Beruflich Dokumente
Kultur Dokumente
Contents Preface
1 2 3 4 5 6 7 8
Product Overview Configuration and Parameter Assignment Address Assignment and Installation Wiring Diagnostics General Technical Specifications Digital F I/O Module Appendices Accessories and Order Numbers Response Times Glossary Index
9 10 11
Edition 06/2004
A5E00297494-02
Safety Guidelines
This manual contains notices intended to ensure personal safety, as well as to protect the products and connected equipment against damage. These notices are highlighted by the symbols shown below and graded according to severity by the following texts:
! ! !
Danger
indicates that death, severe personal injury or substantial property damage will result if proper precautions are not taken.
Warning
indicates that death, severe personal injury or substantial property damage can result if proper precautions are not taken.
Caution
indicates that minor personal injury can result if proper precautions are not taken.
Caution
indicates that property damage can result if proper precautions are not taken.
Notice
draws your attention to particularly important information on the product, handling the product, or to a particular part of the documentation.
Qualified Personnel
Only qualified personnel should be allowed to install and work on this equipment. Qualified persons are defined as persons who are authorized to commission, to ground and to tag circuits, equipment, and systems in accordance with established safety practices and standards.
Correct Usage
Note the following:
Warning
This device and its components may only be used for the applications described in the catalog or the technical description, and only in connection with devices or components from other manufacturers which have been approved or recommended by Siemens. This product can only function correctly and safely if it is transported, stored, set up, and installed correctly, and operated and maintained as recommended.
Trademarks
SIMATIC, SIMATIC HMI and SIMATIC NET are registered trademarks of SIEMENS AG. Third parties using for their own purposes any other names in this document which refer to trademarks might infringe upon the rights of the trademark owners. Copyright Siemens AG 2004 All rights reserved
The reproduction, transmission or use of this document or its contents is not permitted without express written authority. Offenders will be liable for damages. All rights, including rights created by patent grant or registration of a utility model or design, are reserved.
Disclaimer of Liability
We have checked the contents of this manual for agreement with the hardware and software described. Since deviations cannot be precluded entirely, we cannot guarantee full agreement. However, the data in this manual are reviewed regularly and any necessary corrections included in subsequent editions. Suggestions for improvement are welcomed. Siemens AG 2004 Technical data subject to change.
Siemens AG
Bereich Automation and Drives Geschaeftsgebiet Industrial Automation Systems Postfach 4848, D- 90327 Nuernberg
Siemens Aktiengesellschaft
A5E00297494-02
Contents
1 2 Preface ............................................................................................................................ 1-1 Product Overview........................................................................................................... 2-1 2.1 2.2 2.3 3 4 Introduction ....................................................................................................... 2-1 Using the Fail-Safe ET 200eco I/O Module ..................................................... 2-2 Guide to Commissioning the Fail-Safe ET 200eco I/O Module on PROFIBUS DP ............................................................................................ 2-6
Configuration and Parameter Assignment.................................................................. 3-1 Address Assignment and Installation.......................................................................... 4-1 4.1 4.2 4.3 4.4 Introduction ....................................................................................................... 4-1 Address Assignment in the F-CPU................................................................... 4-1 Assigning PROFIsafe Address ......................................................................... 4-3 Installation......................................................................................................... 4-5 Introduction ....................................................................................................... 5-1 Safe Functional Extra-Low Voltage for the Fail-Safe I/O Module.................... 5-2 Wiring a Fail-Safe I/O Module .......................................................................... 5-3 Replacing a Fail-Safe I/O Module..................................................................... 5-4 Sensor Requirements ....................................................................................... 5-5 Introduction ....................................................................................................... 6-1 Reactions to Faults ........................................................................................... 6-1 Fault Diagnostics .............................................................................................. 6-3 Introduction ....................................................................................................... 7-1 Standards and Approvals ................................................................................. 7-2 Electromagnetic Compatibility .......................................................................... 7-7 Transport and Storage Conditions.................................................................. 7-11 Mechanical and Climatic Environmental Conditions ...................................... 7-12 Specifications for Nominal Line Voltages, Isolation Tests, Protection Class, and Type of Protection ....................................................... 7-14
General Technical Specifications................................................................................. 7-1 7.1 7.2 7.3 7.4 7.5 7.6
iii
Contents
Digital F I/O Module........................................................................................................ 8-1 8.1 8.2 8.2.1 8.2.2 8.2.3 8.2.4 8.2.5 8.2.6 Introduction ....................................................................................................... 8-1 Fail-Safe ET 200eco I/O Module 4/8 F-DI 24 VDC PROFIsafe....................... 8-2 Use Cases of the ET 200eco 4/8 F-DI.............................................................. 8-8 Use Case 1: Safety Mode AK4/SIL2/Category 3............................................ 8-10 Use Case 2: Safety Mode AK6/SIL3/Category 3............................................ 8-12 Use Case 3: Safety Mode AK6/SIL3/Category 4............................................ 8-21 Diagnostic Functions of the ET 200eco 4/8 F-DI............................................ 8-25 Technical Specifications of the ET 200eco 4/8 F-DI ...................................... 8-28
9 10 11 Index
Accessories and Order Numbers ................................................................................. 9-1 Response Times........................................................................................................... 10-1 Glossary........................................................................................................................ 11-1
iv
Preface
1-1
Preface
Approvals
See Section 7.2 Standards and Approvals. The fail-safe ET 200eco I/O module also certified for use in safety mode up to: Requirements class (AK) 6 in accordance with DIN V 19250 (DIN V VDE 0801) Safety class SIL3 (Safety Integrity Level) in accordance with IEC 61508 Category 4 in accordance with EN 954-1
CE Certification
See Section 7.2 Standards and Approvals.
Standards
See Section 7.2 Standards and Approvals.
1-2
Preface
Brief Description of Relevant Contents The following elements are described in the S7 Distributed Safety, Configuration and Programming manual and online help: Configuration of the fail-safe CPU and the fail-safe I/O Programming of the fail-safe CPU in fail-safe FBD or LAD Depending on which F-CPU you use, you will need the following documentation: The CPU Specifications: CPU 31xC and CPU 31x reference manual describes the standard functions of the CPU 315F-2 DP and the CPU 317F-2 DP. The product information for CPU 315F-2 DP describes only the deviations from the standard CPU 315-2 DP. The product information for CPU 317F-2 DP describes only the deviations from the standard CPU 317-2 DP. The S7-400, CPU Data reference manual describes the standard functions of the CPU 416F-2. The product information for CPU 416F-2 DP describes only the deviations from the standard CPU 416-2 DP. The ET 200S, Interface Module IM 151-7 CPU manual describes the standard IM 151-7 CPU. The product information for the IM 151-7 F-CPU describes only the deviations from the standard IM 151-7 CPU. The S7-300/M7-300, Module Data manual describes how to assemble and wire S7-300 systems. The CPU 31xC and CPU 31x, Technical Specifications manual describes the standard functions of the CPU 315F-2 DP. The Configuring Hardware and Communication Connections with STEP 7 V5.x manual describes operation of the standard tools of STEP 7. The System and Standard Functions reference manual describes functions for distributed I/O access and diagnostics. Describes how to operate the standard tools in STEP 7 Contains information about how to configure and assign parameters to modules and intelligent slaves with HW Config Contains a description of the programming languages FBD and LAD Describe the handling of the PCS 7 control system (required when the fail-safe ET 200eco I/O is integrated in a higher-level control system)
STEP 7 manuals
PCS 7 manuals
1-3
Preface
Guide
This manual describes the fail-safe 4/8 F-DI I/O module of the ET 200eco distributed I/O station. It consists of instructions and reference material (technical specifications and appendices) This manual covers the following basic aspects of the fail-safe I/O module: Design and use Configuring and assigning parameters Addressing, mounting, and wiring Diagnostic evaluation Technical specifications Order numbers
Conventions
In this manual, the terms "safety engineering" and "fail-safe engineering" are used synonymously. The same applies to the terms "fail-safe and "F- and to the terms "fail-safe I/O module" and "ET 200eco 4/8 F-DI". "S7 Distributed Safety" and "S7 F Systems" in italics refer to the optional packages for the two fail-safe systems: "S7 Distributed Safety" and "S7 F/FH Systems".
Additional Support
If you have any additional questions about the use of products presented in this manual, contact your local Siemens representative: http://www.siemens.com/automation/partner
1-4
Preface
Training Center
We offer courses to help you get started with the S7 automation system. Contact your regional training center or the central training center in Nuremberg (90327), Federal Republic of Germany. Telephone +49 (911) 8953200 Internet: http://www.sitrain.com H/F Competence Center The H/F Competence Center in Nuremberg offers special workshops on SIMATIC S7 fail-safe and fault tolerant (high availability) automation systems. The H/F Competence Center can also provide assistance with onsite configuration, commissioning, and troubleshooting. Telephone: +49 (911) 895-4759 Fax: +49 (911) 895-5193 For questions about workshops, etc.: hf-cc@nbgm.siemens.de
1-5
Preface
mailto:adsupport@siemens.com
mailto:adsupport@siemens.com
mailto:simatic.hotline@sea.siemens.com mailto:adsupport.asia@siemens.com
The languages of the SIMATIC Hotlines and the authorization hotline are generally German and English.
