Digi XBEE PRO S2C User manual

Digi International Inc.
11001 Bren Road East
Minnetonka, MN 55343
877 912-3444 or 952 912-3444
http://www.digi.com
XBee®/XBee-PRO®ZB RF Modules
ZigBee RF Modules by Digi International
Models: XBEE S2C, PRO S2C, S2CTH
Hardware: S2C
Firmware: 401x, 402x, 403x, 404x, 405x
90002002_M
5/7/2014

XBee®/XBee‐PRO®ZBRFModules
©2014DigiInternationalInc. 2
© 2014 Digi International Inc. All rights reserved.
ZigBee®is a registered trademark of the ZigBee alliance. XBee-PRO® XBee® Digi, Digi International, and the Digi logo are
trademarks or registered trademarks of Digi International Inc. in the United States and other countries worldwide. All other
trademarks mentioned in this document are the property of their respective owners.
Information in this document is subject to change without notice and does not represent a commitment on the part of Digi
International.
Digi provides this document “as is,” without warranty of any kind, expressed or implied, including, but not limited to, the
implied warranties of fitness or merchantability for a particular purpose. Digi may make improvements and/or changes in this
manual or in the product(s) and/or the program(s) described in this manual at any time.
This product could include technical inaccuracies or typographical errors. Changes are periodically made to the information
herein; these changes may be incorporated in new editions of the publication.
Technical Support: Phone: [phone] toll-free U.S.A. & Canada
[phone] Worldwide
8:00 am - 5:00 pm [U.S. Mountain Time]
Live Chat: www.digi.com
Online Support: www.digi.com/support/eservice/login.jsp
Email: [e-mail]

Contents
XBee®/XBee‐PRO®ZBRFModules
©2014DigiInternationalInc. 3
Overview of the XBee ZigBee RF Module 6
Worldwide Acceptance 6
What’s New in 40xx Firmware 6
Specifications of the XBee ZigBee RF Module 7
Serial Communications Specifications of the XBee
ZigBee RF Module 8
UART 8
SPI 8
GPIO Specifications 8
Hardware Specifications for Programmable Variant 9
Mechanical Drawings of the XBee ZigBee RF Module
10
Pin Signals for the XBee ZigBee Surface Mount Mod-
ule 11
Pin Signals for the XBee ZigBee Through-hole Module
12
EM357 Pin Mappings 13
Design Notes for the XBee ZigBee RF Module 13
Power Supply Design 13
Recommended Pin Connections 13
Board Layout 14
Module Operation for Programmable Variant 17
XBee Programmable Bootloader 19
Overview 19
Bootloader Software Specifics 19
Bootloader Menu Commands 23
Firmware Updates 24
Output File Configuration 25
XBee ZigBee RF Module Operation 26
XBee ZigBee Serial Communications 26
UART Data Flow 26
XBee ZigBee SPI Communications 26
XBee ZigBee Serial Buffers 27
UART Flow Control 28
XBee ZigBee Break Control 29
Serial Interface Protocols 29
XBee ZigBee Modes of Operation 31
Idle Mode 31
Transmit Mode 31
Receive Mode 32
Command Mode 32
Sleep Mode 33
XBee ZigBee Networks 34
Introduction to ZigBee 34
ZigBee Stack Layers 34
XigBee Networking Concepts 34
Device Types 34
PAN ID 36
Operating Channel 36
ZigBee Application Layers: In Depth 36
Application Support Sublayer (APS) 36
Application Profiles 36
ZigBee Coordinator Operation 38
Forming a Network 38
Channel Selection 38
PAN ID Selection 38
Security Policy 38
Persistent Data 38
XBee ZigBee Coordinator Startup 38
Permit Joining 39
Resetting the Coordinator 40
Leaving a Network 40
Replacing a Coordinator (Security Disabled Only) 40
Example: Starting a Coordinator 41
Example: Replacing a Coordinator (Security Disabled) 41
ZigBee Router Operation 41
Discovering ZigBee Networks 41
Joining a Network 42
Authentication 42
Persistent Data 42
XBee ZB Router Joining 42
Permit Joining 43
Joining Always Enabled 43
Joining Temporarily Enabled 43
Router Network Connectivity 44
Leaving a Network 45
Network Locator Option 45
Resetting the Router 46
Example: Joining a Network 46
End Device Operation 46
Discovering ZigBee Networks 46
Joining a Network 47
Parent Child Relationship 47
End Device Capacity 47
Authentication 47
Persistent Data 47
Orphan Scans 47
XBee ZigBee End Device Joining 48

