RC2400HP user manual
Contents
1. Bit 7 6 5 4 3 2 1 0 Skip APS Discover APS Reserved Set to 0 routing security route ACK ZDO callback The ZNM firmware is setup to give callbacks according to RSP and IND messages in CC2530ZNP Interface Specification There is an option to default disable these and to force the application to register for the specific ZDO callbacks the application want to receive To disable the RSP and IND messages write using SYS OSAL NV WRITE value 0x00 to address 0x008F To register for the specific callback use the ZDO MSG CB REGISTER function The callback will in this case be received as ZDO MSG CB INCOMING and not with IND and RSP messages 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 12 of 16 Radiocrafts Embedded Wireless Solutions RC2400 ZNM RC2400HP ZNM Packet sniffer For evaluating and testing an application on network level a packet sniffer is a useful tool We recommend using Texas Instruments Packet Sniffer PC tool CC debugger RC2400DB RC2400HP DB Optionally any other HW with RC2400 module programming debugging connector can be used as the physical sniffer Texas Instruments SmartRF Packet Sniffer IEEE 802 15 4 MAC and ZigBee 2007 PRO Dag o gt n 7 2 2007260 P nbr Time us Length Frame control field Sequence Dest Dest LOI RX 10890705 Type Sec Pnd Ack req PAN compr number 5 2552. sec Ack req PAN number 5 12 257009371 5 0 0 0 0 0 75 184 Figure 4 Screenshot from packet sniffer 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 13 of 16 Radiocrafts Embedded Wireless Solutions RC2400 ZNM RC2400HP ZNM ZNM SE The modules are also available in a variant that includes the added security features in ZigBee Smart Energy SE This variant will enable the module to handle the entire key distribution internally compliant to the Key Establishment cluster The part of the application needed for the key establishment is allocated implemented inside the module as Key Establishement Cluster 0x0800 located at end point 10 0x0A The end point address for a SE product may be other than 0x0A so a DATA REQUESTR Descriptor or Simple Discriptor Hequest must be used to identify end point of Key Establishment Cluster A ZNM SE module is only allowed used for developing and delivery of ZigBee Smart Energy compliant devices to be used with corresponding approved security certificates KEY ESTABLISHMENT INIT SREQ 1 1 1 1 1 1 1 2 8 Length 0 1 TASK SECUENCE END ADDR Address 0x0 20x27 0x80 ID NUMBER POINT Type ADDR TYPE 0x02 short address In this case address field is 2 bytes 0x03 64 bits address In this case address field is 8 bytes SRSP
3. Hard coded Application in external MCU has hard coded IEEE address to communicate to Find device might be useful to make sure the device is in the network and recover short address Binding can then be done to desired end point Semi automatic The ZigBee device can find appropriate devices with Match descriptor If several possible devices exist the binding procedure should include some sort of button push to identify which device to bind to 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 9 of 16 Radiocrafts Embedded Wireless Solutions API command set RC2400 ZNM RC2400HP ZNM The API command set is defined in CC2530 ZNP Interface Specification with following changes and additions SET TX POWER SREQ 1 1 1 1 1 Length 0x02 CMDO 0x21 CMD1 OxOF 00 TX_POWER SRSP 1 1 1 1 Length 0x01 CMDO 0x61 CMD1 Status TX POWER Output power Output power RC2400HP RC2400 dBm dBm OxED 20 3 OxEE 19 1 OxEF 18 1 OxFO 17 2 OxF1 15 4 OxF2 14 5 13 6 OxF4 13 6 OxF5 11 8 OxF6 9 10 OxF7 9 10 OxF8 9 10 OxF9 7 12 OxFA 7 12 OxFB 5 14 OxFC 5 14 OxFD 3 16 OxFE 3 16 OxFF 1 18 RF TEST MODE Table 1 Typical output power levels To set the module in test modes the module must be reset after the SREQ SRSP communication below To es
