Upload
others
View
4
Download
0
Embed Size (px)
Citation preview
GuardPLC Certified Function Blocks -- Basic SuiteCatalog Number 1753-CFBBASIC
Safety Reference Manual
Important User Information Solid state equipment has operational characteristics differing from those of electromechanical equipment. Safety Guidelines for the Application, Installation and Maintenance of Solid State Controls (publication SGI-1.1 available from your local Rockwell Automation sales office or online at http://literature.rockwellautomation.com) describes some important differences between solid state equipment and hard-wired electromechanical devices. Because of this difference, and also because of the wide variety of uses for solid state equipment, all persons responsible for applying this equipment must satisfy themselves that each intended application of this equipment is acceptable.
In no event will Rockwell Automation, Inc. be responsible or liable for indirect or consequential damages resulting from the use or application of this equipment.
The examples and diagrams in this manual are included solely for illustrative purposes. Because of the many variables and requirements associated with any particular installation, Rockwell Automation, Inc. cannot assume responsibility or liability for actual use based on the examples and diagrams.
No patent liability is assumed by Rockwell Automation, Inc. with respect to use of information, circuits, equipment, or software described in this manual.
Reproduction of the contents of this manual, in whole or in part, without written permission of Rockwell Automation, Inc., is prohibited.
Throughout this manual, when necessary, we use notes to make you aware of safety considerations.
The first line of trademarks is an example; the brand or product name changes according to publication but the rest of the line should remain the same. The second line should be used exactly as listed below in any case where it applies.
Allen-Bradley, ControlLogix, and RSLinx are trademarks of Rockwell Automation, Inc.
Trademarks not belonging to Rockwell Automation are property of their respective companies.
WARNINGIdentifies information about practices or circumstances that can cause an explosion in a hazardous environment, which may lead to personal injury or death, property damage, or economic loss.
IMPORTANT Identifies information that is critical for successful application and understanding of the product.
ATTENTION Identifies information about practices or circumstances that can lead to personal injury or death, property damage, or economic loss. Attentions help you identify a hazard, avoid a hazard, and recognize the consequence
SHOCK HAZARD Labels may be located on or inside the equipment, for example, a drive or motor, to alert people that dangerous voltage may be present.
BURN HAZARD Labels may be located on or inside the equipment, for example, a drive or motor, to alert people that surfaces may be dangerous temperatures.
http://literature.rockwellautomation.com
Summary of Changes
The information below summarizes the changes to this manual since the last publication.
To help you find new and updated information in this release of the manual, we have included change bars as shown to the right of this paragraph.
Topic Page
Correction to the Diverse Input Wiring Diagram - Automatic Reset 38
Important revised recommendations for setting the Pulse Test Duration of the Redundant Pulst Test Ouput (RPTO) function block
94
3 Publication 1753-RM001C-EN-P - May 2007
4 Summary of Changes
Publication 1753-RM001C-EN-P - May 2007
Table of Contents
PrefaceIntroduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9Understanding Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 9Additional Resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Chapter 1Redundant Input Function Block (RIN)
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Normal Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11Operation with Inconsistent Inputs . . . . . . . . . . . . . . . . . 12Operation with Circuit Reset Held On - Manual Reset Only . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12Cycle Inputs Operation . . . . . . . . . . . . . . . . . . . . . . . . . 13
Function Block Description . . . . . . . . . . . . . . . . . . . . . . . . . 14Relationship of I/O Wiring to Function Block Parameters . . . 16
Redundant Input with Manual Reset Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16Redundant Input with Automatic Reset Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Chapter 2Emergency Stop Function Block (ESTOP)
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Normal Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21Operation with Inconsistent Inputs . . . . . . . . . . . . . . . . . 22Operation with Circuit Reset Held On - Manual Reset Only . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22Cycle Inputs Operation . . . . . . . . . . . . . . . . . . . . . . . . . 23
Function Block Description . . . . . . . . . . . . . . . . . . . . . . . . . 24Relationship of I/O Wiring to Function Block Parameters . . . 26
Emergency Stop with Manual Reset Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26Emergency Stop with Automatic Reset Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Chapter 3Diverse Input Function Block (DIN) Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31Normal Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31Operation with Inconsistent Inputs . . . . . . . . . . . . . . . . . 32Operation with Circuit Reset Held On - Manual Reset Only . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32Cycle Inputs Operation . . . . . . . . . . . . . . . . . . . . . . . . . 33
5 Publication 1753-RM001C-EN-P - May 2007
6 Table of Contents
Function Block Description . . . . . . . . . . . . . . . . . . . . . . . . . 34Relationship of I/O Wiring to Function Block Parameters . . . 36
Diverse Input with Manual Reset Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36Diverse Input with Automatic Reset Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Chapter 4Enable Pendant Function Block (ENPEN)
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Normal Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41Operation with Inconsistent Inputs . . . . . . . . . . . . . . . . . 42Operation with Circuit Reset Held On - Manual Reset Only . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42Cycle Inputs Operation . . . . . . . . . . . . . . . . . . . . . . . . . 43
Function Block Description . . . . . . . . . . . . . . . . . . . . . . . . . 44Relationship of I/O Wiring to Function Block Parameters . . . 46
Enable Pendant with Manual Reset Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46Enable Pendant with Automatic Reset Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Chapter 5Light Curtain Function Block (LC) Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52Normal Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52Light Curtain Muting Operation . . . . . . . . . . . . . . . . . . . 53Inputs Inconsistent Operation. . . . . . . . . . . . . . . . . . . . . 55Circuit Reset Held On Operation (Manual Reset Mode Only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56Cycle Inputs Operation . . . . . . . . . . . . . . . . . . . . . . . . . 56Input Filter Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Function Block Description . . . . . . . . . . . . . . . . . . . . . . . . . 58Relationship of I/O Wiring to Function Block Parameters . . . 60
Light Curtain with Manual Reset Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60Light Curtain with Automatic Reset Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Publication 1753-RM001C-EN-P - May 2007
Table of Contents 7
Chapter 6Redundant Output with Continuous Feedback Monitoring Function Block (ROUT)
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65Function Block Description . . . . . . . . . . . . . . . . . . . . . . . . . 68Relationship of I/O Wiring to Function Block Parameters . . . 69
Redundant Output with Negative Feedback Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69Redundant Output with Positive Feedback Wiring and Programming. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Chapter 7Five-Position Mode Selector Function Block (FPMS)
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73Function Block Description . . . . . . . . . . . . . . . . . . . . . . . . . 74Relationship of I/O Wiring to Function Block Parameters . . . 75
Five-Position Mode Selector Wiring and Programming. . . 75
Chapter 8Two-Hand Run Station Function Block (THRS)
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Normal Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77Button Tie-Down Operation. . . . . . . . . . . . . . . . . . . . . . 78Cycle Buttons Operation . . . . . . . . . . . . . . . . . . . . . . . . 79Button Fault Operation . . . . . . . . . . . . . . . . . . . . . . . . . 80
Function Block Description . . . . . . . . . . . . . . . . . . . . . . . . . 81Relationship of I/O Wiring to Function Block Parameters . . . 83
Two-Hand Run Station with Active Pin Disabled Wiring and Programming . . . . . . . . . . . . . . . . . . . . . . . . 83Two-Hand Run Station with Active Pin Enabled Wiring and Programming . . . . . . . . . . . . . . . . . . . . . . . . 84
Chapter 9Redundant Pulse Test Output Function Block (RPTO)
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Normal Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88Cross-wiring Fault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89Automatic Fault Clearing . . . . . . . . . . . . . . . . . . . . . . . . 91Generate Pulse Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92Pulse Test on Input Transition . . . . . . . . . . . . . . . . . . . . 92
Function Block Description . . . . . . . . . . . . . . . . . . . . . . . . . 94Relationship of I/O Wiring to Function Block Parameters . . . 95
Redundant Pulse Test Output . . . . . . . . . . . . . . . . . . . . . 95
Publication 1753-RM001C-EN-P - May 2007
8 Table of Contents
Chapter 10Single Pulse Test Output Function Block (SPTO)
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Normal Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98Function Block Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . 102Relationship of I/O Wiring to Function Block Parameters . . 103
Single Pulse Test Output Wiring and Programming . . . . 103
Index
Publication 1753-RM001C-EN-P - May 2007
Preface
Introduction This reference manual is intended to describe Rockwell Automation’s GuardPLC Safety Application Function Block Set for Safety Integrity Level (SIL) 3, Category (CAT) 4 applications.
