Table B.2: Redundancy Behavior
(Continued)
Repair MeasuresEffect
Fault
Treatment
Fault DetectionFault Condition
Transient fault:
Automatic reboot
System
degrades to
non-redundant
system.
Secondary
device
assumes and
indicates
non-operational
state.
Device fails completely or
• software watchdog
expires or
• hardware watchdog
expires or
• exception occurs or
• failure in H1 interface
detected.
Secondary device
fails due to
• permanent
hardware fault
• transient
hardware fault
• software fault
4
Permanent fault:
Replace device
Secondary device
will reboot and
receive
configuration data
from primary device.
Repair or reconnect
Ethernet cable.
System
degrades to
non-redundant
system.
Secondary
device
assumes and
indicates
non-operational
state.
Bad link status of Ethernet
port detected.
Detection time less than
500 ms.
Ethernet cable
broken between
secondary device
and Ethernet
hub/switch.
5
Secondary device
will reboot and
receive
configuration data
from primary device.
Repair or reconnect
H1 cable.
No
redundancy
concerning
the affected
H1 link.
None.No fault detection in
secondary device.
Empty live list has to be
detected by any HSE
client (e. g. asset monitor).
H1 cable broken
between
secondary device
and H1 network.
1
6
2PAA114135-610 110
B Technical Reference
B.6 Redundancy
To Next Page
Loading...
