Advertisement
4 OPERATION
4.1 Defi nitions
State of the switch:
• OFF: the device is off, not powered.
• POWER ON: status immediately following switching on, when the device carries
out internal tests.
• RUN: status in which the device works normally.
• ERROR: error status in which the safe outputs are deactivated. Indicates that a fault
is present inside or outside the device, such as:
- short circuit between the safe outputs (OS1 and OS2),
- short circuit between a safe output and the earth,
- short circuit between a safe output and the power supply voltage,
- excessive misalignment between a switch and a locked actuator,
- excess of maximum holding force with relating device breakage in the locked condition,
- excess of maximum or minimum ambient temperature admitted,
- internal fault.
Safety functions:
The safety functions are defi ned as follows:
1) The OSSD safety outputs must be de-activated when the guard is detected as
unlocked (not available on 'Mode 2' versions).
2) The OSSD safety outputs must be de-activated when RFID tag is not detected
anymore
3) The OSSD safety outputs must be de-activated when at least one safety input
channel (IS1 or IS2) is not active.
4) The device must keep the guard closed and locked when electro magnet is active
('MLM24' mode) or inactive ('SLM24' mode) and applied force is lower than the
declared F
value.
Zh
EDM function (on selected versions). External Device Monitoring is a function that
allows the device to monitor the state of external contactors. External contactors ac-
tivation/deactivation state must follow L300 switch OSSDs state within a maximum
delay (see par. 4.7)
4.2 Operation description
Note: The following operation description refers to a device with safety outputs active
on guard closed and locked (Mode 1). A device with safety outputs active on guard
closed (Mode 2) differs in the activation of the safety outputs OS1 and OS2 without
the guard locking verifi cation performed by function f4.
After being correctly installed by following the present instructions, the safety device
can be supplied with power. The sequence below shows the logic functions which
interact inside the safety device.
In the initial "POWER ON" status, function f0 of the safety device carries out an in-
ternal self-diagnosis which, if successfully completed, brings the device to the "RUN"
status. If the test is not passed due to an internal fault, the device enters the "ERROR"
status. On EDM versions, at power on, the EDM signal is checked and it must be ac-
tive within 500 ms from device startup. In case the EDM positive signal is not present,
after timeout the function f5 makes the device enter the fault state.
The "RUN" status indicates normal operation: function f1 evaluates the
IS1 and IS2 inputs, while at the same time function f2 checks that the ac-
tuator is present, and function f4 checks that the actuator has been locked.
On EDM versions, f5 additionally checks the coherence of EDM signal with state
change of the external contactor, as well as the "safe outputs off" state.
When these three conditions occur, function f3 of the device activates the OS1 and
OS2 safe outputs.
The IS1 and IS2 inputs of the device are usually activated simultaneously and there-
fore they are monitored, in terms of their status and their coherence. The device de-
activates the safe outputs and signals a condition of non-coherent inputs by means of
IN led green/orange blinking light, in the case where only one of the two inputs is de-
activated. In order to reactivate the safe outputs, both inputs must be deactivated fi rst.
During the RUN status, function f0 cyclically carries out internal tests in order to high-
light any faults. Any internal error being detected brings the device to the "ERROR"
status (PWR led with red fi xed light), which immediately deactivates the safe outputs.
The "ERROR" status can be reached even in the case of short circuits occurring be-
CODE
f2
EDM
f5
I5
f4
IN
f1
IS1
f3
IS2
f0
PWR
A1
A2
4.3 Actuator replacement
The I3 input can be used, at all times, to replace the coded actuator with a second ac-
tuator. By activating this input, the device gets ready for programming mode with the
IN led orange light blinking, it deactivates all the OS1, OS2, O3 and O4 outputs and
then releases the actuator. Keep the input active while inserting the second actua-
tor. The completed acquisition of the second actuator will be confi rmed by the IN led
being switched off. At this point, it is possible to deactivate the I3 input. The device will
automatically be brought to the restarting condition.
The fi rst actuator will no longer be recognised.
The second actuator will have to be adequately fi xed to the protection as explained
in point 3.6.
This operation must not be carried out as a repair or maintenance operation.