Understanding Terminology The following table defines abbreviations used in this manual.Abbreviation Type Description
AP Input Active Pin
BP Output Buttons Pressed
BT Output Button Tiedown
CB Output Cycle Buttons
CHA Input Channel A
CHB Input Channel B
CI Output Cycle Inputs
CR Input Circuit Reset
CRHO Output Circuit Reset Held On
EN Input Enable
FB1 Input Feedback 1
FB2 Input Feedback 2
FP Output Fault Present
FR Input Fault Reset
IFT Input Input Filter Time
II Output Inputs Inconsistent
IN1 to IN5 Input Input 1 to Input 5
LBF Output Left Button Failure
LBNC Input Left Button Normally Closed
LBNO Input Left Button Normally Opened
LCB Output Light Curtain Blocked
LCM Output Light Curtain Muted
MLC Input Mute Light Curtain
MMS Output Multiple Modes Selected
NM Output No Mode
O1 to O5 Output Output 1 to Output 5
O1FF Output Output 1 Feedback Failure
O2FF Output Output 2 Feedback Failure
RBF Output Right Button Failure
RBNC Input Right Button Normally Closed
RBNO Input Right Button Normally Opened
SA Output Station Active
SAF Output Station Active Failure
9 Publication 1753-RM001C-EN-P - May 2007
10 Preface
Additional Resources The following table lists documents that contain additional information concerning Rockwell Automation GuardPLC products.
If you would like a manual, you can:
• download a free electronic version from the Internet athttp://literature.rockwellautomation.com.
• purchase a printed manual by contacting your local Allen-Bradley distributor or Rockwell Automation sales office.
Resource Description
GuardPLC Controller Systems Safety Reference Manual, publication 1755-RM001
Provides in-depth information on the safety concept of GuardPLC controller systems
GuardPLC 1600 Controllers Installation Instructions, publication 1753-IN001
Provides information on installing GuardPLC 1600 controllers
GuardPLC 1800 Controllers Installation Instructions, publication 1753-IN002
Provides information on installing GuardPLC 1800 controllers
GuardPLC 1753-IB20XOB8 I/O Module Installation Instructions, publication 1753-IN003
Provides information on installing GuardPLC 1753-IB20XOB8 I/O module
GuardPLC 1753-IB16 Input Module Installation Instructions, publication 1753-IN004
Provides information on installing GuardPLC 1753-IB16 Input Module
GuardPLC 1753-OB16 Output Module Installation Instructions, publication 1753-IN005
Provides information on installing GuardPLC 1753-OB16 Output Module
RSLogix Guard PLUS! Programming Software Installation Instructions, publication 1753-IN006
Provides information on installing RSLogix Guard PLUS! programming software
GuardPLC OPC Server Installation Instructions, publication 1753-IN007
Provides information on installing GuardPLC OPC server
Allen-Bradley Programmable Controller Grounding and Wiring Guidelines, publication 1770-4.1
Provides in-depth information on grounding and wiring Allen-Bradley programmable controllers
Application Considerations for Solid-State Controls, publication SGI-1.1
A description of important differences between solid-state programmable controller products and hard-wired electromechanical devices
National Electrical Code - Published by the National Fire Protection Association of Boston, MA.
An article on wire sizes and types for grounding electrical equipment
Publication 1753-RM001C-EN-P - May 2007
http://literature.rockwellautomation.com
Chapter 1
Redundant Input Function Block (RIN)
Overview The basic purpose of the Redundant Input Function Block is to emulate the input functionality of a safety relay in a software programmable environment which is intended for use in SIL3/CAT4 safety applications.
Operation Normal Operation
This function block monitors the states of two input channels and turns on Output 1 when the following conditions are met:
• When using Manual Reset: both inputs are in the Active state and the Circuit Reset input is transitioned from a zero to a one.
• When using Automatic Reset: both inputs are in the Active state for 50 ms.
This Function Block turns Output 1 off when either one or both of the input channels returns to the Safe state.
Both input channels for the Redundant Input Function Block (RIN) are normally open. This means zeros on both channels represent the Safe state, and ones on both channels represent the Active state.
These normal operation state changes are shown in the following timing diagrams.
Normal Operation
Manual Reset Automatic Reset
1
0
1
0
1
0
1
0
Channel A
Channel B
Circuit Reset
Output 1
1
0
1
0
1
0
50 ms
Channel A
Channel B
Output 1
11 Publication 1753-RM001C-EN-P - May 2007
12 Redundant Input Function Block (RIN)
Operation with Inconsistent Inputs
This function block generates a fault if the input channels are in inconsistent states (one Safe and one Active) for more than the specified period of time. The inconsistent time period is 500 ms.
This fault condition is enunciated via the Inputs Inconsistent and the Fault Present outputs. Output 1 cannot enter the Active state while the Fault Present output is active. The fault indication is cleared when the offending condition is remedied and the Fault Reset input is transitioned from zero to one.
These state changes are shown in the following timing diagram.
Inputs Inconsistent, Fault Present, and Fault Reset Operation
Operation with Circuit Reset Held On - Manual Reset Only
This function block also sets the Circuit Reset Held On output prompt if the Circuit Reset input is set (1) when the input channels transition to the Active state.
These state changes are shown in the following timing diagram.
1
0
1
0
1
0
1
0
1
0
1
0
500 ms
Channel A
Channel B
Output 1
InputsInconsistent
Fault Present
Fault Reset
Publication 1753-RM001C-EN-P - May 2007
Redundant Input Function Block (RIN) 13
Circuit Reset and Circuit Reset Held On Operation
Cycle Inputs Operation
If, while Output 1 is active, one of the input channels transitions from the Active state to the Safe state and back to the Active state before the other input channel transitions to the Safe state, the Cycle Inputs output prompt is set, and Output 1 cannot enter the Active state again until both input channels cycle through their Safe states.
These state changes are shown in the following timing diagram.
Cycle Inputs Operation
1
0
1
0
1
0
1
0
1
0
Channel A
Channel B
Circuit Reset
Output 1
Circuit ResetHeld On
1
0
1
0
1
0
1
0
Channel A
Channel B
Output 1
Cycle Inputs
Publication 1753-RM001C-EN-P - May 2007
14 Redundant Input Function Block (RIN)
Function Block Description
Channel A
Channel B
Fault Reset
Circuit Reset
RIN_RA
Redundant Input Manual Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Circuit Reset Held On
Channel A
Channel B
Fault Reset
RIN_AUTO_RA
Redundant Input Automatic Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Redundant Inputs (RIN) Function Block Parameters
Parameter Short Name
Type Data Type Description Safe, Active and Initial Values
Channel A — Input Boolean Channel A Input (Normally Open) Safe = 0, Active = 1
Channel B — Input Boolean Channel B Input (Normally Open) Safe = 0, Active = 1
Circuit Reset — Input Boolean Circuit Reset Input
Manual Reset - Sets Output 1 after Channel A and Channel B transition from the Safe state to the Active state, and the Circuit Reset input transitions from zero to one.
Initial = 0, Reset = 1
Fault Reset — Input Boolean After fault conditions are corrected for the function block, the fault outputs for the function block are cleared when this input transitions from off to on.
Initial = 0, Reset = 1
Output 1 O1 Output Boolean Output 1 is set to the Active state when input conditions are met.
Safe = 0, Active = 1
Cycle Inputs CI Prompt Output
Boolean Cycle Inputs prompts for action. Before Output 1 is turned on, Channel A and Channel B inputs must be cycled through their Safe States at the same time before the circuit can be reset.
This prompt is cleared when Channel A and Channel B transition to the Safe state.
Initial = 0, Prompt = 1
Publication 1753-RM001C-EN-P - May 2007
Redundant Input Function Block (RIN) 15
Circuit Reset Held On
CRHO Prompt Output
Boolean Manual Reset - The Circuit Reset Held On prompt is set when both input channels transition to the Active states, and the Circuit Reset input is already on.
The Circuit Reset Held On prompt is cleared when the Circuit Reset input is turned off.
Initial = 0, Prompt = 1
Inputs Inconsistent II Fault Output
Boolean This fault is set when Channel A and Channel B inputs are in inconsistent states (one Safe and one Active) for a period of time greater than the Inconsistent Time Period (listed below). This fault is cleared when Channel A and Channel B inputs return to consistent states (both Safe or both Active) and the Fault Reset input transitions from off to on.
Inconsistent Time Period: 500 ms
Initial = 0, Fault = 1
Fault Present FP Fault Output
Boolean This is set whenever a fault is present in the function block. Output 1 cannot enter the Active state when Fault Present is set. Fault Present is cleared when all faults are cleared and the Fault Reset input transitions from off to on.
Initial = 0, Fault = 1
Redundant Inputs (RIN) Function Block Parameters
Parameter Short Name
Type Data Type Description Safe, Active and Initial Values
Publication 1753-RM001C-EN-P - May 2007
16 Redundant Input Function Block (RIN)
Relationship of I/O Wiring to Function Block Parameters
Redundant Input with Manual Reset Wiring and Programming
Wiring Example
The following wiring diagram is one example of how to wire a 2-channel switch having two normally open contacts to a GuardPLC module to comply with EN954-1 Category 4.
Redundant Input Wiring Diagram - Manual Reset
Programming Example
The following programming example shows how the Redundant Input Function Block with Manual Reset can be applied to the wiring diagram shown in Redundant Input Wiring Diagram - Manual Reset, on page 16.
L- DO 1
DI 2L+ DI 1 DI 3 DI 4
LS+GuardPLC
DO 2
DI 5
S2 S3 S4
S1
E1
E1 - 24V Power SupplyS1 - Redundant Input SwitchS2 - Circuit Reset SwitchS3 - Fault Reset SwitchS4 - Generate Pulse Test Switch
The inputs shown on this wiring diagram correspond to the inputs for the function block.