4. in Configuration state Coordinator Router O End Device In a ZigBee network the devices have different roles In a network you will always have 1 Coordinator and possible several Routers and End Devices 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 7 of 16 Radiocrafts Embedded Wireless Solutions RC2400 ZNM RC2400HP ZNM The ZigBee Coordinator is the root master of the network and starts the network and later holds information on the network A ZigBee Router Full Functional Device FFD from IEEE 802 15 4 is an always on device that including routing functionality A ZigBee End Device Reduced Functional Device RFD from IEEE 802 15 4 is a device with no routing capabilities but with sleep capability Such a device can sleep most of the time and only poll the network at regular interval A ZigBee network is identified by a unique PAN ID This ID can be written to the module during configuration Writing OXFFFF to the PAN ID will make the Coordinator chose a random PAN ID after scan and Routers End Devices to join a random PAN ZigBee utilises acknowledgement and retransmission on MAC layer This means that each point to point will include this But in addition an application end to end acknowledgement can be included ZigBee include a powerful AES128 encryption The encryption key can be preconfigured in each device or it can be set in the coordinator and distributed to the rest of the netw
5. product Documentation structure This document is one part of the documentation for the module The data sheet describes the electrical parameters RF performance footprint and PCB layout and regulatory information Depending on the selected FW solution additional User Manuals should be used The available documents for the RC2400 product series are e RC2400 RC2400HP Data sheet e RC2400 RC2400HP Firmware Development User Manual Details on how to develop customer specific firmware for RC2400 HW platform e RC2400 RC2400HP ZNM User Manual This document RC2400 RC2400HP RC2400 RC2400HP ZNM User Future User Manuals User Manual Manual This document RC2400 RC2400HP Datasheet Figure 2 Document structure 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 2 of 16 Radiocrafts Pin Assignment Pin Description 1 GND System ground 2 CTS UART Clear to Send SPI SRDY 3 RTS UART Request to Send 4 5 TXD UART TX Data SPI MRDY 6 RXD UART RX Data 7 GND System ground 8 GND System ground 9 HF connection to antenna 10 GND System ground 11 NC Not Connected 12 Reset RESET N Active Low 13 VCC Supply voltage input Internally regulated 14 GND System ground 15 LNA High Gain mode for RC2400HP 16 ZNM CfgO0 ZnmCfgO 0 32 kHz crystal oscillator 1 32 kHz RC oscillator 17 GPIO 18 ZNM Cfg1 ZnmCfg1 0
6. to identify which device within the profile is used A cluster is a set of attributes and or commands in a server to provide a specific service to a client E g an on off light will include a server cluster that include attribute OnOff Boolean and the following commands On Off and Toggle The cluster ID for On off cluster is 0x0006 A client to the on off light can read the status OnOff attribute and send the commands in the cluster The command IDs for the given commands are Command Command ID Off 0x00 On 0x01 Toggle 0x02 Reserved 0x03 0xFF Operation The command ZB START REQUEST starts the ZigBee stack within the RC2400 and the module enters operation state The module will automatically join or create a network based on the configuration parameters given above The state of this joining process will be reported with state messages via serial API Routers are default set up to act as coordinator is no coordinator is found An important feature during ZigBee operation is binding A binding is a logical connection for a given cluster between two End Points in two different ZigBee devices A binding is stored in a binding table and enables the use of indirect addressing This means that the application does not specify the address of the receiving device but simply specifies the binding to be used The next step is to identify the devices to communicate with This can be done in several different ways
