Zigbee

What is Zigbee?

Zigbee is an open wireless communication protocol for low-power, low-data-rate mesh networks, built on the IEEE 802.15.4 radio standard and maintained by the Connectivity Standards Alliance (CSA). It is widely used in IoT, Building Automation, smart lighting, energy management and wireless sensor networks. In OT environments, Zigbee mainly serves monitoring with smart sensors, HVAC control and asset tracking, not real-time control.

Functionally, Zigbee sits between traditional wired fieldbuses and modern Industrial Internet of Things architectures. Through a gateway it bridges operational sensor data and central applications such as SCADA, BMS, MES or cloud platforms.

🧠 How did Zigbee originate and who maintains it?

The specification was ratified on 14 December 2004 and published as ZigBee 2004 in June 2005. It was followed by Zigbee 2006, which introduced a cluster library of standardised device functions, and in 2007 by Zigbee PRO, the stack that became the basis of almost every later product. Originally there were separate application profiles such as Home Automation, Light Link and Smart Energy. Zigbee 3.0 merged most application profiles, including home automation and lighting, into a single standard so that devices from different manufacturers can work together in one network. Smart Energy remained a separate profile.

On 11 May 2021 the Zigbee Alliance renamed itself the Connectivity Standards Alliance. On the same day the smart home project CHIP was renamed Matter, which the CSA develops alongside Zigbee. The Zigbee brand was kept, as were Smart Energy, Green Power (battery-free switches that harvest energy from the button press) and RF4CE. In April 2023 the CSA released Zigbee PRO 2023, the latest stack revision, focused mainly on security. At that launch the CSA reported that more than a billion Zigbee chipsets have been sold and over 3,900 products certified.

🔧 How does Zigbee work technically?

IEEE 802.15.4 defines the physical and MAC layers: radio frequencies, modulation, channel access via CSMA/CA (listen before transmitting) and frames of at most 127 bytes. Zigbee adds the network layer (addressing and mesh routing), security and the application layer on top.

The vast majority of Zigbee 3.0 products operate at 2.4 GHz. Zigbee PRO 2023 extends sub-GHz support to Europe (800 MHz) and North America (900 MHz), offering more range and better wall penetration at a lower data rate. The theoretical address space of over 65,000 nodes says little about practice: a network typically holds tens to a few hundred devices per coordinator.

🧱 Which device types does a Zigbee network have?

There is exactly one coordinator per network. A gateway is not a separate Zigbee device type but a product that contains the coordinator and passes data on to IP networks via MQTT, OPC UA, HTTP or BACnet. Such a gateway is often an Edge Device that also filters, buffers and generates alarms as part of an Edge Computing architecture.

Routers are the backbone of the mesh. Lamps, smart plugs and mains-powered sensors often act as routers; battery sensors are always end devices.

🌐 Why does mesh routing matter?

In a mesh network, messages travel via several intermediate routers to the coordinator, for example sensor → router → router → gateway. If a router fails, the network automatically finds another route.

• Greater range - every mains-powered router extends the network, even in large buildings
• Self-healing - routes are rebuilt after a failure or when devices move
• Redundancy - multiple paths reduce dependence on a single node
• Downside - every hop adds latency, and a network with too few routers becomes unstable

🏭 Where is Zigbee used in OT and buildings?

In Industrial Automation, Zigbee is rarely used for primary control, but it is used for monitoring and supporting functions:

Zigbee is popular for retrofit projects because no cabling is needed and battery sensors last for years. Data reaches a Historian, Unified Namespace or Industrial AI application through the gateway. In buildings, integrations exist with KNX, BACnet and the BMS. Dutch smart energy meters, by contrast, do not use Zigbee but the wired P1 port; Zigbee energy monitors then read that port.

🔄 How does Zigbee compare with other wireless protocols?

For process instrumentation with stricter determinism requirements, industrial users tend to choose WirelessHART or ISA100.11a, which also run on IEEE 802.15.4 but use time slots and channel hopping. For wireless machine I/O there is IO-Link Wireless.

Zigbee is not suitable for Safety functions, Motion Control or fast PLC I/O. Those need deterministic wired protocols such as EtherCAT, ProfiNET, SERCOS III and Powerlink.

🔐 How secure is Zigbee?

Zigbee encrypts traffic with AES-128 and uses two kinds of keys: a network key shared by all nodes and link keys between a device and the Trust Center. Frame counters protect against a replay attack. The weak point is mainly the moment a device joins (commissioning).