S1 as shown is in the Active state.
Publication 1753-RM001C-EN-P - May 2007
Redundant Input Function Block (RIN) 17
Redundant Input Programming Example - Manual Reset
EN954-1 Category 4 requires that inputs be independently pulse tested.
Channel A
Channel B
Fault Reset
Circuit Reset
Guard PLCUser Program
RIN_RA
Redundant Input Manual Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Pulse Test Interval
Pulse Test Duration
Input 1 A
Generate Pulse Test
RPTO_RA
Redundant Pulse Test Output
Pulse Test Source A
Pulse Test Source B
Pulse Test Fault A
Pulse Test Fault B
Input 1 B
Output 1 A
Output 1 B
DO 2
T#2 to 60 sec
T#10 - 500 msec
DI 1
DI 5
DI 2
DO 1
DI 3
DI 4
To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
Circuit Reset Held On To User Logic
Publication 1753-RM001C-EN-P - May 2007
18 Redundant Input Function Block (RIN)
Redundant Input with Automatic Reset Wiring and Programming
Wiring Example
The following wiring diagram shows one example of how to wire a 2-channel switch having two normally open contacts to a GuardPLC module to comply with EN954-1 Category 4.
Redundant Input Wiring Diagram - Automatic Reset
ATTENTION Various safety standards (EN 60204, EN 954) require that when using the Automatic Circuit Reset feature, other measures must be implemented to ensure that an unexpected (or unintended) startup will not occur in the system or application.
L- DO 1
DI 2L+ DI 1 DI 3 DI 4
LS+GuardPLC
DO 2
S2 S3
S1
E1
E1 - 24V Power SupplyS1 - Redundant Input SwitchS2 - Fault Reset SwitchS3 - Generate Pulse Test Switch
The inputs shown on this wiring diagram correspond to the inputs for the function block.
S1 as shown is in the Active state.
Publication 1753-RM001C-EN-P - May 2007
Redundant Input Function Block (RIN) 19
Programming Example
The following programming example shows how the Redundant Input Function Block with Automatic Reset can be applied to the wiring diagram shown in Redundant Input Wiring Diagram - Automatic Reset, on page 18.
Redundant Input Programming Example - Automatic Reset
EN954-1 Category 4 requires that inputs be independently pulse tested.
Channel A
Channel B
Fault Reset
Guard PLCUser Program
RIN_AUTO_RA
Redundant Input Automatic Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Pulse Test Interval
Pulse Test Duration
Input 1 A
Generate Pulse Test
RPTO_RA
Redundant Pulse Test Output
Pulse Test Source A
Pulse Test Source B
Pulse Test Fault A
Pulse Test Fault B
Input 1 B
Output 1 A
Output 1 B
DO 2
T#2 to 60 sec
T#10 - 500 msec
DI 1
DI 4
DI 2
DO 1
DI 3
To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
Publication 1753-RM001C-EN-P - May 2007
20 Redundant Input Function Block (RIN)
Publication 1753-RM001C-EN-P - May 2007
Chapter 2
Emergency Stop Function Block (ESTOP)
Overview The basic purpose of the Emergency Stop Function Block is to emulate the input functionality of a safety relay in a software programmable environment which is intended for use in SIL3/CAT4 safety applications.
Operation Normal Operation
This function block monitors the states of two input channels and turns on Output 1 when the following conditions are met:
• When using Manual Reset: both inputs are in the Active state and the Circuit Reset input is transitioned from a zero to a one.
• When using Automatic Reset: both inputs are in the Active state for 50 ms.
This function block turns Output 1 off when either one or both of the input channels returns to the Safe state.
Both input channels for the Emergency Stop Function Blocks are normally open. This means zeros on both channels represent the Safe state, and ones on both channels represent the Active state.
These normal operation state changes are shown in the following timing diagrams.
Normal Operation
Manual Reset Automatic Reset
1
0
1
0
1
0
1
0
Channel A
Channel B
Circuit Reset
Output 1
1
0
1
0
1
0
50 ms
Channel A
Channel B
Output 1
21 Publication 1753-RM001C-EN-P - May 2007
22 Emergency Stop Function Block (ESTOP)
Operation with Inconsistent Inputs
This function block generates a fault if the input channels are in inconsistent states (one Safe and one Active) for more than the specified period of time. The inconsistent time period is 500 ms.
This fault condition is enunciated via the Inputs Inconsistent and the Fault Present outputs. Output 1 cannot enter the Active state while the Fault Present output is active. The fault indication is cleared when the offending condition is remedied and the Fault Reset input is transitioned from zero to one.
These state changes are shown in the following timing diagram.
Inputs Inconsistent, Fault Present, and Fault Reset Operation
Operation with Circuit Reset Held On - Manual Reset Only
This function block also sets the Circuit Reset Held On output prompt if the Circuit Reset input is set (1) when the input channels transition to the Active state.
These state changes are shown in the following timing diagram.
1
0
1
0
1
0
1
0
1
0
1
0
500 ms
Channel A
Channel B
Output 1
InputsInconsistent
Fault Present
Fault Reset
Publication 1753-RM001C-EN-P - May 2007
Emergency Stop Function Block (ESTOP) 23
Circuit Reset and Circuit Reset Held On Operation
Cycle Inputs Operation
If, while Output 1 is active, one of the input channels transitions from the Active state to the Safe state and back to the Active state before the other input channel transitions to the Safe state, the Cycle Inputs output prompt is set, and Output 1 cannot enter the Active state again until both input channels cycle through their Safe states.
These state changes are shown in the following timing diagram.
Cycle Inputs Operation
1
0
1
0
1
0
1
0
1
0
Channel A
Channel B
Circuit Reset
Output 1
Circuit ResetHeld On
1
0
1
0
1
0
1
0
Channel A
Channel B
Output 1
Cycle Inputs
Publication 1753-RM001C-EN-P - May 2007
24 Emergency Stop Function Block (ESTOP)
Function Block Description
Channel A
Channel B
Fault Reset
ESTOP_AUTO_RA
Emergency Stop Automatic Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Channel A
Channel B
Fault Reset
Circuit Reset
ESTOP_RA
Emergency Stop Manual Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Circuit Reset Held On
Emergency Stop Function Block Parameters
Parameter Short Name
Type Data Type Description Safe, Active and Initial Values
Channel A — Input Boolean Channel A Input (Normally Open) Safe = 0, Active = 1
Channel B — Input Boolean Channel B Input (Normally Open) Safe = 0, Active = 1
Circuit Reset — Input Boolean Circuit Reset Input
Manual Reset - Sets Output 1 after Channel A and Channel B transition from the Safe state to the Active state, and the Circuit Reset input transitions from zero to one.
Initial = 0, Reset = 1
Fault Reset — Input Boolean After fault conditions are corrected for the function block, the fault outputs for the function block are cleared when this input transitions from off to on.
Initial = 0, Reset = 1
Output 1 O1 Output Boolean Output 1 is set to the Active state when input conditions are met.
Safe = 0, Active = 1
Cycle Inputs CI Prompt Output
Boolean Cycle Inputs prompts for action. Before Output 1 is turned on, Channel A and Channel B inputs must be cycled through their Safe States at the same time before the circuit can be reset.
This prompt is cleared when Channel A and Channel B transition to the Safe state.
Initial = 0, Prompt = 1
Publication 1753-RM001C-EN-P - May 2007
Emergency Stop Function Block (ESTOP) 25
Circuit Reset Held On
CRHO Prompt Output
Boolean Manual Reset - The Circuit Reset Held On prompt is set when both input channels transition to the Active states, and the Circuit Reset input is already on.
The Circuit Reset Held On prompt is cleared when the Circuit Reset input is turned off.
Initial = 0, Prompt = 1
Inputs Inconsistent II Fault Output
Boolean This fault is set when Channel A and Channel B inputs are in inconsistent states (one Safe and one Active) for a period of time greater than the Inconsistent Time Period (listed below). This fault is cleared when Channel A and Channel B inputs return to consistent states (both Safe or both Active) and the Fault Reset input transitions from off to on.
Inconsistent Time Period: 500 ms
Initial = 0, Fault = 1
Fault Present FP Fault Output
Boolean This is set whenever a fault is present in the function block. Output 1 cannot enter the Active state when Fault Present is set. Fault Present is cleared when all faults are cleared and the Fault Reset input transitions from off to on.
Initial = 0, Fault = 1
Emergency Stop Function Block Parameters
Parameter Short Name
Type Data Type Description Safe, Active and Initial Values
Publication 1753-RM001C-EN-P - May 2007
26 Emergency Stop Function Block (ESTOP)
Relationship of I/O Wiring to Function Block Parameters
Emergency Stop with Manual Reset Wiring and Programming
Wiring Example
The following wiring diagram shows one example of how to wire a 2-channel Emergency Stop switch having two normally open contacts to a GuardPLC module to comply with EN954-1 Category 4.