1-6
Preface
1-7
Preface
1-8
2
2.1
Overview
Product Overview
Introduction
This chapter provides information about the following topics: How the fail-safe ET 200eco I/O module fits into the fail-safe SIMATIC S7 automation systems The components that make up the fail-safe ET 200eco I/O module The steps you need to take to commission the fail-safe ET 200eco I/O module in PROFIBUS DP
2-1
Product Overview
2.2
2-2
Product Overview
Use in F-Systems
Fail-safe ET 200eco I/O modules can be used: In the S7 Distributed Safety F-system with the S7 Distributed Safety optional package as of version V 5.2 In S7 F/FH systems with the S7 F Systems optional package as of version V 5.2 The F Configuration Pack V 5.3 Service Pack 2 or higher must be installed (see Chapter 3). When using fail-safe ET 200eco I/O modules in F-systems, the information in the following manuals applies: ET 200eco Distributed I/O Station Safety Engineering in SIMATIC S7 S7 Distributed Safety, Configuration and Programming or Programmable Controllers S7 F/FH Systems
Fail-Safe Modules
PROFIBUS DP ET 200S
Figure 2-1
2-3
Product Overview
Terminal block
You connect the power supply for the fail-safe I/O module and PROFIBUS DP to the terminal block. The following variants of the terminal block are available: ECOFAST M12, 7/8
2-4
Product Overview
Safety Class in Safety Mode In Accordance with IEC 61508 SIL2 SIL3 SIL3 In Accordance with DIN V 19250 AK4 AK6 AK6 In Accordance with EN 954-1 Category 3 Category 3 Category 4
2-5
Product Overview
2.3
Introduction
The following table lists all the important steps you need to take to commission the fail-safe ET 200eco distributed I/O module as a DP slave on PROFIBUS DP.
Commissioning the ET 200eco 4/8 F-DI on ET 200eco Distributed I/O Station PROFIBUS DP manual If commissioning was not successful, run diagnostics on the ET 200eco 4/8 F-DI Chapter 6, Chapter 8 and ET 200eco Distributed I/O Station manual
Note You must configure and assign parameters to the fail-safe I/O module in STEP 7 before commissioning it. Reason: The PROFIsafe address of the fail-safe I/O module is assigned automatically by STEP 7. You must set this PROFIsafe address on each failsafe I/O -module by means of switches before installing the module.
2-6
Requirements
One of the following optional packages must be installed in STEP 7 before you can configure and assign parameters for the fail-safe I/O module. S7 Distributed Safety, Version V5.2 Service Pack 2 or higher S7 F Systems, Version V5.2 Service Pack 1 or higher The following requirements also apply to the ET 200eco 4/8 F-DI: STEP 7 V 5.2 and higher F Configuration Pack V 5.3 service pack 2 and higher The F Configuration Pack can be downloaded over the Internet from: http://www.siemens.com/automation/service&support. This ships with the optional packages S7 Distributed Safety V 5.2 Service Pack 2 or higher and S7 F Systems V 5.2 Service Pack 1 or higher.
Configuration
Follow the usual procedure with STEP 7 HW Config to configure the fail-safe I/O module (in the same way as standard ET 200eco modules).
3-1
3-2
4
4.1
Overview
This section provides information on the following topics: Address assignment of the fail-safe I/O module in the F-CPU Assigning the PROFIsafe address for the fail-safe I/O module Installing the fail-safe I/O module
4.2
Address assignment
The fail-safe I/O module occupies the following address areas on the F-CPU: For S7 Distributed Safety: in the process image range For S7 F/FH systems: in the entire I/O range (inside and outside the process image).
Table 4-1 F-I/O module Addresses Assigned to the F-I/O module Occupied Bytes in the F-CPU: In Input Range ET 200eco 4/8 F-DI
x = Module start address
x + 0 through x + 5
4-1
Warning You must only access the addresses occupied by the useful data. The other address ranges occupied by the fail-safe I/O module are for other functions including safety-related communication between the fail-safe I/O module and F-CPU in compliance with PROFIsafe. In 1oo2 evaluation of sensors, only the less significant channel of the channels that are grouped as a result of the 1oo2 sensor evaluation can be accessed in the safety program.
Additional Information
Detailed information on F-I/O access can be found in the S7 Distributed Safety, Configuring and Programming manual or the Programmable Controllers S7 F/FH Systems manual.
4-2
4.3
PROFIsafe Address
Each fail-safe I/O module has its own PROFIsafe address in addition to the PROFIBUS address. Before installing the fail-safe ET 200eco I/O module, you must first set the PROFIsafe address of the fail-safe I/O module on every fail-safe I/O module.
4-3
Example:Address 1018
9 8 7 6 54 3 2 1 0 ON OFF
512 256 128 64 32 16 8 4 2 1
Figure 4-1
Warning make sure that the address switch setting on the fail-safe I/O module matches the PROFIsafe address in STEP 7 HW Config. The switch setting on the address switch of the F-I/O, in other words, its PROFIsafe destination address must be unique within the network* and station** (throughout the system). A maximum of 1,022 PROFIsafe destination addresses can be assigned in one system. That is, a maximum of 1,022 F-modules can be addressed using PROFIsafe.
A network consists of one or more subnets. "Network-wide" means across PROFIBUS network boundaries.
4-4
4.4
Installation
4-5
4-6
5
5.1
Wiring
Introduction
Warning In order to prevent hazardous threats to persons or the environment, you must not under any circumstances override safety functions or implement measures that cause safety functions to be bypassed or that result in the bypassing of safety functions. The manufacturer is not liable for the consequences of such manipulations or for damages that result from failure to heed this warning.
Overview
This chapter explains special features relating to wiring the ET 200eco fail-safe module. For more detailed information on this topic that applies equally to the failsafe I/O module and the standard ET 200eco I/O module, refer to the Distributed I/O Station ET 200eco manual.
5-1
Wiring
5.2
Warning The fail-safe I/O module must be operated with safe functional extra low voltage. This means that this module, even in the event of a fault, can only have a maximum voltage of Um applied to it. The following applies to all fail-safe I/O modules: Um < 60.0 V You can find additional information about safe functional extra low voltage, for example, in the data sheets of the applicable power supplies.
All components of the system that are capable of supplying electrical energy in any form must satisfy this requirement. Each additional circuit (24 VDC) implemented must have a safe functional extra low voltage. Refer to the relevant data specification sheets or contact the manufacturer for information. Note, also, that sensors having an external power supply can be connected to the fail-safe I/O module. Here, pay attention to the supply voltage from safe functional extra-low voltage. The process signal of a 24 VDC digital I/O module must not exceed a fault voltage of Um in the event of a fault. Warning All power sources, for example internal 24 V DC load voltage power supplies, external 24 V DC load voltage power supplies, 5 V DC bus voltage must be electrically connected externally. This prevents voltage additions in the individual voltage sources that would cause the fault voltage Um to be exceeded even if there are voltage differences. Make sure that there is sufficient line cross section for the electrical connection, in accordance with the ET 200eco configuration guidelines (see ET 200eco Distributed I/O Station manual).
5-2
Wiring
6ES7 407-0KA01-0AA0 for 10 A 6ES7 407-0KR00-0AA0 for 10 A 6ES7 307-1BA00-0AA0 for 2 A 6ES7 307-1EA00-0AA0 for 5 A 6ES7 307-1KA00-0AA0 for 10 A
S7-300:
These requirements also apply, of course, to power packs and power supplies that do not have an S7-300 or S7-400 configuration.
5.3
A short circuit in the signals does not conceal a serious safety risk Signals are supplied by different sensor supplies of this fail-safe I/O module
5-3
Wiring
5.4
Caution Turn off the load power supply (2L+) before dismantling the terminal block. When the terminal block is dismantled, degree of protection IP 65, IP 66 or IP 67 no longer applies.
5-4
Wiring
5.5
Sensor Requirements
Warning To guarantee accurate detection of the sensor signals by the fail-safe I/O module, make sure that the sensor signals have a certain minimum duration.
In order for pulses to be detected with certainty, the time between two signal changes (pulse duration) must be greater than the PROFIsafe monitoring time.
5-5
Wiring
Reliable acquisition by the fail-safe I/O module The following table lists the minimum duration of the sensor signals for the fail-safe I/O module. This depends on the parameter settings for the short-circuit test and the input delay in STEP 7 (see Section 8.2).
Table 5-1 Minimum Duration of the Sensor Signals to Allow Correct Acquisition by the Fail-Safe I/O Module Assigned Input Delay 3 ms Deactivated Activated 9 ms 12 ms 15 ms 23 ms 37 ms
Reliable acquisition by the safety program on the F-CPU You will find information on the times necessary for correct acquisition of the sensor signals in the safety program in Chapter 9 of the system description Safety Engineering in SIMATIC S7.
5-6
6
6.1
Overview
Diagnostics
Introduction
This section provides information on the following topics: Reactions to faults of the fail-safe I/O module Diagnostics of the fail-safe I/O module if a fault occurs
6.2
Reactions to Faults
6-1
Diagnostics
6-2
Diagnostics
6.3
Definition
Fault Diagnostics
Diagnostics can be used to determine whether faults occurred during signal acquisition by the fail-safe I/O module. Diagnostic information is assigned either to one channel or to the entire fail-safe I/O module.
6-3
Diagnostics
Slave Diagnostics
Slave diagnostics complies with the IEC 61784-1:2002 ED1 CP 3/1 standard. The fail-safe I/O module supports slave diagnostics in exactly the same way as the standard ET 200eco I/O modules. You will find a description of the general configuration of slave diagnostics for ET 200eco and the fail-safe I/O module in the ET 200eco Distributed I/O Station manual. Below, there is an additional description of channel-related diagnostics for the fail-safe I/O module.
7 6 5 4 3 2 1 0 Bit no.
Byte 0
same as standard I/O module ET 200eco 1: channel-related diagnostics are available same as standard I/O module ET 200eco Bytes 4 and 5: 81H0EH: manufacturer's ID for ET 200eco 4/8 F-DI
Figure 6-1 Byte sturcture 0, 4 and 5 for slave diagnostics
6-4
Diagnostics
Channel-Related Diagnostics
As with ET 200eco, three bytes of channel-related diagnostics are available per fault starting with byte 6. Channel-related diagnostics for the fail-safe I/O module is configured as follows:
7 6 5 4 3 2 1 0 1 0 0 0 0 0 0 0 Bit no.
