Application planning
6.5 Failure scenarios
S7-1500R/H redundant system
212 System Manual, 01/2024, A5E41814787-AF
3. The two primary CPUs continue to exchange process data with the PROFINET devices.
4. The redundancy of the system is defective. The redundant system is in an undefined system
state. The undefined system state can lead to dangerous states in the process.
Undefined system state of the S7-1500H redundant system with simultaneous
interruption of the two redundancy connections ≤ 55 ms apart.
Lay the redundancy connections in such a way that the fiber-optic cables are securely
protected from damage. Also make sure when laying the cables that the two redundancy
connections are always separate from each other. This makes simultaneous damage to
the redundancy connections (< 55 ms apart) unlikely.
Diagnostics
System state and operating states after the failure of both redundancy connections:
• Redundant system → System state defective (undefined: Each H-CPU is in the RUN-Solo
system state).
• Primary CPU → RUN operating state
– MAINT LED → yellow light: The H-system is not in the RUN-Redundant system state. No
partner CPU has been found in the H-system.
• Primary CPU (previously backup CPU) → RUN operating state
– MAINT LED → yellow light: The H-system is not in the RUN-Redundant system state. No
partner CPU has been found in the H-system.
To get detailed diagnostics information, evaluate the diagnostics buffer.
Solution
Please note the following solution:
defective redundancy connections, you must switch both H-CPUs to
the STOP operating state. Only then repair the redundancy connections. Switch the H
-CPUs
back to the RUN operating state.
You can find additional information on the procedure in the section Replacing defective
redundancy connections (Page 447).