HIMax Safety Manual - Tuv-fs.com
HIMax Safety Manual - Tuv-fs.com HIMax Safety Manual - Tuv-fs.com
6 Communication Module HIMax6 Communication ModuleCommunication modules control both non-safety-related data transfer through field bussesand Ethernet, and safety-related data transfer to other HIMA controllers.• The processor module controls safety-related data transfer using the safeethernettransfer protocol. The communication module forwards the data packets to the othersystems. The safety-related protocol ensures that message any corrupted data inmessages are detected.• The standard protocols are for instance:- Modbus- PROFIBUS master/slaveA HIMax system can be equipped with a maximum of 20 communication modules.For more information, see Chapter 11.1, the module manual HI 801 011 and theCommunication Manual HI 801 101.6.1 Slots Permitted for Communication ModulesThe output modules can be plugged in to any slot in any base plate with the exception ofthe following:• Slots 1 and 2 of each base plate, which are reserved for the system bus modules• Slots used for processor modules. Depending on the system configuration, these can beslots 3, 4, 5 and 6 of Base Plate 0 and slots 3 and 4 of Base Plate 1.NOTICESystem malfunction possible!The slots reserved for processor and system bus modules must not be used forcommunication modules!!Page 28 of 70HI 801 003 D Rev.2.0
HIMax7 Input ModulesModuleNumberofchannelsSafety-relatedDigital inputsX-DI 32 01 32 SIL 3 •X-DI 32 02 32 SIL 3 •X-DI 32 04 32 SIL 3 •X-DI 32 05 32 SIL 3 •Analog inputsX-AI 32 01 32 SIL 3 •X-AI 32 02 32 SIL 3 •Table 11: Overview of the Input ModulesNon-reactivechannels7 Input ModulesRemarke.g., for initiators7.1 GeneralSafety-related inputs can be used for both safety-related signals and non-safety-relatedsignals. Non-safety-related signals, however, may not be used for safety functions!In addition to the diagnostic LEDs for the module, the controllers also generate statusmessages for the user program that can be evaluated. I/O faults stored in the diagnosticmemory can be read using the PADT.Safety-related input modules automatically perform stringent, cyclic self-tests duringoperation.If a fault occurs, a 0 signal is sent to the user program and, if possible, fault information isissued. The user program can read out the error code and evaluate this fault information.For more information on the input modules, refer to the individual module manuals.7.2 Safety of Sensors, Encoders and TransmittersIn safety-related applications, the PES and its connected sensors, encoders andtransmitters must all meet the safety requirements and achieve the specified SIL. Also referto Annex "Increasing the SIL Value of Sensors and Actuators".7.3 Redundancy of Inputs and Input ModulesTo increase availability, the input channels can be defined redundant to one another fromwithin the SILworX Hardware Editor. The following conditions must be ensured:• Input channels are located on different input modules of the same type.• Input channels have the same channel number.Both input channels are assigned to the same variable. If a sensor or an input module fails,the redundant channel supplies the values to the variable.It is permitted to assign all of the input module channels or only a few of them to thecorresponding channels of another input module.7.4 Slots Permitted for Input ModulesThe input modules can be plugged in to any slot in any base plate with the exception of thefollowing:• Slots 1 and 2 of each base plate, which are reserved for the system bus modules• Slots used for processor modules. Depending on the system configuration, these can beslots 3, 4, 5 and 6 of Rack 0 and slots 3 and 4 of Rack 1.HI 801 003 D Rev.2.0 Page 29 of 70
- Page 1: SAFETYHIMax ®Safety Manual
- Page 4 and 5: Table of contentsHIMax3.5 Certifica
- Page 6 and 7: Table of contentsHIMax10.2.9 Accept
- Page 8: 1 Safety Manual HIMax1.5 GlossaryTe