Byte6
000000B: Identifier of the fail-safe I/O module, that supplies the channel-related diagnostic information. Code for channel-related diagnostics 7 6 5 4 3 2 1 0 0 1 Bit no.
Byte7
000000B through 000111B: Number of the channel that supplies diagnostic 01B: Input channel (fail-safe I/O module) 7 6 5 4 3 2 1 0 Byte8 Bit no.
Fault type (see Table 6-1) Channel 001B: Byte (fail-safe I/O module)
Byte9 to
Figure 6-2
Note Channel-related diagnostics are always updated to the current diagnostic function in the diagnostic message frame. Subsequent, older diagnostic functions are not deleted.
Remedy: Evaluate the valid current length of the diagnostic message frame in STEP7 using the RET_VAL parameter of SFC13.
6-5
Diagnostics
Short circuit Overtemperature Fault Parameter assignment error Sensor voltage or load voltage missing Communication error Safety-related deactivation
Short circuit Overtemperature Internal error Parameter assignment error Missing external auxiliary supply Communication error Discrepancy error
6-6
7
7.1
Overview
This chapter contains the following information about fail-safe I/O modules: Information about the most important standards and approvals Information about the general technical specifications
7-1
7.2
CE Certification
The fail-safe ET 200eco I/O module satisfies the requirements and safety objectives of the following European Community directives and complies with the harmonized European standards (EN) for programmable logic controllers published in the Gazette of the European Community:
73/23/EEC Electrical Equipment Designed for Use within Certain Voltage Limits (low voltage directive) 89/336/EWG Electromagnetic Compatibility (EMC Guideline) 94/9/EC "Equipment and Protective Systems Intended for Use in Potentially Explosive Atmospheres" (Explosion Protection Guideline):
The EC declarations of conformity are available to the competent authorities at: Siemens Aktiengesellschaft Bereich Automatisierungstechnik A&D AS RD ST Postfach 1963 D-92209 Amberg
7-2
UL approval
Underwriters Laboratories Inc., in accordance with
CSA approval
Canadian Standard Association (CSA) in accordance with
or
Underwriters Laboratories Inc., in accordance with
UL 508 (Industrial Control Equipment) CSA C22.2 No. 142 (Process Control Equipment)
or
Underwriters Laboratories Inc., in accordance with
UL 508 (Industrial Control Equipment) CSA C22.2 No. 142 (Process Control Equipment) UL 1604 (Hazardous Location) CSA-213 (Hazardous Location)
APPROVED for use in Class I, Division 2, Group A, B, C, D Tx; Class I, Zone 2, Group IIC Tx
Note The nameplate of the specific I/O module indicates the currently valid approvals.
7-3
IEC 61131
The fail-safe ET 200eco I/O module satisfies the requirements and criteria of the IEC 61131-2 standard (Programmable Controllers, Part 2: Equipment Requirements and Tests).
PROFIBUS Standard
The ET 200eco distributed I/O station is based on the IEC 61784-1:2002 Ed1 CP 3/1 standard.
7-4
Shipbuilding Approval
Submitted to the following classification bodies: ABS (American Bureau of Shipping) BV (Bureau Veritas) DNV (Det Norske Veritas) GL (Germanischer Lloyd) LRS (Lloyds Register of Shipping) Class NK (Nippon Kaiji Kyokai)
Use in Industry
SIMATIC products are designed for use in industrial environments.
Field of Application Industry Requirement Relating to Emitted Interference EN 50081-2 :1993 Immunity to Interference EN 50082-2 :1995
7-5
Requesting TV Certificate
You can request copies of the TV certificate and the accompanying report at the following address: Siemens Aktiengesellschaft Bereich Automatisierungstechnik A&D AS RD ST Postfach 1963 D-92209 Amberg
7-6
7.3
Electromagnetic Compatibility
Introduction
This section contains information on the interference immunity of the fail-safe I/O module and information on radio interference suppression.
Definition of EMC
Electromagnetic compatibility is the ability of an electrical device to function in its electromagnetic environment in a satisfactory manner without affecting this environment. The fail-safe ET 200eco I/O module also satisfies the requirements of the EMC directive of the European Economic Area. This is possible only when the ET 200S distributed I/O station complies with the specifications and guidelines for electrical assembly.
Pulse-Shaped Interference
The following table shows the electromagnetic compatibility of the fail-safe I/O module with regard to pulse-shaped interference.
Pulse-Shaped Interference Electrostatic discharge in accordance with IEC 61000-4-2 (DIN VDE 0843 Part 2) Burst pulse (rapid transient interference) in accordance with IEC 61000-4-4 (DIN VDE 0843 Part 4) Tested With 8 kV 6 kV (cabinet installation mandatory) 4 kV (no cabinet installation) 2 kV (supply line) 2 kV (signal line) 3 4 Degree of Severity 3 (air discharge) 3 (contact discharge)
Surge in accordance with IEC 61000-4-5 (DIN VDE 0839 Part 10) Degrees of severity 2 and 3 require an external protective circuit (see paragraph on next page) Asymmetrical connection 1 kV (supply line) 1 kV (signal lead/data lead) 2 kV (supply line) Symmetrical connection 0.5 kV (supply line) 0.5 kV (signal lead/data lead) 1 kV (supply line) 1 kV (signal lead/data lead) 3 3 2 2
7-7
The following figure shows an example of an external surge filter for the fail-safe ET 200eco I/O module. For additional information about surge protection for standard I/O modules, refer to the ET 200eco Distributed I/O Station manual.
7-8
Figure 7-1 External Surge Filter for the Fail-Safe ET 200eco I/O Module
7-9
Sinusoidal Interferences
RFI immunity according to IEC 61000-4-3: Electromagnetic RF field, amplitude modulated: from 80 through 2000 MHz; 10 V/m; 80 % AM (1 kHz) Electromagnetic RF field, pulse modulated: 900 5 MHz; 10 V/m; 50 % ESD; 200 Hz repetition frequency GSM/ISM field interferences of different frequencies (EN 298: 1998):
System GSM GSM GSM ISM ISM ISM ISM Frequency 890-915 MHz 1710-1785 MHz 1890 MHz 433.05-434.79 MHz 83,996-84,004 MHz 167,992-168,008 MHz 886,000-906,000 MHz Test Level 20 V/m 20 V/m 20 V/m 20 V/m 20 V/m 20 V/m 20 V/m Modulation Pulse modulation 200Hz Pulse modulation 200Hz Pulse modulation 200Hz AM, 80% 1 kHz AM, 80% 1 kHz AM, 80% 1 kHz AM, 80% 1 kHz
HF coupling with signal lines and data lines, etc. complying with IEC 61000-4-6, high frequency, asymmetric, amplitude-modulated: from 0.15 through 80 MHz; 10 V R. M. S value, unmodulated; 80 % AM (1 kHz); 150 source impedance ISM interferences of different frequencies (EN 298: standard 1998):
System ISM ISM ISM ISM ISM ISM ISM Frequency 6,765-6,795 MHz 13,553-13,567 MHz 26,957-27,283 MHz 40.66-40.70 MHz 3,370-3,410 MHz 13,533-13,533 MHz 13,567-13,587 MHz Test Level 20 V 20 V 20 V 20 V 20 V 20 V 20 V Modulation AM, 80% 1 kHz AM, 80% 1 kHz AM, 80% 1 kHz AM, 80% 1 kHz AM, 80% 1 kHz AM, 80% 1 kHz AM, 80% 1 kHz
7-10
Emitted interference over network AC power supply in accordance with EN 55011: Limit class A, Group 1.
Frequency Between 0.15 MHz and 0.5 MHz; Between 0.5 MHz and 5 MHz Between 5 MHz and 30 MHz Emitted Interference < 79 dB (V)Q, < 66 dB (V)M < 73 dB (V)Q, < 60 dB (V)M < 73 dB (V)Q, < 60 dB (V)M
7.4
Relative humidity
7-11
7.5
Reduction of Vibration
If the fail-safe I/O module is subjected to greater shock pulses or oscillation, you must take appropriate measures to reduce acceleration and amplitude. We recommend that you mount the ET 200eco on cushioning material (for example, on a rubber-metal vibration damper).
7-12
1 ppm; 4 days
7-13
7.6
Specifications for Nominal Line Voltages, Isolation Tests, Protection Class, and Type of Protection
Protection Class
Protection class I in compliance with IEC 60536 (VDE 0106-1); in other words, ground terminal required on grounding screw!
Degree of protection IP 65
Degree of protection to IEC 529 Protection against ingress of dust and full protection against touch Protection against a stream of water from a nozzle onto the enclosure from all directions. (The water must not have any detrimental effects.)
7-14
8
8.1
Overview
To connect digital sensors/encoders, you can use the fail-safe I/O module 4/8 F-DI for ET 200eco. This chapter provides the following information on the fail-safe I/O module: Properties and special features The front view, connections and the block diagram Wiring diagram and programmable parameters Diagnostic functions, including corrective measures Technical specifications
Warning The safety-related characteristics in the Technical Specifications apply for a proof-test interval of 10 years and a repair time of 100 hours.
8-1
8.2
Order Number
6ES7 148-3FA00-0XB0
Properties
The 4/8 F-DI DC 24V PROFIsafe fail-safe I/O module has the following properties: Eight inputs (AK4/SIL2/Category 3) or four inputs (AK6/SIL3/Category 3 or 4) 24V DC rated input voltage Suitable for switches and 3 or 4-wire proximity switches (BEROs) Two short-circuit-proof sensor supplies for each of the four inputs External sensor supply possible Group fault display (SF; red LED) Status display for each input (green LED) Bus fault display (BF; red LED) A common fault display for both sensor power supplies (green ON LED flashes) Assignable diagnostics
Front View
X1
X2
X3
X4
X5
X6
X7
X8
SF
BF ON
Figure 8-1
8-2
Terminal Assignment
The following table shows the assignment of the 8 female connectors of the failsafe ET 200eco I/O module for connecting the digital inputs.