Contents
XBee®/XBee‐PRO®ZBRFModules
©2014DigiInternationalInc. 4
Parent Connectivity 48
Resetting the End Device 49
Leaving a Network 49
Example: Joining a Network 49
ZigBee Channel Scanning 49
Managing Multiple ZigBee Networks 50
PAN ID Filtering 50
Pre-configured Security Keys 50
Permit Joining 50
Application Messaging 50
Transmission, Addressing, and Routing 51
Addressing 51
64-bit Device Addresses 51
16-bit Device Addresses 51
Application Layer Addressing 51
Data Transmission 51
Broadcast Transmissions 52
Unicast Transmissions 52
Binding Transmissions 54
Multicast Transmissions 54
Fragmentation 54
Data Transmission Examples 55
RF Packet Routing 57
Link Status Transmission 57
AODV Mesh Routing 58
Many-to-One Routing 60
Source Routing 61
Encrypted Transmissions 64
Maximum RF Payload Size 64
Throughput 64
Latency Timing Specifications 65
ZDO Transmissions 65
ZigBee Device Objects (ZDO) 65
Sending a ZDO Command 66
Receiving ZDO Commands and Responses 66
Transmission Timeouts 67
Unicast Timeout 68
Extended Timeout 68
Transmission Examples 69
XBee ZigBee Security 71
Security Modes 71
ZigBee Security Model 71
Network Layer Security 71
Frame Counter 72
Message Integrity Code 72
Network Layer Encryption and Decryption 72
Network Key Updates 72
APS Layer Security 72
Message integrity Code 73
APS Link Keys 73
APS Layer Encryption and Decryption 73
Network and APS Layer Encryption 73
Trust Center 74
Forming and Joining a Secure Network 74
Implementing Security on the XBee 74
Enabling Security 75
Setting the Network Security Key 75
Setting the APS Trust Center Link Key 75
Enabling APS Encryption 75
Using a Trust Center 75
XBee Security Examples 76
Example 1: Forming a network with security (pre-con-
figured link keys) 76
Example 2: Forming a network with security (obtain-
ing keys during joining) 76
Network Commissioning and Diagnostics 78
Device Configuration 78
Device Placement 78
Link Testing 78
RSSI Indicators 79
Device Discovery 79
Network Discovery 79
ZDO Discovery 79
Joining Announce 79
Commissioning Pushbutton and Associate LED 79
Commissioning Pushbutton 80
Associate LED 81
Binding 82
Group Table API 84
Managing End Devices 94
End Device Operation 94
Parent Operation 94
End Device Poll Timeouts 95
Packet Buffer Usage 95
Non-Parent Device Operation 95
XBee End Device Configuration 96
Pin Sleep 96

