Home

User manual UM EN IB IL 24 LPSDO 8 V3-PAC - Digi-Key

1. Functional block instances 96 If the safety logic limit has been exceeded a corresponding error message is displayed by SAFECOMF In this case reduce the size of your safety logic A 28 PHOENIX CONTACT 105429 en_00 105429 en_00 Memory sizes for the safety logic Table A 13 Functional block instances Functional blocks Functional block instances MutingPar_2Sensor MutingPar MutingSeq Safety functional blocks Anitvalent EDM EmergencyStop EnableSwitch Equivalent ESPE GuardLocking GuardMonitoring ModeSelector Reset TestableSafetySensor TwoHandControlTypell TwoHandControlT ypelll Safety functions CTUD F_TRIG PULSE_GEN R_TRIG RS SR TOF TON TP Standard functions CTUD F_TRIG PULSE_GEN R_TRIG RS SR TOF TON TP Logic functions AND EN_OUT EQ NOT_EQ NOT OR XOR PHOENIX CONTACT A 29 B Appendix checklists The checklists listed in this section provide support during the planning assembly and electrical installation startup parameterization and validation of the IB IL 24 LPSDO 8 V3 PAC module These checklists may be used as planning documentation and or as verification to ensure the steps in the specified phases are carried out carefully Archive the completed checklists to use as reference for recurring tests The checklists do not replace the validation initial startup and regular testing performed by qualified personnel The following section of a checklist
2. User manual UM EN IB IL 24 LPSDO 8 V3 PAC Order No 2992035 Inline module with integrated safety logic and safe digital outputs o dD 00 Weontac INSPIRING INNOVATIONS User manual Inline module with integrated safety logic and safe digital outputs Designation UM EN IB IL 24 LPSDO 8 V3 PAC Revision 00 Order No 2992035 This user manual is valid for Designation Order No IB IL 24 LPSDO 8 V3 PAC 2 01625 105429 en_00 2013 04 03 Revision HW FW FW 00 100 100 PHOENIX CONTACT Internet Subsidiaries Published by Please observe the following notes User group of this manual The use of products described in this manual is oriented exclusively to Qualified electricians or persons instructed by them who are familiar with applicable standards and other regulations regarding electrical engineering and in particular the relevant safety concepts Qualified application programmers and software engineers who are familiar with the safety concepts of automation technology and applicable standards Explanation of symbols used and signal words hazards Obey all safety measures that follow this symbol to avoid possible This is the safety alert symbol It is used to alert you to potential personal injury injury or death There are three different categories of personal injury that are indicated with a signal word DANGER This indicates a hazardous situation which if not avoi
3. mh ZIJ 5 ey gt om 4 DK Hao j T eS oug ae Wek SO 4 si d Pel 2 28 cha JO s0 to n GE pne me 4 im Ik A KA u G af D 26 20 DIP switch position of island number 2 green in Figure A 8 in SAFECONF Figure A 10 PHOENIX CONTACT A 15 105429 en_00 IB IL 24 LPSDO 8 V3 PAC A4 SafetyBridge V3 system handling in various control systems The functions of a SafetyBridge island are mapped to the relevant control systems using handling functional blocks The handling functional blocks for the relevant controller types including the documentation can be found at www phoenixcontact net products A5 Enable principle The enable principle is implemented in the SafetyBridge system For this all modules with local outputs have an enable function integrated in the device firmware ANDed bit by bit for each local safe output channel The enable function can be parameterized enabled disabled for each specific channel When the enable function is enabled the relevant safe local output is ANDed bit by bit with the corresponding standard output of the standard control system This output is then only set if the result of the safety function calculation permits this and the standard control system has set the corresponding output The enable function is performed according to the single channel or two channel parameterization of the safe outputs The enable function is not graphically represented in SAFEC
4. 10 2 IB IL 24 LPSDO 8 V3 PAC Housing dimensions width x height x depth 48 8 x 119 8 x 71 5 mm Weight with plugs Operating mode SafetyBridge V3 Transmission speed local bus Ambient temperature Operation Storage transport Humidity Operation 200g Process data mode with 24 words 500 kbaud or 2 Mbaud 25 C to 55 C 25 C to 70 C 75 on average 85 occasionally no condensation a In the range from 25 C to 55 C appropriate measures against increased humidity must be taken Storage transport 75 on average 85 occasionally no condensation a For a short period slight condensation may appear on the outside of the housing 105429 en_00 PHOENIX CONTACT 10 1 IB IL 24 LPSDO 8 V3 PAC General data continued Air pressure Operation Storage transport Degree of protection Housing material Air and creepage distances Protection class Gases that may endanger functions according to DIN 40046 36 DIN 40046 37 Sulfur dioxide SO gt Hydrogen sulfide H2S Resistance of housing material to termites Resistance of housing material to fungal decay Ambient compatibility Connection data for Inline plugs Connection method Conductor cross section Supported stop category according to EN 60204 Mechanical requirements Vibration according to IEC 60068 2 6 Shock according to IEC 60068 2 27 80 kPa to 108 kPa up to 2000 m above sea level 66 kPa to 108 kPa up to 3500 m above sea lev
5. During configuration select the modules set the island numbers and connect the safety function in SAFECOMF To parameterize the system parameterize each input and output of the system You must also set the watchdog time for each satellite The safe configuration and parameterization user interface of SAFECONF generates a data record containing the configuration and parameterization data for all the modules of a SafetyBridge island in the format specific to the controller So that data consistency and uniqueness can be checked suitable means such as addresses module IDs and CRCs are included in the configuration and parameter data record Import this configuration and parameter data record into the standard control system used according to the controller On every power up make this data record available to the IB IL 24 LPSDO 8 V3 PAC island node see Section Downloading the configuration and parameter data record on page A 21 The IB IL 24 LPSDO 8 V3 PAC module is parameterized in this way The satellites are parameterized automatically by the IB IL 24 LPSDO 8 V3 PAC module SAFECONF can be used as a stand alone tool However depending on the control system calling SAFECONF can also integrate the transfer of the configuration and parameter data record deeper into the relevant control system E Learning tutorials and online help are available for the SAFECONF software tool SAFECONF should also be used in the planning pha
6. Acknowledging the diagnostic message deletes the message and activates the outputs Undervoltage at Uy Supply voltage Un is measured If Uy lt 17 V a diagnostic message is generated 8 3 General errors Table 8 4 General errors Diagnostic LED Acknowledgment code hex Yes 4 Device X1F2 Immediate Check and adapt temperature shutdown Ambient at critical Further conditions value temperature Derating increase causes the module to SUpateaee switch to the safe Switching state frequency Impermissible Module is inthe Check and DIP switch safe state correct switch position position Hardware FS ON Errorinthelogic Module is inthe Replacement fault area safe state Acknowledgment yes 4 Acknowledging the diagnostic message deletes the message 105429 en_00 PHOENIX CONTACT 8 3 IB IL 24 LPSDO 8 V3 PAC 8 4 Parameterization errors Table 8 5 Parameterization errors Diagnostic LED Acknowledgment code hex Incorrect See FS Each outputis Module isin Check and parameterization Table 8 6 flashing parameterize the safe state correct d individually parameterization In order to determine what type of parameterization error has occurred use the corresponding software to access the controller online and read the error Proceed as follows e g in the SafetyBridge system e The diagnostic LEDs indicate that an error has occurred e Access the higher level standard control system online For
7. Safety characteristics according to DIN EN 62061 Achievable SIL claim limit Safe failure fraction SFF Probability of a dangerous failure per hour for the entire module PFH Hardware fault tolerance HFT of the module Permissible duration of use Safety characteristics according to EN ISO 13849 1 Achievable performance level Diagnostic coverage DC Mean time to dangerous failure MTTFd Supply voltage U logic Technical data and ordering data SIL CL SIL 2 single channel SIL CL SIL 3 two channel Depends on the parameterization and wiring see Section Connection options for actuators depending on the parameterization on page 2 5 and Section Connection examples for safe outputs on page 6 1 99 SIL CL 2 1 of 10 maximum corresponds to 1 x 10 8 SIL CL 3 1 of 10 maximum corresponds to 1 x 109 1 of 10 maximum corresponds to 1 x 10 Depends on the parameterization see Table 6 3 on page 6 3 20 years PL e two channel PL d single channel Depends on the parameterization and wiring see Section Connection options for actuators depending on the parameterization on page 2 5 and Section Connection examples for safe outputs on page 6 1 See also Section Achievable safety depending on the modules used on page A 25 99 For single channel assignment 100 years For two channel assignment 100 years The safety terminal is supplied with commu
8. safe state All module outputs are in the safe state Power up with error free selftest Replacement Check actuator Check plug and cabling Check freewheeling circuit at the contactor Power up with error free selftest Replacement Power up with error free selftest Replacement Power up with error free selftest Replacement Remove error Power up with error free selftest Yes 1 Yes 1 Yes 1 Acknowledge all errors that are present Only then can the outputs be re enabled Acknowledging the diagnostic message deletes the message The module can only be restarted or reparameterized following power up or soft reset and error free selftest PHOENIX CONTACT 105429 en_00 Errors messages and removal Acknowledgment yes 2 Acknowledging the diagnostic message deletes the message and enables a restart Following successful acknowledgment the module also expects a positive edge from the application for the output AN WARNING Unexpected machine startup An operator acknowledgment leads to a positive edge and can therefore result in the outputs being re enabled 8 2 Supply voltage errors Table 8 3 Supply voltage Uj errors Error cause Diagnostic LED Acknowledgment code hex Undervoltage Uy below the All module Check supply Um Tear permissible outputs are inthe voltage level and voltage range safe state correct Check supply line length and load Acknowledgment yes 3
9. 00 0O 00 0O 00 00 00 00 DO 00 00 00 00 0O 00 0O o0 OO OO 0O 00 OO 00 0O 00 00 00 00 00 00 0O 0O oO OO GO 0O 00 00 0O 0O oO OO 00 0O 00 0O 0O DO 00 GO 00 00O oO 00 0O DO o0 oO 00 00 oO 00O 0O 0O 00 0O 00 00O 00 0O oO 0O 50 GO 00 0O 00 00 00 0O 00 0O 00 0O 00 OO oO 0O 00 00 00 00O 00 0O 0O 00 00 00 00 00O 090 00 00 00 50 DO 0O 00 DO 00 00 00 00 0O oO 0O 00 0O oO 0O 00 00 0O 0O oO 0O 0O 0O 200 GO 00 0O 50 GO 00 DO 00 00 00 0O 50 00 00 00 00 0O 0O 00 00 00O 0O 0O o0 OO 00O 0O oO oO 00 0O 00 OO 00O 0O oO oO oO 00 oO 0O 00O 0O 00 00 00 0O 00 00 00 00 00 00 00 00 o0 OO 0O 00 00 0O 00 00O oO 00 0O DO 00 0O 00O 0O oO 0O GO 0O 00 0O 00 0O 00 0O 0O 0O 00 00 00 0O 00 GO 00 0O 00 00 00 0O 00 0O 00 0O 1054290002 Hierarchical topology tree structure Figure A 6 105429_en_00 A 10 PHOENIX CONTACT System topology Example 2 flat topology This example consists of 3 islands Table A 4 Flat topology sama Master SCS LPSDO 1 LPSDO SL2 PSDI1 PSDI 2 PSDI3 PSDO 1 LPSDO SL 2 LPSDOSL3_ PSDI 1 PSDI 2 PSDO 1 CY LPSDO SL3 PSDI 1 PSDI 2 PSDO 1 PSDO 2 SY LPSDO SL 2 LPSDO S 3 Ef L Le I HS Leedi i EZIB E Xoo fo EE P a a 88 88 88 63 68 83 88 68l68 age oojoojoo oa oO
10. 16 Test pulses a Note on test pulses If the test pulses are disabled cross circuits and short circuits cannot be detected Regardless of the parameterization selected under Test impulses output switched off the outputs parameterized as Not used are tested by test pulses Please also refer to Requirements for controlled devices actuators on page 2 4 and Section Connection examples for safe outputs on page 6 1 Switch off delay for stop The switch off delay for stop category 1 is calculated from the Switch off delay for stop category 1 category 1 and Value range of switch off delay for stop category 1 parameters Switch off delay for stop category 1 Switch off delay for stop category 1 x Value range of switch off delay for stop category 1 If the switch off delay for stop category 1 is parameterized with a value less than 150 ms this value is rejected as a parameterization error error code 028xp Two channel Please note the following for two channel parameterization parameterization Ensure that the values for the switch off delay for stop category 1 are the same for both channels This means that the time must have the same value and the same value range 105429 _en_00 PHOENIX CONTACT 5 3 IB IL 24 LPSDO 8 V3 PAC 5 3 Behavior of the outputs in the event of enabled switch off delay for stop category 1 Depending on the event that causes the outputs to be switched off and on the parame
11. 8 V3 PAC PSDI 8 PAC PSDO 8 PAC oo Oo Oo oo Oo Oo Oo Ou oOo Oo Oo Ou oo Oo Oo oo Oo Oo Oo Ou Oo Oo Oo oo Oo Oo oo oo oo Oo Oo Ou oo Oo oo oo Ou Ou Ou Og go 00 oo 010 oo 010 oo 010 oo oo oo oo oon Oo Oo oo oo oo Oo oo oo Ou Ou Oo oo Oo Oo On oo Oo Oo Ou Oo Oo Oo On Oo Ou Oo Ou oo Oo oo On Oo Ou Ou OU oo Oo OU on oo Oo Oo Ou oo Oo Oo OU oo Oo Oo OU oOo Oo Oo On oo Oo Oo oo ie 00001 00001 00010 00101 00010 00001 Oooo S S 00001 00010 00001 00010 00010 00001 00001 00000 00000 00011 00010 00011 00110 00100 pd Figure A 8 1054190004 Example addresses for SafetyBridge islands 1 and 2 All the addresses for island numbers 1 and 2 used in the example are listed in Table A 9 The addresses actually used in the example in Figure A 8 are in bold Table A 9 Example addresses for SafetyBridge islands Addresses for Addresses for Device island number 1 red in Figure A 8 island number 2 green in Figure A 8 IB IL 24 LPSDO 8 V3 PAC island node Assigned IB IL 24 PSDI 8 PAC IB IL 24 PSDI 8 PAC Assigned IB IL 24 PSDI 8 PAC IB IL 24 PSDI 8 PAC Assigned IB IL 24 PSDI 8 PAC IB IL 24 PSDI 8 PAC Assigned IB IL 24 PSDO 8 PAC IB IL 24 PSDI 8 PAC A 14 PHOENIX CONTACT n 105429_en_00 SafetyBridge address assignment Example addresses for SafetyBridge islands Table A 9 Addresses for Add
12. Cat 4 PL e WARNING Loss of electrical and functional safety Toachieve the specified safety integrity level please refer to Section Measures required to achieve a specific safety integrity level on page 6 3 Please note that in order to achieve the specified PL the actuator must have a medium level of diagnostic coverage 90 to 99 and medium MTTFd A high level of diagnostic coverage gt 99 is recommended for the application according to PL d Use actuators that can achieve the required safety integrity level Evaluate the readback contacts to achieve Cat 3 or Cat 4 If the test pulses are disabled Test the outputs and external wiring by enabling the outputs at regular intervals The time between two tests must not exceed eight hours a Enable the test pulses to improve device diagnostics If the test pulses for the actuator are faulty they can be disabled In this case test the switching capability of the outputs at regular intervals 6 8 PHOENIX CONTACT 105429 en_00 Connection examples for safe outputs Device diagnostics and behavior of the module in the event of an error Table 6 5 Two channel Error in the actuator SF Despite being disabled a switching None No element of the two channel actuator does not switch to the safe state e g a contact will not open ae Actuator cannot be enabled e g interrupt No loss of the safety function as the second switching element of the
13. Enabled Or disabled in software test impulses output switched off According to the Value range of switch off delay for stop category 1 and Switch off delay for stop category 1 parameters in this example the switch off delay is 30 x 1 s 30s 105429 _en_00 PHOENIX CONTACT 6 7 IB IL 24 LPSDO 8 V3 PAC 6 5 Two channel assignment of safe outputs For two channel assignment of the safe outputs two adjacent outputs are always used This assignment is fixed and cannot be parameterized See Section Two channel on page 5 2 OUT1_Ch1 4 seo Fal I y_ K1 R GND o K2 i 7 K2 R GND j 73420006 Figure 6 3 Two channel assignment of outputs K1 R and K2 R represent the forcibly guided N C contacts for monitoring the state of the relay readback contacts Connect these contacts via safe digital inputs Evaluate the readback and therefore the state of the switching elements in your safety logic WARNING Loss of safety function Connect the actuator ground directly to terminal point GND of the safety module An external ground may not be used The failure detection time is 20 ms This means that high pulses of this width can occur at the faulty output channel in the event of an error The two channel assignment means that this does not result in a hazardous state Basic specifications RRL weet SSOSC S Achievable SIL SIL CL Cat PL SIL 3 SIL CL 3
14. SIL 3 SIL CL 3 1 of 10 1 of 10 Use standard EN ISO 13849 1 to determine the performance level in your application In order to actually achieve the specified category the required measures listed below must be implemented Cat 2 Use proven and basic safety principles according to EN ISO 13849 2 Use appropriately qualified actuators see Section Requirements for controlled devices actuators on page 2 4 Please note that mechanical failure of the switching device can result in the loss of the safety function Prevent the welding of contacts on the connected contactors or safety relays with appropriate protection against overcurrent and surge voltage Please note that a single error can result in the loss of the safety function between tests Ensure that the external wiring is tested by the machine control system on machine startup and at suitable intervals This test must detect the loss of the safety function Inthe event of an error either safe disconnection must be implemented or a warning optical and or audible must be generated depending on the application PHOENIX CONTACT 6 3 IB IL 24 LPSDO 8 V3 PAC Cat 3 Use proven and basic safety principles according to EN ISO 13849 2 Use appropriately qualified actuators see Section Requirements for controlled devices actuators on page 2 4 Please note that mechanical failure of the switching device can result in the loss
15. X010 OUTO_Ch1 X011 OUT1_Ch1 X012 OUT2_Ch1 X013 OUT3_Ch1 Short circuit or overload X030 OUTO_Ch1 X031 OUT1_Ch1 X032 OUT2_Ch1 X033 OUT3_Ch1 Error at the output or short circuit during the test X050 OUTO_Ch1 X051 OUT1_Ch1 X052 OUT2_Ch1 X053 OUT3_Ch1 Error at the output during the test X060 OUTO_Ch1 X061 OUT1_Ch1 X062 OUT2_Ch1 X063 OUT3_Ch1 Hardware fault Cross circuit at the indicated output XO0A0 OUTO_Ch1 X0A1 OUT1_Ch1 X0A2 OUT2_Ch1 X0A3 OUT3_Ch1 Acknowledgment yes 1 8 2 X01n All OUT red ON The indicated output cannot X017 OUTO_Ch2 be disabled X018 OUT1_Ch2 X019 OUT2_Ch2 X01A OUT3_Ch2 X03n OUTYy red x037 ouTo_ch2 ON X038 OUT1_Ch2 X039 OUT2_Ch2 X03A OUT3_Ch2 All Pulse test brief activation at the output failed OUT red ON X057 OUTO_Ch2 X058 OUT1_Ch2 X059 OUT2_Ch2 X05A OUT3_Ch2 All Pulse test brief OUT deactivation at red the output failed x067 ouTo_ch2 ON X068 OUT1_Ch2 X069 OUT2_Ch2 X06A OUT3_Ch2 All Detected by OUT internal tests red ON All Cross circuit OUT with another red output or with an ON external signal X0A7 OUTO_Ch2 X0A8 OUT1_Ch2 X0A9 OUT2_Ch2 XOAA OUT3_Ch2 All other module outputs are in the safe state Affected output is in the safe state All module outputs are in the safe state All module outputs are in the safe state All module outputs are in the