Table 8-1 Pin Pin Assignment of the Sockets X1 through X8 for Digital Inputs Assignment of Socket X1 Assignment of Socket X2 Assignment of Socket X3 Assignment of Socket X4 View of the Socket (from front)
2 1 5 4 3
1 2* 3 4 5 Pin 1 2 3 4 5
24 V sensor power supply 1 Input signal channel 4 Input signal channel 0 Assignment of Socket X5 not used Ground sensor power supply (1M) Input signal channel 4 not used Input signal channel 5 Input signal channel 6 Input signal channel 7 Input signal channel 5 Input signal channel 1 Assignment of Socket X6 Input signal channel 6 Input signal channel 2 Assignment of Socket X7 Input signal channel 7 Input signal channel 3 Assignment of Socket X8
* Pin 2: The contact of the second channel (X5-X8) is looped through (1oo2 evaluation 1-channel sensor, application 2.1)
8-3
Block Diagram
F address switch SF BF
DP address switch
Vs1 0 1 2 3
Processing logic
ON
M Test
PROFIBUS DP
Load supply
Filter logic
Status M Vs2 4 5 6 7
5
24
P1 P2
*
The representation of the NO contacts is as printed on the module. Generally, however, the sensor contacts must be NC contacts (due to safe state of the process variables).
Figure 8-2
8-4
Parameters in STEP 7
The following table shows the parameters that can be assigned for the ET 200eco 4/8 F-DI (see also Chapter 3).
Table 8-2 Parameter Parameters of the ET 200eco 4/8 F-DI Range Default Setting Type of Parameter Effective Range
F-Parameter: F_destination_address 1 to 1022 Assigned Static automaticall y 150 ms, typical 3 ms Cyclic Activated 1oo2 evaluation 2-channel equivalent (or 1channel for "1oo1 evaluation) "Provide 0 value" 500 ms (for "provide value 0) or 10 ms (for "1-channel or "provide last valid value) Static Module
F_monitoring_time F-Module Parameter: Input delay Short-circuit test Channel n, n+4 Evaluation of sensors Type of sensor interconnection
10 to 10,000 ms
Module
3 ms/15 ms Cyclic/blocked Activated/deactivate d 1oo2 evaluation/ 1oo1 evaluation/ 2-channel equivalent/ 1-channel/ 2-channel nonequivalent Provide value 0/ Provide last valid value 10 to 30,000 ms
Discrepancy Behavior
Static
Discrepancy Time
Static
8-5
Input delay
Note If there is a risk of overvoltage on the lines, to avoid a safety shutdown for the failsafe digital inputs and the sensor power supply, you must set an input delay of 15 ms.
Requirements You have set the following: Sensor evaluation: "1oo2 evaluation" und Type of sensor: "2-channel equivalent" or "2-channel non-equivalent"
"Provide Last Valid Value " The last valid value (old value) before discrepancy occurs is made available in the safety program in F-CPU as soon as a discrepancy is determined between the signals of the affected input channels. This value remains available until the discrepancy disappears or until the discrepancy time expires and a discrepancy error is detected. The sensor-actuator response time is extended according to the this time. As a result, the discrepancy time of sensors connected over two channels must be set for fast responses to short response times. It makes no sense, for example, if sensors connected over two channels with a discrepancy time of 500 ms trigger a time-critical shutdown. In the worst case, the sensor-actuator response time is extended by an amount approximately equal to the discrepancy time: For this reason, position the sensor in the process in such a way to minimize discrepancy. You should then select the shortest possible discrepancy time, which, on the other hand, also provides adequate reserves against the erroneous triggering of discrepancy errors.
8-6
"Provide 0 value" The value "0" is immediately made available to the safety program in the F-CPU as soon as a discrepancy is detected between the signals of the two affected input channels. If you assigned the parameter "Provide 0 value, the sensor-actuator response time will not be affected by the discrepancy time.
Discrepancy Time
Here, you can specify the discrepancy time for each pair of channels. The value entered is rounded to multiples of 10 ms. Requirements You have set the following: Sensor evaluation: "1oo2 evaluation" und Type of sensor: "2-channel equivalent" or "2-channel non-equivalent"
Discrepancy Analysis and Discrepancy Time If you use a 2-channel, one non-equivalent, or two 1-channel sensors, that measure the same physical process variable, the sensors will respond with a slight time delay among each other due to the limited accuracy of the arrangement. Discrepancy analysis for equivalence or nonequivalence is used for fail-safe inputs to determine faults based on the time characteristic of two signals with the same functionality. Discrepancy analysis is initiated when different levels are detected for two associated input signals (for nonequivalence testing, when the same levels are detected). The signals are checked to establish whether the difference (when checking for non-quality: the match) has disappeared following a selectable time known as the discrepancy time. If not, this means that a discrepancy error exists. The most cases, the discrepancy time is started but is not elapse fully since the signal differences disappear after a short time. Select a discrepancy time that is long enough so that when no error has occurred, the difference between two signals (the match between two signals when checking for non-equality) disappears before the discrepancy time elapses. Response While the Discrepancy Time Is Running While the discrepancy time is running internally on the module, either the last valid value or "0 is provided for the safety program on the F-CPU by the input channels involved depending on the parameter settings for the response to discrepancy. Response after the Discrepancy Time Elapses If the input signals do not match after the selected discrepancy time has elapsed (when checking for non-equivalence) for example due to a break in the sensor wire, a discrepancy error is detected and the "discrepancy error" diagnostic message is generated in the diagnostic buffer of the F-I/O module indicating the faulty channels.
8-7
8.2.1
AK4/SIL 2/Category 3
AK 6/SIL3/Category 3 AK6/SIL3/Category 4
Use Cases 1 to 3
1
See Section 8.2.2
2
See Section 8.2.3
3
See Section 8.2.4
Figure 8-3
Warning The achievable safety class is dependent on the quality of the sensor and the magnitude of the proof-test interval in accordance with IEC 61508 (interval for external function test). If the quality of the sensor is lower than the quality stipulated in the required safety class, the sensor must be applied redundantly with a two-channel connection.
8-8
Application
Sensor
Evaluation of sensors
1oo1
1-channel
2.1
1-channel
1oo2
6/3/3
2.2
1oo2
Internal, without short-circuit test External Internal, without short-circuit test External Internal, with shortcircuit test 6/3/4
2.3
1oo2
3.1 3.2
1oo2
Note You can operate the various inputs of a fail-safe I/O module simultaneously in AK4/SIL2/Category 3 and in AK6/SIL3/Category 3 or 4. You only need to interconnect and assign parameters for the inputs as shown in the following sections.
Sensor Requirements
When using sensors for safety-related applications, please note the information in Section 5.5 "Requirements for Sensors.
8-9
8.2.2
Sensor Supply
The ET 200eco 4/8 F-DI provides sensor supply Vs1 for inputs 0 to 3 and sensor supply Vs2 for inputs 4 to 7. The sensor supply can be provided internally or externally.
8 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0
S1
S2
S3
S4
S5
S6
S7
L+
Figure 8-4 Wiring Diagram ET 200eco 4/8 F-DI One 1-channel Sensor Connected, Internal Sensor Supply
8 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0
S1
S2
S3
S4
S5
S6
S7
L+
Figure 8-5 Wiring Diagram ET 200eco 4/8 F-DI One 1-channel Sensor Connected, External Sensor Supply
8-10
Example of Error
Short circuit in DI 0 with DI 1 Short circuit in DI 0 with DI 4 P-short circuit in DI 0 M-short circuit in DI 0 Discrepancy error P-short current in sensor supply 1 M-short circuit in sensor supply 1 or GV1 defective Short circuit in sensor supply 1 with sensor supply 2 Error in read/test circuit Supply voltage fault
*
No No No Yes* No Yes
No No No No No Yes
Yes
No
No
Yes Yes
Yes Yes
Yes Yes
Error is detected only in case of signal corruption. That is, the signal read differs from the sensor signal. If there is no signal corruption with respect to the sensor signal, error detection is not possible and is not required from a safety standpoint.
8-11
8.2.3
Sensor Supply
The ET 200eco 4/8 F-DI provides sensor supply Vs1 for inputs 0 to 3 and sensor supply Vs2 for inputs 4 to 7. The sensor power supply can be provided internally or externally.
Wiring Diagram for Application 2.1 Connecting one channel of one sensor to two inputs
One channel of a sensor is connected to two inputs of the fail-safe I/O module for each process signal (1oo2 evaluation). Note If the voltage is supplied to the sensor by the fail-safe I/O module, you must use the internal sensor supply Vs1. Connection to Vs2 is not possible.
8-12
4 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
Figure 8-6 Wiring Diagram ET 200eco 4/8 F-DI One Channel of a Sensor Connected to Two Inputs, Internal Power Supply
4 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
Figure 8-7 Wiring Diagram ET 200eco 4/8 F-DI One Channel of a Sensor Connected to Two Inputs, External Power Supply
8-13
Warning To achieve AK6/SIL3/Category 3 using this wiring, you must use a sensor qualified for this class.
Example of Error
Short circuit in DI 0 with DI 1 Short circuit in DI 0 with DI 4 P-short circuit in DI 0 M-short circuit in DI 0 Discrepancy error P-short current in sensor supply 1 M-short circuit in sensor supply 1, or sensor supply 1 defective Short circuit in sensor supply 1 with sensor supply 2 Error in read/test circuit Supply voltage fault
*
No No No Yes No Yes
Yes
No
No
Yes Yes
Yes Yes
Yes Yes
Error is detected only in case of signal corruption. In other words, the signal read differs from the sensor signal (discrepancy error). If there is no signal corruption with respect to the sensor signal, error detection is not possible and is not required from a safety standpoint.
