Page 1 c250−S C25BAYA42, C25BAYA82, C25BAYA160, C25BAYA164 Translation Operating Instructions c250−S Safety I/O−module...
Page 2 Safety I/O-module Information Safety I/O-module C25BAYA42 The operating instructions begin on page 3. Information Safety-I/O-Module C25BAYA82, C25BAYA160, C25BAYA164 The operating instructions begin on page 113. ATTENTION: There are significant deviations from the Safety I/O Module C25BAYA42 in some Technical Data. EDBC250SIO | 2.0...
Page 3: Table Of Contents
Maintenance and Servicing ..............11 2.2.9 General Notes on Installation ............12 System Description ....................14 EtherCAT® – Ethernet Control ................14 c250-S Safety System ..................14 3.2.1 Safety over EtherCAT (FSoE) .............. 15 3.2.2 Safety controller c250-S ..............15 3.2.3...
Page 4 Safety I/O-module Useful Lifetime ....................21 Technical Data ....................21 4.5.1 General Specifications ................ 21 4.5.2 Safe Digital Inputs ................23 4.5.3 Safe Digital Test Pulse Outputs ............23 4.5.4 Safe Digital Outputs ................24 Safety-related Input Ratings ................25 4.6.1 Safety-related Ratings of a Single-channel Application .....
Page 5 Safety I/O-module Electrical Installation ..................47 6.2.1 Earth .................... 47 6.2.2 Module Interconnection ..............48 6.2.3 System Power Supply ................. 48 6.2.4 Safety I/O-module Supply ..............49 6.2.5 Sensor and Actuator Power Supply ............ 50 6.2.6 Power Supply Wiring Example ............51 6.2.7 Sensor Connection ................
Page 6 Safety I/O-module Connection Examples ....................85 Safety Function with Single-channel Input ............86 Safety Function with Two-channel Input ............87 Two-hand Actuation ..................88 Mode Selector, Rotary Table ................90 Safety Mats, Connecting Blocks and Bumpers ..........92 Connecting Two Actuators with Internal GND Reference ......... 94 Connecting Two Parallel Actuators to One Safe Output ........
Page 7: Version Details
Version Details Version Details Revision 1.1.1 Manual Manual History Version Date Comments / modification 01/31/2017 Creation 04/05/2017 Release 08/02/2017 Corrections 08/29/2017 Corrections 09/27/2019 Corrections 1.1.2 Safety I/O-module (C25BAYA42) The table below summarises the module releases, manual versions, production dates and the changes to the functionality.
Page 8: Preface
We reserve the rights for errors, omissions and modifications. Pictures are similar. Information Always use the current version of the manual. Information and Tools about the Lenze Products can be found in the Internet httP://www.lenze.com ► Download 2.1.1 Limitation of Liability Specifications are for description only and are not to be understood as guaranteed product properties in a legal sense.
Page 9: Warranty
Preface 2.1.4 Warranty Warranty is subject to the provisions of the conditions of sale of Lenze or any contractual agreements between the parties. The warranty will be voided by: • improper assembly and use • repairs or inadmissible servicing •...
Page 10: Hazard And Other Warnings
Preface 2.2.4 Hazard and Other Warnings Despite the actions described in section 2.2.3 Reliability , the occurrence of faults or errors in electronic control units - even if most highly improbable - must be taken into consideration. Please pay particular attention to the additional notices which we have marked by symbols throughout this Operating Instructions.
Page 11: Safety
You are not allowed to repair Safety I/O-module. Please return the module to Lenze if defective. • Spare parts: Only use parts approved of by Lenze. Only genuine Lenze modules may be used in modular controllers. • Modular systems: always plug or unplug modules in a power-down state. You may otherwise damage the modules or (possibly not immediately recognisably!) inhibit their functionality.
Page 12: General Notes On Installation
Part 1 of European Standard EN 60204 (corresponds to VDE 0113). Information In order to safely install c250-S Safety System, please read section ► 2.2.7 Project Planning and Installation and following. Interference emission...
Page 13 Preface Location of installation Ensure that temperatures, contaminations, impact, vibration or electromagnetic interference are no impediment to the installation. Temperature Consider heat sources such as general heating of rooms, sunlight, heat accumulation in assembly rooms or control cabinets. Contamination Use suitable casings to avoid possible negative influences due to humidity, corrosive gas, liquid or conducting dust.
Page 14: System Description
Safety System The c250-S System consists of the Safety bus coupler, the Safety controller and a range of Lenze Safety I/O-modules. The Safety bus coupler converts the physical transfer technology (twisted pair) to LVDS (E-bus) and generates the system voltages required by the LVDS modules.
Page 15: Safety Over Ethercat (Fsoe)
Safety I/O-module provides connections for standard security appliances. It installs at any place of the c250-S block. Its signals are transferred by the EtherCAT bus of Safety controller c250-S and processed in a safe manner. The module outputs safely switch actuators such as contactors, signal lamps or servo converters.
