Chapter 37 Functions - Mitsubishi Electric MELSEC iQ-R-R00CPU User Manual

37
FUNCTIONS
This chapter describes the redundant functions and safety functions that can be used with the SIL2 Process CPU and the
functions that are different (modified or restricted) from those described in Part 2. Functions not described in this chapter are
the same as those described in Part 2.
For the availability of SIL2 Process CPU functions, refer to the following.
 MELSEC iQ-R CPU Module User's Manual (Startup)
Function
Redundant System switching
function
Tracking transfer
Memory copy from control
system to standby system
System consistency check
Program execution in both
systems
Redundant function module
communication test
Safety function Switching safety operation
mode
Safety diagnostic function
Safety data identify check
Safety communication function
Description
Switches the systems between the control system and the standby system to
continue operation of the redundant system when a failure or an error occurs
in the control system. The systems can also be switched manually by a user
for debugging or maintenance.
Transfers the control data from the control system to the standby system and
maintains the consistency of the data in the two systems to continue
operation of the redundant system when a failure or an error occurs in the
control system.
Transfers data such as parameters and programs in the CPU module of the
control system to the CPU module of the standby system to maintain the
consistency of the memory in the two CPU modules.
Checks whether the system configurations and files in the CPU modules are
the same between the control system and the standby system.
Detects an error in the external device or network of the systems (control
system and standby system) by executing a program that diagnoses external
devices or networks of both systems.
Checks a redundant function module for an error when its communications
are unstable.
There are two safety operation modes: TEST MODE and SAFETY MODE.
One mode is for changing the safety program or safety parameters, and the
other is for operating the system as a safety system.
Self-diagnostic function of the SIL2 Process CPU
Checks if the project data created using the engineering tool and the data in
the SIL2 Process CPU are the same, and confirms that the program executed
in SAFETY MODE is the one written by the user.
Communicates data between the SIL2 Process CPU of the control system
and modules supporting safety functions using safety protocols. Safety
communication processing is not performed in the SIL2 Process CPU of the
standby system.
Reference
Page 609 System
Switching
Page 622 Tracking
Transfer
37
Page 637 Memory Copy
from Control System to
Standby System
Page 642 System
Consistency Check
Page 647 Program
Execution in Both
Systems
Page 654 Redundant
Function Module
Communication Test
Page 655 Switching
Safety Operation Mode
Page 658 Safety
Diagnostic Function
Page 658 Safety Data
Identify Check
Page 659 Safety
Communication
Function
37 FUNCTIONS
605