Contents
XBee®/XBee‐PRO®ZBRFModules
©2014DigiInternationalInc. 5
Cyclic Sleep 98
Transmitting RF Data 101
Receiving RF Data 101
I/O Sampling 102
Waking End Devices with the Commissioning Pushbut-
ton 102
Parent Verification 102
Rejoining 102
XBee Router/Coordinator Configuration 102
RF Packet Buffering Timeout 103
Child Poll Timeout 103
Transmission Timeout 103
Putting It All Together 104
Short Sleep Periods 104
Extended Sleep Periods 104
Sleep Examples 104
XBee Analog and Digital I/O Lines 106
XBee ZB Through Hole RF Module 106
I/O Configuration 107
I/O Sampling 108
Queried Sampling 109
Periodic I/O Sampling 109
Change Detection Sampling 109
RSSI PWM 110
I/O Examples 110
PWM1 110
XBee ZigBee API Operation 111
API Frame Specifications 111
API Examples 113
API Serial Port Exchanges 114
AT Commands 114
Transmitting and Receiving RF Data 114
Remote AT Commands 114
Source Routing 115
Supporting the API 115
API Frames 115
AT Command 115
AT Command - Queue Parameter Value 116
ZigBee Transmit Request 116
Explicit Addressing ZigBee Command Frame 118
Remote AT Command Request 120
Create Source Route 121
AT Command Response 122
Modem Status 122
ZigBee Transmit Status 123
ZigBee Receive Packet 124
ZigBee Explicit Rx Indicator 125
ZigBee IO Data Sample Rx Indicator 126
XBee Sensor Read Indicator 127
Node Identification Indicator 129
Remote Command Response 130
Over-the-Air Firmware Update Status 131
Route Record Indicator 132
Many-to-One Route Request Indicator 133
Sending ZigBee Device Objects (ZDO) Commands
with the API 134
Sending ZigBee Cluster Library (ZCL) Commands
with the API 136
Sending Public Profile Commands with the API 138
XBee Command Reference Tables 141
XBee ZigBee Module Support 152
X-CTU Configuration Tool 152
Customizing XBee ZB Firmware 152
Design Considerations for Digi Drop-In Networking
152
XBee Bootloader 152
Programming XBee Modules 153
Serial Firmware Updates 153
Invoke XBee Bootloader 153
Send Firmware Image 153
Writing Custom Firmware 153
Regulatory Compliance 153
Enabling GPIO 1 and 2 154
Detecting XBee vs. XBee-PRO 154
Special Instructions For Using the JTAG Interface 154
Appendix A: Agency Certifications 156
Appendix B:Migrating from XBee ZB to XBee ZB RF
Modules 162
Appendix C:Manufacturing Information 165
Appendix D:Warranty Information 168
Appendix E:Definitions 169

©2014DigiInternationalInc. 6
1.OverviewoftheXBeeZigBeeRFModule
This manual describes the operation of the XBee/XBee-PRO ZB RF module, which
consists of ZigBee firmware loaded onto XBee S2C and PRO S2C hardware.
XBee®and XBee-PRO®ZB embedded RF modules provide wireless connectivity
to end-point devices in ZigBee mesh networks. Utilizing the ZigBee PRO Feature
Set, these modules are interoperable with other ZigBee devices, including
devices from other vendors. With the XBee, users can have their ZigBee network
up-and-running in a matter of minutes without configuration or addtional devel-
opment.
The XBee/XBee-PRO ZB modules are compatible with other devices that use XBee “ZB” technology. These include Con-
nectPortX gateways, XBee and XBee-PRO Adapters, Wall Routers, XBee Sensors, and other products with the “ZB” name.
Worldwide Acceptance
FCC Approval (USA) Refer to Appendix A for FCC Requirements. Systems that contain XBee/XBee-
PRO ZB RF Modules inherit Digi Certifications.
ISM (Industrial, Scientific & Medical) 2.4 GHz frequency band
Manufactured under ISO 9001:2000 registered standards
XBee/XBee-PRO ZB RF Modules are optimized for use in US, Canada, Europe, Australia, and Japan (contact
Digi for complete list of agency approvals).
What’s New in 40xx Firmware
• An alternative serial port is available using SPI slave mode operation.
• Six software images (Coordinator AT, Coordinator API, Router AT, Router API, End Device AT,
and End Device API) are combined into a single software.
• Fragmentation is now available in both API mode and transparent mode.
• P3 (DOUT), P4 (DIN), D8 (SleepRq), and D9 (On-Sleep) are now available for I/O sampling.
• Both pull-up and pull-down resistors can now be applied to pins configured for inputs.
• 401D - ATVL command added for long version information
• 401E - ATDO command added for configuring device options
• 4020 - ATAS command added for Active Scan
• 4021 - Self addressed Tx Status messages return a status code of 0x23
• ATDO has HIGH_RAM_CONCENTRATOR and NO_ACK_IO_SAMPLING options added.
• 4040 - Binding and Multicasting transmissions are supported.
• AT&X command added to clear binding and group tables.
• Added Tx options 0x04 (indirect addressing) and 0x08 (multicast addressing).
• A 5 second break will reset the XBee. Then it will boot with default baud settings into com-
mand mode
• BD range increased from 0-7 to 0-0x0A, and nonstandard baud rates are permitted, but not
guaranteed.
• NI, DN, ND string parameters support upper and lower case
• TxOption 0x01 disables retries and route repair. RxOption 0x01 indicates the transmitter dis-
abled retries.
• 4050 - FR returns 0x00 modem status code instead of 0x01.
• S2C TH and S2C TH PRO supported.
• DC10 - verbose joining mode option.
• Self addressed fragmentable messages now return the self-addressed Tx Status code (0x23)
instead of simply success (0x00).

