Advertisement
5.3 Operation description
Note: The following operation description refers to a device with safety outputs active
when the protection is closed and locked (mode 1).
A device with safety outputs activated by closing the protective device (mode 2) differs
from the above operating mode for the fact that the safety outputs OS1 and OS2 are
activated without the f4 function verifying the protective device locking.
Mode 3 differs, in that OS1 is activated when the protective device is closed and
locked, and OS2 with protective device closed.
After being correctly installed by following the present instructions, the safety device
can be supplied with power. The block diagram below shows 7 logical, linked sub-func-
tions of the safety device.
In the initial "POWER ON" status, function f0 of the safety device carries out an inter-
nal self-diagnosis which, if successfully completed, brings the device to the "RUN"
operating state. If the test is not passed due to an internal fault, the device enters the
"ERROR" status.
On EDM versions, at power on, the EDM signal is checked and it must be active within
a maximum delay time from device startup. If the EDM signal is not present after this
time span has elapsed, function f5 puts the device in the "ERROR" operating state. If
present, the EDM function must be used.
CODE
IE1
f2
f6
IE2
EDM
f4
f5
I5
IN
f1
f3
IS1
IS2
f0
PWR
A1
A2
deactivated. In order to reactivate the safety outputs, both inputs have to be deacti-
vated and subsequently reactivated.
The f6 function verifi es the coherence of the activation/deactivation signals for the
actuator lock command.
During the RUN state, function f0 cyclically carries out internal tests in order to detect
any faults. Any internal error being detected brings the device to the "ERROR" state
(PWR LED with red fi xed light), which immediately deactivates the safety outputs.
The "ERROR" state can be reached even in the case of short circuits occurring
between the safety outputs (OS1 and OS2) or a short circuit of an output towards
earth or towards the power supply. Also in this case, function f3 deactivates the safety
outputs, and the error status is indicated by the OUT LED red fl ashing light.
The O3 signal output is activated during the "RUN" state when the actuator is inserted
in the device, regardless of the state of the IS1and IS2 inputs. The state of this output
is displayed by means of the ACT LED.
The O4 signal output is activated during the "RUN" state when the actuator has been
inserted and locked inside the device, regardless of the state of the IS1and IS2 inputs.
The state of this output is displayed by means of the LOCK LED.
The actuator lock or unlock command is transmitted to the device through the IE1
and IE2 inputs.
5.4 Actuator replacement
Attention: The machine manufacturer must restrict access to the sensor pro-
gramming mode to authorized personnel only.
The I3 input can be used, at all times, to replace the coded actuator with a second
actuator. By activating this input, the device gets ready for programming mode with the
IN LED orange light fl ashing, it deactivates all the OS1, OS2, O3 and O4 outputs and
then releases the actuator. Keep the input active while inserting the second actuator.
Acquisition of the second actuator is confi rmed by the IN LED switching off and by
four fl ashes of the ACT LED. At this point, it is possible to deactivate the I3 input. The
device will automatically be brought to the restart state and the fi rst actuator is no
longer detected.
The second actuator will have to be adequately fi xed to the protective device as
explained in section MOUNTING INSTRUCTIONS.
This operation must not be carried out as a repair or maintenance operation. In the
case where the device stops working correctly, replace the entire device and not just
the actuator.
5.5 Reset input
The following error states due to a device external failure can be reset using the I3
input:
- a short circuit or overload of safety outputs (OS1 and OS2),
- short circuit between a safety output and the supply voltage,
- excessive misalignment between a safety device and a locked actuator.
5.6 Series connection with safety modules
It is possible to install several devices in cascade connection up to a maximum number
The "RUN" operating state indicates nor-
mal operation: Function f1 evaluates the
state of the IS1 and IS2 inputs, while at the
same time function f2 checks that the actu-
ator is present, and function f4 checks that
the actuator has been locked.
ACT
In the EDM versions the f5 function verifi es
O3
the coherence of the EDM signal during
operating state changes and when the
LOCK
safety outputs are off.When these three
conditions occur, function f3 of the device
O4
activates the OS1 and OS2 safety outputs.
OUT
The IS1 and IS2 inputs of the device are
usually actuated simultaneously and there-
OS1
fore they are monitored, in terms of their
OS2
state and their coherence. The device
deactivates the safety outputs and signals
the state of non-coherent inputs by means
of IN LED green/orange fl ashing, in the
case where only one of the two inputs is
of 32 units, while maintaining safety category 4 / PL e according to EN ISO 13849-1
and SIL CL 3 integrity level according to EN 62061.
Check that the PFH
and MTTF
d
tion of devices and the whole safety circuit meet the SIL/PL requirements prescribed
for the application.
Application example with single-channel
locking control function
+ Vcc
AC-L250-xCA
IS1
IS2
L250
OS1
OS2
AC-L250-xCA
IS1
IS2
L250
OS1
OS2
AC-L250-xCA
IS1
IS2
L250
OS1
OS2
Ixx
Ixx
MSI 400
Device in mode 1
Locking device detection function (protective
device interlocked): 2 channels / category 4 /
up to SIL 3 / PL e
Locking control function:
1 channel / category 2 / up to SIL 2 / PL d
Device in mode 2
Interlock detection function (protective device
closed): 2 channels / category 4 / up to SIL 3
/ PL e
Locking control function:
1 channel / category 2 / up to SIL 2 / PL d
When connecting the switches in series as described above, observe the following:
- Connect the inputs of the fi rst device in the chain to the power supply.
- The OS1 and OS2 safety outputs of the last device in the chain must be connected
to the safety circuit of the machine.
- Where a safety module is used, check that the properties of OS1/OS2 safety out-
puts are compatible with the safety module inputs (see section INTERFACING).
- Observe the limits of the output cable stray capacitance, as specifi ed in the electri-
cal data (see section TECHNICAL DATA).
- Check that the cascade response time fulfi lls the requirements of the safety func-
tion to be obtained.
- The chain response time must be calculated taking into account the response time
of each device.
- When using Y-cables for series connection, special attention must be paid to the
fl owing currents, cable cross-sections and cable lengths in order to ensure that the
supply voltage of the components at the end of the series connection is within the
specifi ed electrical limits of the L250 during operation.
4
values of the system comprising the series connec-
d
Application example with two-channel lock-
ing control function
AC-L250-xCA
IS1
IE1
L250
IE2
OS1
AC-L250-xCA
IS1
IE1
L250
IE2
OS1
AC-L250-xCA
IS1
IE1
L250
IE2
OS1
Ixx
Ox
Device in mode 1
Locking device detection function (protective
device interlocked): 2 channels / category 4 /
up to SIL 3 / PL e
Locking control function:
2 channels / category 4 / up to SIL 3 / PL e
Device in mode 2
Interlock detection function (protective device
closed): 2 channels / category 4 / up to SIL 3
/ PL e
Locking control function:
2 channels / category 4 / up to SIL 3 / PL e
+ Vcc
IS2
IE1
IE2
OS2
IS2
IE1
IE2
OS2
IS2
IE1
IE2
OS2
Ixx
OS1
OS2
MSI 400
Advertisement
