Ebyte E180-ZG120A User manual

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
E180-ZG120A/B V1.0 User Manual
(ZigBee3.0 Ad Hoc Network Module)
Content
1. Module introduction ....................................................................................................................... 3
1.1 Introduction to ZigBee ..........................................................................................................3
1.2 Features ................................................................................................................................. 3
1.3 Support product family ......................................................................................................... 4
2. Introduction to Functions and Command Structure ....................................................................... 5
2.1 Function pin table ................................................................................................................. 5
2.2 Pin connection instructions ...................................................................................................5
2.2.1 Serial port connection instructions ............................................................................ 5
2.2.2 Pin Location Description ........................................................................................... 6
3. Module firmware function .............................................................................................................. 6
3.1 Three serial port modes .........................................................................................................6
3.1.1 HEX instruction mode ............................................................................................... 6
3.1.2 AT command mode .................................................................................................... 9
3.1.3 Data transparent transmission mode ........................................................................11
3.1.4 Switching between the three modes ........................................................................ 12
3.2 Wake up from the serial port of a sleeping node ................................................................ 13
3.2.1 delay method ............................................................................................................14
3.2.2 continuous click ....................................................................................................... 14
3.2.3 insertion method ...................................................................................................... 14
3.3 ZCL Standard Specification for Modules ...........................................................................14
3.3.1 E180-ZG120A/B ZCL Specification Function Allocation Table ............................15
3.3.2 ZCL specification of Ebyte transparent transmission protocol ...............................15
3.4 Function buttons, status indicators and PWM output ........................................................ 16
3.4.1 pin assignment ......................................................................................................... 17
3.4.2 Network function key function introduction ........................................................... 17
3.4.3 Status indicator: (It is recommended that this pin be connected to a low level to
drive the LED) .................................................................................................................. 18
4.Application configuration example ............................................................................................... 18
4.1 Example 1: Coordinator HEX command to control network access nodes .......................18
4.1.1 E180-ZG120A/B coordinator to create network .....................................................19
4.1.2 Joining of new nodes to the network and identification and configuration of new
nodes ................................................................................................................................. 21
4.1.3 Control access nodes ............................................................................................... 24
4.2 Example 2: Terminal node AT command configuration and data transparent
transmission .............................................................................................................................. 29
4.2.1 The module is configured in AT command mode to access the network ................29
4.2.2 Data transparent transmission ..................................................................................30

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
4.2.3 AT command light ....................................................................................................31
4.3 Example 3: Host computer software configuration networking and transparent
transmission .............................................................................................................................. 34
4.3.1Host computer software configuration coordinator ................................................. 34
4.3.2 The host computer software configures the terminal node ..................................... 36
4.3.3 Data communication between coordinator and end nodes ......................................38
4.3.4 The host computer sets data transparent transmission ............................................ 41
5. User notice .................................................................................................................................... 43
5.1 ZigBee network roles and considerations ...........................................................................43
5.2 network structure ................................................................................................................ 44
6. Customized cooperation ............................................................................................................... 45
7. About us ........................................................................................................................................ 45

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
1. Module introduction
1.1 Introduction to ZigBee
ZigBee technology is a short-range, low-complexity, low-power, low-speed, low-cost two-way wireless
communication technology.
There are three logical device types in the ZigBee network: Coordinator (coordinator), Router (router) and
End-Device (terminal device). A ZigBee network consists of a Coordinator, multiple Routers and multiple
End_Devices.
The functions of each type of equipment are as follows:
(1) Coordinator (coordinator)
The coordinator is responsible for starting the entire network. It is also the first device of the network. The
coordinator selects a channel and a network ID (also called PAN ID, Personal Area Network ID), and then starts
the entire network.
The coordinator can also be used to assist in establishing bindings between the security layer and the
application layer in the network.
Note that the role of the coordinator primarily involves the startup and configuration of the network. Once
this is all done, the coordinator works like a router (or goes away). Due to the distributed characteristics of the
ZigBee network itself, the subsequent operation of the entire network does not depend on the existence of the
coordinator.
(2) Router (router)
The main functions of the router are: to allow other devices to join the network, multi-hop routing and to
assist in communication with its own battery-powered son terminal device.
Usually, a router is expected to be active all the time, so it must be powered by mains power. But when using
the network mode of the tree group, the routing is allowed to operate once at a certain period of time, so that it can
be powered by the battery.
(3) End-Device (terminal equipment)
The end device has no specific responsibility for maintaining the network structure, it can sleep or wake up,
so it can be a battery powered device.
1.2 Features
Serial number
Features
Feature description
1
Centralized network
management
The centralized network access mechanism of ZIGBEE 3.0
security standard makes the data safe and reliable;
2
Interoperability
It conforms to zigbee 3.0 standard network mechanism and is
compatible with ZCL network protocol.
3
high-capacity
256K flash, 32K RAM, and the maximum number of network
nodes can be expanded to 80;
4
Role switching
The user can make the device switch freely among the four
types of coordinator, router, terminal and sleeping terminal
through the serial port instruction;
5
Support multiple
network topologies
Point to point, star network, MESH network;