Page 16: Plcdesigner Safetyplcopen Library
System Description 3.2.5 PLCDesigner SafetyPLCopen Library The PLCopen components have been defined by the PLCopen organisation, its members and external organisations specialising in all safety-related aspects. Since these are certified components, they reduce the time and costs involved in developing, verifying and testing a safety application for acceptance.
Page 17: Product Description
Safety−I/O-Modul Product Description General Description Safety-I/O module features 4 safe inputs and 2 safe outputs for distributed installation. Figure 1: Module layout shows the basic layout of c250-S Safety. Grip Ventilation slots Labelling clip Unlock button Module lock and E-bus...
Page 18: Application
The intended applications of the c250-S Safety System include safety functions of machines and all industrial automation tasks immediately associated with them. Thus, the system may only be used for applications providing a defined fail-safe state which, in case of the c250-S Safety System, is a wattless state.
Page 19: Disclaimer Of Liability
Product Description 4.2.3 Disclaimer of Liability The operator is responsible for self-reliantly running the safety-related control components in conformity with the requirements set by the competent authority. The manufacturer shall neither be held liable nor accept any warranty for damages caused by: •...
Page 20: Safe State
Product Description Safe State There are two different types of "safe states". The first one is functional and depends on the machine's application, operation and software. It is the aimed-for safe functional state at which the system works without problems. The second one is the fail-safe state and applies whenever a fault or error occurs in any of the monitored components.
Page 21: Traceability
It must therefore be taken out of service not later than one week before the end of this 20- year period (calculated as of Lenze’s production date). The production date is printed on the module as part of its serial number, see section ► 5.1.2...
Page 22 Product Description Power supply (Safety I/O-module / system power supply) Supply voltage 24 VDC -15%/+20% Overvoltage category category II to EN 61131-2:2007 Module power consumption approx. 7 mA plus load current Reverse polarity safeguard Nominal insulation voltage 500 Veff measured between Safety I/O-module supply and E-bus Susceptibility to noise zone B to EN 61131-2:2007, mounted on earthed DIN rail in earthed control cubicle...
Page 23: Safe Digital Inputs
Product Description 4.5.2 Safe Digital Inputs Safe digital inputs Quantity and type 4x single-channel or 2x two-channel, (EN 61131-2:2007, Type 3) Diagnosis cross-fault, external power supply Highest safety level (depending on Single-channel use: configuration) Cat. 2/PL d to EN ISO 13849-1:2015, SIL2 to EN 62061:2010 / IEC 61508:2010 Two-channel use:...
Page 24: Safe Digital Outputs
Product Description 4.5.4 Safe Digital Outputs Safe digital outputs Quantity and type 2x semiconductor, 24 VDC, tolerance to EN 61131-2:2007 Max. safety levels 2x cat. 3/PL e to EN ISO 13849-1:2015, 2x SIL3 to EN 62061:2010, 2x SIL3 to IEC 61508:2010 Diagnosis cross-fault, external power supply Signal indication...
Page 25: Safety-Related Input Ratings
Product Description Safety-related Input Ratings 4.6.1 Safety-related Ratings of a Single-channel Application The table below lists the safety-related ratings of a single-channel safety function that uses one input of the safe I/O module. All components involved in the safety function must be taken into account in order to assess whether the desired safety level is achieved.
Page 26: Safety-Related Ratings Of A Two-Channel Application
Product Description 4.6.2 Safety-related Ratings of a Two-channel Application The table below lists the safety-related ratings of a two-channel safety function that uses two inputs of the safe I/O module. All components involved in the safety function must be taken into account in order to assess whether the desired safety level is achieved.
Page 27: Safety-Related Output Ratings
Product Description Safety-related Output Ratings 4.7.1 Safety-related Ratings of a Single-channel Application The table below lists the safety-related ratings of a single-channel safety function that uses one output of the safe I/O module. All components involved in the safety function must be taken into account in order to assess whether the desired safety level is achieved.
Page 28: Safety-Related Ratings Of A Two-Channel Application
Product Description 4.7.2 Safety-related Ratings of a Two-channel Application The table below lists the safety-related ratings of a two-channel safety function that uses two outputs of the safe I/O module. All components involved in the safety function must be taken into account in order to assess whether the desired safety level is achieved.
Page 29: Response Time
EtherCAT bus between the Safety I/O-module and the safe PLC • safe PLC program runtime • time of output data transfer across the EtherCAT bus between the Safety controller c250-S and the Safety I/O-module • signal processing by the Safety I/O-module •...
Page 30 Product Description As a general rule, a safe response time of max. 5 ms may be assumed for the Safe I/O-module. This time ensures that the input and output signals will change and a safe state will be achieved. The configurable Input filters (adjustable between 0.3 ms and 1.5 ms) influence the maximum response time of the Safe I/O-module.
Page 31: Dimensions
Product Description Dimensions 4.10 Transport and Storage At times of transport and storage, protect Safety I/O-module against inadmissible exposure such as mechanical stress, temperature, humidity and/or aggressive atmospheres. Transport and store Safety I/O-module in its original packaging if possible. Verify that the contacts are neither soiled nor damaged when consigning the unit to stock or re-packaging it.