• Well-known default keys - older Home Automation 1.2 devices used a publicly known fallback link key, so an attacker who sniffed the joining process could recover the network key.
• Zigbee 3.0 - introduced install codes (a unique key per device), mandatory random network keys and countermeasures against re-pairing attacks.
• Zigbee PRO 2023 - added Dynamic Link Key (key agreement based on public/private key pairs), Device Interview to vet devices before admitting them, and Trust Center Swap-Out to replace a hub without re-commissioning every device. These features are optional, so a mixed network is only as strong as its oldest device.
• Implementation flaws - in 2020 Check Point showed with CVE-2020-6007 that a buffer overflow in the Philips Hue bridge could be exploited via a manipulated Zigbee bulb to break into the network behind it; Signify had already patched the firmware.

Other attack vectors include Spoofing, Man-In-The-Middle, rogue devices and radio jamming. Because Zigbee is wireless, the attack surface extends beyond the site fence.

🛠️ How do you deploy Zigbee responsibly in OT?

1. Define the function - use Zigbee only for monitoring and non-critical control; never for safety functions or critical process control.
2. Plan the radio - choose a Zigbee channel that does not overlap Wi-Fi channels 1, 6 and 11, such as 15, 20, 25 or 26, and survey the spectrum beforehand. Metal structures, tanks, microwave ovens and variable frequency drives close to antennas degrade the link.
3. Provide enough routers - place mains-powered routers so that every sensor has at least two routes.
4. Secure joining - use install codes or Dynamic Link Key, permit joining only briefly and deliberately, and avoid devices with legacy keys.
5. Segment the gateway - put the gateway in its own zone with Network Segmentation and NAC, and let data leave only outbound via a broker.
6. Manage the lifecycle - record every device in the asset inventory, include gateways in patch management and use monitoring to detect outages and unknown nodes.

Battery life depends heavily on the design and can only be given indicatively: a temperature sensor reporting once every few minutes typically lasts one to several years; a push button or door contact that mostly sleeps often lasts longer. Shorter reporting intervals and many retries caused by interference shorten that considerably.

European context: since 1 August 2025 the cybersecurity requirements of the Radio Equipment Directive apply to radio equipment that communicates over the internet, directly or via other equipment, with EN 18031 as the harmonised standard. From 11 December 2027 the Cyber Resilience Act takes over. Manufacturers of Zigbee gateways and devices must therefore demonstrate secure default settings, updatability and encryption.

❓ Frequently asked questions

Is Zigbee the same as Matter or Thread?

No. Thread is an IP-based mesh protocol that uses the same IEEE 802.15.4 radio as Zigbee, and Matter is an application standard that runs over Thread and Wi-Fi, among others. Zigbee is a separate, non-IP stack; many hubs now support both Zigbee and Matter.

How many devices can a Zigbee network support?

Zigbee’s 16-bit address space theoretically offers over 65,000 addresses. In practice the limit is a few hundred devices per coordinator, depending on the coordinator hardware and the number of routers. Large installations are therefore split across several Zigbee networks, each with its own gateway.

What is the range of Zigbee?

At 2.4 GHz a Zigbee link typically reaches 10 to 20 metres indoors and up to about 100 metres in line of sight. Because every router relays messages, the whole network can cover an entire building. The sub-GHz bands supported by Zigbee PRO 2023 offer more range at a lower data rate.

Do Zigbee and Wi-Fi interfere with each other?

Yes, both use the 2.4 GHz band, and a busy Wi-Fi network can cause Zigbee packet loss. Choosing Zigbee channel 15, 20, 25 or 26 places Zigbee between or beside the commonly used Wi-Fi channels 1, 6 and 11. A spectrum survey beforehand prevents unstable mesh routes and extra battery drain.

Is Zigbee suitable for industrial control?

Zigbee is suitable for monitoring, energy metering and building functions, but not for deterministic control or safety functions. The protocol guarantees no fixed latency and is sensitive to radio interference. For process instrumentation, WirelessHART and ISA100.11a are the common industrial alternatives.

How do you secure a Zigbee network?

You secure a Zigbee network by joining devices with install codes or Dynamic Link Key, avoiding legacy devices with default keys and opening the network for joining only briefly. In addition, the Zigbee gateway belongs in a separate network zone, with current firmware and monitoring for unknown devices.

📌 In summary

Zigbee is a mature, low-power mesh protocol on IEEE 802.15.4 that has existed since 2004 and is maintained by the Connectivity Standards Alliance. It excels in building automation, energy management and retrofit monitoring, but it is not meant for real-time or safety-critical control. The biggest risks lie in commissioning, legacy keys and the gateway; Zigbee 3.0 and Zigbee PRO 2023 reduce them, provided you apply them consistently within Industry 4.0 and cyber-physical environments.

Zigbee is the wireless sensor layer for monitoring and buildings: choose it deliberately for non-critical data, plan the radio, and secure both joining and the gateway.