7. 1 1 1 1 Length 0x01 CMDO 0x67 CMD1 0x80 Status KEY ESTABLISHMENT IND AREQ E DENEN a Length CMD1 TASK EVENT STATUS WAITTIME SUITE 20x06 0x47 ID KEY ESTABLISHMENT ECDSA SIGNATURE SREQ 1 1 1 1 INPUT LENGTH Length 0 CMD1 INPUT INPUT z OxOx 0x27 0x81 LENGHT SRSP 1 1 1 1 42 Length 1 STATUS Key 0x2B 0 67 0 81 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 14 of 16 Radiocrafts Embedded Wireless Solutions RC2400 ZNM RC2400HP ZNM CERTIFICATES In order for the key establishment algorithm to work the device need to have a valid certificate Certificates are currently only available from Certicom www certicom com There are both test certificates free and productions certificates available The certificate is tied to the IEEE address of the devices The certificate can be written to the module with the SYS OSAL NV WRITE command with the following addresses Note that these are written as MSB first in contradiction to other parameters in ZNM Address 0x0069 Certificate Address 0x006A Private Key Address 0x006B CA Public key For simplicity the tools from Texas Instruments called Z Converter and Z Tool can assist in writing the certificate into the module on the demo boards 2010 Radiocraf
8. 994647 10 cm 0 0 0 OxEC OxFFFF 184 P nbr Time Length Frame control field Sequence Source Source RX 42396 Type Sec Pnd Ack req PAN compr number Address 5 255997043 28 BCN 0 0 0 0 0 18 Ox9DEE 0 0000 P nbr Time us Length Frame control field Sequence Dest Dest Source Source RX 511420 Type Sec Pnd Ack req PAN compr number PAN Address PAN Address 7 56508463 21 0 1 0 OxED Ox9DEE 0x0000 OxFFFF 0 0012480001098094 P nbr Time us Frame control Sequence Length LOI RX 1056 ength woe Sec Pnd Ack req PAN compr number 8 5 256509519 0 0 0 0 OxED 132 P nbr Time us Length Frame control field Sequence Dest Dest Source s RX 495246 Type Sec Pnd Ack req number PAN Address Address 9 57004765 18 cmp 0 1 1 OxEE Ox9DEE 0x0000 0 0012480001098094 184 OK P nbr Time us Frame control field Sequence RX 960 Bari Type Sec Pnd Ack req PAN compr number Lures 10 257005725 5 0 1 0 0 132 P nbr Time us Length Frame control field Sequence Dest Dest Source Loi 2398 Type Sec Pnd Ack req PAN compr number PAN Address Address li 57008123 27 cm 0 H l 0 75 OxSDEE 0x0012450001098094 0 0012480001001 75 132 P nbr Time us Frame control field Sequence RX 1248 59
9. Radiocrafts Embedded Wireless Solutions RC2400 ZNM RC2400HP ZNM ZigBee PRO Network Module User Manual Table of contents TABLE OF CONTENTS nudes cent tanta dni nata adu rtu addo dau tran drank Uma 1 nteger 2 QUICK PRODUCT eene nnne nnn nnn inna intr intr intr 2 DOCUMENTATION STRUCTURE 2 PIN ASSIGNMENT 3 PIN DESCRIPTION icccciscessccsecunserecesentsieosvencseneuereesdevusaedaceisaesoavenatcndeeuse doa aate nan qua 3 PIN CONFIGURATION 4 SERIAL COMMUNICATION 4 SPLINTER AGE E M 4 uU GULgdigiee 4 GENERAL FRAME 5 COMMAND SET 6 STATES OF 7 jeolcunuumm X aanaiS 7 OPERATION 9 API COMMAND SET 10 Al Ilde 14 DOCUMENT REVISION HISTORY s eeseeesee
10. UART 1 SPI 19 DD Debug Data Debug interface is used for programming 20 DC Debug Clock Debug interface is used for programming 21 GPIO GPIO 22 EN for RC2400HP 23 32kHz Q1 Internal 32 kHz oscillator Do not connect 24 32kHz Q2 Internal 32 kHz oscillator Do not connect 25 SPI MI 26 SPI MO 27 SPIC 28 SPI SS 29 PA EN for RC2400HP 30 GPIO with optional ADC input LED Driver 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 3 of 16 Radiocrafts Pin configuration There are two pins of RC2400 that are used to hardwire the configuration of the module RC2400 Signal name Result RC2400 HP pin 16 ZNM CfgO0 0 low 32 kHz RTC crystal oscillator 1 high 32 kHz RC oscillator 18 ZNM 0 low UART Serial interface selection 1 high SPI Serial Communication Through a serial interface either SPI or UART the module network can be configured and data can be sent and received Pur API via SPI JART SPI Interface The SPI interface consists of these signals e SO Slave output e SI Slave input e CS SPI clock e SS SPI Slave select e MRDY Master ready SRDY Slave ready The four upper signals are used for standard SPI operation with RC2400 ZNM as the slave The MRDY and SRDY are used for power control flow control MRDY gt low indicates that the master has data to send and can be used to wake up the ZNM module from sleep The mo