Emergency Stop Wiring Diagram - Manual Reset
L- DO 1
DI 2L+ DI 1 DI 3 DI 4
LS+GuardPLC
DO 2
DI 5
S2 S3 S4
S1
E1
E1 - 24V Power SupplyS1 - Emergency Stop SwitchS2 - Circuit Reset SwitchS3 - Fault Reset SwitchS4 - Generate Pulse Test Switch
The inputs shown on this wiring diagram correspond to the inputs for the function block.
S1 as shown is in the Active state.
Publication 1753-RM001C-EN-P - May 2007
Emergency Stop Function Block (ESTOP) 27
Programming Example
The following programming example shows how the Emergency Stop Function Block with Manual Reset can be applied to the wiring diagram shown in Emergency Stop Wiring Diagram - Manual Reset on page 26.
Emergency Stop Programming Example - Manual Reset
EN954-1 Category 4 requires that inputs be independently pulse tested.
Channel A
Channel B
Fault Reset
Circuit Reset
Guard PLCUser Program
ESTOP_RA
Emergency Stop Manual Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Pulse Test Interval
Pulse Test Duration
Input 1 A
Generate Pulse Test
RPTO_RA
Redundant Pulse Test Output
Pulse Test Source A
Pulse Test Source B
Pulse Test Fault A
Pulse Test Fault B
Input 1 B
Output 1 A
Output 1 B
DO 2
T#2 to 60 sec
T#10 - 500 msec
DI 1
DI 5
DI 2
DO 1
DI 3
DI 4 To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
Circuit Reset Held On To User Logic
Publication 1753-RM001C-EN-P - May 2007
28 Emergency Stop Function Block (ESTOP)
Emergency Stop with Automatic Reset Wiring and Programming
Wiring Example
The following wiring diagram shows one example of how to wire a 2-channel Emergency Stop switch having two normally open contacts to a GuardPLC module to comply with EN954-1 Category 4.
Emergency Stop Wiring Diagram - Automatic Reset
ATTENTION Various safety standards (EN 60204, EN 954) require that when using the Automatic Circuit Reset feature, other measures must be implemented to ensure that an unexpected (or unintended) startup will not occur in the system or application.
L- DO 1
DI 2L+ DI 1 DI 3 DI 4
LS+GuardPLC
DO 2
S2 S3
S1
E1
E1 - 24V Power SupplyS1 - Emergency Stop SwitchS2 - Fault Reset SwitchS3 - Generate Pulse Test Switch
The inputs shown on this wiring diagram correspond to the inputs for the function block.
S1 as shown is in the Active state.
Publication 1753-RM001C-EN-P - May 2007
Emergency Stop Function Block (ESTOP) 29
Programming Example
The following programming example shows how the Emergency Stop Function Block with Automatic Reset can be applied to the wiring diagram shown in Emergency Stop Wiring Diagram - Automatic Reset, on page 28.
Emergency Stop Programming Example - Automatic Reset
EN954-1 Category 4 requires that inputs be independently pulse tested.
Channel A
Channel B
Fault Reset
Guard PLCUser Program
ESTOP_AUTO_RA
Emergency Stop Automatic Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Pulse Test Interval
Pulse Test Duration
Input 1 A
Generate Pulse Test
RPTO_RA
Redundant Pulse Test Output
Pulse Test Source A
Pulse Test Source B
Pulse Test Fault A
Pulse Test Fault B
Input 1 B
Output 1 A
Output 1 B
DO 2
T#2 to 60 sec
T#10 - 500 msec
DI 1
DI 4
DI 2
DO 1
DI 3 To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
Publication 1753-RM001C-EN-P - May 2007
30 Emergency Stop Function Block (ESTOP)
Publication 1753-RM001C-EN-P - May 2007
Chapter 3
Diverse Input Function Block (DIN)
Overview The basic purpose of the Diverse Input Function Block is to emulate the input functionality of a safety relay in a software programmable environment which is intended for use in SIL3/CAT4 safety applications.
Operation Normal Operation
This function block monitors the states of two input channels and turns on Output 1 when the following conditions are met:
• When using Manual Reset: both inputs are in the Active state and the Circuit Reset input is transitioned from a zero to a one.
• When using Automatic Reset: both inputs are in the Active state for 50 ms.
This function block turns Output 1 off when either one or both of the input channels returns to the Safe state.
The Diverse Input function block has one input channel that is normally open and one that is normally closed. This means that a zero on the normally open channel and a one on the normally closed channel represents the Safe state and vice-versa for the Active state.
These normal operation state changes are shown in the following timing diagrams.
Normal Operation
1
0
1
0
1
0
1
0
Channel A
Manual Reset Automatic Reset
Channel B
Circuit Reset
Output 1
1
0
1
0
1
0
50 ms
Channel A
Channel B
Output 1
31 Publication 1753-RM001C-EN-P - May 2007
32 Diverse Input Function Block (DIN)
Operation with Inconsistent Inputs
This function block generates a fault if the input channels are in inconsistent states (one Safe and one Active) for more than the specified period of time. The inconsistent time period is 500 ms.
This fault condition is enunciated via the Inputs Inconsistent and the Fault Present outputs. Output 1 cannot enter the Active state while the Fault Present output is active. The fault indication is cleared when the offending condition is remedied and the Fault Reset input is transitioned from zero to one.
These state changes are shown in the following timing diagram.
Inputs Inconsistent, Fault Present, and Fault Reset Operation
Operation with Circuit Reset Held On - Manual Reset Only
This function block also sets the Circuit Reset Held On output prompt if the Circuit Reset input is set (1) when the input channels transition to the Active state.
These state changes are shown in the following timing diagram.
1
0
1
0
1
0
1
0
1
0
1
0
500 ms
Diverse Input Instruction
t1 - Inconsistent Time Period
Channel A
Channel B
Output 1
InputsInconsistent
Fault Present
Fault Reset
Publication 1753-RM001C-EN-P - May 2007
Diverse Input Function Block (DIN) 33
Circuit Reset and Circuit Reset Held On Operation
Cycle Inputs Operation
If, while Output 1 is active, one of the input channels transitions from the Active state to the Safe state and back to the Active state before the other input channel transitions to the Safe state, the Cycle Inputs output prompt is set, and Output 1 cannot enter the Active state again until both input channels cycle through their Safe states.
These state changes are shown in the following timing diagram.
Cycle Inputs Operation
1
0
1
0
1
0
1
0
1
0
Channel A
Channel B
Circuit Reset
Output 1
Circuit ResetHeld On
1
0
1
0
1
0
1
0
Channel A
Channel B
Output 1
Cycle Inputs
Publication 1753-RM001C-EN-P - May 2007
34 Diverse Input Function Block (DIN)
Function Block Description
Channel A
Channel B
Fault Reset
Circuit Reset
DIN_RA
Diverse Input Manual Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Circuit Reset Held On
Channel A
Channel B
Fault Reset
DIN_AUTO_RA
Diverse Input with Automatic Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Diverse Input (DIN) Function Block Parameters
Parameter Short Name
Type Data Type Description Safe, Active and Initial Values
Channel A — Input Boolean Channel A Input (Normally Open) Safe = 0, Active = 1
Channel B — Input Boolean Channel B Input (Normally Closed) Safe = 1, Active = 0
Circuit Reset — Input Boolean Circuit Reset Input
Manual Reset - Sets Output 1 after Channel A and Channel B transition from the Safe state to the Active state, and the Circuit Reset input transitions from zero to one.
Initial = 0, Reset = 1
Fault Reset — Input Boolean After fault conditions are corrected for the function block, the fault outputs for the function block are cleared when this input transitions from off to on.
Initial = 0, Reset = 1
Output 1 O1 Output Boolean Output 1 is set to the Active state when input conditions are met.
Safe = 0, Active = 1
Cycle Inputs CI Prompt Output
Boolean Cycle Inputs prompts for action. Before Output 1 is turned on, Channel A and Channel B inputs must be cycled through their Safe States at the same time before the circuit can be reset.
This prompt is cleared when Channel A and Channel B transition to the Safe state.
Initial = 0, Prompt = 1
Publication 1753-RM001C-EN-P - May 2007
Diverse Input Function Block (DIN) 35
Circuit Reset Held On
CRHO Prompt Output
Boolean Manual Reset - The Circuit Reset Held On prompt is set when both input channels transition to the Active states, and the Circuit Reset input is already on.
The Circuit Reset Held On prompt is cleared when the Circuit Reset input is turned off.
Initial = 0, Prompt = 1
Inputs Inconsistent II Fault Output
Boolean This fault is set when Channel A and Channel B inputs are in inconsistent states (one Safe and one Active) for a period of time greater than the Inconsistent Time Period (listed below). This fault is cleared when Channel A and Channel B inputs return to consistent states (both Safe or both Active) and the Fault Reset input transitions from off to on.
Inconsistent Time Period: 500 ms
Initial = 0, Fault = 1
Fault Present FP Fault Output
Boolean This is set whenever a fault is present in the function block. Output 1 cannot enter the Active state when Fault Present is set. Fault Present is cleared when all faults are cleared and the Fault Reset input transitions from off to on.