XBee®/XBee‐PRO®ZBRFModules
©2014DigiInternationalInc. 7
Specifications of the XBee ZigBee RF Module
SpecificationsoftheXBee®/XBee‐PRO®ZBRFModule
Specification XBee (Surface Mount) XBee-PRO (Surface Mount) XBee (Through-hole)
Performance
Indoor/Urban Range Up to 200 ft. (60 m) Up to 300 ft. (90 m) Up to 200 ft. (60 m)
Outdoor RF line-of-sight
Range Up to 4000 ft. (1200 m) Up to 2 miles (3200 m) Up to 4000 ft. (1200 m)
Transmit Power Output
(maximum)
6.3mW (+8dBm), Boost mode
3.1mW (+5dBm), Normal mode
Channel 26 max power is +3dBm
63mW (+18 dBm)
6.3mW (+8dBm), Boost mode
3.1mW (+5dBm), Normal mode
Channel 26 max power is +3dBm
FCC/IC Test Transmit
Power Output range -26 to +8 dBm 0 to +18 dBm -26 to +8 dBm
RF Data Rate 250,000 bps
Receiver Sensitivity -102 dBm, Boost mode
-100 dBm, Normal mode -101 dBm -102 dBm, Boost mode -100 dBm, Normal mode
Power Requirements
Adjustable Power Yes
Supply Voltage 2.1 - 3.6 V
2.2 - 3.6 V for Programmable Version 2.7 - 3.6 V 2.1 - 3.6 V
2.2 - 3.6 V for Programmable Version
Operating Current
(Transmit))
45mA (+8 dBm, Boost mode)
33mA (+5 dBm, Normal mode) 100mA @ +3.3 V, +18 dBm 45mA (+8 dBm, Boost mode)
33mA (+5 dBm, Normal mode)
Operating Current
(Receive)
31mA ( Boost mode)
28mA (Normal mode) 31mA 31mA ( Boost mode) 28mA (Normal mode)
Power-down Current < 1 A @ 25oC
General
Operating Frequency
Band ISM 2.4 - 2.5 GHz
Dimensions 0.866” x 1.33” x 0.120” (2.199cm x 3.4cm x 0.305cm) 0.960 x 1.087 in (2.438 x 2.761 cm)
Operating Temperature -40 to 85º C (industrial)
Antenna Options RF Pad, PCB Antenna, or U.FL Connector
PCB Antenna, U.FL Connector,
RPSMA Connector, or Integrated
Wire
Networking & Security
Supported Network
Topologies Point-to-point, Point-to-multipoint, Peer-to-peer, and Mesh
Number of Channels 16 Direct Sequence Channels 15 Direct Sequence Channels 16 Direct Sequence Channels
Interface Immunity DSSS (Direct Sequence Spread Spectrum)
Channels 11 to 26 11 to 25 11 to 26
Addressing Options PAN ID and Addresses, Cluster IDs and Endpoints (optional)
Interface Options
UART 1 Mbps maximum (burst)
SPI 5 Mbps maximum (burst)
Agency Approvals
United States (FCC Part
15.247) FCC ID: MCQ-XBS2C FCC ID: MCQ-XBPS2C FCC ID: MCQ-S2CTH
Industry Canada (IC) IC: 1846A-XBS2C IC: 1846A-XBPS2C IC: 1846A-S2CTH
Europe (CE) ETSI ETSI

