80 Rockwell Automation Publication ICSTT-RM447M-EN-P - July 2019
Chapter 4 AADvance System Architectures
Figure 17 - Triple Modular Redundant System
You can add more groups of three input modules and pairs of output modules
to increase I/O capacity. For example, a triple modular redundant controller
using 8-channel modules for 16 inputs and 16 outputs could be arranged like
this. For 16 channel TMR input you must use the T9402 16 channel digital
input modules in the same arrangement.
IMPORTANT All configurations that use dual or triplicate processor modules are
applicable for SIL 3 architectures with de-energize to action outputs. Dual
output modules are required for SIL 3 energize to action outputs.