Page 32: Construction And Functionality
A label showing the serial number is affixed to the aluminium mount on the back of the module. The numerical code incorporates the production date and a serial number. lenze can use the numerical code to distinctly identify the model, software and hardware release date. It is a means of traceability.
Page 33: Contents Of Package
Construction and Functionality Make-up of serial number: YY MM DD NNNNN Example: The unit shown above was manufactured on 15th June 2015 and has the serial number 00039. 15 06 05 00039 five-digit number of nth unit built on that day production date as year month day The serial number is also stored in object 1018 sub-index 4 and can be retrieved by SDO Transfer ►...
Page 34: Connectors
The integrated module lock prevents the modules from coming apart under mechanical load or vibration. CAUTION Interconnecting units of different design Damage to the unit's mechanical elements  Use approved modules in a c250-S network only. EDBC250SIO | 2.0...
Page 35: Spring-Assisted Combi Plug X1
Construction and Functionality 5.3.2 Spring-assisted Combi Plug X1 The spring-assisted combi plug is located at the front of Safety I/O-module. The sensors and actuators and the module's power supply all attach to this connector. Connector X1 Function Signal Safe-In 0 Safe-In 0 TP SI0 TP Safe-In 1...
Page 36 Construction and Functionality CAUTION Safe function jeopardised by cross-faults Improper installation may cause malfunctions due to cross-faults at the contacts  By design and if installed correctly, the spring-assisted connector prevents cross-faults at the contacts . Ensure a correct and technically perfect installation because cross-faults or shorts may jeopardise the module's safe function.
Page 37: Wiring Example
Construction and Functionality 5.3.3 Wiring Example Figure 3: Example of how to wire the inputs and outputs The Safety I/O-module is intended to provide functional safety to industrial automation and to protect humans and machines in conformity with Machinery Directive 2006/42/EC. It therefore supports the connection of many different safety-related sensors.
Page 38: Safety I/O-Module Supply
Construction and Functionality Note, information Refer to section 7 Connection Examples for examples of how to connect various sensors and actuators. CAUTION Safe function jeopardised by cross-faults Improper installation may cause malfunctions due to cross-faults at the contacts  When test pulses are enabled, the Safety I/O-module will detect cross-faults between the inputs / outputs and other signal lines of the same module.
Page 39 Construction and Functionality CAUTION Risk of fire by overload or overvoltage Damage to the unit  Power to Safety I/O-module may be supplied by PELV/SELV-ready 24 VDC power supply units to EN50178 / EN60950-1 only.  The maximum voltage supplied must not exceed 33 V even in case of an error.
Page 40: Indicators And Controls
Construction and Functionality Indicators and Controls 5.4.1 LED "EtherCAT Run" LED "EtherCAT Run" indicates the state of EtherCAT communication. LED "EtherCAT Run" State Explanation / State Init Initialising, no data exchange Off/green, 1:1 Pre-Op Pre-operational, no data exchange Off/green, 5:1 Safe-Op Safe operation, inputs readable...
Page 41: Leds "Channel
Construction and Functionality 5.4.4 LEDs "Channel" The "Channel" LEDs are allocated to the module's terminals. Every group of 2 LEDs indicates the state of the associated functional unit of output and/or input. Safe digital inputs SI 0 .. SI 3 in conjunction with test pulse outputs LEDs "Channel";...
Page 42: Operating Software
Construction and Functionality Safe digital outputs SO 0 and SO 1 LEDs "Channel"; Safe digital outputs SO 0 and SO 1 Channel Function Explanation position No output signal at output 0, logical "0" Status Green Output signal at output 0, logical "1" Output SO 0 Normal operation Diagnosis...
Page 43: Installation And Operation
Installation and Operation Installation and Operation Before installing the Safety I/O-module, verify that it has been transported and stored at the ambient conditions specified in sections ► 4.10 Transport and Storage and ► 4.5 Technical Data. Module operation is subject to the service conditions specified in section ► 4.5 Technical Data.
Page 44: Mounting Position
NOTE Order of modules in multi-c250-S systems In order to ensure that the entire c250-S system works properly, arrange the c250-S modules by their specific E-bus load, placing the modules with the highest E-bus load immediately next to the head module (bus coupler or controller).
Page 45: To Snap On A Single Module
• To prevent inadmissible contamination, mount the cover of the module bus connectors on the rightmost module of the c250-S system. CAUTION Short circuit fault of module bus contacts A short of the module bus contacts may cause the communication with the safe module to fail.
Page 46: To Disconnect Two Modules
Installation and Operation 6.1.4 To Disconnect Two Modules • Push down the unlock button (see Figure 5: Uninstalling a module) of the module that you wish to disconnect from the module to the left of it. • Push both modules away from one another until they are about 1 cm apart. 6.1.5 To Take Down a Single Module •...
