How to prevent end device connect to coordinator?

Does anyone know how to prevent an end device connect to coordinator directly? I wish it to connect coordinator only through router. Thanks

Setting NJ to 0 on the coordinator will prevent any nodes from Joining.