecurityStatus - AF Direct Confirm 0 FrameLength 6 1 Command 0xF4 2-3 DstAddress - 4 DstEndP oint - 5 SrcEndP oint - 6 Status SUCCESS or others Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 38 of 41

40 IV Application Frame Indirect This primitive is used to communicate with a bind application of a remote device. AF Indirect request 0 FrameLength 7+afdulenght 1 Command 0xF0 2 SrcEndPoint 0x00-0xFF Defined by users 3-4 ClusterID( Little - Defined by users 5 afdulenght - Defined by users 6-(5+afduLenght) Afdu - 6+afduLenght Txoption Bit 0: encrypt Defined by users request Bit 2: APS Ack Bit 4: Frag 7+ afdulenght BroadcastRadius - Defined by users IV Application Frame Group This primitive is used to communicate with a group of remote application AF Group request 0 FrameLength 9+afdulenght 1 Command 0xF9 2-3 GroupAddress ( Little - Defined by users 4 SrcEndPoint 0x00-0xFF Defined by users 5-6 ClusterID( Little - Defined by users 7 afdulenght - Defined by users 8-(7+afduLenght) Afdu - 8+afduLenght Txoption Bit 0: encrypt request Bit 2: APS Ack Bit 4: Frag Defined by users 9+ afdulenght BroadcastRadius - Defined by users AF Group indication 0 FrameLength 10+afdulenght 1 Command 0xFB 2-3 GroupAddress ( Little - 4 DstEndP oint 0x00-0xFF 5-6 SrcAdd ress( Little ClusterID( Little - Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 39 of 41

41 9 afdule nght - 10-(9+afduLenght) Afdu - 10+afduLenght Secu ritystatus - ZigBee Democase User Guide AF Group Confirm 0 FrameLength 5 1 Command 0xFA 2-3 Grou paddress - 4 SrcEndP oint - 5 Status SUCCESS or others IV.2.4. Others IV Bootloader This primitive is used to jump in the bootloader to programming a new firmware. Bootloade r request 0 FrameLength 1 1 Command 0xFF IV Reset This primitive is used to reset device R eset request 0 FrameLength 2 1 Command 0x10 2 Attributes 0x00-0x01 0x00: Hard reset 0x01: Soft reset Re set confirm 0 FrameLength 2 1 Command 0x10 2 Status SUCCESS Confirm Status Table Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 40 of 41

42 CHAPTER V. ANNEXES Confirm Status Table Status SUCCESS 0x00 ERROR_ACQ_COORD 0x ERROR_SCANNING 0x ERROR_JOIN_ROUTER 0x ERROR_ALREADY_ASSOCIATED 0x10 ERROR_ACQ_DEVICE 0x ZDP Enumeration ZDP_INV_REQUESTTYPE 0x80 ZDP_DEVICE_NOT_FOUND ZDP_INVALID_EP ZDP_NOT_ACTIVE ZDP_NOT_SUPPORTED ZDP_TIMEOUT ZDP_NO_MATCH ZDP_NO_ENTRY ZDP_NO_DESCRIPTOR ZDP_INSUFFICIENT_SPACE ZDP_NOT_PERMITTED ZDP_TABLE_FULL ZDP_NO_BOUND_DEVICE ZDP_NO_SHORT_ADDRESS ZDP_NO_ACK Value 0B 0A 0F 0C 0x81 0x82 0x83 0x84 0x85 0x86 0x88 0x89 0x8A 0x8B 0x8C 0x8D 0x8E 0x8F Reproduction forbidden without Telit Communications S.p.A. written authorization - All Rights Reserved page 41 of 41