Page 47: Electrical Installation
Electrical Installation 6.2.1 Earth Connect the c250-S modules to earth by attaching the metal housing to functional earth. Since the functional earth connector dissipates HF currents, it is of utmost importance for the module's noise immunity. HF interference is dissipated from the electronics board to the metal housing. The metal housing therefore needs to be suitably connected to a functional earth connector.
Page 48: Module Interconnection
Safety I/O-module immediately next to the head module. Refer to section ► 6.1 Mechanical Installation for details about how to interconnect two modules. Please note that the maximum current supplied by the bus coupler limits the number of c250-S modules you may connect to a single block.
Page 49: Safety I/O-Module Supply
 To ensure that there is as little interference as possible, install a central power supply point and establish a star topology of as short wires as possible between the central point and the block of c250-S modules. Safety I/O-mdoule power supply fusing The cord must have external protection against short circuit and overload triggering at max.
Page 50: Sensor And Actuator Power Supply
Do not use earthing variants that connect earth to +24V.  Application in unearthed electrical networks, e.g. IT-Net, is only allowed after consulting Lenze.  Remember that, even in case of a fault, a maximum voltage of U max. < 33 V may be supplied to the sensors and actuators.
Page 51: Power Supply Wiring Example
Installation and Operation 6.2.6 Power Supply Wiring Example EDBC250SIO | 2.0...
Page 52: Sensor Connection
Installation and Operation 6.2.7 Sensor Connection Single-channel contact-type sensor CAUTION Maximum state change time of the application For single-channel applications (inputs and outputs), the test pulse frequency must be adapted to the application. It must be ensured that for applications in which a frequent change of state occurs, the test pulse frequency is selected at least 100 times greater than the state change time of the application.
Page 53 Installation and Operation WARNING External filter with direct connection of the module to the 24V supply In general, the use of the safe inputs with the module-based test pulse outputs or OSSD outputs from external sensors is recommended. A direct connection of the safe inputs is only allowed to a 24V supply filtered in accordance with EN 61326-3-1 (interference level for surge, burst and conducted RF interference for I / O signals with direct mains supply).
Page 54 Installation and Operation Multi-channel contact-type sensors Multi-channel switches such as mode selectors or "toggle"-type switchgear connect to several safe inputs only using test pulse output SI0 TP to provide the correct function. You must use the configuration to enable the safe inputs you use and parameter "External Inputs" to choose the mode selector function ►...
Page 55 Installation and Operation Electronic sensors, OSSD sensor The OSSD sensor provides the fault detection function when connecting an OSSD sensors. Depending on the sensor's functionality, the retrieval of signals is able to detect cross-faults between the 24 V power supply and earth as well as cross-faults between the sensor signals. Wiring of sensors providing OSSD signals Two-channel sensors delivering OSSD signals can be connected to any safe input of the Safety I/O-module.
Page 56 Installation and Operation Pressure-sensitive mat, bumper Pressure-sensitive mats and bumpers are used to safeguard the floor around a machine. The mats are placed in the danger zone and make the control unit change to its safe functional state whenever pressure is exerted on them. If so, the Safety I/O-module sends a null signal to the control unit.
Page 57 Installation and Operation NOTE Lay the feed lines of pressure-sensitive mats and bumpers together In order to avoid influences and malfunctions due to EMC effects, lay the four wires (e.g. SI0, SI0 TP, SI1, SI1 TP) together. CAUTION "Short circuit in mat" fault is not detected The Safety I/O-module fails to detect a short circuit between the mat contacts.
Page 58: Actuator Connection
Installation and Operation 6.2.8 Actuator Connection NOTE Faults at the outputs provoke a change to the safe state The outputs are protected against overload and short circuit, see section ► 4.5.4 Safe Digital Outputs for details. Overload and short circuit cause the module to change to its safe state.
Page 59 Installation and Operation NOTE Defect caused by thermal overload due to excessive inductance! Setting the inductance and the load current to higher than the specified values may thermally destroy the digital power output. Destroying the digital power output may cause the safety function to fail. Use an external free wheel circuit if the external load exceeds the specified inductance limits.
Page 60 Installation and Operation Switching of digital inputs Digital inputs of Safety I/O-module can be switched by the module's SO X+ outputs. Verify that you have enabled parameter "extGroundOutput" of the output you use. Output test pulse configuration must consider the input capacitance of the input to be actuated. See the section on the switching of capacitive loads below.
Page 61 Installation and Operation The maximum rated total current of the output module varies with the I/O module's ambient temperature. Refer to the diagram below for the resulting total current. 28,8V Ambient temperature (°C) The output current derating shown on the graph was measured under free convection in a typical installation (I/O modules on the left and right, 50% duty cycle, identical supply voltage).
Page 62: Multiple Socket Connector (Msc)
The multiple socket connector features tension springs which make wiring quick and easy. Use the unlock button to easily disconnect the wires where there is little space.Only use the MSC from the package to connect to c250-S module. MSC model: Weidmüller, OMNIMATE Signal –...
Page 63: Configuration
6.3.1 Address Setup c250-S Safety has a safe module address (FSoE slave address) which clearly identifies it in the safe communication network. The address is set manually by means of binary switches on the left side of the module.