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
6
Network self-healing
If the intermediate node of the network is lost, a new mesh
topology will be automatically formed, and the lost node will
be automatically recovered after restart;
7
Automatic routing
The module supports network routing function;
8
Open and close
networking
The coordinator controls the opening or closing of the network.
During the period of opening the network, devices that meet
the ZigBee3.0 standard can join the network. After closing the
network, any device cannot join. If the coordinator is not
closed after opening the network, it will be automatically
closed 180 seconds later.
9
One button screening
The node does not need to set PANID and channel, but only
needs to trigger the networking within the window time when
the coordinator opens the network.
10
Automatic channel
and PANID
The coordinator automatically creates a network in the optimal
channel and automatically allocates PANID to avoid
duplication with other coordinators.
11
Get MAC address
automatically
The coordinator can obtain the node MAC address and short
address at the moment when the node is connected to the
network, without further processing on the device side.
12
Address Search
The user can find the corresponding short address according to
the MAC address (unique, fixed) of the network node that has
joined, and can also find the corresponding long address of
each node in the network according to the short address of the
node;
13
data security
Integrated with ZIGBEE 3.0 security communication standard,
the network contains multi-level security keys;
14
Serial port
configuration
The module has built-in serial port instructions, through which
the user can configure (view) the parameters and functions of
the module;
15
PWM control
Local/remote PWM control, three PWM channels for user
selection;
16
One click restore
baud rate
If you forget or do not know the baud rate, you can use this
function to restore the default baud rate to 115,200bps;
17
Serial port receiving
wake-up
Support the serial port receiving wake-up function. When the
module is in the sleep state, when it receives an arbitrary byte
of data, it will be wakened. This data is a wake-up frame for
the wake-up module and will not be treated as data;
18
Module reset
The user can reset the module through the serial port
command;
19
Air configuration
Users can remotely configure other devices in the network
using air configuration instructions.
20
Multiple command
formats
The user can configure and control the module using the
hexadecimal format command and AT command to realize
networking, setting transparent transmission, light control and
other operations.
1.3 Support product family
Number
Product
number
RF chip
Frequenc
y (Hz)
Airspeed
(bps)
Power
(dBm)
Antenna
form
1
E180-ZG120A/B
EFR32MG1B232F256GM
32
2.4G
250K
20
PCB

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
2. Introduction to Functions and Command Structure
2.1 Function pin table
Refer to the hardware description document E180-ZG120series_User Manual_CN_v1.0 for
pin packaging.
2.2 Pin connection instructions
2.2.1 Serial port connection instructions

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
2.2.2 Pin Location Description
The E180-ZG120A/B networking module adopts UART serial communication mode. Users can connect to it
through any MCU with UART function for data exchange. For the specific pin positions, please refer to the user
manual "E180-ZG120series_User Manual_CN_v1.0", and the specific connection method is as shown in the figure
above.
3. Module firmware function
The E180-ZG120A/B module supports the ZigBee 3.0 protocol, conforms to the ZCL (ZigBee cluster library)
standard specification, and can interoperate with other manufacturers' ZigBee-based smart products.
The module uses UART interface for control, supports HEX command configuration and communication, AT
command configuration, data transparent transmission three modes; supports "one-key networking" function, that
is, networking control is realized through IO port external buttons or level signals; The module can be configured
as coordinator, routing node, common terminal node, and sleep terminal node four types of ZigBee node types;
support 3 sets of PWM signal output in line with ZCL standard specification control.
3.1 Three serial port modes
3.1.1 HEX instruction mode
The HEX command format is a fixed mode of "frame header + frame length + frame load", the command
frame length is variable, the command input is not affected by command sticky packets, and the input command
has a timeout protection mechanism, which effectively solves the problem of command packet breakage. Each
input command has corresponding command feedback to confirm whether the module works normally and
whether the command is executed correctly. The HEX command mode is full-duplex mode, and the corresponding
HEX command is output in real time through the UART_TX port when the module status changes or data is
received.
For the format and analysis of HEX, please refer to the document "Ebyte ZigBee3.0 Module HEX Command
Standard Specification". This document focuses on the characteristics of E180-ZG120 in HEX command mode.
HEX instruction format：
frame
header
(1 byte)
frame
length
(1 byte)
Frame payload (variable length 3~255 bytes)
Command
type
(1 byte)
command
code
(1 byte)
command data
(variable length
0~252 bytes)
XOR
check
(1 byte)
Frame header: fixed byte 0x55 in hexadecimal
Frame length: 1 byte length, the value range is 3~255 (0x03~0xFF in hexadecimal)
Frame load: The frame load contains the command type, command code, command data and XOR check, and the
length is determined by the frame length.
Command type: According to the mode and working mechanism of the command, it is classified.
Command code: The code corresponding to the command, the length is 1 byte, and each command has a unique

