Whitelist of end devices using IEEE address in the coordinator

[s]

SOC: NRF52840 

SDK : NRF conenct SDK 9.11

Application  Gateway 

we had end devices to join the network which is whitelisted in the coordinator ; so please can you let us know the way to do it ; 

we saw some API in zb_secur.h zb_secur_ke_whitelist_add , zb_secur_ke_whitelist_delete to add and delete IEEE address of the end device 

or we can do leave request method for the devices and avoid rejoining into the network 

[Marte Myrvold]

Hi,

Can you clarify what you want to achieve? Do you want to allow only specific devices to join the network?

If that is the case, you can use install codes. These are unique pre-shared keys, and you can configure the coordinator so that you only allow devices with matching install codes to join the network. The install code is stored on the joining device, and when you want to add the device to the network, you must add the install code and IEEE address on the coordinator.

The simplest way to test this is to use Zigbee shell, where you will find commands to add the install code on the joining device, enable install code policy on the coordinator, and add the install code and IEEE address of the joining device on the coordinator.
If you want to add the code for this yourself, then use the following functions:

• zb_secur_ic_set() - set install code on the joining device
• zb_set_installcode_policy() - enable install code policy on the coordinator
• zb_secur_ic_str_add() - add install code and IEEE address on the coordinator

Best regards,
Marte