Page 64 DIP switches. Do not exert pressure on the switching elements! NOTE Inappropriate setup actions at the Safety I/O-module Machine failure and damage to the c250-S Safety module  Turn off the I/O supply before removing the Safety I/O-module from the row of module for setup.
Page 65: Fsoe Parameters
 Only persons qualified for dealing with safety matters are allowed to add, replace and put Safety I/O Modules into operation.  Before installing, servicing or putting c250-S Safety into service, please also read the safety information in the preface of this document.
Page 66 Installation and Operation FSoE parameter Parameter Unit Range [Default] Description / note FSoE address 1 ... 65535 FSoE slave address set at DIP switch Connection ID 1 ... 65535 Unique ID of the connection to a FSoE slave WatchdogTime 20 … 65534 (FFFE [100] Watchdog time of FSoE frame Used Inputs...
Page 67 Installation and Operation FSoE parameter Parameter Unit Range [Default] Description / note Bits 6,7 Pressure-sensitive mat / bumper, bits 6 & 7 … 11 00 disabled 01 inputs 0 & 1 10 inputs 2 & 3 11 inputs 0 & 1 and inputs 2 & 3 Decim Setting No function...
Page 68 Installation and Operation FSoE parameter Parameter Unit Range [Default] Description / note usedOutputs ..11 Enables the outputs you use (0 and / or 1) Selection from a drop-down list depends on the configurator 00 outputs disabled 01 SO 0 enabled, SO 1 disabled 10 SO 0 disabled, SO 1 enabled 11 SO 0 enabled, SO 1 enabled extGroundOutputs...
Page 69 Installation and Operation FSoE parameter Parameter Unit Range [Default] Description / note Test pulse duration input 2 µs 300 ... 1500 [500] Test pulse length of input 2 Input filter of input 2 The digital test pulse output is interrupted for the set duration of every test pulse.
Page 70 Installation and Operation FSoE parameter Parameter Unit Range [Default] Description / note Test frequency input 1 0 ... 25 Test pulse frequency of input 1 Value "0" means without Test pulse Test frequency input 2 0 ... 25 Test pulse frequency of input 2 Value "0"...
Page 71: Input Parameters
Installation and Operation 6.3.3 Input Parameters Parameters "Used Inputs" and "External Inputs" CAUTION Maximum state change time of the application For single-channel applications (inputs and outputs), the test pulse frequency must be adapted to the application. It must be ensured that for applications in which a frequent change of state occurs, the test pulse frequency is selected at least 100 times greater than the state change time of the application.
Page 72: Output Parameters
Installation and Operation WARNING Non-detection of a corrupt external wiring when test pulse outputs are disabled Unsafe machine state, safety hazard  Always use the correct and enabled test pulse output to supply power to contact-type sensors.  Note: Consider protecting the cables and/or laying them separately to ensure a sufficient degree of safety.
Page 73 Installation and Operation Parameter "Test frequency output" Test pulses cyclically test the digital outputs of the Safety I/O-module. Parameter "Test frequency output" sets the switching frequency and, thus, the frequency of test pulses allocated to a digital output. Adapt this parameter to real-life conditions particularly when using inductive or capacitive loads.
Page 74: Putting Into Service
Installation and Operation Putting into Service Note, information Usage note Safety I/O-module may be used ETG-compliant configurations with conforming products. Such products include slave services, master and development systems, and functional safety products. Check the products for the "EtherCAT Conformance tested" to see if they have passed an official test for conformity. Certified products are listed in the EtherCAT Product Guide published by the EtherCAT Technology Group.
Page 75: Diagnosis
Installation and Operation Diagnosis 6.5.1 Self-test When system voltage is supplied to the Safety I/O-module, it initially runs a complete system test. Only if this system test is passed will the module be able to operate and first of all change to its "fail-safe"...
Page 76: Temperature Faults
Installation and Operation 6.5.4 Temperature Faults CAUTION Do not operate the Safety I/O-module out of the specified range Faults by component overload caused by excessive temperature  Operate the module under the ambient conditions listed in section Technical Data only while observing the derating of the outputs. The module is designed for ambient temperatures between 0 °C and max.
Page 77: Error Codes
Module is in safe state, LED EtherCAT connection Check wiring of the EtherCAT fieldbus cables "Safe Status" lights up red interrupted Check that c250-S modules interconnect Internal module fault properly Module is in safe state, LED Safety I/O-module power is low Check Safety I/O-module power "Safe Status"...
Page 78: Ethercat Link Lost
Installation and Operation Error codes (object dictionary 2007 or 2017 - Errorcode) Error Code (hex) Cause Comment Effect Corrective Action e.g. 0x0291 Cross-fault at or external power supplied to input Cross-fault to another input or test pulse output or external power supplied;...
Page 79: Wrong Fsoe Address
Installation and Operation 6.5.9 Wrong FSoE Address A wrong FSoE address causes all modules to retain their safe state. The fault is detected by the master and cannot be acknowledged. Once all FSoE addresses are correct, the safety modules will restart normal operation after one power cycle.