Initial = 0, Fault = 1
Diverse Input (DIN) Function Block Parameters
Parameter Short Name
Type Data Type Description Safe, Active and Initial Values
Publication 1753-RM001C-EN-P - May 2007
36 Diverse Input Function Block (DIN)
Relationship of I/O Wiring to Function Block Parameters
Diverse Input with Manual Reset Wiring and Programming
Wiring Example
The following wiring diagram is one example of how to wire a 2-channel switch having diverse inputs to a GuardPLC module to comply with EN954-1 Category 4.
Diverse Input Wiring Diagram - Manual Reset
L- DO 1
DI 2L+ DI 1 DI 3 DI 4
LS+
S1
S2 S3
E1
E1 - 24V Power SupplyS1 - Diverse Input SwitchS2 - Circuit Reset SwitchS3 - Fault Reset SwitchS4 - Generate Pulse Test Switch
GuardPLC
DI 5
S4
The inputs shown on this wiring diagram correspond to the inputs for the function block.
S1 as shown is in the Active state. IN0 - Normally Open, IN1 - Normally Closed.
Publication 1753-RM001C-EN-P - May 2007
Diverse Input Function Block (DIN) 37
Programming Example
The following programming example shows how the Diverse Input Function Block with Manual Reset can be applied to the wiring diagram shown in Diverse Input Wiring Diagram - Manual Reset, on page 36.
Diverse Input Programming Example - Manual Reset
EN954-1 Category 4 requires that inputs be independently pulse tested.
Channel A
Channel B
Fault Reset
Circuit Reset
Guard PLCUser Program
DIN_RA
Diverse Input Manual Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Pulse Test Interval
Pulse Test Duration
Input 1 A
Generate Pulse Test
SPTO_RA
Single Pulse Test Output
Pulse Test Source A
Pulse Test Fault A
Input 1
Output 1 A
Output 1
T#2 to 60 sec
T#10 - 500 msec
DI 1
DI 5
DI 2
DO 1
DI 3
DI 4 To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
Circuit Reset Held On To User Logic
Publication 1753-RM001C-EN-P - May 2007
38 Diverse Input Function Block (DIN)
Diverse Input with Automatic Reset Wiring and Programming
Wiring Example
The following wiring diagram is one an example of how to wire a 2-channel switch having diverse inputs to a GuardPLC module to comply with EN954-1 Category 4.
Diverse Input Wiring Diagram - Automatic Reset
ATTENTION Various safety standards (EN 60204, EN 954) require that when using the Automatic Circuit Reset feature, other measures must be implemented to ensure that an unexpected (or unintended) startup will not occur in the system or application.
L- DO 1
DI 2L+ DI 1 DI 3 DI 4
LS+
S1
S2 S3
E1
E1 - 24V Power SupplyS1 - Diverse Input SwitchS2 - Fault Reset SwitchS3 - Generate Pulse Test Switch
1753 GuardPLC
The inputs shown on this wiring diagram correspond to the inputs for the function block.
S1 as shown is in the Active state. CHA/DI 1 - Normally Open, CHB/DI 2 - Normally Closed
Publication 1753-RM001C-EN-P - May 2007
Diverse Input Function Block (DIN) 39
Programming Example
The following programming example shows how the Diverse Input Function Block with Automatic Reset can be applied to the wiring diagram shown in Diverse Input Wiring Diagram - Automatic Reset, on page 38.
Diverse Input Programming Example - Automatic Reset
EN954-1 Category 4 requires that inputs be independently pulse tested.
Channel A
Channel B
Fault Reset
Guard PLCUser Program
DIN_AUTO_RA
Diverse Input Automatic Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Pulse Test Interval
Pulse Test Duration
Input 1 A
Generate Pulse Test
SPTO_RA
Single Pulse Test Output
Pulse Test Source A
Pulse Test Fault A
Input 1
Output 1 A
Output 1
T#2 to 60 sec
T#10 - 500 msec
DI 1
DI 4
DI 2
DO 1
DI 3 To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
Publication 1753-RM001C-EN-P - May 2007
40 Diverse Input Function Block (DIN)
Publication 1753-RM001C-EN-P - May 2007
Chapter 4
Enable Pendant Function Block (ENPEN)
Overview The basic purpose of the Enable Pendant Function Block is to emulate the input functionality of a safety relay in a software programmable environment which is intended for use in SIL3/CAT4 safety applications.
Operation Normal Operation
This function block monitors the states of two input channels and turns on Output 1 when the following conditions are met:
• When using Manual Reset: both inputs are in the Active state and the Circuit Reset input is transitioned from a zero to a one.
• When using Automatic Reset: both inputs are in the Active state for 50 ms.
This function block turns Output 1 off when either one or both of the input channels returns to the Safe state.
Both input channels for the Enable Pendant function block are normally open. This means zeros on both channels represent the Safe state, and ones on both channels represent the Active state.
These normal operation state changes are shown in the following timing diagrams.
Normal Operation
Manual Reset Automatic Reset
1
0
1
0
1
0
1
0
Channel A
Channel B
Circuit Reset
Output 1
1
0
1
0
1
0
50 ms
Channel A
Channel B
Output 1
41 Publication 1753-RM001C-EN-P - May 2007
42 Enable Pendant Function Block (ENPEN)
Operation with Inconsistent Inputs
This function block generates a fault if the input channels are in inconsistent states (one Safe and one Active) for more than the specified period of time. The inconsistent time period is 3 seconds.
This fault condition is enunciated via the Inputs Inconsistent and the Fault Present outputs. Output 1 cannot enter the Active state while the Fault Present output is active. The fault indication is cleared when the offending condition is remedied and the Fault Reset input is transitioned from zero to one.
These state changes are shown in the following timing diagram.
Inputs Inconsistent, Fault Present, and Fault Reset Operation
Operation with Circuit Reset Held On - Manual Reset Only
This function block also sets the Circuit Reset Held On output prompt if the Circuit Reset input is set (1) when the input channels transition to the Active state.
These state changes are shown in the following timing diagram.
1
0
1
0
1
0
1
0
1
0
1
0
3 sec
Channel A
Channel B
Output 1
InputsInconsistent
Fault Present
Fault Reset
Publication 1753-RM001C-EN-P - May 2007
Enable Pendant Function Block (ENPEN) 43
Circuit Reset and Circuit Reset Held On Operation
Cycle Inputs Operation
If, while Output 1 is active, one of the input channels transitions from the Active state to the Safe state and back to the Active state before the other input channel transitions to the Safe state, the Cycle Inputs output prompt is set, and Output 1 cannot enter the Active state again until both input channels cycle through their Safe states.
These state changes are shown in the following timing diagram.
Cycle Inputs Operation
1
0
1
0
1
0
1
0
1
0
Channel A
Channel B
Circuit Reset
Output 1
Circuit ResetHeld On
1
0
1
0
1
0
1
0
Channel A
Channel B
Output 1
Cycle Inputs
Publication 1753-RM001C-EN-P - May 2007
44 Enable Pendant Function Block (ENPEN)
Function Block Description
Channel A
Channel B
Fault Reset
ENPEN_AUTO_RA
Enable Pendant Automatic Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Channel A
Channel B
Fault Reset
Circuit Reset
ENPEN_RA
Enable Pendant Manual Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Circuit Reset Held On
Enable Pendant Function Block Parameters
Parameter Short Name
Type Data Type Description Safe, Active and Initial Values
Channel A — Input Boolean Channel A Input (Normally Open) Safe = 0, Active = 1
Channel B — Input Boolean Channel B Input (Normally Open) Safe = 0, Active = 1
Circuit Reset — Input Boolean Circuit Reset Input
Manual Reset - Sets Output 1 after Channel A and Channel B transition from the Safe state to the Active state, and the Circuit Reset input transitions from zero to one.
Automatic Reset - Visible, but not used.
Initial = 0, Reset = 1
Fault Reset — Input Boolean After fault conditions are corrected for the function block, the fault outputs for the function block are cleared when this input transitions from off to on.
Initial = 0, Reset = 1
Output 1 O1 Output Boolean Output 1 is set to the Active state when input conditions are met.
Safe = 0, Active = 1
Cycle Inputs CI Prompt Output
Boolean Cycle Inputs prompts for action. Before Output 1 is turned on, Channel A and Channel B inputs must be cycled through their Safe States at the same time before the circuit can be reset.
This prompt is cleared when Channel A and Channel B transition to the Safe state.
Initial = 0, Prompt = 1
Publication 1753-RM001C-EN-P - May 2007
Enable Pendant Function Block (ENPEN) 45
Circuit Reset Held On
CRHO Prompt Output
Boolean Manual Reset - The Circuit Reset Held On prompt is set when both input channels transition to the Active states, and the Circuit Reset input is already on.
The Circuit Reset Held On prompt is cleared when the Circuit Reset input is turned off.
Automatic Reset - Visible, but not used.