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
command code.
Command data: The additional parameters of the command execution, the minimum is 0 bytes, and the maximum
is 252 bytes.
XOR checksum: XOR8 checksum of the entire command payload (command type, command code, command
data).
Three types of HEX instructions
input the command:
The command input to the module by the host computer can be used to configure the module
or send it wirelessly. The command type of the input command is less than 0x0F.
Feedback command:
After the module receives and executes the command from the upper computer, it feeds back
the execution result to the upper computer. The command type and command code of the feedback
command are the same as the input command.
Asynchronous command:
The command actively sent to the host computer during the operation of the module, which
corresponds to the asynchronous event in the ZigBee application. The command type of the
asynchronous command is greater than 0x80.
Input command (including feedback command)
Local configuration command, command type 0x00, used for local settings of the module.
Network management command, command type 0x01, used to manage other modules at the network layer
during networking.
ZCL sends the command, the command type is 0x02, which is used by the module to control other modules
or third-party devices, in line with the ZCL specification.
asynchronous command：
System notification command, command type 0x80, module status change notification.
The network management return command, the command type is 0x81, other modules or devices receive the
gateway management command return message.
ZCL receives the command, the command type is 0x82, the module receives the ZCL layer message or return
message from other modules or devices.
Send confirmation, command type 0x8F, used to diagnose whether the sending of network management
commands and ZCL sending commands is abnormal.
Regarding the correct use of "Send Confirmation":
(host computer) input network management commands and ZCL sending commands to the
module and receive the corresponding feedback commands. The commands are not immediately
converted into wireless signals and sent out, but are sent to the module at a rate of 250kbps after
avoiding other devices in the same network. The signal is transmitted in the air, and the "Send
Confirmation" command is the result of the wireless signal transmission. There are only two states
for sending confirmation on the E180ZG120 module: 0x00 = sending successfully, 0x66 = sending
failed. The final correctness of the network management command is judged according to the
corresponding network management return command received; the final correctness of the ZCL

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
sending command is also judged according to the corresponding ZCL receiving command
received. Sending acknowledgment can be used to end the wait for the return message early, and
other modules or devices that can be used to diagnose abnormalities, and it can be used to waste
limited network resources on meaningless device nodes.
When the E180ZG120 module sends network management commands and ZCL sending
commands in broadcast mode, due to the influence of broadcast flooding, the sending
confirmation will be triggered 1 second after the feedback command. Therefore, when using this
module for broadcast or multicast, it is recommended that the sending interval be greater than 1
second.
HEX command directory supported by E180ZG120
command name
command
type
command
code
local configuration class
Query the current status of the module
0x00
0x00
Start distribution network
0x00
0x02
Stop distribution network
0x00
0x03
reset/factory reset
0x00
0x04
Set the native node type
0x00
0x05
View local add group
0x00
0x09
Add the machine to the group
0x00
0x0A
This machine withdraws from the group
0x00
0x0B
Set and query the current transmit power
0x00
0x0D
read local properties
0x00
0x10
set local properties
0x00
0x11
auto bind target
0x00
0x14
Enter AT command mode
0x00
0x16
Read the network access node address table
0x00
0x22
System notification class