8-14
Wiring Diagram for Application 2.2 Connecting a two-channel sensor to two channels
Two channels of a 2-channel sensor are connected to two inputs of the fail-safe I/O module for each process signal (1oo2 evaluation).
ET 200eco 4/8 F-DI
4 F-DI
L+ M
Vs1
DI0
DI1
DI2
DI3
Vs2
DI4
DI5
DI6
DI7
S0 S1 S2 S3
L+
Figure 8-8 Wiring Diagram ET 200eco 4/8 F-DI Two Channels of a 2-channel Sensor Connected, Internal Sensor Supply
4 F-DI
L+ M
Vs1
DI0
DI1
DI2
DI3
Vs2
DI4
DI5
DI6
DI7
S0 S1 S2 S3
L+
Figure 8-9 Wiring Diagram ET 200eco 4/8 F-DI Two Channels of a 2-channel Sensor Connected, External Sensor Supply
8-15
Wiring Diagram for Application 2.2 Connecting two channels of two 1-channel sensors
Two channels of two 1-channel sensors are connected to two inputs of the fail-safe I/O module for each process signal (1oo2 evaluation). The sensors can also be supplied via an external sensor supply.
ET 200eco 4/8 F-DI
4 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
Figure 8-10 Wiring Diagram ET 200eco 4/8 F-DI Two Channels of Two 1-channel Sensors Connected, Internal Sensor Supply
Warning To achieve AK6/SIL3/Category 3 using this wiring, you must use a sensor qualified for this class.
8-16
Example of Error
Short circuit in DI 0 with DI 1 Short circuit in DI 0 with DI 4 P-short circuit in DI 0 M-short circuit in DI 0 Discrepancy error P-short current in sensor supply 1 M-short circuit in sensor supply 1, or sensor supply 1 defective Short circuit in sensor supply 1 with sensor supply 2 Error in read/test circuit Supply voltage fault
*
Error is detected only in case of signal corruption. In other words, the signal read differs from the sensor signal (discrepancy error). If there is no signal corruption with respect to the sensor signal, error detection is not possible and is not required from a safety standpoint.
Wiring Diagram for Application 2.3 Connecting a non-equivalent sensor to two non-equivalent channels
Two channels of a non-equivalent sensor are connected to two inputs of the failsafe I/O module for each process signal (1oo2 evaluation). The upper channels on the fail-safe I/O module (DI0 through DI3) supply the useful signals. If no faults are detected, these signals will be available in the I/O area for inputs on the F-CPU. Note If the voltage is supplied to the sensor by the fail-safe I/O module, you must use the internal sensor supply Vs1. Connection to Vs2 is not possible.
8-17
4 F-DI
L+ M Vs1 DI0 * DI1 * DI2 * DI3 * Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
* The upper channels on the fail-safe I/O module provide the useful signals.
Figure 8-11 Wiring Diagram ET 200eco 4/8 F-DI Two Channels of a Non-equivalent Sensor Connected (for non-equivalence), Internal Sensor Supply
4 F-DI
L+ M Vs1 DI0 * DI1 * DI2 * DI3 * Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
* The upper channels on the fail-safe I/O module provide the useful signals.
Figure 8-12 Wiring Diagram ET 200eco 4/8 F-DI Two Channels of a Non-equivalent Sensor Connected (for non-equivalence), External Sensor Supply
8-18
Wiring Diagram for Application 2.3 Connecting two one-channel sensors to two non-equivalent channels
Two channels of two 1-channel sensors are connected non-equivalent to two inputs of the F-I/O module for each process signal (1oo2 evaluation). The sensors can also be supplied via an external sensor supply.
ET 200eco 4/8 F-DI
4 F-DI
L+ M Vs1 DI0 * DI1 * DI2 * DI3 * Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
Acquisition of the same process variable with mechanically separate * The upper channels on the fail-safe I/O module provide the useful signals.
Figure 8-13 Wiring Diagram ET 200eco 4/8 F-DI Two Channels of Two 1-channel Sensors Connected (for non-equivalence), Internal Sensor Supply
Warning To achieve AK6/SIL3/Category 3 using this wiring, you must use a sensor qualified for this class.
8-19
Example of Error
Short circuit in DI 0 with DI 1 Short circuit in DI 0 with DI 4 P-short circuit in DI 0 M-short circuit in DI 0 Discrepancy error P-short current in sensor supply 1 M-short circuit in sensor supply 1, or sensor supply 1 defective Short circuit in sensor supply 1 with sensor supply 2 Error in read/test circuit Supply voltage fault
*
Error is detected only in case of signal corruption. In other words, the signal read differs from the sensor signal (discrepancy error). If there is no signal corruption with respect to the sensor signal, error detection is not possible and is not required from a safety standpoint.
8-20
8.2.4
Sensor Supply
The ET 200eco 4/8 F-DI provides sensor supply Vs1 for inputs 0 to 3 and sensor supply Vs2 for inputs 4 to 7. The sensor must be supplied internally.
8-21
Wiring Diagram for Application 3.1 Connecting a two-channel sensor to two channels
Two channels of a 2-channel sensor are connected to two inputs of the fail-safe I/O module for each process signal (1oo2 evaluation).
ET 200eco 4/8 F-DI
4 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
Figure 8-14 Wiring Diagram ET 200eco 4/8 F-DI Two Channels of a 2-channel Sensor Connected, Internal Sensor Supply
As an alternative, you can connect two 1-channel sensors (see Figure 8-10). In this case, the same process variable is acquired with two mechanically separate sensors. Warning To achieve AK6/SIL3/Category 4 using this wiring, you must use a sensor qualified for this class.
8-22
Wiring Diagram for Application 3.2 Connecting a non-equivalent sensor to two non-equivalent channels
Two channels of a non-equivalent sensor are connected to two inputs of the failsafe I/O module for each process signal (1oo2 evaluation). The upper channels on the fail-safe I/O module (DI0 through DI3) supply the useful signals. If no faults are detected, these signals will be available in the I/O area for inputs on the F-CPU. Note You must use the internal sensor supply Vs1 to supply voltage to the sensor. Connection to Vs2 is not possible.
4 F-DI
L+ M Vs1 DI0 * DI1 * DI2 * DI3 * Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
* The upper channels on the fail-safe DI I/O module provide the useful signals.
Figure 8-15 Wiring Diagram ET 200eco 4/8 F-DI Two Channels of a Non-equivalent Sensor Connected (for non-equivalence), Internal Sensor Supply
As an alternative, you can connect two 1-channel sensors non-equivalent (see Figure 8-13). In this case, the same process variable is acquired with two mechanically separate sensors. Warning To achieve AK6/SIL3/Category 4 using this wiring, you must use a sensor qualified for this class.
8-23
Example of Error
Short circuit in DI 0 with DI 1 Short circuit in DI 0 with DI 4 P-short circuit in DI 0 M-short circuit in DI 0 Discrepancy error P-short current in sensor supply 1 M-short circuit in sensor supply 1, or sensor supply 1 defective Short circuit in sensor supply 1 with sensor supply 2 Error in read/test circuit Supply voltage fault
*
Error is detected only in case of signal corruption. In other words, the signal read differs from the sensor signal (discrepancy error). If there is no signal corruption with respect to the sensor signal, error detection is not possible and is not required from a safety standpoint.
Methods for detecting all short circuits are permissible even if no individual short circuits are detected, provided they do one of the following: Do not cause corruption of read signals compared to sensor signals Cause corruption of read signals compared to sensor signals, but in the direction that ensures safety
8-24
8.2.5
The SF LED is lit. When the fault is cleared, the LED flashes. After acknowledging the fault in the safety program, the SF LED goes off again. See also Chapter 6.
Diagnostic Functions
The following table provides you with an overview of the diagnostic functions of the ET 200eco 4/8 F-DI. Diagnostic functions are assigned either to one channel or to the entire fail-safe I/O module.
Table 8-9 Diagnostic Functions of the ET 200eco 4/8 F-DI
Fault Number LED Signaled in Effective Application Range of Diagnostics Assignable Parameter?
Diagnostic Function*
Short circuit Overtemperature Internal error Parameter assignment error Sensor or load voltage fault Communication error Discrepancy error (1oo2 evaluation)
*
SF SF SF SF SF SF SF
1, 2, 3 1, 2, 3 1, 2, 3 1, 2, 3 1, 2, 3 1, 2, 3 2,3
Yes No No No No No No
Specifically for fail-safe I/O modules; display in STEP 7, see Table 6-1.
Note If you have activated the short-circuit test for the fail-safe I/O module in STEP 7 and are using only one of the two internal sensor supplies of the module (Vs1 or Vs2), a channel P-short circuit is then detected for each of the four channels with a sensor supply that is not used. Four "short-circuit" diagnostic functions are generated in the diagnostic buffer of the fail-safe I/O module.
8-25
Diagnostic Message
Short circuit
Short circuit in the sensor Cross circuit in the sensor Internal error
Eliminate short circuit/cross circuit Replace module Check ambient temperature, and check whether permissible output current of the sensor supply is exceeded for the ambient temperature After clearing the problem, you must turn the power off and on again
Overtempera- Temperature limit in the module ture housing is exceeded causing module to be deactivated
Internal module fault has occurred Inserted module does not match configuration Faulty parameter assignment PROFIsafe address set incorrectly in the fail-safe I/O module
Replace module Correct the configuration (compare actual and preset configuration), and check communication paths Correct the parameter assignment Check whether the PROFIsafe address on the module matches the configuration in STEP 7 HW Config Check module for correct contact After clearing the problem, you must turn the power off and on again
Error in communication between F- Check the PROFIBUS connection CPU and module due to defective Eliminate the interference PROFIBUS connection or higher than permissible EMI, for example PROFIsafe monitoring time set too low Configuration of the fail-safe I/O module does not match safety program Set a higher value for the "F-monitoring time parameter for the module in STEP 7 HW Config Recompile the safety program; then download the configuration and safety program to the F-CPU again
8-26
Diagnostic Message
Possible Causes
Remedies
Short circuit between unconnected Eliminate short circuit sensor cable and the sensor supply cable Wire break in connected sensor cable or the sensor supply cable Assigned discrepancy time too short Eliminate broken wire Check the assigned discrepancy time After eliminating the problem, the failsafe I/O module must be re-integrated in the safety program.