16. an error immediately returns the safe input or output to the operating state Before acknowledging an error you must therefore make sure that the acknowledgment will not cause the machine to switch to a dangerous state When planning the machine or system make sure that acknowledgment is only possible if the danger zone is visible If in the event of failure the safety module is replaced please proceed as described in Section 4 Assembly removal and electrical installation and Section Restart after replacing a safety module on page 7 3 105429 _en_00 PHOENIX CONTACT 8 7 Maintenance repair decommissioning and disposal 9 Maintenance repair decommissioning and disposal 9 1 Maintenance The device is designed in such a way that maintenance work is not required during the duration of use However depending on the application and connected I O devices it may be necessary to test the function of the I O devices and the safety chain at regular intervals The duration of use of the module is 20 years Repeat testing within this time is not required Carry out maintenance of connected I O devices e g light grid according to the relevant manufacturer specifications 9 2 Repair Repair work may not be carried out on the safety module In the event of an error send the module to Phoenix Contact It is strictly prohibited to open the safety module In order to prevent the manipulation of the module and to detec
17. and outputs been fully and correctly parameterized m Are standard input signals exclusively used to configure standard operations e g for the enable principle using the EN_OUT block or for acknowledgment Has it been ensured that in the overall system consisting of SafetyBridge and w higher level PROFIsafe system the addresses address within the SafetyBridge system and F Address of the PROFIsafe system are unique lal Has watchdog time tewp been set for each satellite according to the application pf b Has the correct terminal point been assigned to the correct signal UA For IB IL 24 LPSDO 8 V3 PAC outputs that are parameterized for two channel operation are both channels parameterized correctly for each other For satellite inputs that are parameterized for two channel operation are both channels parameterized correctly for each other For satellite outputs that are parameterized for two channel operation are both channels parameterized correctly for each other Has the switch off delay for stop category 1 been observed in the calculation of the total response time for the machine system a Has prevention of undesired startup restart been configured UA Has it been ensured that an operator acknowledgment can only be executed by an intentional user action Not configured as automatic Has the checklist project information been processed in SAFECONF Project Project Info menu item No Requirement optional Y
18. applies for the tables below All outputs are safe digital outputs OV GND common ground for outputs FE common functional earth ground Table 3 1 Terminal point assignment for plug 1 P Notuses ee C es ovie Channel rand channel aa ere dT a Ce o 3 4 PHOENIX CONTACT 105429_en_00 Inline potential and data routing and Inline plugs Table 3 2 Terminal point assignment for plug 2 CO e Notwses o SSCS O e f os o 0 V GND Channel 1 and channel 2 LS Table 3 3 Terminal point assignment for plug 3 OV GND Channel tandchannel OV GND Chamel tandchannel2 sap e o ooo o o Cea f e l SS Table 3 4 Terminal point assignment for plug 4 OV 6ND Chamet ard chame2 OV GND Chamel ard chamei Ca q e o ooo o oo Cea f e l o WARNING Loss of functional safety due to parasitic voltages Connect the ground of the actuator to the ground terminal point of the corresponding output on the Inline plug An external ground may not be used PHOENIX CONTACT 3 5 105429_en_00 Assembly removal and electrical installation 4 Assembly removal and electrical installation 4 1 Assembly and removal 4 1 1 Unpacking the module The module is supplied in an ESD box together with a package slip with installation instructions Please read the complete package slip carefully The module may only be installed and removed by qualified personnel b NOTE Electrostatic discharge Ata The safety mod
19. been ensured that any person intentionally starting hazardous movements flimea crea vewttocangerrne A Are there fewer than 6 serial chains between the logic modules within a safety e a B 2 PHOENIX CONTACT 105429_en_00 No Requirement optional Yes No Remark i bameiercadacaclaniaal anise C1 x a Have the Inline specifications e g cabling power supply been observed afo i scenic AUG oe ee Are the specifications for parameterization assembly electrical installation startup and validation of the IB IL 24 LPSDO 8 V3 PAC described Are the specifications for parameterization assembly electrical installation startup and validation of the satellites described Is the assignment of responsibility specified e g for assembly installation Name company configuration parameterization startup validation etc Are measures planned which prevent hazardous states in each phase e g specification of individual steps in the procedure for each phase Is monitoring of the actuators and sensors controlled requested by the SafetyBridge system planned e g reading of outputs Date Signature author Signature test engineer 105429 _en_00 PHOENIX CONTACT B 3 IB IL 24 LPSDO 8 V3 PAC B 1 2 Configuration and parameterization Checklist for configuration and parameterization of the SafetyBridge system wine a No Requirement manono Yes Remark _ _ ia Have all inputs
20. each module of the SafetyBridge island a diagnostic register is mapped to the process image of the IB IL 24 LPSDO 8 V3 PAC From this determine the module of the safety island in which an error has occurred e Evaluate the specified diagnostic code Table 8 6 Parameterization errors Diagnostic code Short description X21n The parameterized shutdown time for Correct value and resend parameter X210 OUTO _Ch1 amp 2 OUTO Chia2 the indicated output is outside the data to the module X211 OUT1_Ch1 amp 2 OUT1_Ch1 amp 2 permissible value range X212 OUT2_Ch1 amp 2 OUT2_Ch1 amp 2 X213 OUT3_Ch1 amp 2 OUT3_Ch1 amp 2 X22n Outputs parameterized for two channel Correct value and resend parameter X220 OUTO_Ch1 OUTO Ch1 amp 2 Operation must be assigned the same data to the module X221 OUT1_Ch1 OUT1_Ch1 amp 2 shutdown times X222 OUT2_Ch1 OUT2_Ch1 amp 2 X223 OUT3_Ch1 OUT3_Ch1 amp 2 X23n The parameterization of two related Correct value and resend parameter X230 OUTO _Ch1 amp 2 OUTO Ch1 amp 2 Outputs does not correspond to the data to the module X231 OUT1_Ch1 amp 2 OUT1_Ch1 amp 2 two channel setting X232 OUT2_Ch1 amp 2 OUT2_Ch1 amp 2 X233 OUT3_Ch1 amp 2 OUT3_Ch1 amp 2 X28n The parameterized switch off delay Correct value and resend parameter X280 OUTO_Ch1 OUTO_Ch1 time for the output is outside the data to the module X281 OUT1_Ch1 OUT1_Ch1 permissible value range X282 OUT2_Ch1 OUT2_Ch1 X283 OUT
21. error message is transmitted to the IB IL 24 LPSDO 8 V3 PAC and the standard control system To determine which errors are detected by a specific device please refer to the corresponding device documentation A 6 3 Acknowledgment of error messages for satellites Errors that occur on satellites are acknowledged via the standard control system on the IB IL 24 LPSDO 8 V3 PAC see Section SafetyBridge V3 system handling in various control systems on page A 16 The acknowledgment is forwarded to the satellites An example for the acknowledgment of error messages can be found in the quick start guides for the IB IL 24 LPSDO 8 V3 PAC see Section Ordering data documentation on page 10 7 105429 en_00 PHOENIX CONTACT A 19 IB IL 24 LPSDO 8 V3 PAC a Configuration Parameterization Configuration and parameter data record a a A 20 PHOENIX CONTACT A7 Configuration parameterization and download An example for configuration parameterization and download can be found in the quick start guides for the IB IL 24 LPSDO 8 V3 PAC see Section Ordering data documentation on page 10 7 A 7 1 Configuration and parameterization using the SAFECONF software tool The SAFECONF software tool is available to users for configuring the safety logic and parameterizing the channels of the safety modules used Configuration and parameterization can be carried out offline without connecting to the safety modules
22. errors are detected during parameterization the parameter data is not transmitted The FS LED on the module flashes to indicate that the parameterization is invalid In addition the error is indicated at the controller In this case check and correct the settings PHOENIX CONTACT 5 1 IB IL 24 LPSDO 8 V3 PAC 5 2 Parameterization of the safe outputs The individual outputs of a safety module can be parameterized differently and therefore achieve different safety integrity levels SIL SIL CL Cat PL Two channel lf the outputs are operated via two channels the following fixed assignment applies QOUTO_Ch1 to OUTO_Ch2 OUT1_Ch1 to OUT1_Ch2 OUT2_Ch1 to OUT2_Ch2 OUT3_Ch1 to OUT3_Ch2 Single channel If two channel operation in the external wiring of the outputs is not required the outputs can be parameterized in such a way that they operate independently of one another single channel Parameterization All safe outputs must be parameterized individually The parameterization options are described in Table 5 1 Table 5 1 Parameterization of outputs OUTO OUT3 Assignment Not used The unused outputs are disabled However the monitoring of Used these outputs remains active Output Single channel In two channel operation the assignment of the outputs to one Two channel another is specified and cannot be parameterized Switch off delay for stop Disabled Disabled default no switch off delay category 1 Enabled Enab
23. following Assignment of island numbers Parameterization of outputs Configuration includes the following Creation of the logic function with SAFECONF The island number is a unique address of a SafetyBridge island Set the same island number both in SAFECONF and on the module For additional information on the island number please refer to Section SafetyBridge address assignment on page A 12 Set this address via the DIP switches prior to assembling the safety module see Section Setting the DIP switches on page 4 2 Parameterization and configuration determine the behavior of the module and therefore have a considerable effect on the safety integrity level that can be achieved To parameterize and configure the module the parameterization and configuration created in the parameterization tool must be written from the controller to the module e g with a functional block For information on downloading please refer to Section Downloading the configuration and parameter data record on page A 21 The supply voltage must be present and the local bus must be in the RUN state when downloading The module cannot be operated if it is not parameterized In this case the FS LED flashes The module is ready to operate if the parameters for all outputs are valid and transmitted without errors Valid output data is only written in this state In any other state every output is set to the safe state If
24. in the following tables Please take into consideration errors with a common cause 6 4 PHOENIX CONTACT 105429 en_00 Connection examples for safe outputs 6 4 Single channel assignment of safe outputs OUT1_Ch1 al iT K1 R GND T ic K2 i m K2 R 73421005 Figure 6 2 Single channel assignment of outputs In order to achieve Cat 3 or PL d with single channel assignment of the outputs a two channel actuator must be used The two channel operation of the actuator with the corresponding connection is represented on a gray background The failure detection time is 20 ms This means that high pulses of this width can occur in the event of an error If the application responds to these pulses use the two channel assignment of the outputs K1 R and K2 R represent the forcibly guided N C contacts for monitoring the state of the relay readback contacts Connect these contacts via safe digital inputs Evaluate the readback and therefore the state of the switching elements in the safety logic WARNING Loss of safety function Connect the actuator ground directly to terminal point GND of the safety module An external ground may not be used Basic specifications Achievable SIL SIL CL Cat PL SIL 2 SIL CL 2 Cat 2 PL c SIL 2 SIL CL 2 Cat 3 PL d WARNING Loss of electrical and functional safety To achieve the specified safety integrity level please refer
25. is only detected if the output is enabled a To achieve Cat 3 two channel actuators are usually used PHOENIX CONTACT 2 5 IB IL 24 LPSDO 8 V3 PAC 2 7 Local diagnostic and status indicators D 0 LPSDO8 79690003 Figure 2 3 Local diagnostic and status indicators of the IB IL 24 LPSDO 8 V3 PAC module Table 2 1 Local diagnostic and status indicators Green LED Diagnostics OFF Communications power not present Flashing at 0 5 Hz Communications power present local bus not active Flashing at 4 Hz Communications power present error at the interface between previous and flashing terminal the terminals after the flashing terminal cannot be addressed E g loose contact at the bus interface terminal before the flashing terminal has failed another terminal was snapped on during operation not permitted Observe the module startup time of approximately 20 s During this time the D LED flashes at 4 Hz and the bus cannot be started up Communications power present local bus active Red LED Failure state Flashing at 1 Hz Device not parameterized or parameterization was not accepted ON Hardware fault The output drivers are reset there is no communication to the satellites Or Impermissible switch position The module will respond to certain impermissible switch positions by entering the failure state immediately after power up 2 6 PHOENIX CONTACT 105429 en_00 Pr
26. of the safety function Prevent the welding of contacts on the connected contactors or safety relays with appropriate protection against overcurrent and surge voltage All errors that cannot be detected can result in the loss of the safety function Take appropriate measures to prevent such errors Suitable measures include for example protected cable installation or double insulation Please note the information in the following tables Please take into consideration errors with a common cause Ensure that a single error does not result in the loss of the safety function Cat 4 Use proven and basic safety principles according to EN ISO 13849 2 Use appropriately qualified actuators see Section Requirements for controlled devices actuators on page 2 4 Please note that mechanical failure of the switching device can result in the loss of the safety function Prevent the welding of contacts on the connected contactors or safety relays with appropriate protection against overcurrent and surge voltage An accumulation of errors must not result in the loss of the safety function Following the third error evaluation can be aborted if the probability of further errors occurring is low All errors that cannot be detected can result in the loss of the safety function Take appropriate measures to prevent such errors Suitable measures include for example protected cable installation or double insulation Please note the information
27. right to alter correct and or improve the technical documentation and the products described in the technical documentation at its own discretion and without giving prior notice insofar as this is reasonable for the user The same applies to any technical changes that serve the purpose of technical progress The receipt of technical documentation in particular user documentation does not constitute any further duty on the part of Phoenix Contact to furnish information on modifications to products and or technical documentation You are responsible to verify the suitability and intended use of the products in your specific application in particular with regard to observing the applicable standards and regulations All information made available in the technical data is supplied without any accompanying guarantee whether expressly mentioned implied or tacitly assumed In general the provisions of the current standard Terms and Conditions of Phoenix Contact apply exclusively in particular as concerns any warranty liability This manual including all illustrations contained herein is copyright protected Any changes to the contents or the publication of extracts of this document is prohibited Phoenix Contact reserves the right to register its own intellectual property rights for the product identifications of Phoenix Contact products that are used here Registration of such intellectual property rights by third parties is prohibited Othe
28. system from a power supply unit been implemented Is external protection of the module implemented according to the specifications in this user manual for supply voltage Up A Have measures been taken to prevent simple manipulation UA Have measures been taken to prevent plugs being mixed up oO Are the requirements for the actuators and cable installation observed according to the SIL SIL CL Cat PL to be achieved A Are the specifications for the parameterization for each channel implemented AP Are test intervals specified for testing the shutdown capability of the actuators if this is required to achieve a SIL SIL CL Cat PL 17 Has it been ensured that any person intentionally starting hazardous movements can only do so with a direct view of the danger zone Date Signature author Date Signature test engineer 105429_en_00 PHOENIX CONTACT B 11 C Appendix revision history Revision Date Contents ss 00 2013 04 03 First publication 105429 _en_00 PHOENIX CONTACT C 1
29. the technical data and parameterization options Has the voltage supply been planned according to the specifications for the protective extra low voltage in accordance with PELV 6 Has the power supply of Uy and Us from a power supply unit been planned oh nt 7 s external protection of the module planned according to the specifications in this user manual for supply voltage Up Is use in a control cabinet IP54 planned EN Are measures planned to prevent simple manipulation EA ee 10 Are measures planned to prevent plugs being mixed up fe a a_i Are requirements for the actuators and cable installation observed according to the SIL SIL CL Cat PL to be achieved and is the corresponding implementation planned 12 Are the specifications for the address assignment for the islands specified ar a 13 Are the specifications for the parameterization for each channel specified ne S Are test intervals specified for testing the shutdown capability of the actuators if this is required to achieve a SIL SIL CL Cat PL T anony doso mina ect vow otedargerzone A can only do so with a direct view of the danger zone sa e e a E E E E E 7 ioiai respone ime for me macner A O the total response time for the machine system No Requirement optional es Mo Remark lg Have specifications for assembly and electrical installation been defined e g Of EPLAN and communicated to the relevant personnel a a a personnel
30. the points in Section Electrical safety on page 1 3 The supply voltage Uj is used to supply the output circuits For the technical data for the supply voltage Uj please refer to Section Supply voltage UM actuators on page 10 3 The maximum current carrying capacity for the main circuit Uj is 8 A total current with the segment circuit that is not used in the safety terminal This current carrying capacity can be reduced if certain terminals are used Please refer to the information in the terminal specific data sheets If the limit value of the potential jumpers Up and Us is reached total current of Us and Uy a new power terminal must be used NOTE Module damage due to polarity reversal Polarity reversal places a burden on the electronics and despite protection against polarity reversal can damage the module Therefore polarity reversal must be prevented For the behavior of the safety module in the event of an error at the supply voltage please refer to Section Supply voltage errors on page 8 3 Us for supply at a bus coupler or a power terminal not required in the safety terminal 24V DC External fuse 8 A maximum Um for supply at a bus coupler or a power terminal Y 7 HIT LSI If HI LSO If Y GND for supply at a bus coupler or a power terminal 76191004 Figure 3 1 Supply Uy with connection to functional earth ground according to EN 60204 1 WARNING L