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
mod start
0x80
0x00
network status change
0x80
0x01
Turn on and off network notifications
0x80
0x02
Detect node access to the network
0x80
0x03
Node short address notification
0x80
0x04
Node Off-Grid Notification
0x80
0x06
Automatically bind target result notification
0x80
0x10
ZDO network management command / network management return
Query node short address/return
0x01/0x81
0x00
Query node MAC address/return
0x01/0x81
0x01
Query node port information/return
0x01/0x81
0x04
Query the number of node ports/return
0x01/0x81
0x05
Set node constant connection binding/return
0x01/0x81
0x21
Unbind/return the node's constant connection
0x01/0x81
0x22
View node constant connection binding/return
0x01/0x81
0x33
delete node/return
0x01/0x81
0x34
ZCL commands and ZCL returns
read device properties/return
0x02/0x82
0x00
Modify device properties/return
0x02/0x82
0x01
Query attribute reporting rules/return
0x02/0x82
0x02
Modify attribute reporting rules/return
0x02/0x82
0x03
View All Properties/Return
0x02/0x82
0x04
View all status with extended fields/return
0x02/0x82
0x05
Receive attribute active report
0x82
0x0A
Default return frame
0x82
0x0B
send control commands
0x02
0x0F
received control command
0x82
0x0F
3.1.2 AT command mode
The AT command is in ASCII string format, which is convenient for manual direct input and mnemonic. The
AT command adopts the format of "AT+command code", and the command code is a fixed string. For the detailed
analysis of the AT command, please refer to "Ebyte ZigBee 3.0 Module AT Command Standard Specification".
There are three input forms of AT commands: execution type, query type, and setting type.
Execution:
The format of the executive command is the direct format of "AT+command code". The execution
command ends with the last byte of the command code, and does not continue with any bytes,
including the carriage return symbol. Otherwise, the input is invalid. Such as "AT+JOIN",
"AT+LEAVE". Executing the command input effectively returns "OK\r\n", that is, a "OK" with a
carriage return is received. If the input command ends incorrectly, the module returns

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
"INVALID\r\n".
query:
The format of the query command is "AT+command code?", that is, it ends with ASCII "?"
(hexadecimal 0x3F). The query command is used to query the current value of a certain parameter
of the module, and print the query value through the serial port in ASCII format.
Setup:
The format of the set command is the format of "AT+command code=value", that is, after the
command code ends, it needs to follow the ASCII "=", and the "=" followed by the numerical
value. Values are entered in decimal or hexadecimal according to different commands, and are
expressed in the format of %d or %x. If you enter multiple parameters, you need to separate them
with ",". For details, please refer to "Ebyte ZigBee 3.0 Module AT Command Standard
Specification".
AT command directory：
Command function
command code
implement
Inquire
set up
Exit AT mode to HEX mode
AT+EXIT
Y
N
N
Network or create a new network
AT+JOIN
Y
N
N
stop networking
AT+STOP
Y
N
N
Module reset
AT+RESET
Y
N
N
leave the network
AT+LEAVE
Y
N
N
Enter transparent transmission mode
AT+SEND
Y
N
N
auto bind target
AT+FIND
Y
N
N
Read device information
AT+INFO
Y
N
N
Set or read device type
AT+DEVTYPE
N
Y
Y
Set or read baud rate
AT+BAUD
N
Y
Y
Set or read target address
AT+DSTADDR
N
Y
Y
Set or read target port
AT+DSTEP
N
Y
Y
switch on
AT+TURNON
Y
Y
Y
open switch
AT+TURNOFF
Y
Y
Y
Invert switch
AT+TOGGLE
Y
Y
Y
Brightness increased
AT+LEVELUP
Y
Y
Y
brightness down to
AT+LEVELDOWN
Y
Y
Y
set brightness
AT+LEVELSET
Y
Y
Y
mark target
AT+IDENTIFY
Y
Y
Y
unbind
AT+UNBIND
Y
Y
Y