Page 80: Reset / Acknowledge Error
After removing the cause of the error, you can reset the Safety I/O-module by a power cycle (PowerCycle -> turn off and back on) provided that the automatic self-test is passed. Error Acknowledge: Input or output errors can be reset by the Safety controller c250-S. WARNING Reset / acknowledge may cause a dangerous state Apart from the exceptions specified, acknowledging an error will immediately restore the safe output to its normal state of operation.
Page 81: Maintenance / Servicing
 Check that none of the ventilation slots is covered. 6.7.2 Servicing c250-S Safety requires neither servicing for the specified service life nor any action if it is kept and operated at the admissible ambient conditions specified in section Technical Data. 6.7.3 Preventive Maintenance Prevent inadmissible contamination while operating and storing c250-S Safety.
Page 82: Replacing A Safety I/O-Module
CAUTION Unsafe and undefined machine state Risk of injury  Turn off the power supply of the control unit and the c250-S modules before replacing a Safety I/O-module.  After you have replaced any Safety I/O-modules, separately test the safety function before you restart the machine or system.
Page 83: Durability
Safety I/O-modules have a design life of max. 20 years after the date of manufacture (5.1.2 Serial Number ) by lenze. Take the module out of service at the end of its useful life ► 6.9.3 Taking out of Service.
Page 84: Taking Out Of Service
The process must fully comply with the specified procedure. Make sure that the modules of the c250-S Safety system you are taking out of service are provided for further use as intended. Refer to section Technical Data for detailed transport and storage requirements.
Page 85: Connection Examples
Connection Examples Connection Examples This section describes examples of applications that make use of the Safety I/O-module functions to provide a safety function. It also describes the resulting safety ratings. CAUTION Using the examples described in this section is not enough to obtain the safety function needed to reduce the risk as established in the risk assessment (SIL/Cat./PL).
Page 86: Safety Function With Single-Channel Input
Connection Examples Safety Function with Single-channel Input CAUTION Consideration of the parametrization For single-channel applications (inputs and outputs), the test pulse frequency must be adapted to the application. It must be ensured that for applications in which a frequent change of state occurs, the test pulse frequency is selected at least 100 times greater than the state change time of the application.
Page 87: Safety Function With Two-Channel Input
Connection Examples Safety Function with Two-channel Input For applications requiring single-fault safety such as EMERGENCY OFF, EMERGENCY STOP, you may connect two digital inputs to two switching devices of safe sensors and further to the safety module. A software module of the safety PLC provides the required analysis of the switching contacts.
Page 88: Two-Hand Actuation
Connection Examples Two-hand Actuation Two contact-type sensors can be connected to four safe digital inputs. A software module of the safety PLC provides the analysis required for two-hand operation. wo-hand circuit type 2 Software component " FB_TWOHAND_TYP2" supports function "two-hand circuit type 2" in conformity with European Standard EN 574:2008.
Page 89 Connection Examples Safety ratings for function two-hand operation Highest safety integrity level to EN 62061:2010 SIL3 Highest safety integrity level to IEC 61508:2010 SIL3 Category and highest performance level to EN ISO 13849- Cat. 3/PL e 1:2015 Hardware fault tolerance (HFT) of two-channel application (a fault of the application need not cause the safeguard (IEC 61508:2010/EN) to fail)
Page 90: Mode Selector, Rotary Table
Connection Examples Mode Selector, Rotary Table In "Mode Selector" mode, you can connect 2, 3 or 4 inputs to a mode selector and to test pulse output SI0 TP. Disable the test pulse outputs you do not need. Use this setup together with PLC component FB_MODE to implement a mode selector switch.
Page 91 Connection Examples NOTE Test pulse output In mode selector mode, test pulse output TP0 can be set to "0". However, this will not affect the test pulse as such since, in mode selector mode, the test pulse always runs at maximum frequency. NOTE Time discrepancy in mode selector/rotary table mode A set time discrepancy of 100 ms has been implemented for signals missing at...
Page 92: Safety Mats, Connecting Blocks And Bumpers
Connection Examples Safety Mats, Connecting Blocks and Bumpers Safety mats protect operators in danger zones. Connecting blocks and bumpers are normally used as safeguards along closing edges or against potentially hazardous moving objects. They share the same tripping method. Two parallel areas of contact are kept at a certain distance and do not make contact until the device is actuated.
Page 93 Connection Examples NOTE The supply lines of the Safety Mats and Bumpers must be laid together. For each Safety Mat or Bumper, the four conductors used (e.g. SI0, SI0 TP, SI1, SI1 TP) must be laid together in order to avoid influences and fault functions caused by EMC influences.
Page 94: Connecting Two Actuators With Internal Gnd Reference
Connection Examples Connecting Two Actuators with Internal GND Reference The wiring example illustrates how two outputs of the Safety I/O-module are used to actuate a safety function. Switch contacts K1 and K2 both affect the safety function together. Using the SOX terminals of the outputs allows the actuator to separate from the GND connection and, thus, change to its safe state when external power is supplied to an cross-...