31. with forcibly guided N C contacts to safely monitor the state pick up drop out Please observe any special environmental requirements in your application when selecting the controlled devices Please observe the applicable C standards in your application e g EN 1010 in which for example the number of controlled devices required to achieve a particular category is specified 2 4 PHOENIX CONTACT 105429 en_00 105429 en_00 Product description 2 6 Connection options for actuators depending on the parameterization Actuators that meet various safety requirements depending on the parameterization can be connected to the outputs For connection examples please refer to Section 6 Connection examples for safe outputs The maximum achievable SIL SIL CL Cat PL is specified in the table In order to achieve this Observe the information in the connection examples see Section 6 Connection examples for safe outputs Observe the requirements of the standards with regard to the external wiring and the actuators to be used to achieve a SIL SIL CL Cat PL see Measures required to achieve a specific safety integrity level on page 6 3 Output OUTO to OUT3 Output parameterization Single channel 5 Achievable category SIL 2 SIL CL 2 Cat 3 PL d SIL 3 SIL CL 3 Cat 4 PL e For connection example 6 see page Key If the test pulses are disabled a cross circuit between the outputs
32. you always use the latest documentation Changes or additions to this document can be found on the Internet at www phoenixcontact net products SafetyBridge system When working on the SafetyBridge system and its components you must always keep this user manual and other items of product documentation to hand and observe the information therein User manuals For the controller used For SafetyBridge system I O modules For SafetyBridge system functional blocks Please also observe the relevant information about the bus system used Inline product range IL SYS INST UME Automation terminals of the Inline product range configuration and installation Documentation for the bus coupler used 1 6 PHOENIX CONTACT 105429 en_00 105429 en_00 For your safety 1 8 Abbreviations used Table 1 1 Abbreviations used Abbreviation Meaning Standard Example Table 1 2 Abbreviations used emerson Meet Protective extra low voltage A circuit in which the voltage cannot exceed 30 V AC 42 4 V peak value or 60 V DC under normal conditions and under single fault conditions except in the event of grounding errors in other circuits A PELV circuit is like a SELV circuit but is connected to protective earth ground According to EN 61131 2 Equipment under control 1 9 Safety hotline Should you have any technical questions please contact our 24 hour hotline Phone 49 5281 9 462777 E mail safety ser
33. 3_Ch1 OUT3_Ch1 X287 OUTO_Ch2 OUTO_Ch2 X288 OUT1_Ch2 OUT1_Ch2 X289 OUT2_Ch2 OUT2_Ch2 X28A OUT3_Ch2 OUT3_Ch2 8 4 PHOENIX CONTACT 105429_en_00 Errors messages and removal Table 8 6 Parameterization errors continued Diagnostic code Short description X29n For outputs parameterized for two Correct setting and resend parameter X290 OUTO_Ch1 amp 2 OUTO_Chia2 Channel operation the same settings data to the module X291 OUT1_Ch1 amp 2 OUT1_Ch1 amp 2_ were not assigned for the switch off X292 OUT2_Ch1 amp 2 OUT2_Ch1 amp 2 Jela X293 OUT3_Ch1 amp 2 OUT3_Ch1 amp 2 y X2Bn For outputs parameterized for two Correct setting and resend parameter X2B0 OUTO_Ch182 OUTO_Chia2 Channel operation the same settings data to the module X2B1 OUT1_Ch1 amp 2 OUTO_Ch182 were not assigned for the enable X2B2 OUT2_Ch1 amp 2 OUTO_Ch1 amp 2 X2B3 OUT3_Ch182 OuT3_Chig2_ function At least one output with parameterized Wait until the switch off operation is switch off delay is still performing a complete and resend parameter data switch off operation to the module 105429 _en_00 PHOENIX CONTACT 8 5 IB IL 24 LPSDO 8 V3 PAC 8 5 Connection errors to satellites Table 8 7 Connection errors to satellites a Short description Acknowledgment code Incorrect Incorrect island number set at Check switch position Reload project island number the IB IL 24 LPSDO 8 V3 PAC and value in software and adapt a
34. AlE a a a a agence R 8 2 8 1 Operating State sisie eee es eines hdeseeexin died Redeem ceded ee 8 2 8 2 Error detection in I O devices cccccsseeeeeeceeeeeeeceaeeeeeeseuseeecauaeeetensneees 8 2 8 3 Device errol S cree aa e a haveasuig E wwloeent awe 9 2 8 4 Parameterization errors cccccccsssececseececeeceeseeceeseeeeessueeeneueeensnseensuesenees 9 2 9 Process datai Words sunn EEE era eacean wanes 10 2 10 Programming data configuration Aata ccccccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaaeeeees 10 2At JEOCANDUS aan a a a a E 10 2 10 2 Other bus systems or networks s ssnnnssssnnsnssrnrensrrrresrrrresrrrrnssrrrenn 10 3 Inline potential and data routing and Inline PIUGS onsoenssnnnennennsennsnnsrnnrnrsrrerrrsrrrrnrsnrerreerrerresnee 1 3 1 Inline potential and data rOUtING cece cece cece eee e eee e eee ee eee aee ee eaeaaeeeesaaeeeesaaaeees 1 3 2 SUPPI VONAGE LIe me ae eae een a ae nee Ren Tee ce nn eer oe ee meres ever 1 3 3 SUDDIY VON AG CW peice tecs ict aeir e e A ciele eeemieckataeeateun idee 2 3 4 Terminal point assignment aiiin a K aden aaedaeans 4 4 Assembly removal and electrical installation cccccccseceeeeseeeceeeceeeceeeseeeseeeeeeeeueeaueeaeeeseeeees 1 4 1 Assembly and TemoVva lesii a a aa a r aa 1 4 1 1 Unpacking the MOGQUIC sorsrngrss e a a eadsakshaae cleans 1 4 1 2 General eee ee eee ere ee a a N eee eee 1 4 1 3 Setting the DIP switches 0 00 ee ec
35. BUS PROFINET PROFINET EtherNet IP EtherNet IP Modbus TCP Modbus TCP DeviceNet DeviceNet CANopen sercos Ill sercos Ill Number of safe communications 5 IN OUT mixed 16 IN OUT mixed Size of memory for the safety logic 20 kB 30 kB A 2 PHOENIX CONTACT 105429 _en_00 The SafetyBridge system Table A 1 SafetyBridge system specifications Functionality IB IL 24 LPSDO 8 V2 PAC IB IL 24 LPSDO 8 V3 PAC Antivalent EDM EnableSwitch Equivalent ESPE E STOP GuardLocking GuardMonitoring ModeSelector MutingPar2Sensor incl override MutingSeq incl override MutingPar incl override Reset TestableSafetySensor TwoHandControl Il TwoHandControl Ill Safe functional blocks Antivalent EDM EnableSwitch Equivalent ESPE E STOP GuardLocking GuardMonitoring ModeSelector MutingPar2Sensor MutingPar MutingSeq TwoHandCorntrol Il TwoHandCorntrol Ill Implicit enable Yes Mirroring of local safe output data Yes Forwarding of safe outputs Yes Supported satellites IB IL 24 PSDI 8 PAC IB IL 24 PSDI 8 PAC IB IL 24 PSDO 8 PAC IB IL 24 PSDI 16 PAC IB IL 24 PSDO 4 4 PAC IB IL 24 PSDO 8 PAC IB IL 24 PSDOR 4 PAC IB IL 24 PSDO 4 4 PAC For permissible revision IB IL 24 PSDOR 4 PAC see Table A 2 IB IL 24 LPSDO 8 V3 PAC For permissible revision see Table A 2 Number ofinstaneesofsaletuncionalbiocis fe oo oo o o yO App Diag LPSDO The bits in this register can be freely programmed in SAFECOMNF Implem
36. Date Signature author Signature test engineer B 8 PHOENIX CONTACT 105429_en_00 B 2 2 Assembly and electrical installation Checklist for assembly and electrical installation of the safety module a No Requirement mandatory Yes Remark Was assembly and installation completed according to the specifications specifications from the planning phase or according to the user manual ie Was the safety module installed in the control cabinet IP54 pf Do the cable cross sections correspond to the specifications pf Are requirements for the actuators and cable installation observed according to the SIL SIL CL Cat PL to be achieved and is the corresponding implementation observed If error prevention e g cross circuit to external signals has been defined have the conditions for error prevention been implemented oa Is the transmission speed set correctly according to the specifications pf Is the operating mode set correctly according to the specifications pf Is the address set correctly according to the specifications oO No Requirement optional Yem Remak Date Signature author Signature test engineer 105429_en_00 PHOENIX CONTACT B 9 IB IL 24 LPSDO 8 V3 PAC B 2 3 Startup Checklist for startup of the safety module Device type equipment identification a Requirement mandatory Was startup completed according to the specifications sp
37. E E ete is atcret AE p ees ea ete A dene ATE N 1 B 1 Checklists for the SafetyBridge system cccccsseeeeeeeeeeeeeeeaeeeeeeeeaueeeeesenseeeeaaees 2 B 1 1 RAINING ssanie a a E 2 B1 2 Configuration and parameterization se ssesssssssssrrrreresrrrrrrrrensrrrreresnns 4 Bla Stanu dennnon an a E ERNE 5 B1 4 Safety functions o nsnnnennnnsennnesrrnresrrrressrrrrssrrrrssrrrrnsnrrrrsnrenrsnrrrrsnrrenne 6 BAS Validation gut eeiedarosestiecbeleccneliered E a E E 7 B2 Checklists for the IB IL 24 LPSDO 8 V3 PAC MOdUuIe ccccecsseeeeeeeeeeeeeeeanees 8 B 2 1 Panamo iren a a a etl a ean 8 B2 2 Assembly and electrical installation ssesesssssssesenssrrreserrnrrrssrrresrrresreee 9 SiG a 1 910 Re ees eee ene e E 10 B24 NaN AtlON gt sets cementiveueton a EEN 11 ON A EE A A ales Caister E is alanis E ama aie aae tid an teal ase sia eee esate antes 1 Project number_en_Revision For your safety 1 For your safety Requirements Qualified personnel Purpose of this manual The information in this document is designed to familiarize you with how the IB IL 24 LPSDO 8 V3 PAC safety module works its operating and connection elements and its parameter settings This information will enable you to use the module within a SafetyBridge system according to your requirements Validity of the user manual This manual is only valid for the IB IL 24 LPSDO 8 V3 PAC module in the version indicated on th
38. II according to DIN EN 60664 1 If you expect surge voltages in the system which exceed the values defined in surge voltage category II take into consideration additional measures for voltage limitation Installation and Please observe the instructions for installing and configuring the system see Section configuration Documentation on page 1 6 WARNING Depending on the application incorrect installation and upgrades can pose serious risks for the user The user is obliged to design the devices used and their installation in the system according to these requirements This also means that existing plants and systems retrofitted with the SafetyBridge system must be checked and tested again in this respect 105429 en_00 PHOENIX CONTACT 1 3 IB IL 24 LPSDO 8 V3 PAC Draw up and implement a safety concept a Check hardware and parameterization 1 4 PHOENIX CONTACT 1 3 Safety of the machine or system The machine system manufacturer and the operator are solely responsible for the safety of the machine or system and the implemented application in which the machine or system is used The Machinery Directive must be observed In order to use the safety module described in this document you must have drawn up an appropriate safety concept for your machine or system This includes a hazard and risk analysis according to the directives and standards specified in Section Directives and standards on page 1 5 as well
39. NTACT 10 3 IB IL 24 LPSDO 8 V3 PAC Supply voltage U actuators continued NOTE Module damage due to polarity reversal Polarity reversal places a burden on the electronics and despite protection against polarity reversal can damage the module Therefore polarity reversal must be prevented Undervoltage detection Yes at 17 V approximately Diagnostic indicators Green Uy LED see Local diagnostic and status indicators on page 2 6 External protection 8 A slow blow maximum Q NOTE Module damaged when overloaded The power supply unit must be able to supply four times 400 the nominal current of the external fuse Safe digital outputs OUTO to OUT3 Number 4 two channel or 8 single channel positive switching Supply From supply voltage Um Maximum output current per output 2A Maximum output current for all outputs total current 6 A observe derating and maximum output current for each group Maximum output current for each group total current Group 1 OUTO_K1 OUT1_K1 OUT2_K1 OUT3_K1 3A Group 2 OUTO_K2 OUT1_K2 OUT2_K2 OUT3_K2 3A Maximum output voltage in the low state lt 5V WARNING Loss of safety function At this voltage the load must not switch to or remain in the ON state Please take this into consideration when selecting the actuator Maximum leakage current in the low state 2 MA WARNING Loss of safety function At this current the load must not switch to or remain in th
40. ONF in the safety logic editor Parameterize the enable function when parameterizing the channels NOTE Disabling of the safety function When validating the overall safety function make sure that the safety function is not disabled by the safety related components or by the standard components A 16 PHOENIX CONTACT 105429 en_00 105429 en_00 Enable principle The following figure illustrates the enable principle IB IL 24 LPSDO 8 V3 PAC oe a re IE is tiers 1054290006 AL Figure A 11 Enable principle example SL Safety logic SFB Safe functional block amp Standard functional block for ANDing Sspi Signal from the IB IL 24 PSDI PAC safe input module Data LPSDO x Standard data of the standard control system which is to enable the IB IL 24 LPSDO 8 V3 PAC bit x TX _ Chy Output x channel y Internal sequences Table A 10 Parameterization of output channels for the example in Figure A 11 Output channel Enable OUTO_Ch1 Single channel Enabled OUTO_Ch2 Single channel Enabled PHOENIX CONTACT A 17 IB IL 24 LPSDO 8 V3 PAC Safe inputs a Safe outputs A6 Diagnostics In addition to precise diagnostics for the standard bus system the safe input and output devices also support the detection of I O errors and device errors A 6 1 Error detection in I O devices Depending on the device type and parameterization the following errors can be detected at safe inputs Short cir
41. They include for example Transmission errors Data inconsistencies Exceeding the transmission time over the set Twp Standard control system in the stop state After a communication error is detected the transmitted value assumes the substitute value 0 The affected safety function switches to the safe state If a communication error is no longer detected an operator acknowledge request is displayed for the user Once the communication error has been acknowledged the actual user data is transmitted again NOTE Acknowledgment of communication errors Communication errors may only be acknowledged by an intentional user action e g acknowledgment button They may not be acknowledged automatically from the application program If Communication errors occur more than once every 8 hours the transmission path quality must be improved A11 4 I O errors All errors that can occur and are detected within the I O devices connected to the safe I O devices are assigned to this class They include for example Short cross circuits at the inputs or outputs Other application specific errors 105429 _en_00 PHOENIX CONTACT A 27 IB IL 24 LPSDO 8 V3 PAC These errors are usually indicated in the operating phase of the system When an error is detected the affected input or output is disabled and a diagnostic message is sent to the IB IL 24 LPSDO 8 V3 PAC and the standard control system The standard system remai
42. V3 PAC Requirements for The error detection of the module varies depending on the parameterization This results in controlled specific requirements for the actuators devices actuators Ifthe outputs are parameterized with test pulses the output circuits are tested by test pulses at regular intervals These test pulses are visible at the output and can trigger undesirable reactions with quick responding actuators AN WARNING Unintentional machine startup If the process does not tolerate this behavior actuators with sufficient inertia must be used In general the load must not be so dynamic that it causes dangerous states within 1 ms Quick actuators which offer a safety related response to pulses in under 1 ms may not generally be used Switching off the test pulses affects the error detection of the module Please observe the achievable safety integrity level which is specified in Section Connection examples for safe outputs on page 6 1 The failure detection time is 20 ms a Please refer to Single channel assignment of safe outputs on page 6 5 and Two channel assignment of safe outputs on page 6 8 for additional information Only use appropriately qualified actuators Use reliable components These include for example Control contactors according to EN 60947 4 1 Power contactors Relays with forcibly guided contacts according to DIN EN 50205 Use relays or contactors
43. _00 PHOENIX CONTACT A 11 IB IL 24 LPSDO 8 V3 PAC A3 SafetyBridge address assignment Q NOTE Malfunction in the event of incorrect addressing Make sure that in an overall system consisting of the SafetyBridge system and a PROFIsafe system the addresses are unique Duplicate address assignment is not permitted 1 NOTE Malfunction during mixed operation During simultaneous use of SafetyBridge V1 V2 and SafetyBridge V3 on a controller make sure that the island number of the SafetyBridge V3 system is gt 8 This should be checked during overall validation of the system The SafetyBridge address of the IB IL 24 LPSDO 8 V3 PAC is the same as the island number of the module The SafetyBridge address of a satellite consists of the island number and the position in the bus navigator of the SAFECONF software tool Enter the address for the IB IL 24 LPSDO 8 V3 PAC in SAFECONF The switch position can be displayed in SAFECOMF by right clicking in the hardware editor and selecting Display address switch Table A 5 SafetyBridge address IB IL 24 LPSDO 8 V3 PAC SafetyBridge address Island number Reserved 1 dec to 31 dec Table A 6 SafetyBridge address e g IB IL 24 PSDI 8 PAC SafetyBridge address sateyridge accross rete 7 e s s e ijo 1 dec to 31 dec 1 dec to 1 6dec Example Table A 7 Example 1 SafetyBridge addresses Island number Satellite number SafetyBridge address F Address O feje
44. as a test report checklist for validating the safety function see Appendix checklists on page B 1 The target safety integrity level SIL according to IEC 61508 2 SIL CL according to EN 62061 or performance level and category according to EN ISO 13849 1 is ascertained on the basis of the risk analysis The safety integrity level ascertained determines how to connect and parameterize the safety module within the overall safety function Within a SafetyBridge system the IB IL 24 LPSDO 8 V3 PAC safety module can be used to achieve safety functions with the following requirements depending on the conditions of use Upto SIL 3 according to standard IEC 61508 2 Upto SIL CL 3 according to standard EN 62061 Upto Cat 4 PL e according to standard EN ISO 13849 1 Please also refer to Section Achievable safety depending on the modules used on page A 25 Carry out a validation every time you make a safety related modification to your overall system Use your test report to ensure that The safe devices are connected to the correct safe sensors and actuators The safe input and output devices have been parameterized correctly The safety functions have been wired correctly 105429 en_00 105429 en_00 For your safety 1 4 Safety when starting applications Take the following into consideration when determining the start conditions for your machine or system The machine or system may only be start
45. ccordingly Communication One or more safe Check and adapt data Acknowledgment required connection communication connections are state and copy The OAR bit is set in the faulty faulty routines diagnostic register of the IB IL 24 LPSDO 8 V3 PAC Incorrect IB IL 24 LPSDO 8 V3 PAC Check switch position Power up F_Source_ address set in the software and and value in software The PUR bit is set in the Address on the device do not match and adapt accordingly diagnostic register of the Incorrect The F_Source_Address seton Check and correct IB IL 24 LPSDO 8 V3 PAC F_Source_ the device is not within the switch position Address permissible value range Communication See X500 the OAR bit is set in the diagnostic register of the IB IL 24 LPSDO 8 V3 PAC connection faulty 8 6 PHOENIX CONTACT 105429 en_00 Errors messages and removal 8 6 Acknowledging an error In the SafetyBridge system the errors of the IB IL 24 LPSDO 8 V3 PAC as well as those of the corresponding island satellites must be acknowledged via the IB IL 24 LPSDO 8 V3 PAC After removing the cause of an error the diagnostic message must be acknowledged To do this set the corresponding bit in the Dev Ackn LPSDO register see Section SafetyBridge V3 system handling in various control systems on page A 16 WARNING Acknowledgment may result in a hazardous system state With the exception of a few special cases the acknowledgment of