For more detailed information on passivation and reintegration of F-I/O, refer to Chapter 6 and the S7 Distributed Safety, Configuration and Programming manual or Programmable Controllers S7 F/FH Systems.
8-27
8.2.6
60 x 210 x 28 Approx. 220 g Can be selected per input 8, maximum 4, maximum 6 Byte 4 Byte 30 m, maximum 1-channel SIL2 AK4 Category 3 SIL2 2-channel SIL3 AK6 Category 4 SIL3 << 1.00 E-05 << 1.00 E-10
Number of inputs
1-channel 2-channel In the I/O area for inputs In the I/O area for outputs Unshielded In Accordance with IEC 61508 In accordance with DIN VDE 0801 In accordance with EN 954
Safety-related characteristics
Low demand mode (average probability << 1.00 E-03 of failure on demand) High demand/continuous mode (probability of a dangerous failure per hour) << 1.00 E-08
Permitted Range Power loss ride-through of L+ Power loss ride-through of internal P5 Reverse polarity protection
All installations Up to 55C Between channels and backplane bus Between channels and power supply Between channels Between channels/power supply and shield Shield and ET 200eco bus connection Shield and I/O ET 200eco bus connection and I/O 8 Yes No No Yes
Electrical isolation
8-28
Technical Specifications
Shield and ET 200eco bus connection Shield and I/O ET 200eco bus connection and I/O From load voltage L+ (without load)
350 VAC/1 min 350 VAC/1 min 350 VAC/1 min 100 mA, typical 3 W, typical
Status display Inputs Sensor supply Interrupts Diagnostic Interrupt Diagnostic functions
Green LED per channel Green LED for both channels "ON" Red LED (SF) Red LED (BF)
Diagnostic information can be displayed Possible 2 Minimum L+ (-1.5 V) 300 mA 0 mA to 300 mA 600 mA Yes, electronic 0.7 A to 1.8 A
Output current
Operating value
Input voltage
Rated value For "1 signal For "0 signal For "1 signal
Input current
8-29
Technical Specifications
Input delay*
Assignable (for all inputs together) Typically 3 ms Typically 15 ms Typically 3 ms Typically 15 ms (2.6 ms to 3.4 ms) (13 ms to 17 ms) (2.6 ms to 3.4 ms) (13 ms to 17 ms)
In accordance with IEC 1131, Type 1 Not possible 0.6 mA, maximum See Chapter 10
Time, Frequency
Short-circuit test activated at input delay of 3 ms: at input delay of 15 ms: Short-circuit test deactivated
Protection of supply voltage L+ from surge in accordance with IEC 61000-4-5 with external protection elements only
Protection of inputs and outputs from surge stressing in accordance with IEC 61000-4-5 with external protection elements only
* *
If there is a risk of overvoltage on the lines, to avoid a safety shutdown of the fail-safe digital inputs and the sensor power supply, you must set an input delay of 15 ms (see Section 7.3). For requirements for sensors, refer to Section 5.5
8-30
9-1
9-2
10
Response Times
Introduction
The response times of ET 200eco fail-safe I/O module are listed below. The response times of the fail-safe I/O module are included in the calculation of F-system response time. You will find information about the calculation of F-system response times in the Safety Engineering in SIMATIC S7 system description.
Maximum Response Time if a Fault Occurs: The following table shows the maximum response times of the fail-safe ET 200eco I/O module when an error/fault is present, depending on the parameter assignment in STEP 7 and the evaluation of the sensors.
Table 10-2 ET 200eco 4/8 F-DI: Maximum Response Time if a Fault Occurs 1oo1 Evaluation Input delay Short-circuit test deactivated Short-circuit test activated 3 ms 35 ms 55 ms 15 ms 47 ms 106 ms 1oo2 evaluation** 3 ms 23 ms 29 ms 15 ms 35 ms 65 ms
**
in 1oo2 evaluation, the response times also depend on the set discrepancy times: Provide value 0: The times in the formula/table above apply. Provide last valid value: The times in the formula/table above are extended by the set discrepancy time.
10-1
Response Times
Note The MS Excel files for calculating maximum response times (s7fcotib.xls or s7ftimeb.xls) provided with the S7 Distributed Safety and S7 F/FH Systems optional packages support calculation of the maximum response time when a fault is present by increasing the response time by the amount of the parameterized discrepancy time.
10-2
11
Glossary
1oo1 evaluation is a type of sensor evaluation in which one -> sensor is connected to the fail-safe I/O module by means of a single channel. -> Sensor evaluation method - In 1oo2 evaluation, two input channels are occupied, either by one 2-channel sensor or two single-channel sensors. The input signals are compared internally for equality (equivalence) or non-equality (nonequivalence).
1oo1 Evaluation
1oo2 Evaluation
A Acknowledgment Time During the acknowledgement time, the -> F-I/O acknowledge the sign of life specified by the -> F-CPU. The acknowledgement time enters into the calculation of the -> monitoring time and -> response time for the F-system as a whole. Actuators can be power relays or contactors for switching on consumers, or they can be consumers themselves (for example, directly controlled solenoid valves). Availability is the probability that a system is functional at a specific point in time. Availability can be increased by redundancy, e.g., by using redundant signal modules and/or by using multiple -> sensors at the same measuring point.
Actuator
Availability
C Category Category in accordance with EN 954-01: With -> fail-safe I/O modules, up to category 4 can be achieved in safety mode. Channel Fault A channel fault is a channel-related fault, such as a wire break or a short circuit.
11-1
Glossary
Channel Group
The channels of a module are grouped together in a channel group. Certain parameters in STEP 7 can only be assigned to channel groups, rather than to individual channels. The inputs of an I/O module are identified uniquely by means of the channel number and the channel-specific diagnostic messages are assigned. In this passivation method, when a -> channel fault occurs, only the channel involved is passivated (method available in S7 F/FH systems only). In the event of a module fault, all channels of the -> fail-safe I/O module are passivated. Systematic arrangement of individual I/O modules (configuration) Cyclic Redundancy Check
Channel Number
Channel-specific passivation
Configuration CRC
CRC Signature
A CRC signature in the safety message frame is used to safeguard the validity of the process values in the safety message frame, the correctness of the assigned address references, and the safety-related parameters.
D Discrepancy Analysis Discrepancy analysis for equivalence or nonequivalence is used for failsafe inputs to determine faults based on the time characteristic of two signals with the same functionality. Discrepancy analysis is initiated when different levels are detected for two associated input signals (for nonequivalence testing, when the same levels are detected). After a programmable time interval (so-called -> discrepancy time) has elapsed, a check is made to determine whether the difference has disappeared (for nonequivalence testing, whether the agreement has disappeared). If not, this means that a discrepancy error exists. There are two types of discrepancy analyses for fail-safe input modules: In the case of -> 1oo2 evaluation: The discrepancy analysis is carried out between the two input signals of the 1oo2 evaluation in the fail-safe input module. In the case of redundant I/O (S7 FH systems only): The discrepancy analysis is performed between the two input signals of the redundant input modules by the fail-safe driver blocks of the S7 F Systems optional software.
11-2
Glossary
Discrepancy Time
Discrepancy time is a period of time configured for the -> discrepancy analysis. If the discrepancy time is set too high, the times for fault detection and -> fault response are extended unnecessarily. If the discrepancy time is set too low, availability is decreased unnecessarily because a discrepancy error is detected when, in reality, no fault exists.
F Fail-safe I/O module The ET 200eco I/O module that can be used for safety-related operation (-> safety mode) in S7 Distributed Safety or S7 F/FH fail-safe systems. This I/O module has integrated -> safety functions. Fail-Safe Systems Fail-safe systems (F-systems) are systems that remain in a safe state or immediately switch to another safe state as soon as particular failures occur. The maximum fault reaction time for an F-system is the time between the occurrence of any fault and a safe response at all affected fail-safe outputs. For -> F-System in total: The maximum fault reaction time is the time between occurrence of any fault in any -> F-I/O and a safe response at the relevant fail-safe output. For inputs: The maximum fault reaction time is the time between the occurrence of a fault and a safe response at the backplane bus/on PROFIBUS DP. For digital outputs: The maximum fault reaction time is the time between the occurrence of a fault and a safe response at the digital output. Fault Tolerance Time The fault tolerance time of a process is a time interval during which the process can be left on its own without risk to life and limb of the operating personnel or damage to the environment. Within the fault tolerance time, any type of F-system process control is tolerated. That is, during this time, the -> F-system can control its process incorrectly or it can even exercise no control at all. The fault tolerance time depends on the process type and must be determined on a case-by-case basis. F-CPU An F-CPU is a central processing unit with fail-safe capability that is permitted for use in S7 Distributed Safety/S7 F/FH systems. For S7 F/FH systems, the F-copy license allows the central processing unit to be used as an F-CPU. That is, it can execute a -> safety program. For S7 Distributed Safety, an F-copy license is not required. A standard user program can also be run on the F-CPU.