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
3.1.3 Data transparent transmission mode
In data transparent transmission mode, any data input to the serial port will be sent out through wireless
signals. The module that receives the transparent transmission data directly prints the data frame in transparent
transmission mode or AT command mode, such as the receiving end in HEX command mode. Then output the
frame data in ZCL command format.
ZCL format for data transparent transmission：
Data transparent transmission conforms to the ZCL specification, and the specification is as follows
port=1
Profile = 0x0104
cluster=0xFC08
manufacture code=0x2000
Command Type: Special Command
Command direction: Server to Client
Command ID: 0x00
Note: When the coordinator or other nodes are in HEX mode to send data to the E180ZG120 module in transparent
transmission mode, they also need to follow the ZCL specification, even if the cluster with cluster=0xFC08 is used,
Manufacture Code=0x2000, and the command direction is changed to Client to Server. Command ID is 0x00.
Target settings for data transparent transmission
The target of data transparent transmission is to set the local attribute DstAddr and local attribute DstEP of
the module, which are located in port 1 of the module, cluster=0xFC08. The attribute IDs are 0x0001 and 0x0002,
respectively, and the data types are UINT16 and UINT8, respectively.
DstAddr is the short address for transparent transmission, and DstEP is the target port for transparent transmission.
Transparent transmission has four modes: on-demand transmission, broadcast transmission, multicast transmission,
and binding transmission. When DstEP is set to other values, it is used to reserve ZigBee modules with multiple
serial ports for transparent transmission.
Transparent mode
DstAddr
DstEP
On-demand (to the main serial port)
The other party's short address
1
On-demand (to serial port 2)
Note: Reserve dual serial port
function
The other party's short address
2
broadcast
0xFFFF
0xFF
multicast
16bit group address
0
bind send
0xFFFE
0xFE
Binding transparent transmission target settings
In the binding transparent transmission mode, the module can find the transparent transmission target
through the MAC address to cope with the change of the transparent transmission target short address. There are 3
ways to set the binding：
a) The coordinator assigns the transparent transmission target to the module through the HEX command "Set

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
node constant connection binding (command code 0x21)". If the module knows the MAC address of the other
party, it can also send this command to itself in the HEX command mode.
b) Both modules are in the HEX command mode, sending the local configuration command "Auto bind target
(command code 0x14)". The target module of the transparent transmission sends the command first, and waits
for about 1~3 seconds for the LINK indicator to flash, and then the source module of the transparent
transmission sends the command.
c) In the AT command mode, the two modes are bound to each other using the "AT+FIND" command, and the
operation mode is the same as the local configuration command "Automatic binding target (command code
0x14)".
d) In any mode, input a key signal (falling edge 20ms~ 200ms) on the PD13 pins of two modules that need to be
bound to each other, the operation method is the same as the local configuration command "Auto binding
target (command code 0x14)".
Feedback of data transparent transmission
When the E180ZG120 module sends data in the transparent transmission mode, there will be a result
feedback, and the feedback information is less than or equal to 4 bytes. In order to distinguish the feedback
information from the received transparent transmission data, it is recommended that the transparent transmission
data be greater than or equal to 5 bytes. The feedback information is as follows
"OK": send successfully
"FAIL": Failed to send
"ERRO": Sending error, such as sending buffer is full, the module is not networked, the module is offline
"OFF": the module is offline, this phenomenon will occur on terminal nodes and dormant terminals
"NET": The module is back online, this phenomenon will occur on terminal nodes and dormant terminals
3.1.4 Switching between the three modes
The mutual conversion of the three modes is shown in the table
target mode
HEX command
AT command
Transparent mode
current
mode
HEX
command
Configuration command
"Enter AT Command
Mode"
Configuration command "set local
properties"
Property 0x0003 is set to "1"
AT
command
"AT+EXIT"
"AT+SEND"
Transparent
mode
Send 3 characters
"+++"
Send 3 characters "+AT"

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
Example:
HEX command mode Switch to AT command mode:
instructions
answer
55 03 00 16 16
55 04 00 16 00 16
Description: None
AT command mode Switch HEX command mode:
instructions
answer
AT+EXIT
OK
Description: Answer here ends with \r\n,\r(carriage return), \n(line feed)
HEX 命令模式切换透传模式：
instructions
answer
55 07 00 11 00 03 00 01 13
55 04 00 11 00 11
Description: None
透传模式切换 HEX 命令模式：
instructions
answer
+++
55 0D 80 00 00 10 E9 CE D6 FE FF 14 43 0C 3B
Description: E9 CE D6 FE FF 14 43 0C 3B is the MAC address.
AT 命令模式切换透传模式：
instructions
answer
AT+SEND
SEND_MODE
Description: Answer here ends with \r\n,\r(carriage return), \n(line feed)
透传模式切换 AT 命令模式：
instructions
answer
+AT
AT_MODE
Description: Answer here ends with \r\n,\r(carriage return), \n(line feed)
Restore Factory
After factory reset, the module is in HEX command mode.
mode after reset
Reset in any non-HEX command mode. If the module is connected to the network, the default is data
transparent transmission mode. If the module is not connected to the network, the default is AT command mode.
3.2 Wake up from the serial port of a sleeping node
After the module is configured in sleep mode, if you need to send serial port commands to it, you need to
send a wake-up frame first. The serial port RX pin of the dormant terminal wakes up from the sleep state after
receiving any signal (mainly the falling edge signal). The serial port RX can run normally within 0.5ms~ 200ms