46. cuit Cross circuit Overload short circuit of the clock outputs When an error is detected at an input the safe state is set for this input and a 0 is transmitted in the input data of the input O safe state The corresponding error message is transmitted to the IB IL 24 LPSDO 8 V3 PAC and the standard control system For more detailed information on error detection at the safe inputs please refer to the user manual for the IB IL 24 PSDI PAC Depending on the device type and parameterization the following errors can be detected at safe outputs Short circuit Cross circuit Overload When an error is detected at an output the affected output is disabled 0 OFF safe state The corresponding error message is transmitted to the IB IL 24 LPSDO 8 V3 PAC and the standard control system For more detailed information on error detection at the safe outputs please refer to the user manual for the IB IL 24 PSDO PAC modules A 18 PHOENIX CONTACT 105429 en_00 Diagnostics A 6 2 Detection of device errors All serious errors that can result in the loss of or adversely affect the safety function cause the entire device to enter the safe state The FS LED on the safe device is permanently on Depending on the device type the following errors result in the safe state Hardware fault in the circuit User error Module overload Overheating Faulty supply voltage The corresponding
47. d as the controller see also Section Network and controller requirements on page A 6 Safe devices are integrated into the Inline station at I O level Safe and standard devices can be operated simultaneously in the overall system Communication takes place via the standard control system and the standard bus system using safe data packets The system consists of a standard control system and up to 31 SafetyBridge islands PHOENIX CONTACT A 5 IB IL 24 LPSDO 8 V3 PAC SafetyBridge island Each SafetyBridge island consists of one SafetyBridge module with integrated safety logic IB IL 24 LPSDO 8 V3 PAC and up to 16 distributed SafetyBridge modules e g IB IL 24 PSDI PAC IB IL 24 PSDO PAC The module with integrated safety logic is referred to as the island node while the modules without safety logic are referred to as remote devices or satellites Satellite is the preferred term to describe these modules and is used in this document The satellites and the IB IL 24 LPSDO 8 V3 PAC are assigned to an island using island numbers that are specified in the parameterization tool The satellites are numbered in the order they are assigned in SAFECOMF A 2 2 Network and controller requirements The SafetyBridge system does not place any special requirements on the standard control system However it must be able to perform the following tasks Network Deterministic network Controller Fast enough that it can me
48. ded will result in death or serious injury WARNING This indicates a hazardous situation which if not avoided could result in death or serious injury CAUTION This indicates a hazardous situation which if not avoided could result in minor or moderate injury This symbol together with the signal word NOTE and the accompanying text O alert the reader to a situation which may cause damage or malfunction to the device hardware software or surrounding property This symbol and the accompanying text provide the reader with additional information or refer to detailed sources of information How to contact us Up to date information on Phoenix Contact products and our Terms and Conditions can be found on the Internet at phoenixcontact com Make sure you always use the latest documentation It can be downloaded at phoenixcontact net products If there are any problems that cannot be solved using the documentation please contact your Phoenix Contact subsidiary Subsidiary contact information is available at phoenixcontact com PHOENIX CONTACT GmbH amp Co KG Flachsmarktstra e 8 32825 Blomberg GERMANY Should you have any suggestions or recommendations for improvement of the contents and layout of our manuals please send your comments to tecdoc phoenixcontact com PHOENIX CONTACT Please observe the following notes General terms and conditions of use for technical documentation Phoenix Contact reserves the
49. e ON state Please take this into consideration when selecting the actuator Minimum withstand voltage of the connected loads gt 5V Maximum inductive load 1H 10 4 PHOENIX CONTACT 105429_en_00 Safe digital outputs OUTO to OUTS continued Maximum capacitive load depending on the current Maximum capacitive load depending on the load current Minimum load Limitation of the voltage induced on circuit interruption Output voltage Simultaneity Derating Maximum switching frequency Filter time Switch off delay for shutdown according to stop category 1 Maximum duration of the test pulses when switched off active driving Maximum duration of the test pulses when switched on Status indicators Diagnostic indicators WARNING Loss of safety function Connect the ground of the actuator directly to the ground terminal point of the corresponding output on the Inline plug An external ground may not be used Technical data and ordering data C 1 s R x 1400 Where C Load capacity in F R Load resistance in ohms 60 UF 50 C 40 30 20 10 O 050 1 00 1 50 2 00 A2 50 gt 73422007 Key C Load capacity in uF Load current in A Shaded area permissible range 1 5 KQ 16 mA at 24 V 15V Uy 1 V approximately 100 up to 45 C observe maximum current load Up to 50 C total current of all outputs 6 A maximum Up to 55 C total current of all outputs 4 A maximum 1 Hz 0 2 Hzat g
50. e inner cover page 1 1 General safety notes WARNING Depending on the application incorrect handling of the safety module can pose serious risks for the user When working with the safety module within the SafetyBridge system please observe all the safety notes included in this section Knowledge of the following is required The target system e g INTERBUS PROFIBUS PROFINET EtherNET IP The standard control system The SafetyBridge system see Appendix A The components used in your application The Inline product range Operation of the software tools used Safety regulations in the field of application In the context of the use of the SafetyBridge system the following operations may only be carried out by qualified personnel Planning Configuration of the safety logic and parameterization Installation startup servicing Maintenance decommissioning This user manual is therefore aimed at Qualified personnel who plan and design safety equipment for machines and systems and are familiar with regulations governing occupational safety and accident prevention Qualified personnel who install and operate safety equipment in machines and systems In terms of the safety notes in this manual qualified personnel are persons who because of their education experience and instruction and their knowledge of relevant standards regulations accident prevention and s
51. e the LEDs on the devices to check that the module starts up without any errors there must be no red LEDs permanently on the FS LED flashes because the device is not parameterized Check the assembly and installation Checklist Assembly removal and electrical installation on page 4 1 Implement data flow between the standard control system Section SafetyBridge V3 system handling in various control and the safety modules and between the safety modules systems on page A 16 themselves Download the parameterization and configuration data from Section Downloading the configuration and parameter data the standard control system to the safety modules record on page A 21 Perform a function test and validation Check whether the Checklist Validation on page B 11 safety function responds as planned during configuration and parameterization When connecting the supply voltages use the diagnostic and status indicators to check whether the module has started up correctly or whether any errors are indicated For instructions on how to proceed in the event of an error please refer to Section Errors messages and removal on page 8 1 1 2 PHOENIX CONTACT 105429 _en_00 Startup and validation 7 2 Restart after replacing a safety module 7 2 1 Replacing a safety module WARNING Unintentional machine startup Do not assemble or remove the module while the power is connected Before assembling or removing
52. eaeeee ease eeeesaaneees 1 6 PHOENIX CONTACT Project number_en_Revision 10 KEChNICal Gata and OraGning Gael ss aistsidareinerelediadihe a eee a a eerie N 1 MOMs ASV SICM Ala sasisteceteassseceneectaen tea secaceateaeatasasgeetatsssaseceacannasd E 1 MOF ANE eaa a a en yeaa team isha ccouacaas acevo 1 10 1 2 Salety BidGe Sy Stems sisewesssestchesstshep cect cnees eles soneeveeiccocusaa hassle acess ate 1 102 VIBIL 24 bPSDO S VSPA ii aa asda E eaa aena aa a 1 10 3 Conformance with EMC Directive cccccccsseeeccssseeeeeeeeeeeeeceeeeeeeseseeeenaeseeessaees 6 IOA 17 0 1d q o fe ch tc Raeemeren ncn ee cope a cnt a eet rere ce errr eer rr eeepc e 7 10 4 1 Ordering data safety module 2 0 0 cee ceeeeeeeeeeeeeeeeeeeeaaaaeeeeeeeeanaaeees 7 10 4 2 Ordering data accessories wecessicevsccccbssiverceadeveesdsccsiaeedeinestdvisesenerideaseen 7 10 4 3 Ordering data SoMWare ciesa a a 7 10 4 4 Ordering data documentation ccceeeceeeeeeeee cece eeeeeeeeeeaaeeeeeeeeeaaaaees 7 A Appendix SafetyBridge SVSlCIM friecwesistaticalicnvarestalielaisavbiientasetidecivlectalieletied Pace melas aueebiniuavalee 1 A1 The Saftey Bridge SV SUSI acti ccredi aisha aed aSencnas deeeenadee 1 A 1 1 SafetyBridge technology maximum flexibility and safety 00 1 A1 2 Overview of SafetyBridge system features cccccssseeeeeeeeeeeeeeseeeeees 2 A 1 3 Differences in SafetyBridge systems depending upon which module w
53. ecifications from the planning phase or according to the user manual eo During startup is it ensured that any person starting hazardous movements oO intentionally can only do so with a direct view of the danger zone Yes No a Have safety distances that must be observed been calculated according to the response and delay times implemented No Requirement optional Yes Da Signature author Signature test engineer B 10 PHOENIX CONTACT 105429 en_00 B 2 4 Validation Checklist for validating the safety module ce No Requirement mandatory Yes Remark Have all the mandatory requirements for the Planning checklist been met Have all the mandatory requirements for the Assembly and electrical installation checklist been met Have all the mandatory requirements for the Startup checklist been met Does the parameterization of the safe outputs correspond to the version and the actual connection of the controlled device Has the assignment of the actuators to the safety logic outputs been checked oO Has a function test been performed to check all safety functions in which the module is involved Have measures been taken to achieve a specific Cat pO ae Do all cables correspond to the specifications pf Does the voltage supply correspond to the specifications for the protective extra low voltage in accordance with PELV Has the power supply of Up and Us in the Inline
54. ect the power to the system and make sure that it cannot be switched on again unintentionally Make sure installation has been completed before switching the power back on The system may only be started provided the system does not pose a hazard 4 2 1 Electrical installation of the Inline station Electrical installation of the Inline station includes the following Connecting the bus system to the Inline station Connecting the supply voltages for the Inline station Carry out electrical installation for the Inline station according to the IL SYS INST UM E user manual or the Inline system manual for your bus system Please also observe the specifications in the documentation for the bus coupler used 4 2 2 Electrical installation of the safety module During installation always observe the instructions in Electrical safety on page 1 3 Take measures to prevent the incorrect connection polarity reversal and manipulation of connections The supply voltages are supplied at a bus coupler and or a power terminal and are supplied to the safety module via the potential jumpers Therefore the electrical installation of the safety module only involves connecting the actuators The actuators are connected via Inline plugs e Wire the plugs according to your application For the terminal point assignment please refer to Section Terminal point assignment on page 3 4 For wiring proceed as follows e Strip 8 m
55. ed by the user in SAFECONF for each tour LPspo Shutdown time of the IB IL 24 LPSDO 8 V3 PAC 15 ms see technical data SafetyBridge system on page 10 1 tewD OUT F Watchdog time communication Specified by the user in SAFECONF for each IB IL 24 PSDO PAC module Without forwarding to a satellite with outputs tewo_out 9 Shutdown time of the output User manual for the safe output module Without forwarding to a satellite with outputs tout 0 Response time of the actuator Actuator data sheet Fluctuations in network communication and in the copy routines e g including controller STOP result in safe communication being aborted tewp The F Watchdog time twp is specified for each communication relationship in SAFECOMF The minimum achievable tfwp depends on the network and the controller see documentation for the controller used When specifying the F Watchdog time please remember that it can be affected by future system expansions Within tewp the standard network and the standard control system must be able to transmit telegrams from satellites to the IB IL 24 LPSDO 8 V3 PAC ts tin lf several sensors are involved in the safety function the longest response time of the sensors involved is included in the calculation lf several inputs are involved in the safety function the longest processing time of the inputs involved is included in the calculation If several IB IL 24 PSDI PAC devices a
56. ed if it has been ensured that no one is present in the danger zone Meet the requirements of EN ISO 13849 1 with regard to the manual reset function This applies to Switching on safe devices Acknowledging device error messages Acknowledging communication errors Acknowledging block error messages in the application Removing startup inhibits for safety functions Observe your safety logic during programming configuration Switching from the safe state substitute value 0 to the operating state can generate an edge change zero one edge Inthe safety logic take measures to prevent this edge change resulting in unexpected machine system startup or restart 1 5 Directives and standards The manufacturers and operators of machines and systems in which the IB IL 24 LPSDO 8 V3 PAC module is used are responsible for adhering to all applicable directives and legislation For the standards observed by the module please refer to the certificate issued by the approval body and the EC declaration of conformity These documents are available on the Internet at www phoenixcontact net products PHOENIX CONTACT 1 5 IB IL 24 LPSDO 8 V3 PAC 1 6 Correct usage Only use the SafetyBridge system in accordance with the instructions in this section The IB IL 24 LPSDO 8 V3 PAC safety module is designed exclusively for use ina SafetyBridge system It can only perform its safety related tasks within the system
57. eee cece eeeeeeeeeeeeaueeeeeeseeaaaeeeeeseseaaeneeeees 2 Project number_en_Revision PHOENIX CONTACT 5 Table of contents Product designation 4 1 4 Assembly and removal of the safety module cccccsseeeeeeeeeeeeeeeeees 4 4 2 Electrical installationen ea aa teetclasles setae oeau EEE uaa Ssciek 6 4 2 1 Electrical installation of the Inline Station c ccccccesseeeeeeeeeeeeeeaneeeees 6 4 2 2 Electrical installation of the safety module ccccccsseeeeeeeseeeeeeeeeeeees 6 5 Parameterization of the Safety module ccecccseecccesceceeeecececeeeeeceucessaecensueeeseeeetsueesseeessaees 1 5 1 Parameterization of the safety module in a Salety Bridge SYSlOIY vi ticis canes eh Seas sa heeded ee a Sl eee 1 5 2 Parameterization of the safe outputs ccccsseeeeeeceeeeeeeeeeeeeeeeeeaeeeeseaneeeesaaaeees 2 5 3 Behavior of the outputs in the event of enabled switch off delay for stop category 1 4 6 Connection examples for Safe outputs cceecccesecccesceceeecceeeeceueecsueeeseusecsaeeessuseceeeeeseneessases 1 6 1 Explanation of the CxaAmples ccccssececccsssececeeeseeeecesececseaeeeeeeeaseeecauaeeeesseaseess 1 6 2 Notes on the protective circuit for external relays contactors freewheeling circuit 2 6 3 Measures required to achieve a specific safety integrity level cccccseseeeees 3 6 4 Single channel assignment of safe outputs sssssssssseerrresneerrrr
58. el IP20 Plastic PBT self extinguishing VO According to IEC 60439 1 derived from IEC 60664 1 Ill PELV Concentration 10 0 3 ppm Ambient conditions Temperature 25 C 2 K Humidity 75 5 Test duration 10 days Concentration 1 0 3 ppm Ambient conditions Temperature 25 C 2 K Humidity 75 5 Test duration 4 days Resistant Resistant Not resistant to chloroform Spring cage terminals 0 2 mm to 1 5 mm solid or stranded 24 16 AWG 0 1 in error free state Operation 2g Criterion A 15g over 11 ms Criterion A Safety characteristics according to IEC 61508 2 EN 61508 Achievable SIL Probability of a dangerous failure on demand by the safety function PFD Probability of a dangerous failure per hour for the entire module PFH Hardware fault tolerance HFT of the module Permissible duration of use 10 2 PHOENIX CONTACT SIL 2 single channel SIL 3 two channel Depends on the parameterization and wiring see Section Connection options for actuators depending on the parameterization on page 2 5 and Section Connection examples for safe outputs on page 6 1 SIL 2 1 of 10 maximum corresponds to 1 x 104 SIL 3 1 of 10 maximum corresponds to 1 x 10 SIL 2 1 of 108 maximum corresponds to 1 x 10 8 SIL 3 1 of 10 maximum corresponds to 1 x 109 Depends on the parameterization see Table 6 3 on page 6 3 20 years 105429 en_00
59. em Remak Date Signature author Date Signature test engineer B 4 PHOENIX CONTACT 105429_en_00 B 1 3 Startup Checklist for startup of the SafetyBridge system Equipment identification During startup is it ensured that any person starting hazardous movements intentionally can only do so with a direct view of the danger zone Yes No Remark If applicable have startup specifications been met afo Signature author No Requirement mandatory Yes Remak No Requirement optional Yes i Are startup specifications applicable ol Signature test engineer 105429_en_00 PHOENIX CONTACT B 5 IB IL 24 LPSDO 8 V3 PAC B1 4 Safety functions Enter all the safety functions for your application in this checklist Checklist for checking safety functions a a No Safety functions Signature test engineer B 6 PHOENIX CONTACT 105429 _en_00 B 1 5 Validation Checklist for validating the SafetyBridge system ir No Requirement mandatory Yes Remark _ _ i Have the mandatory requirements for planning been met pf ia If applicable have the mandatory requirements for startup been met pf Has validation of the safe devices used been carried out and are the results available Have safety distances that must be observed been calculated according to the response and delay times implemented Have all the safety functions been checked successfully UA h Do all the islands in the system
60. ent diagnostics application diagnostics using these bits 105429 _en_00 PHOENIX CONTACT A 3 IB IL 24 LPSDO 8 V3 PAC App Ack LPSDO The bits in this register can be freely programmed in SAFECONF and can be used for the application safety logic Implement application acknowledgment using these bits acknowledgment for IB IL 24 LPSDO 8 V3 PAC Table A 2 Revision as of which a module is approved for use on the logic module Order No Type Revision as of which a module is approved for use on the IB IL 24 LPSDO 8 V2 PAC IB IL 24 LPSDO 8 V3 PAC 2700994 IB IL 24 PSDI 16 PAC Se 00 100 2985688 IB IL 24 PSDI 8 PAC 00 200 00 200 2985631 IB IL 24 PSDO 8 PAC 01 200 100 01 200 100 2985864 IB IL 24 PSDOR 4 PAC 00 200 100 00 200 100 2916493 IB IL 24 PSDO 4 4 PAC 01 200 100 01 200 100 2701625 IB IL 24 LPSDO 8 V3 PAC Be 00 100 100 A 4 PHOENIX CONTACT 105429 _en_00 Control level I O level Communication System 105429 en_00 System topology A2 System topology A 2 1 General topology A SafetyBridge system can be integrated into various bus systems e g INTERBUS PROFINET and PROFIBUS The standard bus system is therefore supplemented by components to achieve safety Controller o o Network eee IB IL 24 IB IL 24 IB IL 24 LPSDO 8 V3 PAC PSDO 8 PAC PSDI 8 PAC SafetyBridge 1054290001 Figure A 1 Independence from the network A standard control system is use