Page 95: Connecting Two Parallel Actuators To One Safe Output
Connection Examples Connecting Two Parallel Actuators to One Safe Output CAUTION Consideration of the parametrization For single-channel applications (inputs and outputs), the test pulse frequency must be adapted to the application. It must be ensured that for applications in which a frequent change of state occurs, the test pulse frequency is selected at least 100 times greater than the state change time of the application.
Page 96 Connection Examples Note, information Consider the fault detection time! The setup needs 5 ms to detect a fault. Faults may therefore produce high impulses of this width. Use a two-channel connection of the outputs in case your application responds to these impulses. In order to monitor the relay states, you must connect the positively drive n.c.
Page 97: Appendix
Appendix Appendix Object Dictionary 8.1.1 Type 1000 Designation Value Name Type Index 1000 Object Code VARIABLE No. of Elements Data Type UNSIGNED32 Access read only PDO Mapping Value Range Default Value 1389 8.1.2 Error Register 1001 Designation Value Name Error Register Index 1001 Object Code...
Page 98: Name 1008
Access read only PDO Mapping Value Range Default Value Lenze c250-S SI4/SO2 Subindex 0 of this object contains the string length. Subindex 1 contains each of the characters. The character string has no terminating zero. 8.1.4 Hardware Version 1009 Designation...
Page 99: Identification 1018
Appendix 8.1.6 Identification 1018 Designation Value Name Identification Index 1018 Object Code RECORD No. of Elements Data Type IDENTITY BitSize Designation Value Name Number of Entries Subindex Data Type UNSIGNED8 Access read only PDO Mapping Default Value Designation Value Name Vendor ID Subindex Data Type...
Page 100: Voltage Cpu 1: 2001
Appendix Designation Value Name Serial Number Subindex Data Type UNSIGNED32 Access read only PDO Mapping Units YY MM DD NNNNN yyyyyy mmmm ddddd nnnnnnnnnnnnnnnnn 6-bit 4-bit 5-bit 17-bit Year 2014 is coded as '0'. Value Range 14 01 01 00001 (00420001 ) …...
Page 101: Cpu 1: External Temperature Sensor 2006 H
Appendix 8.1.9 CPU 1: External Temperature Sensor 2006 Designation Value Name External Temperature Sensor Index 2006 Object Code VARIABLE No. of Elements Data Type UNSIGNED16 Access Read PDO Mapping Units 0,01 °C Value Range 0 … 8000 Default Value No default Value Note, Information In order to display the temperature, only the least significant 16 bits may be evaluated.
Page 102: Errorcode Cpu 1: 2007 And Cpu 2: 2017
Appendix 8.1.10 Errorcode CPU 1: 2007 and CPU 2: 2017 Designation Value Name Errorcode Index 2007 / 2017 Object Code VARIABLE No. of Elements Data Type UNSIGNED32 Access Read PDO Mapping Default Value 00000000 The table below explains the entries in object 2007h or 2017 "Errorcode".
Page 103 Appendix Explanation 0203 UNDERFLOW_ERR Register buffer data underflow 0204 PRG_CNTRL_ERR Program sequence control error detected 0210 INIT_ERROR Initialization error 0250 ASSERT_TRUE_ERR Assertion of expression = ''true'' failed 0251 ASSERT_NOT_NULL_ERR Assertion of unequal to NULL failed 0252 ASSERT_GE_ERR Assertion of ''>='' comparison failed 0253 ASSERT_GT_ERR Assertion of ''>'' comparison failed...
Page 104 Appendix Explanation ADC_24V_LOW 24 V ADC supply voltage too low (< 24V - 10%) 1026 0402 (ErrReg: 4) ADC_24V_HIGH 24 V ADC supply voltage too high (> 24V + 15%) 1027 0403 (ErrReg: 4) ADC_5V_LOW Internal 5 V supply voltage too low (ErrReg: 1028 0404 1029...
Page 105 Appendix Explanation OUTPUT_USTP_TIMEOUT Output test pulse of common high side switch 1799 0707 timed out OUTPUT_NOPAR_USED Output is parameterized as not used and shall be 1800 0708 switched on (ErrReg: 32) BCOM_NOTREADY Communication with base board not ready / 2048 0800 operational 2049...
Page 106 Appendix Explanation FSOE_INVALID_TP_OUT_DURATION FailSafeOverEtherCAT – invalid safety output 2830 0B0E parameter test pulse duration (ErrReg: 16) FSOE_INVALID_TP_OUT_FREQUENCY FailSafeOverEtherCAT – invalid safety output test 2831 0B0F pulse frequency (ErrReg: 16) FSOE_INVALID_WATCHDOG_TIME FailSafeOverEtherCAT – invalid safety parameter 2832 0B10 watchdog time (ErrReg: 16) FSOE_INVALID_INP_EXT_SUPPLY FailSafeOverEtherCAT –...