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
after the wake-up signal, and the host computer needs to write to the serial port within this time. command or
transparently transmit data. At present, there are the following 3 ways to realize serial wake-up in low power
mode.
3.2.1 delay method
Send a serial port command to the sleep node, first send a single byte of 0x00, and then send a HEX
command or AT command or a transparent message within 1ms~200ms.
3.2.2 continuous click
This method is suitable for manually operating the upper computer to send HEX commands or AT commands
to the dormant node. First operate the host computer to send a command to the module, this command is used to
wake up the module, but the command is not received completely and the module receives an error command. It
then needs to issue a second command to the sleep module within 200 milliseconds. This method is not suitable for
transparent data transmission, because there is no error detection for transparent data transmission, which will
cause wrong data packets to be sent out.
3.2.3 insertion method
This method is suitable for HEX command mode, AT command mode, and data transparent transmission
mode. Insert several bytes of 0x00 before the command or data to wake up the serial port. The number of 0x00
inserted is determined by the serial port baud rate, and the accumulated baud rate is 0.5ms. Because the RX starts
to take effect 0.5ms after the module wakes up, if it is in AT mode or transparent transmission mode, neither more
nor less 0x00 can be inserted.
baud rate
Insert 0x00 bytes
230400
12
115200
6
57600
3
38400
2
19200
1
9600
1
3.3 ZCL Standard Specification for Modules
The E180-ZG120A/B module has 4 APS layer ports. Port 1 is for transparent transmission control, and ports 2, 3,
and 4 are for PWM output control. The specifications are as follows.

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
3.3.1 E180-ZG120A/B ZCL Specification Function Allocation Table
port number
Profile
Device ID
in cluster)
out cluster
1
0x0104
HA protocol
0x0050
gateway device
0x0000: BASIC
0x0003: IDENTIFY
0x0004: GROUP
0x0007: ONOFF
SWITCH
0xFC08:
EBYTE_TRANS
0x0003: IDENTIFY
0x0006: ONOFF
0x0008: LEVEL
2
0x0104
HA protocol
0x0101
Dimmable light
0x0003: IDENTIFY
0x0004: GROUP
0x0005: SCENE
0x0006: ONOFF
0x0008: LEVEL
none
3
0x0104
HA protocol
0x0101
Dimmable light
0x0003: IDENTIFY
0x0004: GROUP
0x0005: SCENE
0x0006: ONOFF
0x0008: LEVEL
none
4
0x0104
HA protocol
0x0101
Dimmable light
0x0003: IDENTIFY
0x0004: GROUP
0x0005: SCENE
0x0006: ONOFF
0x0008: LEVEL
none
3.3.2 ZCL specification of Ebyte transparent transmission protocol
Ebyte ZigBee module transparent transmission protocol completely follows the ZCL specification, and uses a
custom cluster ID and a custom manufacturer code (Manufacture Code) to enrich the ZCL standard specification
library. The module can be connected to the ZigBee network of other manufacturers, in addition to completing the
data transparent transmission function, it can also realize the functions of light control and switch control.
cluster specification：
cluster ID = 0xFC08，Manufacture Code=0x2000
property sheet：

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
AttrID
Direction
Descriptor
Name
Type of Data
Operation
0x0000
Server
Baud
baud rate
uint32
read only
0x0001
Server
targetAddr
Default destination
short address
uint16
read and write
0x0002
Server
targetEP
Default destination
port
uint8
read and write
0x0003
Server
sendMode
Transparent mode
bool
read and write
0x0004
Server
LP Level
low power mode
enum8
read only +
report
0x0005
Server
target IEEE
Destination MAC
address display
EUI64
read only
ZCL control command (Special Command) table：
cmdID
direction
Descriptor
name
parameter
0x00
C->S
UartSend
Transparent data
transmission
uint8 data[]: Transparent data transmission
0x00
S->C
UartNotify
Transparent data
notification
uint8 data[]: Transparent data transmission
0x01
C->S
SetDstAddr
Set default target
uint16 dstAddr: target short address
uint8 endpoint: destination port
0x01
S->C
SetDstAddrRsp
set default target
return
uint8 status: ZCL status
0x02
C->S
SetBaud
set baud rate
uint32 baud: Set the new baud rate, restart to
take effect
0x02
S->C
SetBaudRsp
set baud rate return
uint8 status: ZCL status
0x03
C->S
SetLP_Level
Set low power mode
uint8 LP_level: Low power level
0x03
S->C
SetLP_LevelRsp
Set low power
return
uint8 status: ZCL status
0x04
C->S
Reset
Module restart
uint8 extAddr[8]: The MAC address of the
module
The transparent transmission module sends transparent transmission using "transparent data notification",
and the gateway or coordinator sends data to the transparent transmission module using "transparent data
sending".
The baud rate only supports 6 modes: 9600, 19200, 38400, 57600, 115200, 230400.
The value of low power mode is 0~3, corresponding to 0 = 1 second wake up, 1 = 3 second wake up, 2 = 5
second wake up, 3 = 1 minute wake up.
3.4 Function buttons, status indicators and PWM output
The E180ZG120 module has 2 groups of button input IO ports, 1 group of LED flashing indication IO ports,
and 3 groups of PWM output IO ports.