61. ervice conditions have been authorized to carry out any required operations and who are able to recognize and avoid any possible dangers PHOENIX CONTACT 1 1 105429 en_00 IB IL 24 LPSDO 8 V3 PAC Documentation Safety of personnel and equipment Error detection Do not carry out any repairs Do not open the housing security seal Measures to prevent incorrect connection and polarity reversal 1 2 PHOENIX CONTACT You must observe all information in this manual as well as in the documents listed in Section Documentation on page 1 6 The safety of personnel and equipment can only be assured if the safety module is used correctly see Section Correct usage on page 1 6 Depending on the wiring and the corresponding setting of the safe output module parameters the SafetyBridge system can detect various errors within the safety equipment Repair work may not be carried out on the safety module In the event that an error cannot be removed please contact Phoenix Contact immediately engage a service engineer or send the faulty module directly to Phoenix Contact It is strictly prohibited to open the safety module housing In order to prevent the manipulation of the safety module and to detect the unauthorized opening of the safety module a security seal is applied to the module This security seal is damaged in the event of unauthorized opening In this case the correct operation of the safety module can no longe
62. esponse at the safe output terminal This time can usually only be achieved and measured during error free operation of the SafetyBridge system The typical response time of the SafetyBridge system is not relevant and not suitable for dimensioning safety distances Typical response time of the safetyBridge system tSF 79690010 Figure A 12 Typical response time and required shutdown time for the safety function Table A 11 Key for formula and Figure A 13 Abbrevi ation tor Required shutdown time for the safety function Determined from the application e g from the required times according to the distance of a light grid a The typical response time depends on the network and standard control system used A 22 PHOENIX CONTACT 105429 en_00 Time response in the SafetyBridge system A 9 2 Shutdown times The required shutdown time is determined based on your safety application The shutdown time guaranteed by the SafetyBridge system ta for the safety function is based on the longest processing time of the safe inputs involved in the safety function and the shutdown time of the safe output single channel or two channel involved For the processing time of the safe inputs please refer to the corresponding data sheets for the safe input devices t lt 2E gt ile tx E regis taan out loar G tease oT gt a gt lt gt a gt a i gt a gt te A B 81520011 Figure A 13 Overview
63. et time expectations for the response time Sufficient memory to store configuration and parameter data records Data consistency is ensured over 24 words Functional blocks for copying data and downloading the configuration are available for se lected controllers These can be found on the product page for the IB IL 24 LPSDO 8 V3 PAC at www phoenixcontact net products A 2 3 Safe input and output devices Safe input and output devices form the interface to the connected I O devices The devices control contactors or valves for example and or read the input status of connected safety related sensors The internal structure of the devices enables component failures interruptions in transmission or the absence of data to be detected and reported immediately Even errors in the wiring or internal device errors can be detected Errors are indicated via the process image of the devices the functional blocks and the device LEDs They can be evaluated by the user The safe I O devices are from the Inline product range Their design and interfaces correspond to standard Inline I O devices This means that no additional installation effort is required The devices are parameterized using the SAFECONF software according to the safety function that is to be performed The parameterization and wiring of the inputs and outputs depends on the application e g single channel or two channel For more detailed information on the paramete
64. event of an error tables Safely function OUT1 or OUT2 LED diagnostic message for each output Table 6 2 Parameterization tables Bold Mandatory setting Normal Typical setting another setting is possible depending on the application Not evaluated Errors cross circuits short circuits which can be prevented by correct installation e g protected cable installation isolated cable installation double insulation use of ferrules are not described in the following tables Therefore for example only errors between outputs which are on the same plug are described For example in the event of correct installation cross circuits with outputs of other plugs cannot occur PHOENIX CONTACT 6 1 IB IL 24 LPSDO 8 V3 PAC a For all examples please also observe the measures specified in the individual tables which must be taken to achieve the specified SIL SIL CL Cat PL and all measures according to standards IEC 61508 2 EN 62061 EN 954 1 and EN ISO 13849 1 to achieve the specified SIL SIL CL Cat PL A N WARNING Disregarding this warning may lead to the loss of the safety function An external voltage may not be supplied in an output e g via cross circuits These errors can adversely affect the operation of the module or even destroy the module and therefore result in the loss of the safety function Therefore these errors must be prevented Install the connecting cables for connecting the actuators so that
65. evices Device errors Parameterization errors Error detection during safe communication Pen 2 8 1 Operating state In the operating state the outputs can enter states 1 or 0 In general state 0 is the safe state WARNING Loss of the safety function possible due to undetected accumulation of errors Also evaluate the diagnostics of modules that are not used but are connected to the power supply at regular intervals or disconnect these modules from the supply voltage Outputs 2 8 i PHOENIX CONTACT 2 8 2 Error detection in I O devices If an error is detected at an output the affected output is disabled O OFF safe state Depending on the parameterization the following errors can be detected at outputs Short circuit Cross circuit Overload The relevant diagnostic message is transmitted to the controller see Section Safe digital output errors on page 8 2 For information on which errors are detected and when please refer to Connection examples for safe outputs on page 6 1 If an error occurs on a Channel of an output parameterized as two channel the other corresponding channel also enters the safe state 105429 en_00 Outputs Serious errors 105429 en_00 Product description 2 8 3 Device errors lf a hardware fault in the internal circuit is detected at an output all module outputs are disabled 0 OFF safe state The re
66. g master projects Hierarchical topology Flat topology Both variants can be combined Example 1 hierarchical topology This example consists of 4 islands Hierarchical topology Table A 3 op _ o Q Q o A m N _ o Q Q o A m _ o Q Q o A m Q o A z PSDO 1 PSDO 2 PSDI 1 PSDI 2 LPSDO SL 2 PSDI 1 PSDI 2 PSDO 1 PSDO 2 LPSDO SL 1 PSDO 1 PSDO 2 LPSDO LPSDO SL 3 PSDI 1 PSDI 2 e ee e ilese a LPSDO SL 3 oO 00 00 00 1 00 00 0O 00 oO 00 00 00 i 00 00 0O 00 00 GO OO 0O i oO 00O 0O 00 nO 0O 0O 00 1 oO 0O 0O 0O LPSDO SL 2 LPSDO SL 1 We Reelo 2 ol Ld o0f00 00 00 ee Me 3 c8 69 col Wl ESSE OoOjo00 00 00 pe i Heoi 63 coll es oOjoO 0O 0O WE Slo 2s 23 l o0 00 _00 00 ee Pizai 3 68 69 69 Mffles c3 66 23 00 00 _00 00 Zai REEI i ps OoO 00 00 0O il oO oO 00 0O DODO _00 00 il oOsoO 00O 00 i es oOyoO GO 0O bs I 2000 00 00 i ila 0000 oO 0O A 7 i 0000 00 00 E e ii o0 00 oO 00 00 GO 00 00O oO 00 0O DO o0 oO 00 00 00 00 00 00 00 GO 0O 0O 20 00 00 0O
67. grity level UA Has the current IB IL 24 LPSDO 8 V3 PAC user manual been used as the basis Revision for planning Has the voltage supply been planned according to the specifications for the protective extra low voltage in accordance with PELV Have safety distances that must be observed been calculated according to the response and delay times implemented 7 Has the required shutdown time for the safety function tsp resulting from the top machine system design been determined Can the planned application be implemented with the configuration options e g by using functional blocks im Does the planned use correspond to the intended use of the system pf Pi Has the technical data of the SafetyBridge system been observed pf Has it been ensured that in an overall system consisting of the SafetyBridge system and any higher level PROFIsafe system the addresses address within the SafetyBridge system and F Address of the PROFIsafe system are unique Within a SafetyBridge system is each island number only assigned once During simultaneous use of SafetyBridge V1 V2 and SafetyBridge V3 the island number of the SafetyBridge V3 system must be gt 8 Is the application stop OFF STOP emergency stop triggering of safety equipment implemented according to EN 60204 When planning the safety functions has the SAFECONF software tool been hms to determine whether the memory space is sufficient for the size of the safety logic Has it
68. have different island addresses UA Has it been ensured that in the overall system consisting of SafetyBridge and any higher level PROFIsafe system the addresses address within the SafetyBridge system and F Address of the PROFIsafe system are unique Has the SAFECONF ee been printed with the project information name CRC time stamp etc Has the CRC of the SAFECOMF project printout been compared with the CRC i the loaded project header and do they match No Requirement optional Yes No Remark i Are the directives and standards used listed in the declaration of conformity afa Has the safety logic created in SAFECONF been packed and archived Enter the archiving location e g drive or cabinet in the Remark column Has a complete printout of the safety logic configured in SAFECONF been stored for the system Have all fully completed checklists been stored for the system afa Date Signature author Date Signature test engineer 105429_en_00 PHOENIX CONTACT B 7 IB IL 24 LPSDO 8 V3 PAC B2 Checklists for the IB IL 24 LPSDO 8 V3 PAC module B 2 1 Planning Version WWW ater Reston No Requirement mandatory Yes Remak RE Has the current module user manual been used as the basis for planning 0 Revision 2 Does the planned use correspond to the intended use Ca O S l ES Has the technical data of the module been observed Tf Are the actuators approved for connection to the module according to
69. he error has been removed and acknowledged WARNING Unexpected machine startup An operator acknowledgment leads to a positive edge and can therefore result in the outputs being re enabled PHOENIX CONTACT 6 9 IB IL 24 LPSDO 8 V3 PAC Typical parameterization Parameterization Parameterized as Channel 1 Channel 2 a a S Switch off delay for stop Enabled Enabled san disabled category 1 Switch off delay for stop Application specific category 1 Value range of switch off delay Value in s Value in s Application specific for stop category 1 Test pulses output disabled Enabled Enabled in software test impulses output switched off According to the Value range of switch off delay for stop category 1 and Switch off delay for stop category 1 parameters in this example the switch off delay is 30 x 1 s 30s 6 10 PHOENIX CONTACT 105429_en_00 Startup and validation 7 Startup and validation 7 1 Initial startup Table 7 1 Steps for parameterization and configuration via SAFECONF Version 2 8 or later Relevant section and literature Carry out the necessary parameterization Section Parameterization of the safety module on page 5 1 Carry out the necessary parameterization for the island User manuals for the modules used satellites Configure the safety function Online help in SAFECONF To start up proceed as described in Table 7 2 Table 7 2 Steps for startup Set the transmiss
70. ice to the failure state are assigned to this class They include Hardware faults detected by selftests within devices Control flow program sequence errors within the firmware of a device Errors in this class are usually errors within the system the hardware or the firmware which were not caused by the user and cannot be removed device specific exceptions are possible A 26 PHOENIX CONTACT 105429 en_00 Behavior in the event of an error It is not possible to acknowledge the error or continue operating The affected devices can only be restarted via a voltage reset If the power on selftests are successful following a restart the system can continue to operate A11 2 Parameterization or configuration errors All errors that are detected during the plausibility check of parameters and configuration data are assigned to this class This check is usually carried out during the initialization phase of the system Following the detection of an error in this class the devices enter the safe state and are still able to send diagnostic information or receive new parameter or configuration data It is not possible to acknowledge the error or continue operating without modifying the parameter or configuration data of the affected device A11 3 gt Communication errors All errors that can occur within the transmission path between the SafetyBridge components are assigned to this class They are detected by the safety protocol
71. if it has been integrated into the execution process correctly and in such a way as to avoid errors You must observe all information in this manual as well as in the documents listed in Documentation on page 1 6 In particular only use the module according to the technical data and ambient conditions specified in Section 10 Technical data and ordering data on page 10 1 and onwards Within a SafetyBridge system the safety module can be used to achieve safety functions with the following requirements depending on the conditions of use Upto SIL 3 according to standard IEC 61508 2 Upto SIL CL 3 according to standard EN 62061 Up to Cat 4 PL e according to standard EN ISO 13849 1 Please also refer to Section Achievable safety depending on the modules used on page A 25 The safety module is designed for connecting single channel or two channel actuators which can be used in association with safety technology For example the module can be used in the following applications Safety circuits according to EN 60204 Part 1 Safe shutdown of contactors motors 24 V DC valves ohmic inductive and capacitive loads The module is not suitable for applications in which stop category 1 also has to be observed in the event of an error See also Section Behavior of the outputs in the event of enabled switch off delay for stop category 1 on page 5 4 1 7 Documentation Latest documentation Make sure
72. ight single channel outputs Technical data For the technical data for the safe outputs please refer to page 10 4 Parameterization The individual safe digital outputs of a safety module can be parameterized differently This means that the outputs can be adapted to various operating conditions and different safety integrity levels SIL SIL CL Cat PL can be implemented In order to achieve a high level of error detection the test pulses must be enabled If this is not possible for the connected loads the test pulses can be disabled However in this case error detection is reduced The safety integrity level SIL SIL CL Cat PL and error detection that can be achieved depend on the parameterization the structure of the actuator and the cable installation see Connection examples for safe outputs on page 6 1 For information on parameterization please refer to Section Parameterization of the safe outputs on page 5 2 Diagnostics Diagnostics are provided via both the local diagnostic indicators and the diagnostic messages which are transmitted to the controller For information on the diagnostic messages of the outputs please refer to Section Safe digital output errors on page 8 2 CAUTION Diagnostic data is not safety related The diagnostic data is not safety related This data must not be used to execute safety related functions or actions 105429 en_00 PHOENIX CONTACT 2 3 IB IL 24 LPSDO 8
73. ion speed Section Setting the DIP switches on page 4 2 Set the address island number Section Setting the DIP switches on page 4 2 Install the safety module within the Inline station Section Assembly removal and electrical installation on page 4 1 Connect the bus system and supply voltage cables to the IL SYS INST UM E user manual or documentation for the Inline station bus coupler Wire the outputs according to your application Section Assembly removal and electrical installation on page 4 1 Section Inline potential and data routing and Inline plugs on page 3 1 User manuals for the functional blocks used Before applying the operating voltage Ensure that there are no wiring errors e g cross circuit or short circuit or grounding errors by testing with a multimeter Check whether the ground connection is safe Connect the required voltages to the Inline station IL SYS INST UM E user manual or documentation for the bus coupler the Inline controller or the power terminal 105429 _en_00 PHOENIX CONTACT 7 1 IB IL 24 LPSDO 8 V3 PAC Table 7 2 Steps for startup continued Once the operating voltage has been applied If possible measure the wave form of the voltages to ensure that there are no deviations Measure the output voltages on the module as well as the supply voltages which supply connected loads e g motor to ensure that they are in the permissible range Us
74. ith integrated safety logic is used ccceeeeeeeeeeeeeeeeeeeeeeeeeeeeaaeaeeeeeesanaaeeeeess 2 A2 DV SIEM TOD OlOGY osses haceaidsunrenentataca mee claclatiediuietetuedaten ce mateceuraieetecteh 5 A2 1 General Topology eee fe ee 5 A2 2 Network and controller requirements c cccecseeeeeeeeeeeeeeeeseeeeeseeeeens 6 A2 3 Safe input and output devices ccceeeeccceeeeeeeeceeeeeeeeeeeeeesenseeessaaeeees 6 A24 Qross GCOMMUMICATION s sirena ara aa aaa eee ee ee 7 A3 SafetyBridge address assignment cccceceeeeeeeeeeeeeeeeeeeeeeeeaeeaeeeeeeeesaeneeeeeeeeaas 12 A4 SafetyBridge V3 system handling in various control systems esceeeeseeeeees 16 A5 EnaDISDHACID Esiri a a enti Tair er tera ret rer eae 16 A6 DIAGIOSUCS2 52 theses aeateasctyesze sande vossaxatenscuasennanes sania cadeaaacengassnnestaaateaateasdeesquneseneys 18 A 6 1 Error detection in 1 0 devices ccccceseeeecceeseeecceeeeeeeseuseeeceeaseeeeesaaes 18 A 6 2 Detection Of device errors ccccsseecececeseeeeceeeeececaneseeeeseuseeessanseeessaees 19 A6 3 Acknowledgment of error messages for satellites cceeeeeeeeeeees 19 A7 Configuration parameterization ANd download ccccsseeeeeeeeseeeeeeeeeeeeeeeaeeeess 20 A 7 1 Configuration and parameterization using the SAFECONF software tool 20 A 7 2 Downloading the configuration and parameter data record 4 21 A8 Sale slale esrar N ONN 21 A9 Time respo
