Table B.2: Redundancy Behavior
Repair MeasuresEffect
Fault
Treatment
Fault DetectionFault Condition
Transient fault:
Automatic reboot
Redundancy
switch-over.
System
degrades to
non-redundant
system.
Primary role
actively
transferred to
or taken by
redundant
device.
Device fails completely or
software watchdog expires
or
hardware watchdog
expires or
exception occurs or
Primary device
fails due to
• permanent
hardware fault
• transient
hardware fault
• software fault
1
Permanent fault:
Replace device
secondary device
will reboot and
receive
configuration data
from primary device.
failure in H1 interface
detected.
Repair or reconnect
Ethernet cable.
Redundancy
switch-over.
System
degrades to
non-redundant
system.
Primary role
actively
transferred to
redundant
device.
Bad link status of Ethernet
port detected.
Detection time less than
500 ms.
Ethernet cable
broken between
primary device and
Ethernet
hub/switch.
2
Secondary device
will reboot and
receive
configuration data
from primary device.
Repair or reconnect
H1 cable.
Redundancy
switch-over.
No
redundancy
concerning
the affected
H1 link.
Primary role
actively
transferred to
redundant
device, so that
access to H1
is possible
again.
Empty live list detected on
one H1 port of primary
device while secondary
device still has non-empty
live list. Due to the H1
protocol, it may take some
seconds until the live list
becomes empty. Detection
occurs only if in primary
device and secondary
device the number of
active H1 devices in the
live list has exceeded the
threshold of one.
H1 cable broken
between primary
device and H1
network.
3
2PAA114135-610 109
B Technical Reference
B.6 Redundancy
To Next Page
Loading...