11-3
Glossary
F-I/O
F-I/O is a group designation for fail-safe inputs and outputs available in SIMATIC S7 for integration in S7 Distributed Safety and S7 F/FH systems. The following F-I/O modules are available: Fail-safe ET 200eco I/O module
S7-300 fail-safe signal modules (F-SMs) ET 200S fail-safe module Fail-safe DP standard slaves (for S7 Distributed Safety only)
I I/O Module Fault I/O module faults can be external faults (for example, missing load voltage) or internal faults (for example, processor failure). An internal fault always requires I/O module replacement.
N Nonequivalent Sensor A nonequivalent -> sensor is a reversing switch that is connected to two inputs of an -> F-I/O (via 2 channels) in -> fail-safe systems (for -> 1oo2 evaluation of sensor signals).
P Parameter Assignment Parameter assignment via PROFIBUS DP: Transfer of slave parameters from the DP master to the DP slave Parameter assignment of modules: Setting the module behavior using the STEP 7 configuration software
11-4
Glossary
Passivation
If an -> F-I/O module detects a fault, it switches either the affected channel or all channels to a -> safe state; that is, the channels of the FI/O module are passivated. The F-I/O signals the detected faults to the CPU. For an F-I/O with inputs, if passivation occurs, the F-system provides fail-safe values for the safety program instead of the process values pending at the fail-safe inputs. For an I/O module with outputs, if passivation occurs, the F-system transfers fail-safe values (0) to the fail-safe outputs instead of the output values provided by the safety program.
PG
Programming devices (PGs) are compactly designed personal computers made especially for use in an industrial setting. A programming device (PG) is fully equipped for programming SIMATIC automation systems. The process image is a component of the system memory of the CPU. At the start of the cyclical program, the signal states of the input modules/submodules are transferred to the process image of the inputs. At the end of the cyclic program, the process image of the outputs is transferred to the output modules/submodules as the signal state. PROcess FIeld BUS, German process and fieldbus standard specified in IEC 61784-1:2002 Ed1 CP 3/1. This standard specifies functional, electrical, and mechanical properties for a bit-serial field bus system. PROFIBUS is available with the following protocols: DP (= distributed I/O), FMS (= Fieldbus message specification), PA (= Process automation), or TF (= Technological functions).
Process Image
PROFIBUS
PROFIsafe
Safety-related PROFIBUS DP/PA bus profile for communication between the -> safety program and the -> fail-safe I/O in a -> fail-safe system.
PROFIsafe Address Every -> F-I/O module has a PROFIsafe address You must configure the PROFIsafe address in STEP 7 HW Config and set it on the F-I/O using a switch. PROFIsafe Monitoring Time Proof-Test Interval Monitoring time for safety-related communication between the F-CPU and F-I/O A component must be set in the fail-safe state following the proof-test interval. That is, it is replaced by an unused component or it is proven to be completely without faults.
11-5
Glossary
R Redundancy, AvailabilityEnhancing Redundancy, Safety-Enhancing Availability-enhancing redundancy means multiple availability of components to ensure that components continue to function even in the event of hardware faults. Multiple availability of components with the aim of exposing hardware faults based on comparison (for example, -> 1oo2 evaluation in fail-safe signal modules. Once a fault has been eliminated, the -> F-I/O must be reintegrated (depassivated). The reintegration (switchover from fail-safe values to process values) occurs either automatically or only after user acknowledgement in the safety program. For an F-I/O module with inputs, the process values pending at the failsafe inputs are provided again for the -> safety program after reintegration. For an F-I/O module with outputs, the -> F-system again transfers the output values provided in the safety program to the fail-safe outputs. Response Time Response time starts with the detection of an input signal and ends with the modification of a gated output signal. The actual response time is between the shortest and the longest response time. The longest response time must always be anticipated. For fail-safe inputs: the response time represents the time between a signal change at the input and safe delivery of the safety message frame on the backplane bus. For fail-safe digital outputs: the response time represents the time between an arriving safety message frame from the backplane bus and the signal change at the digital output.
Reintegration
S Safe State The basis of the safety concept for fail-safe systems is that there is a safe state for all process variables. For digital fail-safe I/O modules, the safe state is, for example, the value "0". Safety function is a mechanism built into the -> F-CPU and -> F-I/O that allows them to be used in -> S7 Distributed Safety or S7 F/FH systems. IEC 61508: Function implemented by a safety system to ensure that the system is kept in a safe state or brought to a safe state in the event of a particular fault.
Safety Function
11-6
Glossary
The safety integrity level (SIL) is a safety class in accordance with IEC 61508 and prEN 50129. The higher the safety integrity level, the stricter the measures must be to prevent and eliminate systematic faults and to remedy hardware failures. With fail-safe ET 200eco I/O modules, safety-integrity levels up to SIL 3 can be achieved in safety mode.
In safety mode, data is transferred between the -> F-CPU and -> the failsafe I/O module in a safety message frame. Safety mode is the operating mode of the -> F-I/O that allows -> safetyrelated communication by means of -> safety message frames. -> ET 200eco fail-safe I/O modules can only be used in safety mode. The safety program is a safety-related user program.
Safety Program
Safety Requirement Safety requirement class (AK) in accordance with DIN V 19250 (DIN V VDE 0801): Class (AK) Safety requirement classes are a means of categorizing safety requirements for preventing and remedying faults. With -> fail-safe I/O modules, safety requirement classes up to AK6 can be used in -> safety mode. Safety-Related Communication Sensor Safety-related communication is used to exchange fail-safe data.
Sensors permit exact acquisition of digital and analog signals and exact measurement of routes, positions, velocities, rotational speeds, weights, etc. There are two types of sensor evaluation:
Sensor Evaluation
-> 1oo1 evaluation Sensor signal is read out once -> 1oo2 evaluation: To increase availability, the sensor signal is read twice by the same -> fail-safe I/O and compared internally.
Standard Mode
Operating mode of F-I/O, in which standard communication is possible but not -> safety-related communication by means of -> safety message frames. ET 200eco fail-safe I/O modules can only be used in -> safety mode.
Static Parameter
Static parameters can only be set when the CPU is in STOP mode and cannot be changed by means of SFC (system function) while the user program is running.
11-7
Glossary
11-8
Index
1
1-channel sensor ........................................... 8-5 1oo1 evaluation ET 200eco 4/8 F-DI.................................. 8-10 1oo1 Evaluation ........................................... 11-1 1oo2 evaluation............................................ 11-1 ET 200eco 4/8 F-DI......8-12, 8-15, 8-16, 8-17, 8-19, 8-22, 8-23 Channel fault ................................................11-1 Channel group error .......................................6-1 Channel number ...........................................11-2 Channel-specific diagnostics of the fail-safe I/O module ..........................6-5 Collection........................................................1-3 Commissioning of ET 200eco ..............................................2-6 Communication safety-related............................................11-7 Communication error ...............................5-4, 6-6 ET 200eco 4/8 F-DI ..................................8-25 Components of the fail-safe ET 200eco .........2-4 Conditioning time internal......................................................10-1 Configuration of F-I/O modules.........................................3-1 Configuring ...................................................11-2 Conventions in this manual .............................................1-4 CRC..............................................................11-2 CSA Approval.................................................7-3 C-Tick Mark ....................................................1-2 cULus approval ..............................................7-3
2
2-channel equivalent sensor .......................... 8-5 2-channel non-equivalent sensor .......... 8-5, 8-23
A
Accessories.................................................... 9-1 Acknowledgment Time................................. 11-1 ET 200eco 4/8 F-DI.................................. 8-30 Actuator ....................................................... 11-1 Address PROFIsafe ................................................. 4-3 Address switch for PROFIsafe addresses .......................... 4-3 setting ........................................................ 4-4 Addresses Occupied by Useful Data ............. 4-2 Applications ET 200eco 4/8 F-DI.................................... 8-8 Approvals CE, FM, UL, CSA, cULus, KEMA. 7-2, 7-3, 7-4 shipbuilding ................................................ 7-5 Availability .................................................... 11-1
D
Deactivated channel .......................................6-1 Diagnostic functions .......................................6-3 can be activated by user.............................6-3 cannot be activated by user........................6-3 ET 200eco 4/8 F-DI ..................................8-25 reading out .................................................6-6 Diagnostics channel-specific..........................................6-5 definition .....................................................6-3 Directives........................................................7-6 Discrepancy analysis....................................11-2 Discrepancy behavior .....................................8-6 Discrepancy error ET 200eco 4/8 F-DI ..................................8-25 Discrepancy Time..................................8-7, 11-3 effect on response time ..............................8-7 ET 200eco 4/8 F-DI ....................................8-5 Disposal..........................................................1-4 Documentation additional ....................................................1-2 Duration of sensor signals requirement relating to................................5-5
B
Basic knowledge requirements .............................................. 1-1 BF LED .......................................................... 6-4 Block diagram ET 200eco 4/8 F-DI.................................... 8-4
C
Category ...................................................... 11-1 Category (Cat.) achievable.................................................. 2-5 Causes of errors ET 200eco 4/8 F-DI.................................. 8-26 CE Certification ....................................... 1-2, 7-2 Certification .................................................... 1-2 Channel deactivated................................................. 6-1
ET 200eco Distributed I/O Station Fail-Safe I/O Module A5E00297494-02
Index-1
Index
E
Electrical connection ...................................... 5-2 Electromagnetic Compatibility........................ 7-7 Retry Limit........................................... 3-2, 7-8 EMC............................................................... 7-7 Environmental Requirements climatic ..................................................... 7-13 Environment-related requirements mechanical............................................... 7-12 ET 200eco ..................................................... 2-2 ET 200eco 4/8 F-DI acknowledgment time .............................. 8-30 applications ................................................ 8-8 block diagram............................................. 8-4 causes of errors and remedies................. 8-26 diagnostic functions ................................. 8-25 front view ................................................... 8-2 order number ............................................. 8-2 parameters in STEP 7................................ 8-5 safety-related characteristics ................... 8-28 sensor power supply .............. 8-10, 8-12, 8-21 special features for error detection........... 8-20 Special features for Error Detection ......... 8-11 special features for fault detection . 8-14, 8-17, 8-24 technical specifications ............................ 8-28 terminal assignment................................... 8-3 Wiring diagram....8-10, 8-12, 8-15, 8-16, 8-17, 8-19, 8-22, 8-23 ET 200eco Distributed I/O Station.................. 2-2