11. cape test mode a physical reset is required SREQ 1 1 1 4 1 1 1 1 Length CMDO CMD1 0x07 MODE CHANNEL POWER MDMTESTO 20x02 20x21 20x09 OF 00 04 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 10 of 16 Radiocrafts Embedded Wireless Solutions RC2400 ZNM RC2400HP ZNM MODE 0x01 RX 0x02 TX Carrier 0x03 TX Modulated signal CHANNEL Frequency MHz 0x0B 2405 0x0C 2410 0x0D 2415 OxOE 2420 OxOF 2425 0x10 2430 0x11 2435 0x12 2440 0x13 2445 0x14 2450 0x15 2455 0x16 2460 0x17 2465 0x18 2470 0x19 2475 0x1A 2480 TX_POWER Typical output Typical output power power RC2400HP RC2400 dBm dBm OxF5 20 3 OxE5 19 2 OxD5 18 1 0xC5 17 1 0xB5 16 3 15 4 0 95 13 6 0 85 12 7 0 75 10 9 0x65 8 11 0x55 6 13 0x45 4 15 0x35 2 17 0x25 0 19 0x15 2 21 0x05 4 23 See datasheet for regulatory information on allowed output power SRSP 1 1 1 1 Length 0x01 CMDO 0x61 CMD1 0x09 Status 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 11 of 16 Radiocrafts Embedded Wireless Solutions RC2400 ZNM RC2400HP ZNM AF DATA REQUEST The Option byte in AF DATA REQUEST is interpreted with the following bit mask
12. dule will reply with SRDY gt low when it is ready to receive data The SPI interface has the following characteristics RC2400 ZNM is an SPI slave Max clock speed 4 MHz Clock polarity on RC2400 ZNM 0 Clock phase on RC2400 ZNM 0 Bit order MSB first UART Interface The UART interface is implemented as DTE and consists of these signals RX RXD data to module e TXD data from module e CTS Input to module e RTS Output from module 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 4 of 16 Radiocrafts Embedded Wireless Solutions RC2400 ZNM RC2400HP ZNM The setting for the UART is as follows UART Configuration Baud rate 115 2 kBaud Data bits 8 Parity Even Stop bit 1 Flow control RTS CTS implemented as DTE Contact sales radiocrafts com for other Baud rates The frame format for the UART is as follows Start Of Frame SOF Commands Frame Check Sum FCS 1 byte OxFE General frame format XOR of all bytes in General Data Format General frame format The general frame format for sending commands is as follow Length of data Command ID Data 1 byte CMDO CMD1 0 253 bytes OxNN OxNN NN OxNN 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 5 of 16 Radiocrafts API command set The set of commands that can be sent via the UART SPI interface can be div
13. eeeeee enne nn nnne inier intr intr sa tn natn 16 DISGLAIMER E 16 MH D cm 16 LIFE SUPPORT POLICY nada i qe ru den ck Ua 16 CONTACT 16 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 1 of 16 Radiocrafts Embedded Wireless Solutions RC2400 ZNM RC2400HP ZNM Introduction This document includes or refers to all the needed information to develop solution with the RC2400 ZNM and RC2400HP ZNM modules Quick Product Introduction The ZNM series of modules are specially designed to meet the IEEE 802 15 4 standard and ZigBee PRO specification It is preloaded with a ZigBee PRO compliant stack and offers an easy to use API via UART or SPI to an external processor The external application processor can be of any type or brand and the development can be done with the tool and platform most convenient to the developer Application processor RC2400 ZNM RC2400HP ZNM Figure 1 ZigBee Network Module concept Using a pre qualified module is the fastest way to make a ZigBee product with shortest time to market With all the RF HW and MCU resources you need in a 10096 RF tested and pre qualified module the qualification and approval process is shortest possible No RF design or expertise is required to add powerful wireless networking to any
14. ided into four categories System commands Simple API SAPI commands AF commands ZDO commands System commands are for controlling the HW device and include commands for resetting the module and utilizing resources within the module Simple API commands consist of only 10 commands which is the easiest way to build a complete application that does network creation and sending receiving of data AF commands are commands for registering application and sending data with complete flexibility ZDO commands are commands for detailed control of ZigBee device operation regarding ZigBee Device Object This includes binding devices finding and matching descriptors For a complete overview of the command interface see CC2530 ZNP Interface Specification 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 6 of 16 Radiocrafts States of operation Start up Configuration Operation Figure 3 States of operation The module has three distinct phases of operation e Start up At this transient phase configuration I O pins are checked to enable UART or SPI and whether 32 kHz crystal oscillator is present Automatically transition to Configuration state e Configuration Set up of the ZNM module See details below A start command changes state to Operation e Operation The device active the RF part and Create Joins network automatically Configuration This chapter describes some of the features configured
