HIMatrix 6 Outputs
HI 800 023 E Rev. 1.01 Page 37 of 72
6.5.2 Reaction in the Event of a Fault
If a faulty signal is detected, the device or module sets the affected output to the safe, de-
energized state using the safety switches. If a module fault occurs, all module outputs are
switched off. Additionally, a compact system reports the two faults via the ERROR LED, a
F60 module via the ERR LED.
6.6 Safety-Related Analog Outputs (F60)
The AO 8 01 module has an own safety-related 1oo2 A/D microprocessor system with safe
communication. It writes to the analog outputs once per cycle and saves the values
internally. The module itself tests the function..
The DIP switches on the safety-related analog output modules can be used to set the
outputs to voltage or current outputs. In doing so, ensure that the setting for use in the
system comply with the configuration in the user program. If this is neglected, faulty module
behavior may result.
NOTE
Module malfunctions are possible!
Prior to inserting the module into the system, check the following:
Module's DIP switch settings.
Module configuration in the user program.
Depending on the device type selected (...FS1000, ...FS2000) during configuration, multiple
values must be taken into account in the logic for the output signals to obtain identical
output values (see the AO 8 01 Manual (HI 800 195), Chapter Signals and Error Codes for
the Outputs).
Each group of two analog outputs are galvanically connected:
Outputs 1 and 2.
Outputs 3 and 4.
Outputs 5 and 6.
Outputs 7 and 8.
The analog output circuits have current or voltage monitoring, read back and test channels
(even for parallel output circuits), as well as two additional safety switches for the safe
disconnection of the output circuits in the event of a fault. This ensures that the safe state is
achieved (current output: 0 mA, voltage output: 0 V).
6.6.1 Test Routines
The module is automatically tested during operation. The main test functions are:
Duplicated read back of the output signal.
Crosstalk test between the outputs.
Checking the integrated safety shutdown.
6.6.2 Reaction in the Event of a Fault
The module reads back the output signals once every cycle and compares them with the
internally saved output signals. If the module detects a discrepancy, it switches off the
faulty output channel via the two safety switches and reports a module fault via the ERR
LED.
The error code allows the user to configure additional fault reactions in the user program.
To determine the worst case reaction time of the analog outputs, add the double watchdog
time of the AO CPU (2 * WDT
AO µC
) to the double watchdog time (2 * WDT
CPU
).
the worst case reaction time is specified in the corresponding manual.
To Next Page
Loading...
Need help?
General