Initial = 0, Prompt = 1
Inputs Inconsistent II Fault Output
Boolean This fault is set when Channel A and Channel B inputs are in inconsistent states (one Safe and one Active) for a period of time greater than the Inconsistent Time Period (listed below). This fault is cleared when Channel A and Channel B inputs return to consistent states (both Safe or both Active) and the Fault Reset input transitions from off to on.
Inconsistent Time Period: 3 s
Initial = 0, Fault = 1
Fault Present FP Fault Output
Boolean This is set whenever a fault is present in the function block. Output 1 cannot enter the Active state when Fault Present is set. Fault Present is cleared when all faults are cleared and the Fault Reset input transitions from off to on.
Initial = 0, Fault = 1
Enable Pendant Function Block Parameters
Parameter Short Name
Type Data Type Description Safe, Active and Initial Values
Publication 1753-RM001C-EN-P - May 2007
46 Enable Pendant Function Block (ENPEN)
Relationship of I/O Wiring to Function Block Parameters
Enable Pendant with Manual Reset Wiring and Programming
Wiring Example
The following wiring diagram is one example of how to wire a 2-channel switch having two normally open contacts to a GuardPLC module to comply with EN954-1 Category 4.
Enable Pendant Wiring Diagram - Manual Reset
L- DO 1
DI 2L+ DI 1 DI 3 DI 4
LS+GuardPLC
DO 2
DI 5
S2 S3 S4
S1
E1
E1 - 24V Power SupplyS1 - Enable Pendant SwitchS2 - Circuit Reset SwitchS3 - Fault Reset SwitchS4 - Generate Pulse Test Switch
The inputs shown on this wiring diagram correspond to the inputs for the function block.
Publication 1753-RM001C-EN-P - May 2007
Enable Pendant Function Block (ENPEN) 47
Programming Example
The following programming example shows how the Enable Pendant function block with Manual Reset can be applied to the wiring diagram shown in Enable Pendant Wiring Diagram - Manual Reset, on page 46.
Enable Pendant Programming Example - Manual Reset
EN954-1 Category 4 requires that inputs be independently pulse tested.
Channel A
Channel B
Fault Reset
Circuit Reset
Guard PLCUser Program
ESTOP_RA
Emergency Stop Manual Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Pulse Test Interval
Pulse Test Duration
Input 1 A
Generate Pulse Test
RPTO_RA
Redundant Pulse Test Output
Pulse Test Source A
Pulse Test Source B
Pulse Test Fault A
Pulse Test Fault B
Input 1 B
Output 1 A
Output 1 B
DO 2
T#2 to 60 sec
T#10 - 500 msec
DI 1
DI 5
DI 2
DO 1
DI 3
DI 4 To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
Circuit Reset Held On To User Logic
Publication 1753-RM001C-EN-P - May 2007
48 Enable Pendant Function Block (ENPEN)
Enable Pendant with Automatic Reset Wiring and Programming
Wiring Example
The following wiring diagram is one example of how to wire a 2-channel switch having two normally open contacts to a GuardPLC module to comply with EN954-1 Category 4.
Enable Pendant Wiring Diagram - Automatic Reset
ATTENTION Various safety standards (EN 60204, EN 954) require that when using the Automatic Circuit Reset feature, other measures must be implemented to ensure that an unexpected (or unintended) startup will not occur in the system or application.
L- DO 1
DI 2L+ DI 1 DI 3 DI 4
LS+GuardPLC
DO 2
S2 S3
S1
E1
E1 - 24V Power SupplyS1 - Enable Pendant SwitchS2 - Fault Reset SwitchS3 - Generate Pulse Test Switch
The inputs shown on this wiring diagram correspond to the inputs for the function block.
Publication 1753-RM001C-EN-P - May 2007
Enable Pendant Function Block (ENPEN) 49
Programming Example
The following programming example shows how the Enable Pendant Function Block with Automatic Reset can be applied to the wiring diagram shown in Enable Pendant Wiring Diagram - Automatic Reset, on page 48.
Enable Pendant Programming Example - Automatic Reset
EN954-1 Category 4 requires that inputs be independently pulse tested.
Channel A
Channel B
Fault Reset
Guard PLCUser Program
ENPEN_AUTO_RA
Enable Pendant Automatic Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Pulse Test Interval
Pulse Test Duration
Input 1 A
Generate Pulse Test
RPTO_RA
Redundant Pulse Test Output
Pulse Test Source A
Pulse Test Source B
Pulse Test Fault A
Pulse Test Fault B
Input 1 B
Output 1 A
Output 1 B
DO 2
T#2 to 60 sec
T#10 - 500 msec
DI 1
DI 4
DI 2
DO 1
DI 3 To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
Publication 1753-RM001C-EN-P - May 2007
50 Enable Pendant Function Block (ENPEN)
Publication 1753-RM001C-EN-P - May 2007
Chapter 5
Light Curtain Function Block (LC)
Overview The basic purpose of the Light Curtain Function Block is to provide a manual and an automatic circuit reset interface from a programmable controller to a light curtain used in SIL3/CAT4 safety applications.
Many Light Curtains pulse test their two outputs; OSSD1 and OSSD2. If these outputs are wired directly into GuardPLC controller inputs, the pulse test needs to be filtered. Otherwise, the GuardPLC controller may mistake the LO pulse test for a light curtain blockage.
Note that most light curtains do provide ‘controllers’ or ‘relays’ that essentially filter out the pulse test and provide two dry contacts for OSSD1 and OSSD2. If using these devices, then OSSD1 and OSSD2 can be wired directly to the GuardPLC controller.
If you are NOT using the light curtain ‘controller’ or ‘relay’, then the GuardPLC controller must provide the pulse test filtering. There are two ways for the GuardPLC controller to filter this signal. The first is hardware- based digital input filters on the Safety input modules. The second is a software- based filter in the Light Curtain function block. For information on the software-based filter, see Input Filter Time on page 5-57 of this manual.
Of these two methods, the hardware filter is preferred. If the digital input filters the LO signals for longer than the LO pulse test width, then the hardware filter will filter out the pulse test. For example, if the Light Curtain signals pulse LO for 100 µs during a pulse test, then the hardware must filter out LO signals that are 100 µs or longer. Note that the Safety DeviceNet I/O modules have a configurable filter of 0 to 126 ms. The safety I/O modules have a fixed filter time of 100 µs.
If the hardware filter cannot filter the pulse test, or you choose not to use the hardware filter, then the filtering must be done in the GuardPLC controller code. Software based filters look at the input once every program cycle. Theoretically, every time the GuardPLC controller looks at OSSD1, it may be LO if the pulse test is occurring at that exact time. In other words, you may have to make your software filter long enough to scan OSSD1 multiple times before the filter times out, and OSSD1 is set logically LO.
51 Publication 1753-RM001C-EN-P - May 2007
52 Light Curtain Function Block (LC)
The following chart shows how many times OSSD1 must be scanned LO before the timer times out. It assumes a scan time of 25 ms.
The downside of using a longer hardware or software filter is that this filter time must be directly added to the calculation of the light curtain safety reaction time.
Operation Normal Operation
This function block monitors the states of two input channels and turns on output 1 when the following conditions are met:
• When using Manual Reset: both inputs are in the Active state when the Circuit Reset input is transitioned from a zero to a one.
• When using Automatic Reset: both inputs are in their Active state for 50 ms.
The function block turns output 1 off when either one or both of the input channels return to the Safe state.
These normal operation state changes are shown in the following timing diagrams.
Filter Time Consecutive Scans OSSD1 LO
0 1
1-25 2
26-50 3
51-75 4
76-100 5
… …
Publication 1753-RM001C-EN-P - May 2007
Light Curtain Function Block (LC) 53
Normal Operation
Light Curtain Muting Operation
The one exception to the normal Output 1 control is Light Curtain Muting which, when enabled, permits the inputs to leave the Active state and output 1 to remain on. The Light Curtain Muted output represents the value of the Mute Light Curtain input and indicates that the light curtain is not being used.
This function block also has a Light Curtain Blocked output which indicates when the input channels are NOT in the Active state (ones).
These state changes are shown in the following timing diagrams.
1
0
1
0
1
0
1
0
1
0
Channel A
Channel B
Circuit Reset
Output 1
Light CurtainBlocked
1
0
1
0
1
0
1
0
Channel A
Channel B
Output 1
Light CurtainBlocked
50 ms
Manual Reset Automatic Reset
Publication 1753-RM001C-EN-P - May 2007
54 Light Curtain Function Block (LC)
Light Curtain Muting Operation - Example 1
If the Mute Light Curtain input is not set, or the light curtain is blocked after the muting period is finished, the behavior of this function block reverts back to the behavior defined earlier when no muting is present.
Light Curtain Muting Operation - Example 2
1
0
1
0
1
0
1
0
1
0
1
0
Channel A
Channel B
Output 1
Mute Light Curtain
Light CurtainMuted
Light CurtainBlocked
1
0
1
0
1
0
1
0
1
0
1
0
Channel A
Channel B
Output 1
Mute Light Curtain
Light CurtainMuted
Light CurtainBlocked
Publication 1753-RM001C-EN-P - May 2007
Light Curtain Function Block (LC) 55
Inputs Inconsistent Operation
This function block generates a fault if the input channels are in inconsistent states (one Safe and one Active) for more than 500 ms. This fault condition is enunciated via the Inputs Inconsistent and the Fault Present outputs. Output 1 cannot enter the Active state while the Fault Present output is active. The fault indication is cleared when the offending condition is remedied and the Fault Reset input is transitioned from zero to one.