15. ork depending on the security requirements Configuration parameter ZCD NV STARTUP OPTION ZCD NV LOGICAL TYPE ZCD NV POLL RATE ZCD NV QUEUED POLL RATE Coordinator Router End Device Setup for end device polling ZCD NV HESPONSE POLL RATE ZCD NV POLL FAILURE RETRIES ZCD NV INDIRECT MSG TIMEOUT ZCD NV APS FRAME RETRIES ZCD NV BINDING TIME ZCD NV USER DESCRIPTION ZCD NV PAN ID ZCD NV CHANLIST ZCD NV PRECFGKEY ZCD NV PRECFGKEY ENABLE ZCD NV SECURITY MODE ZCD NV BCAST RETRIES ZCD NV PASSIVE ACK TIMEOUT ZCD NV APS ACK WAIT TIMEOUT Setup for application acknowledge and retransmission PAN ID Setup for use of encryption ZCD NV BCAST DELIVERY TIME ZCD NV ROUTE EXPIRY TIME ZCD NV OUTPUT POWER Before transition to Operation state the application must also be setup in the ZNM module For each ZigBee application in the following parameters are needed End Point Profile ID Device ID End point is the logical address given to an application as you can have several applications Input output clusters or input output commands for one physical radio Same principle as USB Bluetooth or UDP 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 8 of 16 Radiocrafts Embedded Wireless Solutions RC2400 ZNM RC2400HP ZNM Profile ID identifies the profile the application follows It might be an open profile or a manufacturer specific profile Device ID is used
16. port appliances devices or other systems where malfunction can reasonably be expected to result in significant personal injury to the user or as a critical component in any life support device or system whose failure to perform can be reasonably expected to cause the failure of the life support device or system or to affect its safety or effectiveness Radiocrafts AS customers using or selling these products for use in such applications do so at their own risk and agree to fully indemnify Radiocrafts AS for any damages resulting from any improper use or sale 2010 Radiocrafts AS All rights reserved Contact Information Web site www radiocrafts com Email radiocrafts radiocrafts com Address Radiocrafts AS Sandakerveien 64 NO 0484 OSLO NORWAY Tel 47 4000 5195 Fax 47 2271 29 15 E mail sales radiocrafts com support radiocrafts com 2010 Radiocrafts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 16 of 16
17. ts AS RC2400ZNM RC2400HP ZNM User Manual rev 1 1 Page 15 of 16 Radiocrafts Embedded Wireless Solutions RC2400 ZNM RC2400HP ZNM Document Revision History Added info on ZNM SE variant Disclaimer Radiocrafts AS believes the information contained herein is correct and accurate at the time of this printing However Radiocrafts AS reserves the right to make changes to this product without notice Radiocrafts AS does not assume any responsibility for the use of the described product neither does it convey any license under its patent rights or the rights of others The latest updates are available at the Radiocrafts website or by contacting Radiocrafts directly As far as possible major changes of product specifications and functionality will be stated in product specific Errata Notes published at the Radiocrafts website Customers are encouraged to check regularly for the most recent updates on products and support tools Trademarks RC232 is a trademark of Radiocrafts AS The RC232 Embedded RF Protocol is used in a range of products from Radiocrafts The protocol handles host communication data buffering error check addressing and broadcasting It supports point to point point to multipoint and peer to peer network topologies All other trademarks registered trademarks and product names are the sole property of their respective owners Life Support Policy This Radiocrafts product is not designed for use in life sup
Download Pdf Manuals
Related Search