- Page 12 and 13: 2 Intended Use HIMaxStandardEC/EN 6
- Page 14 and 15: 2 Intended Use HIMax2.3.4 Power Sup
- Page 16 and 17: 3 Safety Concept for Using the PES
- Page 18 and 19: 3 Safety Concept for Using the PES
- Page 20 and 21: 3 Safety Concept for Using the PES
- Page 22 and 23: 3 Safety Concept for Using the PES
- Page 24 and 25: 4 Processor Modules HIMaxNOTESystem
- Page 26 and 27: 5 System Bus Module HIMaxWARNINGPhy
- Page 30 and 31: 7 Input Modules HIMaxNOTICESystem m
- Page 32 and 33: 7 Input Modules HIMax7.6 Checklists
- Page 34 and 35: 7 Input Modules HIMax7.6.3 Checklis
- Page 36 and 37: 7 Input Modules HIMax7.7 Safety-Rel
- Page 38 and 39: 7 Input Modules HIMax7.8 Checklist
- Page 40 and 41: 8 Output Modules HIMax8 Output Modu
- Page 42 and 43: 8 Output Modules HIMaxIn this state
- Page 44 and 45: 8 Output Modules HIMax8.7 Checklist
- Page 46 and 47: 9 Software HIMax9 SoftwareThe softw
- Page 48 and 49: 9 Software HIMax9.4 Resource Parame
- Page 50 and 51: 9 Software HIMaxExample: A key swit
- Page 52 and 53: 9 Software HIMaxThe user only need
- Page 54 and 55: 10 User program HIMaxSensors (digit
- Page 56 and 57: 10 User program HIMax10.2.5 Downloa
- Page 58 and 59: 10 User program HIMax10.2.10 Checkl
- Page 60 and 61: 11 Configuring Communication HIMaxN
- Page 62 and 63: 11 Configuring Communication HIMaxF
- Page 64 and 65: 11 Configuring Communication HIMaxP
- Page 66 and 67: AppendixHIMaxIndex of FiguresFigure
- Page 68: AppendixHIMaxIndexanalog inputsuse
<strong>HIMax</strong>7 Input ModulesModuleNumberofchannels<strong>Safety</strong>-relatedDigital inputsX-DI 32 01 32 SIL 3 •X-DI 32 02 32 SIL 3 •X-DI 32 04 32 SIL 3 •X-DI 32 05 32 SIL 3 •Analog inputsX-AI 32 01 32 SIL 3 •X-AI 32 02 32 SIL 3 •Table 11: Overview of the Input ModulesNon-reactivechannels7 Input ModulesRemarke.g., for initiators7.1 General<strong>Safety</strong>-related inputs can be used for both safety-related signals and non-safety-relatedsignals. Non-safety-related signals, however, may not be used for safety functions!In addition to the diagnostic LEDs for the module, the controllers also generate statusmessages for the user program that can be evaluated. I/O faults stored in the diagnosticmemory can be read using the PADT.<strong>Safety</strong>-related input modules automatically perform stringent, cyclic self-tests duringoperation.If a fault occurs, a 0 signal is sent to the user program and, if possible, fault information isissued. The user program can read out the error code and evaluate this fault information.For more information on the input modules, refer to the individual module manuals.7.2 <strong>Safety</strong> of Sensors, Encoders and TransmittersIn safety-related applications, the PES and its connected sensors, encoders andtransmitters must all meet the safety requirements and achieve the specified SIL. Also referto Annex "Increasing the SIL Value of Sensors and Actuators".7.3 Redundancy of Inputs and Input ModulesTo increase availability, the input channels can be defined redundant to one another fromwithin the SILworX Hardware Editor. The following conditions must be ensured:• Input channels are located on different input modules of the same type.• Input channels have the same channel number.Both input channels are assigned to the same variable. If a sensor or an input module fails,the redundant channel supplies the values to the variable.It is permitted to assign all of the input module channels or only a few of them to thecorresponding channels of another input module.7.4 Slots Permitted for Input ModulesThe input modules can be plugged in to any slot in any base plate with the exception of thefollowing:• Slots 1 and 2 of each base plate, which are reserved for the system bus modules• Slots used for processor modules. Depending on the system configuration, these can beslots 3, 4, 5 and 6 of Rack 0 and slots 3 and 4 of Rack 1.HI 801 003 D Rev.2.0 Page 29 of 70