These state changes are shown in the following timing diagram.
Inputs Inconsistent Operation
1
0
1
0
1
0
1
0
1
0
1
0
1
0
500 ms
Channel A
Channel B
Output 1
Inputs Inconsistent
FaultPresent
Fault Reset
Light CurtainBlocked
Publication 1753-RM001C-EN-P - May 2007
56 Light Curtain Function Block (LC)
Circuit Reset Held On Operation (Manual Reset Mode Only)
This function block also sets the Circuit Reset Held On output prompt if the Circuit Reset input is set (1) when the input channels transition to the Active state.
These state changes are shown in the following timing diagram.
Circuit Reset Held On Operation
Cycle Inputs Operation
If, while Output 1 is active, one of the input channels transitions from the Active state to the Safe state and back to the Active state before the other input channel transitions to the Safe state, this function block sets the Cycle Inputs output prompt, and Output 1 cannot enter the Active state again until both input channels cycle through their Safe states. If the inputs were in inconsistent states for more than 500 ms, the Inputs Inconsistent and Fault Present outputs are also set to 1.
If the Light Curtain Muted input is active and one of the input channels transitions from the Active state to the Safe state and back to the Active state, Output 1 remains active and the Cycle Inputs prompt is set to one.
IMPORTANT In version 1.0 of the Light Curtain instructions, if the Light Curtain Muted input is active and one of the input channels transitions from the Active state to the Safe state and back to the Active state, Output 1 turns off immediately and the Cycle Inputs prompt is set to one.
1
0
1
0
1
0
1
0
1
0
Channel A
Channel B
Circuit Reset
Output 1
Circuit ResetHeld On
Publication 1753-RM001C-EN-P - May 2007
Light Curtain Function Block (LC) 57
These state changes are shown in the following timing diagram.
Cycle Inputs Operation
Input Filter Time
When an input filter time is specified, then, for that length of time, an input channel is allowed to go to the Safe state while the other channel is in the Active state without Output 1 going to its Safe state. However, Output 1 will go to the Safe state when both input channels are in the Safe state at the same time.
Input Filter Time
1
0
1
0
1
0
1
0
Channel A
Channel B
Output 1
Cycle Inputs
1
0
1
0
1
0
Channel A
Channel B
Output 1
t1 ≤ input filter time
t1
t1
Publication 1753-RM001C-EN-P - May 2007
58 Light Curtain Function Block (LC)
Function Block Description
Channel A
Channel B
Fault Reset
Circuit Reset
LC_RA
Light Curtain Manual Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Mute Light Curtain
Input Filter Time
Circuit Reset Held On
Light Curtain Blocked
Light Curtain Muted
Channel A
Channel B
LC_AUTO_RA
Light Curtain Automatic Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault PresentFault Reset
Mute Light Curtain
Input Filter Time Light Curtain Blocked
Light Curtain Muted
Light Curtain Function Block Parameters
Parameter Short Name Type Data Type Description Safe, Active and Initial Values
Channel A — Input Boolean Channel A Input Safe = 0, Active = 1
Channel B — Input Boolean Channel B Input Safe = 0, Active = 1
Input Filter Time — Input Time This is a selectable time, from 0 to 250 ms, used for filtering of the output pulse testing by the light curtain.
Initial = 0 ms
Mute Light Curtain — Input Boolean Permits muting of the light curtain when it is not being used.
Initial = 0, Mute Light Curtain = 1
Circuit Reset — Input Boolean Circuit Reset Input
Manual Reset - Sets Output 1 after Channel A and Channel B transition from the Safe state to the Active state, and the Circuit Reset input transitions from zero to one.
Initial = 0, Reset = 1
Fault Reset — Input Boolean After fault conditions are corrected for the function block, the fault outputs for the function block are cleared when this input transitions from off to on.
Initial = 0, Reset = 1
Output 1 O1 Output Boolean Output 1 is set to the Active state when input conditions are met.
Safe = 0, Active = 1
Cycle Inputs CI Prompt Output
Boolean Cycle Inputs prompts for action. Before Output 1 is turned on, Channel A and Channel B inputs must be cycled through their Safe States at the same time before the circuit can be reset.
This prompt is cleared when Channel A and Channel B transition to the Safe state.
Initial = 0, Prompt = 1
Publication 1753-RM001C-EN-P - May 2007
Light Curtain Function Block (LC) 59
Circuit Reset Held On
CRHO Prompt Output
Boolean Manual Reset - The Circuit Reset Held On prompt is set when both input channels transition to the Active states, and the Circuit Reset input is already on.
The Circuit Reset Held On prompt is cleared when the Circuit Reset input is turned off.
Initial = 0, Prompt = 1
Light Curtain Blocked
LCB Indicator Output
Boolean This is indicates that the light curtain is blocked or has lost power.
Initial = 0, Blocked = 1
Light Curtain Muted
LCM Indicator Output
Boolean This indicates that the light curtain is muted (not being used).
Initial = 0, Muted = 1
Inputs Inconsistent II Fault Output
Boolean This fault is set when Channel A and Channel B inputs are in inconsistent states (one Safe and one Active) for a period of time greater than 500 ms. This fault is cleared when Channel A and Channel B inputs return to consistent states (both Safe or both Active) and the Fault Reset input transitions from off to on.
Initial = 0, Fault = 1
Fault Present FP Fault Output
Boolean This is on whenever a fault is present in the function block. Output 1 cannot enter the Active state when Fault Present is set. Fault Present is cleared when all faults are cleared and the Fault Reset input transitions from off to on.
Initial = 0, Fault = 1
Light Curtain Function Block Parameters
Parameter Short Name Type Data Type Description Safe, Active and Initial Values
Publication 1753-RM001C-EN-P - May 2007
60 Light Curtain Function Block (LC)
Relationship of I/O Wiring to Function Block Parameters
Light Curtain with Manual Reset Wiring and Programming
Wiring Example
The following wiring diagram is one example of how to wire a light curtain’s two normally open outputs and two inputs required for muting to a GuardPLC module to comply with EN954-1 Category 4.
Light Curtain Wiring Diagram - Manual Reset
L-
L+
MDA
S1 S2
E1
E1 - 24V Power SupplyLCA - Light Curtain Output ALCB - Light Curtain Output BMDA - Dual Input Muting Device Channel AMDB - Dual Input Muting Device Channel BS1 - Circuit Reset SwitchS2 - Fault Reset SwitchS3 - Generate Pulse Test Switch
MDB
S3
LCA LCB
GuardPLCDO 1 DO 2 LS+
DI 1 DI 2 DI 3 DI 4 DI 5 DI 6 DI 7
Dual InputMuting Device
OS
SD
1
OS
SD
2
The inputs shown on this wiring diagram correspond to the inputs for the function block.
Publication 1753-RM001C-EN-P - May 2007
Light Curtain Function Block (LC) 61
Programming Example
The following programming example shows how the Light Curtain Function Block with Manual Reset can be applied to the wiring diagram shown in Light Curtain Wiring Diagram - Manual Reset, on page 60.
Light Curtain Programming Example - Manual Reset
EN954-1 Category 4 requires that inputs be independently pulse tested.
Guard PLCUser Program
Pulse Test Interval
Pulse Test Duration
Input 1 A
Generate Pulse Test
RPTO_RA
Redundant Pulse Test Output
Pulse Test Source A
Pulse Test Source B
Pulse Test Fault A
Pulse Test Fault B
Input 1 B
Output 1 A
Output 1 B
DO 2
T#2 to 60 sec
T#10 - 500 msec
DI 3
DI 7
DI 4
DO 1
To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
To User LogicChannel A
Channel B
Fault Reset
Circuit Reset
LC_RA
Light Curtain Manual Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Mute Light Curtain
Input Filter Time
Circuit Reset Held On
Light Curtain Blocked
Light Curtain Muted
To User Logic
To User Logic
To User Logic
T#0 to 250msec
RIN_RA
Redundant Input Manual Reset
Channel A
Channel B
Fault Reset
Circuit Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Circuit Reset Held On
To User Logic
To User Logic
To User Logic
To User LogicDI 5
DI 6
DI 1
DI 2
Publication 1753-RM001C-EN-P - May 2007
62 Light Curtain Function Block (LC)
Light Curtain with Automatic Reset Wiring and Programming
Wiring Example
The following wiring diagram is one example of how to wire a light curtain’s two normally open outputs and two inputs required for muting to a GuardPLC module to comply with EN954-1 Category 4.
Light Curtain Wiring Diagram - Automatic Reset
ATTENTION Various safety standards (EN 60204, EN 954) require that when using the Automatic Circuit Reset feature, other measures must be implemented to ensure that an unexpected (or unintended) startup will not occur in the system or application.