F-system.........................................................2-2 example configuration ................................2-3 F-Systems ......................................................2-3 Functional extra low voltage safe.............................................................5-2
G
General Technical Specifications ...................7-1
H
H/F Competence Center.................................1-5 How to Use this Documentation with manual ................................................1-4
I
I/O module fail-safe.......................................................2-2 I/O module failure Diagnostic message ...................................6-6 react to .......................................................6-6 IEC 61131 ......................................................7-4 Input delay....................................................10-1 ET 200eco 4/8 F-DI .............................8-5, 8-6 Installing fail-safe I/O module ....................................4-5 Interference pulse-shaped..............................................7-7 sinusoidal .................................................7-10 Internal conditioning time..............................10-1 Internal error ET 200eco 4/8 F-DI ..................................8-25 react to .......................................................6-6 IP 65 .............................................................7-14 IP 66 .............................................................7-14 IP 67 .............................................................7-14
F
Fail-safe automation system .......................... 2-2 Fail-safe I/O module....................................... 2-2 Fail-safe I/O modules available..................................................... 2-4 configuration .............................................. 3-1 parameter assignment ............................... 3-1 Fail-Safe Systems........................................ 11-3 Fault detection ET 200eco 4/8 F-DI......8-11, 8-14, 8-17, 8-20, 8-24 Fault reaction of the fail-safe I/O module .......................... 6-1 Fault reaction time ....................................... 11-3 Fault/Error types of the fail-safe I/O module .......................... 6-6 F-CPU.......................................................... 11-3 address assignment................................... 4-1 F-I/O.................................................... 11-4, 11-5 F-I/O module .................................................. 2-2 fault reaction .............................................. 6-1 installing ..................................................... 4-5 possible uses ............................................. 2-2 response times......................................... 10-1 wiring ......................................................... 5-3 F-I/O modules order number ............................................. 1-1 FM approval ................................................... 7-4 F-monitoring time ......................................... 11-4 ET 200eco 4/8 F-DI.................................... 8-5
L
LED display of faults.......................................................6-4 Line cross section...........................................5-2 Load voltage missing......................................6-6
M
Machine protection applications in.............................................6-3 Manual Contents .....................................................1-4 Marking for Australia.......................................1-2 Module diagnostics.........................................6-6 Module fault..................................................11-4 Module replacement .....................................11-4 Monitoring Time............................................11-4 ET 200eco 4/8 F-DI ....................................8-5
Index-2
Index
N
NAMUR recommendations requirements for power supply................... 5-3 Nominal line voltages................................... 7-14 Non-equivalent sensor ................................. 11-4
O
ON LED ......................................................... 6-4 ET 200eco 4/8 F-DI.................................. 8-25 Optional package ........................................... 3-1 Order numbers............................................... 9-1 F-I/O modules ............................................ 1-1 Overtemperature............................................ 6-6 ET 200eco 4/8 F-DI.................................. 8-25 Overvoltage category................................... 7-14
References additional ....................................................1-2 Reintegration ................................................11-6 Remedies ET 200eco 4/8 F-DI ..................................8-26 Requirement class........................................11-7 Requirement class (AK) achievable ..................................................2-5 Requirements for sensors..................................................5-5 Response times............................................11-6 effect of discrepancy time...........................8-7 of the fail-safe I/O module ........................10-1 Retry Limit ...............................................3-2, 7-8
S
S7 distributed safety example configuration ................................2-3 optional package .................................2-5, 3-1 Safe Functional Extra-Low Voltage ................5-2 Safe State...................................... 2-2, 6-1, 11-6 Safety class ...........................................8-8, 11-7 Safety function.......................................2-5, 11-6 Safety Integrity Level achievable ..................................................2-5 conditions for achieving with ET 200eco 4/8 F-DI ................................8-9 Safety message frame...........................4-3, 11-7 Safety Mode .................................. 2-4, 4-3, 11-7 Safety program.............................................11-7 Safety-related characteristics .........................8-1 ET 200eco 4/8 F-DI ..................................8-28 Safety-related deactivation .............................6-6 Saving errors ..................................................6-1 Scope of this manual .............................................1-1 Sensor ..........................................................11-7 externally supplied......................................5-2 non-equivalent ..........................................8-23 requirements ..............................................5-5 Sensor evaluation.........................................11-7 ET 200eco 4/8 F-DI ....... 8-5, 8-11, 8-14, 8-16, 8-19, 8-22, 8-24 Sensor interconnection ET 200eco 4/8 F-DI ........ 8-5, 8-16, 8-19, 8-24 Sensor or load voltage fault ET 200eco 4/8 F-DI ..................................8-25 sensor power supply ET 200eco 4/8 F-DI . 8-10, 8-11, 8-12, 8-14, 821 internal........................................................8-6 sensor power supply, faults of ET 200eco 4/8 F-DI ..................................8-25 Sensor signal requirement for duration .............................5-5 Sensor voltage missing ..................................6-6 Sensors requirements ..............................................5-5 Service ...........................................................1-6 SF LED...........................................................6-4 SFC 13 ...........................................................6-6 Shipbuilding approval .....................................7-5
P
Parameter ET 200eco 4/8 F-DI.................................... 8-5 Parameter Assignment ................................ 11-4 of F-I/O modules ........................................ 3-1 Parameter assignment error .......................... 6-6 ET 200eco 4/8 F-DI.................................. 8-25 Passivation .................................................. 11-5 channel-specific ....................................... 11-2 Pollution degree ........................................... 7-14 Possible uses F-I/O module .............................................. 2-2 Power failure ride-through.............................. 5-3 Power supply requirements .............................................. 5-3 Probability hazardous errors........................................ 5-5 Process image ............................................. 11-5 Process safety time...................................... 11-3 Processor failure .......................................... 11-4 PROFIBUS .................................................. 11-5 bus parameter settings for PROFIBUS DP 3-2 PROFIBUS standard...................................... 7-4 PROFIsafe ................................................... 11-5 address ...................................... 4-3, 5-4, 11-5 address assignment................................... 4-3 -Monitoring time ....................................... 11-5 Programming device .................................... 11-5 Proof-test interval....................5-5, 8-1, 8-8, 11-5 Protection class............................................ 7-14 Pulse-shaped interference ............................. 7-7 Purpose of the Manual................................... 1-1
R
Radio interference emission of............................................... 7-11 reading out diagnostic function ..................................... 6-6 Recycling ....................................................... 1-4 Redundancy availability-enhancing............................... 11-6 safety-enhancing...................................... 11-6
Index-3
Index
Short-circuit.................................................... 6-6 ET 200eco 4/8 F-DI................ 8-11, 8-14, 8-25 Short-circuit test .................................... 6-3, 10-1 ET 200eco 4/8 F-DI.8-5, 8-6, 8-11, 8-14, 8-16, 8-19, 8-22, 8-24, 8-25 Sinusoidal interference ................................ 7-10 Slave Diagnostics .......................................... 6-4 Reading out................................................ 6-6 Standard Mode ............................................ 11-7 Standard Operation........................................ 2-4 Standards ............................................... 1-2, 7-6 Startup of the fail-safe system........................ 6-1 Static parameters......................................... 11-7 Storage conditions ....................................... 7-11 Support .......................................................... 1-6 additional ................................................... 1-4
U
UL approval ....................................................7-3
V
Vibration .......................................................7-12 Voltages nominal line ..............................................7-14
T
Technical specifications ET 200eco 4/8 F-DI.................................. 8-28 Technical Specifications general ....................................................... 7-1 Terminal assignment ET 200eco 4/8 F-DI.................................... 8-3 Training center ............................................... 1-5 Transport and storage conditions................. 7-11
W
Wiring fail-safe I/O modules...................................5-3 wiring diagram ET 200eco 4/8 F-DI ..................................8-16 Wiring diagram ET 200eco 4/8 F-DI ..... 8-10, 8-12, 8-15, 8-17, 8-19, 8-22, 8-23
Index-4
Your Address: Name: Siemens AG A&D AS SM ID Postfach 1963 D-92209 Amberg Telefax: +49(9621)80-3103 mailto:doku@ad.siemens.de Company: Position: Street: Postal code / Place: Email: Phone: Fax:
General Questions
1.
3.
no
2.
4.
yes
no
Please specify the documents, for which you want to answer the questions below: A: Manual S7 Distributed Safety, Configuring and Programming B: Manual S7-300, Fail-Safe Signal Modules D: Manual ET 200eco, Distributed I/O Fail-Safe I/O Module E: System Description Safety Engineering in SIMATIC S7
1.
In which project phase do you use this document frequently? Information Planning Configuration Assembly
Were able to find the required information? yes which was not: no
4.
What is the scope of the information? Just right Not enough - which topic:
Programming
2.
Finding the required information in the document: Too detailed which topic: How quickly can you find the desired information in the document? immediately after a brief search not at all after a long search if no, which was not: 5. Is the information easy to understand (texts, figures, tables)? yes no
Which search method do you prefer? Table of contents Full-text search Index others: 6. Are examples important to you? no, of less importance
Which supplements/improvements would you like in order to help you find the required information quickly?
yes, important were the examples enough? yes if no, on which topic: no
3.
Your judgement of the document as regards content. How satisfied are you with this document Totally satisfied Very satisfied Satisfied not very satisfied not satisfied 7. What are your suggestions as regards the contents of the document?