XBee®/XBee‐PRO®ZBRFModules
©2014DigiInternationalInc. 8
Serial Communications Specifications of the XBee ZigBee RF Module
XBee RF modules support both UART (Universal Asynchronous Receiver / Transmitter) and SPI (Serial
Peripheral Interface) serial connections.
UART
The SC1 (Serial Communication Port 1) of the Ember 357 is connected to the UART port.
More information on UART operation is found in the UART section in Chapter 2.
SPI
The SC2 (Serial Communication Port 2) of the Ember 357 is connected to the SPI port.
For more information on SPI operation, see the SPI section in Chapter 2.
GPIO Specifications
XBee RF modules have 15 GPIO (General Purpose Input / Output) ports available. The exact list will depend on
the module configuration, as some GPIO pads are used for purposes such as serial communication.
See GPIO section for more information on configuring and using GPIO ports.
Australia C-Tick
Japan R201WW10215369 Pending
RoHS Compliant
UARTPinAssignments
Specifications Module Pin Number
UART Pins XBee (Surface Mount) XBee (Through-hole)
DOUT 3 2
DIN / CONFIG 43
CTS / DIO7 25 12
RTS / DIO6 29 16
SPIPinAssignments
Specifications Module Pin Number
SPI Pins XBee (Surface Mount) XBee (Through-hole)
SPI_SCLK / DIO18 14 18
SPI_SSEL / DIO17 15 17
SPI_MOSI / DIO16 16 11
SPI_MISO / DIO15 17 4
ElectricalSpecificationsforGPIOPads
GPIO Electrical Specification Value
Voltage - Supply 2.1 - 3.6 V
Low Schmitt switching threshold 0.42 - 0.5 x VCC
High Schmitt switching threshold 0.62 - 0.8 x VCC
Input current for logic 0 -0.5 A
Input current for logic 1 0.5 A
Input pull-up resistor value 29 k
Input pull-down resistor value 29 k
Output voltage for logic 0 0.18 x VCC (maximum)
Output voltage for logic 1 0.82 x VCC (minimum)
SpecificationsoftheXBee®/XBee‐PRO®ZBRFModule
Specification XBee (Surface Mount) XBee-PRO (Surface Mount) XBee (Through-hole)

XBee®/XBee‐PRO®ZBRFModules
©2014DigiInternationalInc. 9
Hardware Specifications for Programmable Variant
If the module has the programmable secondary processor, add the following table values to the specifications
listed on page 7. For example, if the secondary processor is running at 20 MHz and the primary processor is in
recieve mode then the new current value will be Itotal = Ir2 + Irx = 14 mA + 9 mA = 23 mA, where Ir2 is the
runtime current of the secondary processor and Irx is the recieve current of the primary.
Output source current for pad numbers 3, 4, 5, 10, 12, 14, 15,
16, 17, 25, 26, 28, 29, 30, and 32 on the SMT modules 4 mA
Output source current for pad numbers 3, 4, 5, 10, 12, 14, 16,
17, 26, 28, 29, 30, and 33 on the SMT modules 4 mA
Output source current for pad numbers 2, 3, 4, 9, 12, 13, 15, 16,
17, and19 on the TH modules 4 mA
Output source current for pad numbers 7, 8, 24, 31, and 33 on
the SMT modules 8 mA
Output sink current for pad numbers 7, 8, 24, 31, and 33 on the
SMT modules 8 mA
Output sink current for pad numbers 6, 7, 11, 18, and 20 on the
TH modules 8 mA
Total output current (for GPIO pads) 40 mA
Specificationsoftheprogrammablesecondaryprocessor
Optional Secondary Processor Specification
These numbers add to specifications
(Add to RX, TX, and sleep currents depending on
mode of operation)
Runtime current for 32k running at 20MHz +14mA
Runtime current for 32k running at 1MHz +1mA
Sleep current +0.5A typical
For additional specifications see Freescale Datasheet and
Manual MC9SO8QE32
Minimum Reset low pulse time for EM357 +26S
VREF Range 1.8VDC to VCC
ElectricalSpecificationsforGPIOPads
GPIO Electrical Specification Value

XBee®/XBee‐PRO®ZBRFModules
©2014DigiInternationalInc. 10
Mechanical Drawings of the XBee ZigBee RF Module
MechanicaldrawingsoftheXBee®/XBee‐PRO®ZBRFModules(antennaoptionsnotshown).Alldimensionsareininches.
.

3,1
3,1




7239,(: %277209,(: 6,'(9,(: