Siemens Sinumerik 840D sl Function Manual page 310

Connecting Sensors/Actuators
7.5 Safe programmable logic (SPL)
Two acknowledge inputs Q1 and
Q2
Three timer initialization values
TI1 to TI3
One timer limit value TM1
Four output values A0 to A3
Initialization in the part program
The connections for the function block are defined when initialized. The input and
output quantities of the function block are assigned to the required system
variables ($A_MARKERSI, $A_INSE, $A_OUTSE,...). The following functions
must be called:
SIRELIN: This language command assigns the input quantities Q1, Q2, E1, E2
and E3 to the safety relay x (x = 1..4). The return value contains the number of the
first incorrect parameter; a value of 0 indicates that the parameter assignment is
correct.
Syntax:
7-310
SINUMERIK 840D sl/SINAMICS S120 SINUMERIK Safety Integrated (FBSI sl) - - 10.2015 Edition
Q1 must be supplied with the signal from the real
acknowledge button.
Q2 is only used for the forced checking procedure. The
software relay itself does not have to be subject to a
forced checking procedure. However, if the Emergency
Stop function is executed and if external actuators
have to be subject to a forced checking procedure, if
the relay drops--out during the Emergency Stop test,
then it can be acknowledged using Q2 (in a defined
time window, refer to TM1). This input must also be
connected with a safety system variable (even if the
signal is not used) -- preferably with a $A_MARKERSI
-- in order to detect that this acknowledge signal is
available as steady--state signal in the crosswise data
comparison with the PLC. The associated comparison
data in the PLC must have a steady--state 0 signal
level (error detection using different states of the
particular SPL marker for the PLC and NCK).
The times after which outputs A1 to A3 are switched to
0 at a negative edge in output signal A0 are defined
here.
Defines the maximum time that the shutdown inputs E1
to E3 may have been at a 0 signal level so that they
can still be acknowledged using Q2. Q2 should only be
used for the internal safety relay test. It is not per-
missible that Q2 is used to acknowledge a "real" shut-
down.
A0 supplies the result of ANDing E1 to E3 without any
delay. Outputs A1 to A3 supply the same result for
positive edges of A0; for negative edges, the results
are delayed by the timer initialization TI1 to TI3
(switch--out delay).
A0 to A3 do not produce a result after booting until an
acknowledgment has been received via Q1.
SIRELIN(x,status,"Q1","Q2","E1","E2","E3")
© Siemens AG 2015 All Rights Reserved
10/15