L-
L+
MDA
S1 S2
E1
E1 - 24V Power SupplyLCA - Light Curtain Output ALCB - Light Curtain Output BMDA - Dual Input Muting Device Channel AMDB - Dual Input Muting Device Channel BS1 - Fault Reset SwitchS2 - Generate Pulse Test Switch
MDB
LCA LCB
GuardPLCDO 1 DO 2 LS+
DI 1 DI 2 DI 3 DI 4 DI 5 DI 6
Dual InputMuting Device
OS
SD
1
OS
SD
2
The inputs shown on this wiring diagram correspond to the inputs for the function block.
Publication 1753-RM001C-EN-P - May 2007
Light Curtain Function Block (LC) 63
Programming Example
The following programming example shows how the Light Curtain Function Block with Automatic Reset can be applied to the wiring diagram shown in Light Curtain Wiring Diagram - Automatic Reset, page 62.
Light Curtain Programming Example - Automatic Reset
EN954-1 Category 4 requires that inputs be independently pulse tested.
Guard PLCUser Program
Pulse Test Interval
Pulse Test Duration
Input 1 A
Generate Pulse Test
RPTO_RA
Redundant Pulse Test OutputVersion X
Pulse Test Source A
Pulse Test Source B
Pulse Test Fault A
Pulse Test Fault B
Input 1 B
Output 1 A
Output 1 B
DO 2
T#2 to 60 sec
T#10 - 500 msec
DI 3
DI 6
DI 4
DO 1
To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
To User LogicChannel A
Channel B
Fault Reset
LC_AUTO_RA
Light Curtain Automatic Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
Mute Light Curtain
Input Filter Time Light Curtain Blocked
Light Curtain Muted
To User Logic
To User Logic
T#0 to 250msec
RIN_AUTO_RA
Redundant Input Automatic Reset
Channel A
Channel B
Fault Reset
Output 1
Cycle Inputs
Inputs Inconsistent
Fault Present
To User Logic
To User Logic
To User LogicDI 5
DI 1
DI 2
Publication 1753-RM001C-EN-P - May 2007
64 Light Curtain Function Block (LC)
Publication 1753-RM001C-EN-P - May 2007
Chapter 6
Redundant Output with Continuous Feedback Monitoring Function Block (ROUT)
Overview The basic purpose of the Redundant Output with Continuous Feedback Monitoring Function Block is to emulate the output functionality of a safety relay in a software programmable environment which is intended for use in SIL3/CAT4 safety applications.
The Redundant Output with Continuous Feedback Monitoring Function Block can be used in two ways:
• Redundant Output with Negative Feedback (RONF)• Redundant Output with Positive Feedback (ROPF)
Operation This function block monitors a single logical input and activates two field outputs when the logical input goes Active.
It also monitors a feedback channel for each field output and generates a fault if both channels do not, within a time limit, indicate the desired state of the associated outputs.
Function block operation is illustrated in the following timing diagrams.
1
0
1
0
1
0
Enable
Output 1
Output 2
65 Publication 1753-RM001C-EN-P - May 2007
66 Redundant Output with Continuous Feedback Monitoring Function Block (ROUT)
Negative Feedback Examples
Output 1
Enable
Feedback 1
Fault Reset
Output 1FeedbackFailure
Output 2
Enable
Feedback 2
Fault Reset
Output 2FeedbackFailure
Output 2
Enable
Feedback 2
Fault Reset
Output 2FeedbackFailure
Output 1
Enable
Feedback 1
Fault Reset
Output 1FeedbackFailure
1
0
1
0
1
0
1
0
1
0
250 ms
250 ms 250 ms
250 ms
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
Publication 1753-RM001C-EN-P - May 2007
Redundant Output with Continuous Feedback Monitoring Function Block (ROUT) 67
Positive Feedback Examples
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
1
0
Output 1
Enable
Feedback 1
Fault Reset
Output 1FeedbackFailure
Output 2
Enable
Feedback 2
Fault Reset
Output 2FeedbackFailure
Output 2
Enable
Feedback 2
Fault Reset
Output 2FeedbackFailure
Output 1
Enable
Feedback 1
Fault Reset
Output 1FeedbackFailure
250 ms 250 ms
250 ms 250 ms
Publication 1753-RM001C-EN-P - May 2007
68 Redundant Output with Continuous Feedback Monitoring Function Block (ROUT)
Function Block Description
Enable
Feedback 1
Fault Reset
RONF_RA
Redundant Output Negative Feedback
Output 1
Output 1 Feedback Failure
Output 2 Feedback Failure
Fault Present
Feedback 2
Output 2
Enable
Feedback 1
Fault Reset
ROPF_RA
Redundant Output Positive Feedback
Output 1
Output 1 Feedback Failure
Output 2 Feedback Failure
Fault Present
Feedback 2
Output 2
Redundant Output with Continuous Feedback Function Block Parameters
Parameter Short Name
Type Data Type Description Safe, Active and Initial Values
Enable — Input Boolean Input to Enable the Redundant Outputs Safe = 0, Active = 1
Feedback 1 — Input Boolean Feedback from a device either directly or indirectly controlled by Output 1.
RONF: Off = 1, On = 0
ROPF: Off = 0, On = 1
Feedback 2 — Input Boolean Feedback from a device either directly or indirectly controlled by Output 2.
RONF: Off = 1, On = 0
ROPF: Off = 0, On = 1
Fault Reset — Input Boolean After fault conditions are corrected for the function block, the Fault Present output for the function block is cleared when this input transitions from off to on.
Initial = 0, Reset = 1
Output 1 O1 Output Boolean Output 1 of the redundant outputs. Safe = 0, Active = 1
Output 2 O2 Output Boolean Output 2 of the redundant outputs. Safe = 0, Active = 1
Output 1 Feedback Failure
O1FF Fault Boolean Output 1 Feedback is not indicating the correct state of Output 1 within 250 ms
Initial = 0, Fault = 1
Output 2 Feedback Failure
O2FF Fault Boolean Output 2 Feedback is not indicating the correct state of Output 2 within 250 ms
Initial = 0, Fault = 1
Fault Present FP Fault Boolean This is set whenever a fault is present in the function block. Outputs cannot enter the Active state when Fault Present is set. Fault Present is cleared when all faults are cleared and the Fault Reset input transitions from off to on.
Initial = 0, Fault = 1
Publication 1753-RM001C-EN-P - May 2007
Redundant Output with Continuous Feedback Monitoring Function Block (ROUT) 69
Relationship of I/O Wiring to Function Block Parameters
Redundant Output with Negative Feedback Wiring and Programming
Wiring Example
The following wiring diagram is one example of how to wire two contactors and normally open auxiliary contacts to a GuardPLC module to comply with EN954-1 Category 4.
Redundant Output with Negative Feedback Wiring Diagram
Programming Example
The following programming example shows how the Redundant Output function block with negative feedback can be applied to the wiring diagram shown in Figure Redundant Output with Negative Feedback Wiring Diagram, Redundant Output with Negative Feedback Wiring Diagram.
L-
L+
S1
E1
E1 - 24V Power SupplyPS - Power Source (application specific)K1 - Power Contact 1K2 - Power Contact 2K1a - Auxilary Contact 1K2a - Auxilary Contact 2S1 - Fault Reset SwitchS2 - Generate Pulse Test Switch
GuardPLC
M
K1
K2
L1 L3L2
K2aK2K1
PS
K1a
K2a
K1a
DI 2DI 1 DI 3
DO 1 DO 2 LS+ DO 3 DO 4
S2
DI 4
The inputs shown on this wiring diagram correspond to the inputs for the function block.
Publication 1753-RM001C-EN-P - May 2007
70 Redundant Output with Continuous Feedback Monitoring Function Block (ROUT)
Redundant Output with Negative Feedback Programming Example
EN954-1 Category 4 requires that inputs be independently pulse tested.
Guard PLCUser Program
Pulse Test Interval
Pulse Test Duration
Input 1 A
Generate Pulse Test
RPTO_RA
Redundant Pulse Test Output
Pulse Test Source A
Pulse Test Source B
Pulse Test Fault A
Pulse Test Fault B
Input 1 B
Output 1 A
Output 1 B
DO 2
T#2 to 60 sec
T#10 - 500 msec
DI 1
DI 4
DI 2
DO 1
DI 3
To User Logic
To User Logic
To User Logic
To User Logic
To User Logic
Enable
Feedback 1
Fault Reset
RONF_RA
Redundant Output Negative Feedback
Output 1
Output 1 Feedback Fault
Output 2 Feedback Fault
Fault Present
Feedback 2
Output 2 DO 4
DO 3Input from another Safety
Instruction Output
Publication 1753-RM001C-EN-P - May 2007
Redundant Output with Continuous Feedback Monitoring Function Block (ROUT) 71
Redundant Output with Positive Feedback Wiring and Programming
Wiring Example
The following wiring diagram is one example of how to wire two contactors and normally open auxiliary contacts to a GuardPLC module to comply with EN954-1 Category 4.
Redundant Output with Positive Feedback Wi