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
3.4.1 pin assignment
Network function key –> PD_13
Baud rate reset key –> PB_11
Status Indicator -> PF_7 (E180-ZG120A)
Port 0 PWM -> PF2 (E180-ZG120A)
Port 1 PWM -> PF3 (E180-ZG120A)
Port 2 PWM -> PF4 (E180-ZG120A)
Status Indicator -> PF_3 (E180-ZG120B)
Port 0 PWM -> PB_14 E180-ZG120B)
Port 1 PWM -> PB_15 (E180-ZG120B)
Port 2 PWM -> PB_13 (E180-ZG120B)
UART_RX -> PA_1
UART_TX -> PA_0
3.4.2 Network function key function introduction
One key network function：
Modules that have been configured as routing nodes, terminal nodes and dormant terminal nodes can be
added to a coordinator with a network open by pressing the network function key briefly (less than 1 second) and
then releasing it when it is not connected to the network or leaves the network.
If the module is configured as a coordinator, short press the network function key when the coordinator has
not established a network to directly create a new network, short press the key for the coordinator of an existing
network to start the distribution network, and short press the key for the coordinator of an existing network to close
the network.
Automatic binding function：
Two nodes that have been connected to the network, press this key in succession (3 seconds interval, the
status indicator of the module to be pressed first flashes), and automatically bind the data transparent transmission;
if you need to bind the control light or switch, you can first Let the light or switch enter the Identify state, and then
short press the button on the module. After the binding is successful, the module can control the light or switch
through AT commands, and receive the status attribute report of the light and switch. When binding lights or
switches, you can set multiple lights or switches to enter the Identify state at one time, and the module can bind
multiple lights or switches at the same time with one keystroke. The coordinator does not support the automatic
binding function.
Off-grid and factory reset：
For a module that has been connected to the network, press and hold this key for 5 seconds, and when the
status indicator is on, release the key to exit the current network. When the module has been disconnected from the
network, press and hold this key for 5 seconds. When the status indicator is always on, the factory settings will be
restored. (Off network modules cannot be restored to factory by any command, but can be restored to factory by

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
pressing this key)
3.4.3 Status indicator: (It is recommended that this pin be connected to a low level to
drive the LED)
This pin is usually high level, when the following events occur, it will output a continuously
changing high and low level.
Node access status：
The module is configured as routing, terminal node, and dormant terminal node. After the
first successful network access, this pin outputs a low level of 166ms 3 times, and the interval
between the two low levels is 166ms.
The coordinator created the network successfully:
The coordinator successfully created the network for the first time, the pin outputs a low level of
166ms 3 times, and the interval between the two low levels is 166ms.
Network open status:
When the coordinator starts to distribute the network, or the network of the routing node is opened
by the coordinator, this pin outputs a low level of 500ms, and outputs a low level again every
500ms, until the network is closed (including manual closing and automatic closing).
Identify tag status:
When the router or terminal node is marked by Identify, this pin outputs a low level for 500ms
until the end of the Identify mark. This function can be used to visually detect where the module
with a certain MAC address or short address is located.
Precautions:
The network open state and Identify flag state of the routing node, the output signal of this pin is
the same, so in actual operation, the two operations should be avoided at the same time.
4.Application configuration example
4.1 Example 1: Coordinator HEX command to control network
access nodes
Example introduction:
The E180ZG120 module is set up as a coordinator and creates a network. Another E180ZG120 module (normal
terminal node + transparent transmission mode) is added to this coordinator, and completes device identification,