75. ity test according to DIN EN 61000 6 2 Electrostatic discharge ESD EN 61000 4 2 Criterion B IEC 61000 4 2 6 kV contact discharge 8 kV air discharge Electromagnetic fields EN 61000 4 3 Criterion A field strength 10 V m IEC 61000 4 3 Fast transients burst EN 61000 4 4 Criterion B test voltage 2 kV IEC 61000 4 4 Surge voltage EN 61000 4 5 Test intensity 2 Criterion B IEC 61000 4 5 DC supply lines 0 5 kV 0 5 kV symmetrical asymmetrical Signal lines 1 0 kV 2 0 kV symmetrical asymmetrical Conducted interference EN 61000 4 6 Criterion A test voltage 10 V IEC 61000 4 6 Noise emission test according to DIN EN 61000 6 4 Noise emission EN 55011 Class A industrial applications 10 6 PHOENIX CONTACT 105429 en_00 Technical data and ordering data 10 4 Ordering data 10 4 1 Ordering data safety module Description Type Order No Pcs Pkt Inline module with integrated safety logic and safe digital outputs IB IL 24 LPSDO 8 V3 PAC 2701625 1 10 4 2 Ordering data accessories Description Type Order No Pcs Pkt Plug set as replacement item IB IL 24 SDO 8 PLSET CP 2916927 1 set Plug set consisting of four Inline plugs with integrated discharge IB IL 24 PSDO 8 PLSET CP R 2700722 1 set electronics 10 4 3 Ordering data software Description Type Order No Pcs Pkt Parameterization and configuration tool SAFECONF 2986119 1 a The software can be downloaded free of charge at www phoenixcontact net prod
76. led the outputs are switched off once the parameterized switch off delay has elapsed Please observe the notes below this table Switch off delay for stop Time conversion according to the parameterization of the Value category 1 range of switch off delay for stop category 1 parameter Permissible value range OUTO to OUT3 150 ms to 630 s Accuracy 5 of the parameterized value 2 ms 0 ms Please observe the notes below this table 5 2 PHOENIX CONTACT 105429 _en_00 Parameterization of the safety module Table 5 1 Parameterization of outputs continued OUTO OUT3 OUT3 Value range of switch off a x 10 in ms Value range unit for the parameterization of the Switch off delay delay for stop category 1 Value x 100 in ms for stop category 1 parameter Value ins Please observe the notes below this table Value x 10 ins Test pulses output Disabled Enabling and disabling of test pulses For these test pulses the disabled in software test Enabled output drivers that are disabled are temporarily enabled for test impulses output switched purposes off Please observe the notes below this table Enable Disabled Disabled default value the corresponding safe output is Enabled operated exclusively according to the safety logic Enabled enable is active the safe output data is output after being ANDed with the Data_LPSDO process data item Section A 4 See also Enable principle on page A
77. ler make sure that the island number of the SafetyBridge V3 system is gt 8 This should be checked during overall validation of the system Use switches 9 to 5 to set the island number An island always consists of the IB IL 24 LPSDO 8 V3 PAC and the satellites assigned to it Overview of the switch i Poon Table 4 1 Switch position for SafetyBridge V3 SafetyBridge V3 Address switch Island number Reserved EES ESESESE IEEE pot PO Orr Orr Orr ORF pee 1 dec to 31 dec Odec 105429_en_00 PHOENIX CONTACT 4 3 IB IL 24 LPSDO 8 V3 PAC 4 1 4 Assembly and removal of the safety module For general information on assembling and removing Inline terminals please refer to the IL SYS INST UM E user manual Set the DIP switches prior to assembly see Section Setting the DIP switches on page 4 2 The DIP switches cannot be accessed when the safety module is installed in the Inline station Assembly Observe a mounting distance of 30 mm above and 40 mm below the safety module Shorter distances may inhibit proper handling during installation e Disconnect the power to the station Snap on base e Before snapping on the safety module remove the inserted plugs from the safety terminal and the adjacent plugs from the neighboring Inline terminal on the left This prevents the potential routing knife contacts and the keyway featherkey connections from being damaged e Hold the safety module perpendicular a
78. levant diagnostic message is transmitted to the controller see Section Safe digital output errors on page 8 2 All serious errors that can result in the loss of or adversely affect the safety function cause the entire module to enter the safe state The FS LED on the safety module is permanently on The following errors result in the safe state Serious hardware faults in the internal circuit User errors Module overload Module overheating Faulty supply voltage Impermissible switch position of DIP switches The relevant diagnostic message is transmitted to the controller where technically possible see Section Errors messages and removal on page 8 1 WARNING Loss of the safety function due to sequential errors In the event of a device error the following measures should be taken to prevent sequential errors Disconnect the module from the power supply after eight hours at most and replace it 2 8 4 Parameterization errors Parameterization errors are indicated As long as the module is not parameterized or Inthe event of faulty parameterization Parameterization errors cause the entire module to enter the safe state The FS LED on the safety module flashes In the event of faulty parameterization the relevant diagnostic message is transmitted to the controller See Section Parameterization errors on page 8 4 PHOENIX CONTACT 2 9 IB IL 24 LPSDO 8 V3 PAC 2 9 P
79. m off the cable Inline wiring is normally done without ferrules However it is possible to use ferrules If using ferrules make sure they are properly crimped e Push a screwdriver into the actuation shaft of the appropriate terminal point Figure 4 6 detail 1 so that you can insert the wire into the spring opening Phoenix Contact recommends using a SZF 1 0 6X3 5 screwdriver Order No 1204517 see Phoenix Contact CLIPLINE catalog e Insert the wire Figure 4 6 detail 2 Remove the screwdriver from the opening This clamps the wire 4 6 PHOENIX CONTACT 105429 en_00 105429 en_00 Assembly removal and electrical installation 6452B032 Figure 4 6 Connecting unshielded cables e Insert the assembled plugs in the corresponding module slot see Section Terminal point assignment on page 3 4 e Mark all connections to prevent connections to the Inline plugs being mixed up see IL SYS INST UM E user manual PHOENIX CONTACT 4 7 Parameterization of the safety module 5 Parameterization of the safety module Island number a Parameterization and configuration of the module 105429 en_00 a 5 1 Parameterization of the safety module in a SafetyBridge system For information on the configuration and parameterization of the SafetyBridge system please refer to Section Configuration and parameterization using the SAFECOMF soft ware tool on page A 20 Parameterization includes the
80. nd snap it onto the DIN rail 7 5 mm in height a Ensure that all featherkeys and keyways on adjacent terminals are securely interlocked j Qi Figure 4 2 Snapping on the safety module base e Check that all the snap on mechanisms are securely snapped into place Insert plugs e Insert the plugs in the specified order A B Only use the plugs supplied with the module or plugs that are approved as replacement items see Ordering data accessories on page 10 7 Figure 4 3 Inserting the plug 4 4 PHOENIX CONTACT 105429 _en_00 Removal Remove plugs Assembly removal and electrical installation Disconnect the power to the station Before snapping on the safety module remove the plugs from the safety module and the adjacent plug from the neighboring Inline terminal on the left Remove the plug by pressing the back shaft latching A and levering off the plug B z y Figure 4 4 Removing the plug Remove base Release the base by pressing on the front and back snap on mechanisms A and pull it out perpendicular to the DIN rail B ei fo Figure 4 5 Removing the safety module base 105429_en_00 PHOENIX CONTACT 4 5 IB IL 24 LPSDO 8 V3 PAC 4 2 Electrical installation AN WARNING Electric shock unintentional machine startup Prior to electrical installation disconn
81. nications power via the bus coupler an Inline controller or a designated power terminal in the station Potential routing is used for the communications power in the Inline station For technical data please refer to the data sheet for the bus coupler Inline controller or power terminal used Current consumption Supply voltage U actuators 230 mA maximum The safety terminal is supplied with main voltage Uy via the bus coupler an Inline controller or a power terminal in the station Potential routing is used for the main voltage in the Inline station For technical data please refer to the data sheet for the bus coupler Inline controller or power terminal used WARNING Loss of the safety function when using unsuitable power supplies Only use power supplies according to EN 50178 VDE 0160 PELV Nominal voltage Tolerance Ripple Permissible voltage range Current consumption Permissible interruption time Surge protection Protection against polarity reversal 105429 en_00 24 V DC according to EN 61131 2 and EN 60204 15 20 including an entire AC voltage component with peak value of 5 3 6 Vpp 19 2 V DC to 30 0 V DC ripple included 30 mA typical all outputs set plus actuator current 10 ms Within this time the output voltage for the safe outputs fails as the outputs are not internally buffered Yes in the bus coupler power terminal Yes in the bus coupler power terminal PHOENIX CO
82. ns ready for operation Ongoing operation of the application depends on the application itself I O errors can be acknowledged individually by the user in the standard application program A 11 5 Application errors All errors that can occur within the safety logic configured in SAFECONF and can be detected and acknowledged by the safe functional blocks are assigned to this class They include for example Implausible signal states at the inputs e g discrepancy error incorrect muting sequence or static state at the reset input Implausible parameter combinations A12 Startup and restart A 12 1 Startup restart following power up The module starts up once the configuration and parameterization data record has been downloaded successfully and the internal tests have been completed without errors WARNING Unexpected machine startup If you do not want the machine to start up restart automatically configure the safety logic accordingly A 12 2 Restart after triggering a safety function The SafetyBridge system resets a safety related output to 1 automatically when the safety function trigger is reset WARNING Unexpected machine startup If you do not want the machine to restart automatically configure the safety logic accordingly A13 Memory sizes for the safety logic The maximum size of the safety logic is 30 kB The following guide values can be used as a basis for creating your safety logic
83. nse in the SafetyBridge system ccccccsseeeeeeneeeeeecesseeeeeseeeeesenaees 22 A 9 1 Typicalresp nse IME rsrain aa E EAE 22 Peoe2 SMUICO Wi MIG S soiss ae O ATO 23 A10 Achievable safety depending on the modules USE cccccceeeeeeeeeeeeeeeeeeeeeees 25 A11 Behavior in the event Of AN CFOF ceeccccceeeeeeeceeseeececaueceeceuaeeeecsseeeesnaneeeesseees 26 A11 1 Critical system or device errors cccceseeceecseeeeeeceneeeeeeceaaeeeeeseneeeeesaaees 26 A 11 2 Parameterization or configuration errors ccc eeeeeeeeeeeeeeeeeeeeeeeeaeeeeeees 27 Project number_en_Revision Table of contents PHOENIX CONTACT T Product designation B Appendix checklists C Appendix revision history 8 PHOENIX CONTACT A 11 3 Communication errors seiccccetecenieciccieseuwteds Dec bel aeceeeiwiecel ech ee 27 PEA Voy I CV CMVONS sacetemycad aoanadathtan tend tack E deena Nuednteie sacecnen E 27 ATIS Application emors cori hice teandcereaconee ded decetiontenewahicteuaaee are eheiaieaae 28 Ae Mmm 2 110 721g 8 Res bc g eee aan ee eter eee cS DE nS ree tat ort ele eter tae te eae 28 A12 1 Startup restart following power up 0 ccccceeeeeeeeeseeeeeceseeeessaeeessaaees 28 A 12 2 Restart after triggering a Safety function ce ceeeeeeeeee eee eeeeeeeeeeeeaneees 28 A13 Memory sizes for the Safety lOGIC ccccccccssseeeeeeeeseeeeseeeeeeeeeeeeeeeeseeeeeeesaeeeeeeas 28 pace ce da E EEE A E
84. nue to use the systems or technologies they have come to rely on This means that a hitherto unseen level of flexibility can be achieved in bus based safety applications Direct processing of safety operations in the module SafetyBridge technology has been integrated into the proven Inline I O system Other than the standard guidelines specified in IL SYS INST UM E no special installation guidelines have to be observed when installing the corresponding modules They can be distributed in the network and operated at any point in the I O station Due to the technology used a special bus coupler is not required as the safety operations are processed directly in the IB IL 24 LPSDO 8 V3 PAC intelligent safe output module Thanks to the comprehensive range of parameterization options the input or output channels can be adapted flexibly to the relevant application Data transmission over the network from the safe input module to the output module is protected by a special protocol which is operated by the intelligent output module In the standard control system type a handling functional block must be called to forward the data Like the network used it does not perform any safety related tasks Easy configuration of the safety logic The safety mechanisms used in the SafetyBridge system such as the black channel principle are based on proven technologies that have been used for many years in the INTERBUS Safety and PROFIsafe systems With appr
85. oduct description Table 2 1 Local diagnostic and status indicators continued Monitoring the supply voltage Um OFF Communications power not present or firmware has not started up yet Uj below the permissible voltage range undervoltage Flashing at 0 5 Hz IB IL 24 LPSDO 8 V3 PAC is parameterized but safe communication is not running to at least one satellite Communication OK IB IL 24 LPSDO 8 V3 PAC is parameterized and safe communication is running without any errors to all configured satellites If no satellites have been configured IB IL 24 LPSDO 8 V3 PAC is parameterized Corresponds to COK bit 1 OUT Green red LED Status of each output 0 1 3 2 see Terminal point assignment on page 3 4 OFF Output at logic 0 no error Short circuit overload of an output This diagnostic message is stored temporarily on the module The message is stored in the volatile memory and will be lost after a voltage reset In the event of an error red LED ON the output is switched off until the acknowledgment sent by the controller is received by the safety module see also Section Safe digital output errors on page 8 2 105429_en_00 PHOENIX CONTACT 2 7 IB IL 24 LPSDO 8 V3 PAC 2 8 Safe state The safe state for the module is the low state at the output terminals See Section Safe digital outputs on page 2 3 The safe state can be entered in the following cases 1 Operating state Error detection in I O d
86. of shutdown times when using a SafetyBridge island This results in the following formula for tsf tsp ts tn tewp in tout Lpspo tFwp out t toutt ta tstop t a gt ts tin ES Tounen buno tagr l laor q pa gt lt gt lt lt gt lt gt a gt t a G A B 1054290007 Figure A 14 Overview of the shutdown time when using several SafetyBridge islands For example when two islands are linked the resulting formula for tsp is tsp ts t n tFwp_ n tout_Lpspo tFwp_s tout_Lpspo tFwp_ourT toutt ta tstop The values tewp s tout Lpspo may deviate for each island This is why the values tewo_s tout Lpspo Must be added for each island A maximum of 5 serial chains of IB IL 24 LPSDO 8 V3 PAC modules may be implemented within a safety function Table A 12 Key for formula and Figure A 13 Abbrevia tion tor Required shutdown time for the safety function Determined from the application e g from the re quired times according to the distance of a light grid Response time of the sensor Sensor data sheet Processing time of the input User manual for the safe input module 105429 en_00 PHOENIX CONTACT A 23 IB IL 24 LPSDO 8 V3 PAC Table A 12 Key for formula and Figure A 13 Abbrevia tion tewD_IN F Watchdog time communication Specified by the user in SAFECONF for each IB IL 24 PSDI PAC module ime IB IL 24 PSDI PAC module F Watchdog time slave Specifi
87. ogjoo oo o0 00 o0 00 00 00 ele ele ele ele og ogojooyoOo oa oogjoo oo oo ele OOjOojoOjoo 00 00 00 00 og ooyoo oOo oo oojoo 010 OOjOojoojoo o0 00 00 00 a a fF PSDI3 PSDO 1 PSDI 1 PSDI 2 PSDO 1 PSDI 1 PSDI 2 oo Oo Oo oo Ou Oo Oo Oo oo oOo Oo ono Ou Oo Ou ou oo Oo Oo Oo Ou Oo Ou Oo oo oo Oo Oo oo Oo Oo Ono oo oo Oo oo Ou Oo Oo Oo Ou Ou Ou ou oo Oo Oo Oo Ou Oo Ou Ou oo Oo Oo On Oo Oo Ou OU Oo Oo Oo on Oo Oo Oo Oo oo oo oo oon oo Oo Ou OU oo Oo Oo Oo oo Oo oo OU oo Oo Oo Oo oo Oo oo Oo Oo Oo OO Oo oo Oo oo oo Oo Oo Ou Oo oo oo oo On oo Oo Ou OU Oo oo oOo oo oo Oo Oo Oo oo Oo Ou Oo Oo Oo Oo OG Oo Oo Oo ono Oo Oo Ou OU Oo Oo Oo Oo Oo Oo Ou Ou oo Oo OO OO Ou Oo Oo oOo oo Oo Oo Ou oo Oo Oo Oo oo Oo Oo Oo Oo Oo Oo Ou oo Oo Oo Oo oo OO OO oo oo Oo Oo Ou oo Oo Ou Oo oo Oo Oo Oo Ou Oo Ou Oo oo Oo Ou ou oo Oo Oo Oo oo Oo Oo Oo oo Oo Oo Oo Oo Oo OU OU Oo Oo Oo on Oo Oo Oo On oo Oo Oo Ono Oo Oo Oo Ono oo Oo OU OU Oo Oo Oo OO oo Oo Oo Oo Ou Oo Oo Ou oo Oo Oo Ono oo Oo Oo Oo Oo Oo OO Oo oo Oo Oo Oo 1054290003 Figure A 7 Flat topology line structure 105429 en
88. ons Determine whether The correct safe actuators are connected to the safety module The safety module has been parameterized correctly The signals used in your safety logic have been linked to the safe actuators correctly Perform a function test and error simulation Please observe the checklist Validation on page B 11 during validation 105429 _en_00 PHOENIX CONTACT 7 3 Errors messages and removal 8 Errors messages and removal Depending on the error type errors that are diagnosed are displayed via the local diagnostic indicators and or transmitted to the controller as diagnostic messages The tables below provide an overview of the diagnosed errors their causes effects and possible measures for error removal In this manual diagnostic codes are sorted in ascending order by error type The following errors are possible Table 8 1 Overview of diagnostic codes Diagnostic code Error type hex X010 XOAA Safe digital output errors Section 8 1 on page 8 2 X1F0O Supply voltage errors Section 8 2 on page 8 3 X230 X2F2 Section 8 4 on page 8 4 X3FC X7C4 Connection errors to satellites Section 8 5 on page 8 6 As the first digit is never relevant the code always starts with an X For every error that occurs the cause of the error must first be removed If necessary the error is then acknowledged Errors that must be acknowledged are indicated in the Acknowledgment column in
89. opriate parameterization applications up to Cat 4 SIL 3 SIL CL 3 PL e can be implemented The SAFECONF software enables convenient parameterization of the safe input and output channels and creation of the safety logic The tool does not require programming experience as predefined functional blocks are available for virtually every application SafetyBridge technology can be used to implement distributed safety applications cost effectively ina network independently of the network and standard control system 105429 _en_00 PHOENIX CONTACT A 1 IB IL 24 LPSDO 8 V3 PAC A 1 2 Overview of SafetyBridge system features Independent of the network type Independent of the controller type No higher level safety controller required Maximum of 16 connections to satellites All data including parameterizations is located on the standard control system Only the IB IL 24 LPSDO 8 V3 PAC module is parameterized by the standard control system The SAFECONF parameterization tool can be downloaded free of charge see Section Ordering data on page 10 7 Enable principle Standard control system can access all safe signals and diagnostic data A 1 3 Differences in SafetyBridge systems depending upon which module with integrated safety logic is used Table A 1 SafetyBridge system specifications Functionality IB IL 24 LPSDO 8 V2 PAC IB IL 24 LPSDO 8 V3 PAC Supported networks INTERBUS INTERBUS PROFIBUS PROFI
90. oss of functional safety due to parasitic voltages Supply the supply voltages Uj and Us at a bus coupler and or a power terminal from the same power supply unit so that the loads of IB IL 24 LPSDO 8 V3 PAC are not affected by parasitic voltages in the event of an error PHOENIX CONTACT 105429 en_00 Inline potential and data routing and Inline plugs Q NOTE Damage to module electronics in the event of surge voltage Do not use a DC distribution network DC distribution network according to IEC 61326 3 1 A DC distribution network is a DC power supply network which supplies a complete industrial hall with DC voltage and to which any device can be connected A typical system or machine distribution is not a DC distribution network For devices that are provided for a typical system or machine distribution the DC connections are viewed and tested as I O signals according to IEC 61326 3 1 105429 en_00 PHOENIX CONTACT 3 3 IB IL 24 LPSDO 8 V3 PAC 3 4 Terminal point assignment 73410004 Figure 3 2 Terminal point assignment The Inline plugs are supplied with the module They are coded and marked accordingly for connection to prevent polarity reversal If other plugs are used according to the ordering data they must also be coded Only use the plugs supplied with the module or plugs that are approved as replacement items see Ordering data accessories on page 10 7 The following