In the case where the device stops working correctly, replace the entire device and
not just the actuator.
tween the safe outputs (OS1 and OS2)
or a short circuit of an output towards
earth or towards the power supply. Also
in this case, function f3 deactivates the
safe outputs, and the error status is in-
dicated by the OUT led red blinking light.
The O3 signalling output is activated
ACT
during the "RUN" status when the actua-
O3
tor is inserted in the device, regardless
of the status of the IS1and IS2 inputs.
LOCK
The status of this output is displayed by
means of the ACT led.
O4
The O4 signalling output is activated dur-
ing the "RUN" status when the actuator
OUT
has been inserted and locked inside the
device, regardless of the status of the
OS1
IS1and IS2 inputs. The status of this out-
put is displayed by means of the LOCK
OS2
led.
The actuator locking and releasing
operations are controlled by means of
the I4 input.
4.4 Connection in series with safety modules
It is possible to install several devices in cascade connection up to a maximum number
of 32 units, while maintaining safety category 4 / PL e according to EN ISO 13849-1
standard and SIL CL 3 integrity level according to EN 62061 standard.
Check that the PFH
and MTTF
values of the system comprising the device cascade,
d
d
as well as the safety module, meet the SIL/PL level requirements prescribed for the
application.
+ Vcc
AC-L300-•CA
IS1
L300
OS1
AC-L300-•CA
IS1
L300
OS1
AC-L300-•CA
IS1
L300
OS1
Leuze electronic MSI
safety module
With this connection method, observe the following directions:
• Connect the inputs of the fi rst device in the chain to the power supply.
• The OS1 and OS2 safety outputs of the last device in the chain must be evaluated
by a safety module.
• Only use the device cascade with the safety modules which are compatible with the
characteristics of the OS1/OS2 safe outputs. (See paragraph 4.7 INTERFACING).
• Respect the limits on the output line stray capacity, as specifi ed in the electrical
data. (See paragraph 6.3.2 – ELECTRICAL DATA OF OS1/OS2 SAFE OUTPUTS).
• Check that the cascade response time respects the requirements of the safety func-
tion to be obtained.
• The chain response time must be calculated taking into account the response time
of each device.
4.5 Operation status: Mode 1 (safety outputs active on locked guard)
PWR
IN
OUT
ACT
LED
LED
LED
LED
O
O
O
O
green /
green /
green /
green /
alter-
alter-
alter-
alter-
nated red
nated red
nated red
nated red
nated red
O
O
green
green
green
green
green /
O
orange
blinking
green
green
green
green
green
green
green
green
green
red blink-
ing
green
O
O
red blink-
ing
O
red
O
O
green
O
green
green
green
green
green
O
O
O
O = off
= indifferent
IS2
O3
O4
OS2
IS2
O3
O4
OS2
IS2
O3
O4
OS2
PLC
LOCK
EDM
Sensor
Description
a
LED
status
O
O
OFF
Device off.
Internal tests at switching
green /
green /
POWER
alter-
alter-
ON
nated red
Device with safe outputs
green
RUN
not active.
Activation of safe inputs.
RUN
RUN
Non-coherence of safe
inputs. Recommended
action: check for
presence and/or wiring
of inputs.
Actuator in safe area.
RUN
O3 signalling output
Actuator in safe area
green
O
RUN
and locked, O3 and O4
outputs active.
green
O
RUN
Activation of the IS1 and
IS2 safe inputs.
Actuator in safe area
and locked, O3, O4 and
safety outputs active.
Error on safe outputs.
ERROR
Recommended action:
check for any short
circuits between the
outputs, outputs and
earth or outputs and
power supply, then
restart the device.
Actuator detection error.
O
O
ERROR
Check for physical integ-
rity of the device, if faulty
replace the entire device.
If undamaged, realign the
actuator with the switch
and restart the device.
Internal error.
O
O
ERROR
Recommended action:
restart the device.
If the fault persists,
replace the device.
green
RUN
EDM signal active
(external relay OFF)
green
O
RUN
EDM signal inactive
(external relay ON)
Error in EDM function
O
Red
ERROR
blinking
(a) Only available in version L300-M5xx.
on.
active.
a
a
a
Advertisement