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
data transparent transmission control and PWM control.
4.1.1 E180-ZG120A/B coordinator to create network
At this stage, after the E180-ZG120A/B module is restored to the factory mode, it is set as the coordinator,
and a new network is started and created.
Step 1: Check whether the module is currently networked
Send the configuration command "Query the current status of the module (type 0x00, code 0x00)":
55 03 00 00 00
Received the feedback of "Query the current status of the module":
55 2A 00 00 00 02 6E 93 50 FE FF 14 2E 84 0F 7E CC D8 2B FB FD FE 7F BF DF 6F 37 57 AE
5C 01 D4 35 FA D4 D3 9A 23 47 A2 3F 2D 30 27
Parse serial port feedback:
Network Status: Networked
Device Type: Normal Endpoint
MAC address: 6E 93 50 FE FF 14 2E 84
Channel: 0x0F = 15 channels
PANID: 0xCC7E
Step 2: Restore the module to the factory
Send the configuration command "reset/restore to factory (type 0x00, code 0x04)":
55 07 00 04 02 7E CC 0F BB
Parse the send command
Reset mode: 0x02 – factory reset, that is, all parameters saved in FLASH need to be erased
PANID: 0xCC7E
Channel: 0x0F - 15 channels
Receive "reset/factory reset" feedback command:
55 04 00 04 00 04
Wait 2 seconds, the module restarts.
Received asynchronous command system notification "device started (type 0x80, code 0x00)":
55 0D 80 00 00 00 6E 93 50 FE FF 14 2E 84 92
Parse asynchronous feedback:
Reset Mode: 0x00 - Watchdog soft reset on E180ZG120
Version: 0x00
MAC address: 6E 93 50 FE FF 14 2E 84
Step 3: Set the device type to coordinator and restart
Send the configuration command "set node type (type 0x00, code 0x05)":
55 04 00 05 00 05
Parse the send command
Node Type: 0x00 - Coordinator
Received a "set node type" feedback command:

E18 V1.0 ZigBee Ad Hoc Network Module Chengdu Ebyte Electronic Technology Co., Ltd.
Sample URL: cdebyte.taobao.com For more product information, please visit: www.cdebyte.com
Because professional, so choose! Wireless application experts such as wireless transparent transmission,
WiFi, Bluetooth, Zigbee, PKE, digital radio, etc.
Page 1 of 40 The copyright and the final interpretation right of the product belong to Chengdu Ebyte
Electronic Technology Co., Ltd.
55 04 00 05 00 05
Send the configuration command "reset/restore to factory (type 0x00, code 0x04)":
55 07 00 04 00 FF FF 00 04
Parse the send command
Reset mode: 0x00 - direct reset
PANID: 0xFFFF – reset directly without exiting the network
Channel: 0xFF - reset directly without exiting the network
Receive the feedback command of "reset/factory reset":
55 04 00 04 00 04
After waiting for 1 second, the asynchronous command system notification "device started (type
0x80, code 0x00)" is received:
55 0D 80 00 00 00 6E 93 50 FE FF 14 2E 84 92
☆. Receiving "device startup notification" indicates that the coordinator is successfully set up.
Step 4: Coordinator distribution network
Send the configuration command "Start distribution network (type 0x00, code 0x02)":
55 03 00 02 02
Receive the feedback command of "Start distribution network":
55 04 00 02 00 02
Parse the feedback command:
Status: 0x00 - Success
Wait for the coordinator module to create a new network (2 seconds this time)
Received asynchronous command system notification "Network state change (type 0x80, code 0x01)":
55 29 80 01 01 6E 93 50 FE FF 14 2E 84 14 BB B3 00 00 76 8E 17 47 E7 A7 27 27 E9 AB DE D6 A7 AD D3 8C
A0 FC A5 3E 7A C5 CC 2B E6
Parse asynchronous commands:
Network Status - 0x01 Networked
MAC address: 6E 93 50 FE FF 14 2E 84
Channels: 0x14 – 20 channels
PANID: 0xB3BB
Short address: 0x0000 – Coordinator address
Extended PANID: 76 8E 17 47 E7 A7 27 27
Network key: E9 AB DE D6 A7 AD D3 8C A0 FC A5 3E 7A C5 CC 2B
Continue to receive asynchronous command system notification "Turn on and off network notifications (type 0x80,
code 0x02)"
55 04 80 02 B4 36
Parse asynchronous commands:
Allowed access time: 0xB4 -180 seconds, if the command is received again and the open time becomes 0, it means
the network is closed.