91. pplication before assembling the module in an Inline station The switches cannot be accessed when the safety terminal is installed in the Inline station The module has a 2 pos and a 10 pos DIP switch The DIP switches are located on the left hand side of the safety module 500KBD A 1054290005 Figure 4 1 DIP switches A Switch for setting the transmission speed B Switch for setting the address island number 2 pos DIP switch The transmission speed is set via the 2 pos DIP switch Left switch Set the transmission speed transmission speed 500 kbaud or 2Mbaud The transmission speed is preset to 2 Mbaud a Only use devices with a uniform transmission speed within an Inline station a local bus It is not possible to operate a mixture of devices with different transmission speeds 4 2 PHOENIX CONTACT 105429 en_00 Assembly removal and electrical installation 10 pos DIP switch The island number is set via the 10 pos DIP switch address Q NOTE Malfunction in the event of incorrect addressing Make sure that in an overall system consisting of the SafetyBridge system and a PROFIsafe system the addresses are unique Duplicate address assignment is not permitted For additional information on addressing please refer to SafetyBridge address assignment on page A 12 Q NOTE Malfunction during mixed operation During simultaneous use of SafetyBridge V2 and SafetyBridge V3 on a control
92. r be ensured Take measures to prevent the incorrect connection polarity reversal and manipulation of connections 105429 en_00 For your safety 1 2 Electrical safety AN WARNING Hazardous shock currents and the loss of functional safety Disregarding instructions for electrical safety may result in hazardous shock currents and the loss of functional safety In order to ensure electrical safety please observe the following points Direct indirect contact Ensure that all components connected to the system are protected against direct and indirect contact according to VDE 0100 Part 410 In the event of an error parasitic voltages must not occur single fault tolerance This can be achieved by Using power supply units with safe isolation PELV Decoupling circuits which are not SELV or PELV systems using optocouplers relays and other components which meet the requirements of safe isolation Power supply unit for 24V Only use power supply units with safe isolation and PELV according to EN 50178 VDE 0160 supply PELV This prevents short circuits between primary and secondary sides Make sure that the output voltage of the power supply does not exceed 32 V even in the event of an error Insulation rating When selecting the equipment please take into consideration the contamination and surge voltages which may occur during operation The IB IL 24 LPSDO 8 V3 PAC module is designed for surge voltage category
93. r product identifications may be afforded legal protection even where they may not be indicated as such PHOENIX CONTACT l ROVOV secant cette E Act cha ata et en ema T eneoda E 1 1 1 General safety MOLES secs scset en ictnseeetereiewidin aa A a E AT 1 1 2 Elecmicaks atetan a utd ls aod a uh 3 1 3 Safety of the machine OF SYSTOM cccceseeececeeseeeeceeeeeecneeeeeceuaeeeecseseeeesseneeeeseas 4 1 4 Safety when Starting applications cccccccsseeeeeceseeeeeeceseeeeeaueeeessaeeeeesnaneeeeeaaees 5 1 5 DIFGEIIVES and standards cosciran Gest iced a aa ete 5 1 6 CON COV USACE ieissa enaa aeaa r 6 1 7 Documental esere a E teenie centieetecesaicavens 6 1 8 ADDroviAtionS USCA dorit ea a a cacnnaetheuns 7 1 9 Sale IO LING senin EO aa 7 Z Product CESCMDUION snr a a a laa tide nema 1 2 1 Note about the system description cece eeceeceeeseeeceeeneeeeneseeeeesaueeeeennaeneensanees 1 2 2 Brief description of the safety MOCUIE cccccseeeeecesseeeeeceeseeeeeeeeeeeeseaseeeesaaaeeees 1 2 3 Structure of the safety module ccccsecceeceesseeeceeeeeeceeaeeeeceeaseeessueeessnsneeeeseas 2 2 4 FIQUSING dimenslONS trenen n O E taadaceateinaes 2 2 5 safe dighal utPUTS iiiaae a E aa a aena Ea e 3 2 6 Connection options for actuators depending on the parameterization 5 2 7 Local diagnostic and status indicators sseeeseeseneeeerrererrrrrerrrrrsrrrrenrrrrenrr nnen 6 2 8 Sale
94. re involved in a safety function the longest F Watchdog time is included in the calculation A 24 PHOENIX CONTACT 105429 en_00 Achievable safety depending on the modules used A10 Achievable safety depending on the modules used Phoenix Contact recommends using the SISTEMA software utility to determine the achievable safety The SISTEMA software utility for the safety of control systems on machines can be downloaded free of charge from the website for the Institute for Occupational Safety and Health of the German Social Accident Insurance see http www dguv de ifa en pra softwa sistema index jsp This Windows tool provides assistance in evaluating the safety of control systems within the scope of EN ISO 13849 1 According to SISTEMA performance level PL e can be achieved with the maximum configuration of 5 serial chains 6 x IB IL 24 LPSDO 8 V3 PAC plus the relevant satellites However you should always check your actual application to ascertain the level of safety that can be achieved 105429 _en_00 PHOENIX CONTACT A 25 IB IL 24 LPSDO 8 V3 PAC A 11 Behavior in the event of an error Error messages Errors that occur on the safe devices can be detected using process data functional blocks device LEDs and SAFECOMF in online mode These error messages can be evaluated in the standard application program or can be displayed by means of a visualization For instructions on how to proceed in the event of an error plea
95. rejaal ee eee po E o e oo o eo OF Of OF OP ATO 24 Of o 3220r A 12 PHOENIX CONTACT 105429 en_00 SafetyBridge address assignment Table A 7 Example 1 SafetyBridge addresses Island number Satellite number SafetyBridge address F Address IB IL 24 PSDI 33 dec 21 hex diced roTefefeyt opoyo IB IL 24 PSDO PAC ie opeet iee o 34 deo 22h Table A 8 Example 2 SafetyBridge addresses leit foletatsfeti pop o B IL 24 LPSDO 8 V3 PAC epefTetepepefofere 1285 Onen IL 24 PSDOR 4 PAC Position 1 aripii 129o Etnon IB IL 24 PSDI PAC 2dec Zhex potion TS Soya o pote fe ttle 1304o 82hex IB IL 24 PSDO 4 4 PAC Peona KAAKAA ENEN 131d 83ho IB IL 24 PSDO 8 PAC ja arpe pepe 1324o 84nex IB IL 24 PSDI PAC TERENS opi one E e 1334ec 85hex 105429_en_00 PHOENIX CONTACT A 13 IB IL 24 LPSDO 8 V3 PAC Example addresses Figure A 8 and Table A 9 illustrate examples of addresses in the SafetyBridge system for two islands IB IL 24 IB IL 24 PSDI 8 PAC PSDI 8 PAC oo oo Oo On Oo Oo Oo On Oo Oo Oo on Ou Ou Ou oon oo Oo Oo On Ou Ou Ou OU Oo Oo Oo On Ou Oo Ou OU Oo Oo Oo On Oo Oo Oo Ou Oo Oo Ou On Oo Oo Oo On Oo Oo Oo On Oo Oo Oo On Oo Oo Oo On Ou Oo Ou Ou oOo Oo Oo OO Oo Oo Oo Ou Oo Oo Oo oo Oo Oo Oo oo oOo Oo Oo OO Oo Oo Oo On Oooo T 00010 00010 IB IL 24 GOOO V000 IB IL 24 PSDO8 PAC PSDI8 PAC eee eee a IB IL 24 IB IL 24 IB IL 24 as era Se LPSDO
96. resses for island number 2 green in Figure island number 1 red in Figure O lt ne 00 Q o A wz A aa S O lt ari 00 O O o A wz A ae 5 D Cc D U U lt Assigned IB IL 24 PSDO 8 PAC Assigned IB IL 24 PSDI 8 PAC The graphics below show the red and green project in the hardware editor in SAFECONF The DIP switch position can be displayed here Se Ee pa L eb G a O x 2 oO 4 A D pa gt LL Z O O LI LL lt o O ab gt amp Q RA O Ke Cc O c oO dp O Q r O e9 ab Ka KR H g EERE MABE HDE ASSES T0008 O ae gt O ig JM 1090 8 lt B K J iO 56 208 pepe ei eS goc s ose T 4 SE g eag Lea O s6 a o 00 JA eg n s0 0 1 0 ToL ALAJO ka a DEKI i 1 1 010 m 19 10x10 nll pet 0 10 56 q OH 0 1010 eo 106 JS Lo om 00o cl Eze a BEKI ess 26 TS Tu Ae Oy eo 28 NOS e a a a a eS 1 56 20 BEE 20 56 20 i es TeS On 6 30 n jot t a010 Le O 0 010 Ce or iO 5e 20 qep 56 20 5 3 1 0 P fetes E n010 f KINK ISKI zae 100 DIP switch position of island number 1 red in Figure A 8 in SAFECONF Figure A 9 K j E IRKI Or aago r0 bd al u O 1 0510 j Se TF lt a A SKI SK mAN oS t ai O
97. rization is modified 5 4 PHOENIX CONTACT 105429 _en_00 Connection examples for safe outputs 6 Connection examples for safe outputs 105429 en_00 6 1 Explanation of the examples Depending on the type of wiring the outputs of a module can achieve different safety integrity levels SIL SIL CL Cat PL simultaneously as long as the settings do not contradict one another The following examples only describe the options for the electrical connection of controlled devices actuators to the safe outputs Should you have any questions regarding applications to be implemented please contact the Phoenix Contact safety hotline see Safety hotline on page 1 7 The following are specified for each example Basic specifications The main data for the example is specified in the table Device diagnostics and behavior of the module in the event of an error Diagnostic capability depends on the parameterization lf a message is transmitted to the controller in the event of an error the message is specified in the tables For information on the relevant error code possible solutions and information as to whether acknowledgment is required please refer to Section Errors messages and removal on page 8 1 Typical parameterization The table illustrates an example of all the parameters for the specified assignment Key for all tables in this section Table 6 1 Device diagnostics and behavior of the module in the
98. rization options please refer to the user manual for the relevant device The wiring and parameterization of devices determines which errors are detected A 6 PHOENIX CONTACT 105429 _en_00 105429 en_00 System topology A 2 4 Cross communication The SafetyBridge V3 system supports cross communication between the islands This is achieved exclusively by connecting the logic modules The IB IL 24 LPSDO 8 V3 PAC can be used as a SafetyBridge satellite with 16 safe inputs and outputs for a different IB IL 24 LPSDO 8 V3 PAC The IB IL 24 LPSDO 8 V3 PAC SL SL slave can be found in the hardware toolbox in SAFECONF Hardware IB IL 24 PSDI amp PAC IB IL 24 PSDOR 4 PAC IB IL 24 PSDO 4 4 PAC IB IL 24 PSDO amp PAC Figure A 2 SAFECONF hardware toolbox Once you have inserted the IB IL 24 LPSDO 8 V3 PAC SL in the hardware editor the module appears with 16 safe input and output signals a lt Figure A 3 SAFECONF project for the LPSDO V3 master module PHOENIX CONTACT A 7 IB IL 24 LPSDO 8 V3 PAC In the parameterization dialog box for the IB IL 24 LPSDO 8 V3 PAC SL set the number of the island that is now connected This island number must match the switch position of the IB IL 24 LPSDO 8 V3 PAC for the connected island Type Logic Digital In Digital Out Description IB IL 24 LPSDO 8 3 PAC SL Satellite number 1 Import file O o o O Pms Ce O R e Figure A 4 Parameterization dialog bo
99. rocess data words The module occupies 24 words in the Inline system Use electronic device descriptions GSD GSDML FDCML etc in order to use the module in various networks 2 10 Programming data configuration data 2 10 1 Local bus Operating mode SafetyBridge V3 ID code ABhex 171 gec Length code 18hex 24 dec Input address area Application specific Output address area Application specific Parameter channel PCP O words Register length 24 words 2 10 2 Other bus systems or networks The programming data configuration data is defined in the device description FDCML GSD GSDML etc according to the bus or network used 2 10 PHOENIX CONTACT 105429 en_00 Inline potential and data routing and Inline plugs 3 Inline potential and data routing and Inline plugs 3 1 Inline potential and data routing For operation the safety module must be integrated in an Inline station within the SafetyBridge system The bus signals are transmitted via the Inline data jumpers The required supply voltages are transmitted via the Inline potential jumpers For more detailed information on potential and data routing within an Inline station please refer to the IL SYS INST UM E user manual The segment circuit is looped through the safety module and is available again after the module The segment circuit cannot be accessed in the safety module 3 2 Supply voltage U Supply the 24 V supply vol
100. rrors for the actuator used Ensure that this error does not result in delayed system startup Other errors Please take into consideration all possible errors that can depending on the actuator occur in the actuator Error in the wiring Cable interrupt between output and Detect errors using external monitoring Please take into actuator or between actuator and consideration all the possible errors for the actuator used ground Ensure that this error does not result in delayed system startup Cross circuit Output to output When the outputs are disabled a cross circuit between the outputs is only detected if the test pulses are enabled If an error is detected the module disables all its outputs Output to ground The error is detected in the ON state The output is disabled safe or or overload state The module cannot be switched on again with an edge from output to FE OUTx 0 to 1 until the error has been removed and acknowledged WARNING Unexpected machine startup An operator acknowledgment leads to a positive edge and can therefore result in the outputs being re enabled 6 6 PHOENIX CONTACT 105429 en_00 Connection examples for safe outputs Typical parameterization Switch off delay for stop Enabled Or disabled category 1 Switch off delay for stop 30 Application specific category 1 Value range of switch off delay Value ins Application specific for stop category 1 Test pulses output disabled
101. rrrerrrrrrrreererrrrenen 5 6 5 Two channel assignment of safe outputs cccceseeeceeseeeeeeceeseeeeeeeeeeeeseaeeeeenaees 8 o VAUD AN VAI ALLONN a A a AE a eee es 1 7 1 STA e enter ent reenter errr ttn rennet rere nr eerhcreen er ener tr eer en terre tren rrr 1 7 2 Restart after replacing a Safety module cccecceecsseeeeeeeeeseeeceeeeeeesneeseeeesaeeees 3 7 2 1 Replacing a Safety module cccccsseseeeceeeeeeeeceeseeeeseeeeeeesaeeeeeesaaeeees 3 7 2 2 PAC SUM AI EE E ET E EE E E E ATAT T ET T AEE 3 7 3 NAIC AION visas nenna r a haved a a 3 8 Erors messagesandTemoval rseroniei enn T N aeaneteas 1 8 1 Safe digital output SIONS wasi siccdssccianctens divsaatnadsctes eancdierawe tan de nnter ennnn nterne nennen 2 8 2 DUPDIY Voltage SCIONS srein erisir eoa a a 3 8 3 General SIONS Teei a a EE See 3 8 4 Parameterization errors iceussatkcscesinac tude steered harcesandaadereeucba diglaanasiciceuiaueeiaineavaaeiws 4 8 5 Connection errors tO satellites cccccccceeceecceeeeeeeeceeeeeeccaeeeeeseneuseeeseesseeensanseeeess 6 8 6 Acknowledging GIN CM OM ves schvs seh esbaie wei asidncay n a E 7 9 Maintenance repair decommissioning and disposal cccceecceeeceeeceeeeeeeeeeeeseeseeeseeeseeeeeeees 1 9 1 Mamenang essasi Ghe ent eannleualer matted Ween oenar oten Woke 1 9 2 REDAN Sircetened cocwe cent dante O a 1 9 3 Decommissioning and diSpOSal ceceeeeeee eee eeee reese eee ee eaaeeeeeaa
102. se If the size of the configuration and parameter data record for the planned safety functions exceeds the memory size an error message is displayed and changes can be made at an early stage To roughly estimate the memory required please use the information in Section Memory sizes for the safety logic on page A 28 105429 en_00 Safe state A 7 2 Downloading the configuration and parameter data record The entire configuration and parameterization can be created offline with SAFECOMF A fully installed system is not required until the download stage Communication must be running when transmitting the data record a soft reset is performed automatically during which the D LED lights up WARNING Loss of safety function Before downloading a data record check whether the current data record is actually loaded Make sure that you do not overwrite the data record on the IB IL 24 LPSDO 8 V3 PAC with an old data record During startup do not configure a delete service for a configuration and parameter data record Before overwriting a data record always read back the project header first Make sure that you are sending the correct data record to the correct IB IL 24 LPSDO 8 V3 PAC If a data record is sent to an IB IL 24 LPSDO 8 V3 PAC for which it was not intended an error message is displayed in the diagnostic output of the handling block A8 Safe state The safe state For safe output devices the safe
103. se refer to Section Acknowledging an error on page 8 7 Service information In addition to error messages service information can also be output This information takes the form of device message warnings that do not affect the safety function These warnings are either unacknowledged messages or messages that are acknowledged via the controller Error classes The response of all devices connected to the system and the safety functions to an error depends on the error class detected There are five different error classes in the SafetyBridge system Critical system and device errors Parameterization and configuration errors Communication errors O errors Application errors A distinction is made based on The severity of the error The reciprocal effects on other components in the system The acknowledgment and restart options Acknowledgment The acknowledgment of an error is an intentional user action controlled via the application program with the aim of showing the system or subsystem that an error has been removed and that the system or subsystem can reactivate the faulty component Errors affecting a SafetyBridge island are acknowledged via the handling functional blocks of the IB IL 24 LPSDO 8 V3 PAC see Section SafetyBridge V3 system handling in various control systems on page A 16 A 11 1 Critical system or device errors All errors that are detected and immediately switch the dev
104. shows an example of a completed checklist Version HWIFWIFW onono foe ROTOR Author jomsmi festengneer JaneBomn No Requirement mandatory Yes Remak Ea E No Requirement optiona Yes No Remark __ _ Co e E a a E E Key Equipment identification Enter the device type and or the equipment identification for the relevant device Version HW FW FW Enter the hardware and firmware version of the device see Section Structure of the safety module on page 2 2 Date Enter the date on which you began to fill in this checklist Author Test engineer Enter the names of the author and the test engineer Remark Enter a remark if necessary Requirement mandatory These requirements must be met for a safety application in order to complete the relevant phase using the checklist Requirement optional These requirements are optional For points that are not met please enter an appropriate remark in the relevant field 105429_en_00 PHOENIX CONTACT B 1 IB IL 24 LPSDO 8 V3 PAC B1 Checklists for the SafetyBridge system B 1 1 Planning Checklist for planning the use of the SafetyBridge system a No Requirement mandatory Yes Remark _ _ _ _ _ _ _ i Has a hazard and risk analysis been carried out for the system machine UA Has the corresponding safety integrity level SIL SIL CL Cat PL been derived from the hazard and risk analysis A Does the SafetyBridge system meet the required safety inte
