Table of Contents
Advertisement
Chapter 7
Monitor Status and Handle Faults
64
Figure 19 - Data Type Dialog Box
The first two bits of the CONNECTION_STATUS data type contain the
RunMode and ConnectionFaulted status bits of a device.
combinations of the RunMode and ConnectionFaulted states.
Table 3 - Safety Connection Status
RunMode
ConnectionFaulted
Status
Status
1 = Run
0 = Valid
0 = Idle
0 = Valid
0 = Idle
1 = Faulted
1
1
ATTENTION: Safety I/O connections and produced/consumed connections
cannot be automatically configured to fault the controller if a connection is
lost and the system transitions to the safe state. Therefore, if you must detect
a device fault to be sure that the system maintains the required SIL level, you
must monitor the Safety I/O CONNECTION_STATUS bits and initiate the fault
via program logic.
Input and Output Diagnostics
Guard I/O modules provide pulse test and monitoring capabilities. If the
module detects a failure, it sets the offending input or output to its safe state
and reports the failure to the controller. The failure indication is made via
input or output status and is maintained for a configurable amount of time
after the failure is repaired.
IMPORTANT You are responsible for providing application logic to latch these I/O failures
and to verify that the system restarts properly.
Rockwell Automation Publication 1756-RM012B-EN-P - April 2018
Table 3
Safety Connection Operation
The producing device is actively controlling the data. The producing
device is in Run mode.
The connection is active and the producing device is in the Idle state.
The safety data is reset to safe state.
The safety connection is faulted. The state of the producing device is
unknown. The safety data is reset to safe state.
Invalid state.
describes the
Hide quick links:
Advertisement
Table of Contents