105. state is the power off state at the affected output terminals For safe input devices the safe state is the transmission of the safe state value 0 in the image of the affected inputs to the affected logic module For transmission on the bus the safe state is the transmission of the value 0 The safe state can be a normal operating state or is set if a corresponding error has been detected 105429 en_00 PHOENIX CONTACT A 21 IB IL 24 LPSDO 8 V3 PAC A9 _ Time response in the SafetyBridge system In the planning phase of the machine system and the SafetyBridge system specify the required shutdown time for each safety function This is ascertained on the basis of the safety evaluation of the machine system taking into consideration the safety distances and the approach speed Observe the applicable standards and regulations In the planning phase of the planned SafetyBridge system also calculate the shutdown time for the outputs Then for each safety function check whether in conjunction with all other components the calculated shutdown time is sufficient to ensure compliance with the required shutdown time for the safety function The aim of the calculations is to ensure that the safety function responds within the required time A 9 1 Typical response time The typical response time of the SafetyBridge system is the time that elapses from the signal being applied at the safe input terminal to the r
106. t 1A None Can be parameterized 150 ms to 630 s see Section Parameterization of the safe outputs on page 5 2 Accuracy 5 of the parameterized value 1 ms 3 ms maximum depending on the load capacity One green LED two color LED green red per output see Local diagnostic and status indicators on page 2 6 One red LED two color LED green red per output see Local diagnostic and status indicators on page 2 6 The connected load must not respond in a hazardous way to test pulses 105429 en_00 PHOENIX CONTACT 10 5 IB IL 24 LPSDO 8 V3 PAC Electrical isolation isolation of the voltage areas To provide electrical isolation between the logic level and the I O area it is necessary to supply the bus coupler and this safety module from separate power supply units Interconnection of the power supply units in the 24 V area is not permitted See also IL SYS INST UM E user manual Separate potentials in the system consisting of bus coupler power terminal and safety module Test distance Test voltage 5 V supply incoming remote bus 7 5 V supply bus logic 500 V AC 50 Hz 1 min 5 V supply outgoing remote bus 7 5 V supply bus logic 500 V AC 50 Hz 1 min 7 5 V supply bus logic 24 V supply Uy FE 500 V AC 50 Hz 1 min Approvals For the latest approvals please visit www phoenixcontact net products 10 3 Conformance with EMC Directive Conformance with EMC Directive 2004 108 EC Noise immun
107. t the unauthorized opening of the module a security seal is applied to the module This security seal is damaged in the event of unauthorized opening In this case the correct operation of the safety module can no longer be ensured 9 3 Decommissioning and disposal The machine or system manufacturer specifies the procedure for decommissioning Decommissioning may only take place according to these specified procedures When decommissioning a SafetyBridge system or parts thereof ensure that the safety modules used Are correctly reused in another system In this case please observe the storage and transport requirements according to the technical data see IB IL 24 LPSDO 8 V3 PAC on page 10 1 Or Are disposed of according to the applicable environmental regulations and in this case can never be reused 105429 en_00 PHOENIX CONTACT 9 1 Technical data and ordering data 10 Technical data and ordering data 10 1 System data 10 1 1 Inline For system data please refer to the following user manual Inline Automation terminals of the Inline product range ILSYS INST UME 10 1 2 SafetyBridge system SafetyBridge system Shutdown time toyt_Lpspo 15 ms Maximum number of SafetyBridge islands in the system 31 Maximum number of modules within a SafetyBridge island 1 IB IL 24 LPSDO 8 V3 PAC Memory capacity General data 16 satellites IB IL 24 PSDI PAC IB IL 24 PSDO PAC freely mixed 30 kB for safety logic
108. tage Up Ussy at a bus coupler or a suitable power terminal IB IL 24 PWR IN R The 7 5 V voltage U is generated from this 24 V supply voltage in the bus coupler or power terminal It is supplied to the safety module via the Inline potential jumper UL WARNING Loss of the safety function when using unsuitable power supplies Please note for the voltage supply at the bus coupler or power terminal that Only power supplies according to EN 50178 VDE 0160 PELV may be used Please also observe the points in Section Electrical safety on page 1 3 The supply voltage U is used to supply the bus controller board and the communications power For the technical data for the supply voltage U please refer to Supply voltage UL logic on page 10 3 The maximum current carrying capacity for the supply voltage U is 2 A This current carrying capacity can be reduced if certain terminals are used Please refer to the information in the terminal specific data sheets 105429 en_00 PHOENIX CONTACT 3 1 IB IL 24 LPSDO 8 V3 PAC 3 2 A 3 3 Supply voltage Uj Supply the supply voltage at a bus coupler or a power terminal It is supplied to the safety module via the Inline potential jumper Uy WARNING Loss of the safety function when using unsuitable power supplies Please note for the voltage supply at the bus coupler or power terminal that Only power supplies according to EN 50178 VDE 0160 PELV may be used Please also observe
109. terization of the switch off delay the time until the outputs are actually switched off can vary Table 5 2 Switching off of the outputs according to the trigger event and the parameterization Switch off of outputs Influence of parameterized switch Switch off of outputs off delay By the controller Yes Once the parameterized switch off delay has elapsed After a bus error Yes Once the parameterized switch off delay has elapsed es After a short circuit cross circuit No Immediately only stop category 0 failure of the supply voltage or hardware fault After time monitoring has been Y Once the parameterized switch off exceeded watchdog time delay has elapsed Fwp Time 9 in the event of faulty bus connection WARNING Delayed shutdown when using stop category 1 For stop category 1 please take into consideration the following The guaranteed shutdown time tg is extended by the parameterized switch off delay WARNING Exception for delayed shutdown Inthe event of an error excluding bus errors the affected outputs are switched off immediately without delay In this case only stop category O is supported For the switch off operation please take into consideration the following The switch off operation can be interrupted by switching the output on again The switch off delay is not guaranteed if a reparameterization or download is initiated Carry out a validation every time the paramete
110. the module disconnect the power to the module and the entire Inline station and ensure that it cannot be switched on again Make sure the entire system is reassembled before switching the power back on Observe the diagnostic indicators and any diagnostic messages The system may only be started provided neither the station nor the system poses a hazard lf replacing a module proceed as described for assembly and removal see Section Assembly removal and electrical installation on page 4 1 Ensure that the new safety module is mounted at the correct position in the local bus The new module must meet the following requirements Same device type Same or later version NOTE Versions that are not compatible for replacement The IB IL LPSDO 8 V3 PAC device type is not the same as the IB IL LPSDO 8 V2 PAC and is therefore not compatible for replacement Carry out a validation and perform a function test after replacing the module 7 2 2 Restart Once the safety module has been replaced proceed as described for initial startup see Section Initial startup on page 7 1 Plug the Inline plugs into the correct connections Carry out a validation and perform a function test after replacing the module 7 3 Validation Carry out a safety validation every time you make a safety related modification to the SafetyBridge system When validating your EUC check the assignment of the individual actuator connecti
111. the tables below If diagnostic codes are indicated by the system which do not appear in the tables below please contact Phoenix Contact Error removal To remove the cause of an error please proceed as described in the Solution column in the tables below Error acknowledgment Instructions on how to acknowledge an error can be found in Section Acknowledging an error on page 8 7 AN WARNING Unexpected machine startup An operator acknowledgment leads to a positive edge and can therefore result in the outputs being re enabled LED The LED column specifies which local diagnostic LEDs indicate the error Acknowledgment To remove the error evaluate the PUR and OAR bits in the diagnostic register of the IB IL 24 LPSDO 8 V3 PAC see Section A 4 These specify whether a power up is expected or whether an acknowledgment is required Errors that must be acknowledged are indicated with Yes in the Acknowledgment column Special conditions for re enabling an output or the module are specified in brackets e g Yes 1 in the Acknowledgment column and explained below the relevant table For information on acknowledging satellite errors see Section Acknowledgment of error messages for satellites on page A 19 105429_en_00 PHOENIX CONTACT 8 1 IB IL 24 LPSDO 8 V3 PAC 8 1 Safe digital output errors Table 8 2 Safe output errors Diagnostic Acknowledgment code hex Yes 1 Hardware fault
112. they are protected against cross circuits Please observe the load capacity of the outputs according to the technical data in Safe digital outputs on page 2 3 6 2 Notes on the protective circuit for external relays contactors freewheeling circuit o 69400021 Figure 6 1 Example of the freewheeling circuit for an external relay Limit the voltage induced on circuit interruption to lt 15 V e g with RC elements suppressor diodes or varistors Please note that the freewheeling circuit affects the dropout time and the service life of the contactor Please observe the specifications of the relay manufacturer when sizing the relay protective circuit 6 2 PHOENIX CONTACT 105429_en_00 SIL SIL CL Performance level Category 105429 en_00 a a a Connection examples for safe outputs 6 3 Measures required to achieve a specific safety integrity level The safety integrity level SIL SIL CL performance level and category that can be achieved is specified for each connection example Please also refer to Section Achievable safety depending on the modules used on page A 25 Use the relevant standard to determine the probability of failure in your application according to IEC 61508 2 SIL and EN 62061 SIL CL When the SIL SIL CL is specified the module takes up 1 of the specified SIL SIL CL Table 6 3 PFD and PFH depending on the SIL SIL CL SIL 2 SIL CL 2 1 of 10 1 of 10
113. to Section Measures required to achieve a specific safety integrity level on page 6 3 Please note that in order to achieve the specified PL the actuator must have a medium level of diagnostic coverage 90 to 99 and medium MT TFd A high level of diagnostic coverage gt 99 is recommended for the application according to PLd To achieve Cat 3 and PL d the test pulses must be enabled Use actuators that can achieve the required safety integrity level Evaluate the readback contacts to achieve the corresponding safety integrity level 105429 _en_00 PHOENIX CONTACT 6 5 IB IL 24 LPSDO 8 V3 PAC a Enable the test pulses to improve device diagnostics If the test pulses for the actuator are faulty they can be disabled In this case test the switching capability of the outputs at regular intervals Device diagnostics and behavior of the module in the event of an error Table 6 4 Single channel test pulses enabled SF Error in the actuator Despite being disabled the None Yes Detect errors using external monitoring Please take into actuator does not switch to the safe consideration all the possible errors for the actuator used state e g a contact will not open Test the shutdown capability of the actuator at regular intervals If necessary use a two channel actuator Actuator cannot be enabled None No Detect errors using external monitoring Please take into e g interrupt consideration all the possible e
114. two channel actuator can be disabled Detect errors using external monitoring Implement a restart inhibit in the event of this error Please take into consideration all the possible errors for the actuator used Test the shutdown capability of the actuator at regular intervals Detect errors using external monitoring Please take into consideration all the possible errors for the actuator used Ensure that this error does not result in delayed system startup Other errors Please take into consideration all possible errors that can depending on the actuator occur in the actuator Error in the wiring Cable interrupt between output and actuator or between actuator and ground Cross circuit Output to output Output to ground Short circuit or or overload output to FE OUTx 105429 en_00 Detect errors using external monitoring Please take into consideration all the possible errors for the actuator used Ensure that this error does not result in delayed system startup When the outputs are disabled a cross circuit between the outputs is only detected if the test pulses are enabled If an error is detected the module disables all its outputs If the test pulses have been disabled test the circuit and the external wiring at regular intervals by enabling the outputs The error is detected in the ON state The output is disabled safe state The module cannot be switched on again with an edge from 0 to 1 until t
115. ucts 10 4 4 Ordering data documentation Description Type Order No Pcs Pkt Inline User manual IL SYS INST UME 2698724 1 Automation terminals of the Inline product range Quick start guide The quick start guides can be downloaded free of charge at www phoenixcontact net products Make sure you always use the latest documentation It can be downloaded at www phoenixcontact net products a a 105429 en_00 PHOENIX CONTACT 10 7 A Appendix SafetyBridge system A1 The SafetyBridge system A 1 1 SafetyBridge technology maximum flexibility and safety In all safety applications in which conventional safety relays are not flexible enough parallel wiring proves too complex due to the expansiveness of the safety circuits or the use of a safe bus system in conjunction with a safe controller is cost prohibitive SafetyBridge technology from Phoenix Contact offers a cost effective solution The SafetyBridge system works independently of the relevant network type and the type of standard control system used Both simply act as a transport medium for safe data packets which are exchanged between the safe input and safe output modules The safe inputs and outputs are distributed in the network and do not require a higher level safety controller ora separate safety bus system Therefore instead of having to choose a safe network such as PROFIsafe or CIP Safety with the relevant available safety controllers users can instead conti
116. ule contains components that can be damaged or destroyed by electrostatic discharge When handling the safety module observe the necessary safety precautions against electrostatic discharge ESD according to EN 61340 5 1 and EN 61340 5 2 4 1 2 General A N WARNING Unintentional machine startup Do not assemble or remove the module while the power is connected Before assembling or removing the module disconnect the power to the module and the entire Inline station and ensure that it cannot be switched on again Make sure the entire system is reassembled before switching the power back on Observe the diagnostic indicators and any diagnostic messages The system may only be started provided neither the station nor the system poses a hazard The IB IL 24 LPSDO 8 V3 PAC safety terminal is designed for use within an Inline station Only use the safety terminal in the 24 V DC area of an Inline station To ensure reliable operation install the safety terminal in housing protected from dust and humidity IP54 or higher In order to prevent manipulation secure the housing control cabinet control box against being opened by unauthorized persons Mount all Inline terminals on 35 mm DIN rails Only connect the cables using the supplied Inline plugs or Inline plugs listed in the ordering data 105429_en_00 PHOENIX CONTACT 4 1 IB IL 24 LPSDO 8 V3 PAC 4 1 3 Setting the DIP switches Set the DIP switches accordingly for your a
117. unctions with the following requirements Upto SIL 3 according to standard IEC 61508 2 Upto SIL CL 3 according to standard EN 62061 Up to Cat 4 PL e according to standard EN ISO 13849 1 Please also refer to Section Achievable safety depending on the modules used on page A 25 PHOENIX CONTACT 2 1 IB IL 24 LPSDO 8 V3 PAC 2 2 PHOENIX CONTACT 2 3 Structure of the safety module 79690002 Figure 2 1 Structure of the safety module 1 Data jumpers local bus 2 Electronics base with labeling including hardware firmware firmware version designation not shown 3 Switch for setting the transmission speed 4 Switch for setting the island number 5 Potential jumper 6 Diagnostic and status indicators for assignment and meaning see Section Local diagnostic and status indicators on page 2 6 7 Inline plug for assignment see Section Terminal point assignment on page 3 4 8 Terminal points 9 Marking field 2 4 Housing dimensions 119 8 _ 48 8 R 79690008_en Figure 2 2 Housing dimensions in mm 105429_en_00 Product description 2 5 Safe digital outputs The safety module has safe positive switching digital outputs which can be used as follows For two channel assignment Four two channel outputs For single channel assignment E
118. vice phoenixcontact com PHOENIX CONTACT 1 7 Product description 2 Product description 105429 en_00 2 1 Note about the system description The SafetyBridge system is described in Appendix SafetyBridge system on page A 1 In the description of the IB IL 24 LPSDO 8 V3 PAC safety module it is assumed that you are familiar with the SafetyBridge system If this is not the case please refer to Appendix A first for information on the system 2 2 Brief description of the safety module The IB IL 24 LPSDO 8 V3 PAC module is designed for use within an Inline station The module features integrated configurable safety logic and safe digital outputs The IB IL 24 LPSDO 8 V3 PAC safety module can be used as part of an Inline station at any point within a SafetyBridge system The transmission speed of the Inline local bus can be set to 500 kbaud or 2 Mbaud on the safety module using switches Use the same transmission speed throughout an Inline station The module has a 10 pos DIP switch which is used to set the island number The module has four safe positive switching digital outputs for two channel assignment or eight safe positive switching digital outputs for single channel assignment The outputs can be parameterized according to the application The outputs enable actuators to be integrated into the SafetyBridge system Within a SafetyBridge system the IB IL 24 LPSDO 8 V3 PAC safety module can be used to achieve safety f
119. x The safe input and output signals are now available for the configuration of the safety function of the master IB IL 24 LPSDO 8 V3 PAC The 16 safe input and output signals represent the newly added safe external signals of the IB IL 24 LPSDO 8 V3 PAC SL module which can be obtained from the External signals toolbox in the corresponding SAFECONF project for the IB IL 24 LPSDO 8 V3 PAC SL module Extemal signals Figure A 5 SAFECONF project for the LPSDO V3 slave module A 8 PHOENIX CONTACT 105429 en_00 System topology Cross communication output Q1 of the LPSDO V3 SL in the master project corresponds to cross communication input 0_ll1 of the LPSDO V3 SL project Up to 16 safe signals can therefore be exchanged bidirectionally between two IB IL 24 LPSDO 8 V3 PAC modules A master project can communicate with a maximum of 16 LPSDO V3 modules NOTE Special calculation of the total failure rate required lf more than 6 islands are linked in series special calculation of the total failure rate is required For each additional island 2 of 10 must be added to the PFH value Q NOTE Modified total response time When calculating the total safety response time please note the modified basis for calculation in Section Time response in the SafetyBridge system on page A 22 105429_en_00 PHOENIX CONTACT A 9 IB IL 24 LPSDO 8 V3 PAC There are two variants that are used as the basis for creatin

User manual UM EN IB IL 24 LPSDO 8 V3-PAC - Digi-Key

Contents

Download Pdf Manuals

Related Search

Related Contents