Page 107: Errorline Cpu 1: 2008 And Cpu 2: 2018
Appendix 8.1.11 Errorline CPU 1: 2008 and CPU 2: 2018 Designation Value Name Errorline Index 2008 / 2018 Object Code VARIABLE No. of Elements Data Type UNSIGNED16 Access Read PDO Mapping Default Value 00000000 8.1.12 Errormodule CPU 1: 2009 and CPU 2: 2019 Designation Value Name...
Page 108 Appendix Explanation OBJ_MSTIMER_ID Error occurred in "CmsTimer.cpp" OBJ_BASEBOARDCOM_ID Error occurred in "CBaseBoardComm.cpp" OBJ_DIPSWITCH_ID Error occurred in "CDIPSwitch.cpp" OBJ_HELPER_ID Error occurred in "CHelper.cpp" OBJ_SYNCLINE_ID Error occurred in "CSyncSafetyPartner.cpp OBJ_TIMETABLE_ID Error occurred in "CTimeTableManager.cpp" OBJ_TESTHANDLER_ID Error occurred in "CTestHandler.cpp" OBJ_TIME_ITERATOR_ID Error occurred in "CTimeTableIterator.cpp" OBJ_SPI_ID Error occurred in "CSpi.cpp"...
Page 109: Errorclass Cpu 1: 200A
Appendix 8.1.13 Errorclass CPU 1: 200A and CPU 2: 201A Designation Value Name Errorclass Index 200A / 201A Object Code VARIABLE No. of Elements Data Type UNSIGNED8 Access Read PDO Mapping Default Value 00000000 The table below explains the entries in object 200A or 201A "Errorclass".
Page 110: Objects - For Internal Use Only
Appendix 8.1.16 Objects - For Internal Use Only The objects listed below are not intended for use by the end user. Some of them are used for configuring and their values cannot be retrieved. Object Meaning 10F1 Error Settings 1600 FSOE Rx PDO Mapping 1A00 FSOE Tx PDO Mapping...
Page 111: Standards Complied With
Appendix Standards Complied With 8.2.1 Product Standard Applied • EN 61131-2:2007 Programmable logic controllers – Part 2: Equipment requirements and tests 8.2.2 Safety Standards and Directives • IEC 61508:2010 Parts 1-7 Functional safety of electrical/electronic/programmable electronic safety-related systems • EN ISO 13849-1:2015 Safety of machinery –...
Page 112: Permits
Programming tool: PLCDesigner v3.15 or higher with integrated safety function modules 8.5.3 Spare Parts There are no spare parts for the Safety I/O-module. You are not allowed to repair Safety I/O-module. Please return the defective module to Lenze. EDBC250SIO | 2.0...
Page 113 Project Planning and Installation ............. 123 2.2.8 Maintenance and Servicing .............. 123 System Description ....................124 EtherCAT® – Ethernet Control ................. 124 c250-S Safety System ..................124 3.2.1 Safety over EtherCAT (FSoE) ............125 3.2.2 Safety controller c250-S ..............125 3.2.3...
Page 114 General Notes on Installation ................160 Mechanical Installation ................... 162 6.2.1 Mounting Position ................163 6.2.2 Order of Safety I/O-modules in c250-S Systems ......164 6.2.3 Snapping on a Single Module ............164 6.2.4 Interconnecting Two Modules ............165 6.2.5 Disconnecting Two Modules ............
Page 115 Error Codes ..................214 6.6.8 EtherCAT Link Lost................215 6.6.9 Wrong FSoE Address ................ 215 6.6.10 Wrong configuration of the Lenze Safety I/O-module ..... 216 Reset / Acknowledge Error ................216 Maintenance / Servicing .................. 218 6.8.1 General ..................218 6.8.2 Servicing ..................
Page 116 Safety−I/O-Modul 6.10 Durability ......................220 6.10.1 Repairs / Customer Service .............. 220 6.10.2 Warranty ..................220 6.10.3 Taking out of Service ................ 220 6.10.4 Disposal ..................220 Connection Examples ..................... 221 Safety Function with Single-channel Input ............222 Safety Function with Two-channel Input ............224 Two-hand Actuation ..................
Page 117 Safety−I/O-Modul Standards Complied With ................259 8.2.1 Product Standard Applied ..............259 8.2.2 Safety Standards and Directives ............259 8.2.3 EMC Standards ................. 259 Regulations and Declarations ................260 8.3.1 Mark of Conformity ................260 Approvals ......................261 Order Specifications ..................261 8.5.1 Basic Units ..................
Page 118 Version Information Version Information Version Details 1.1.1 Manual Modification History Version Date Comments / Modifications 09/27/2019 Original Version 1.0 1.1.2 Safety I/O-module The table below summarises the module releases, manual versions, production dates and the changes to the functionality. Module Release Version Manual Date...
Page 119 2.1.2 Terms of Delivery The general conditions of sales and service of Lenze Automation GmbH shall apply. 2.1.3 Copyright Microsoft®, Windows® and the Windows® logo are registered trademarks of Microsoft Corp. in the USA and other countries.
Page 120 Preface 2.1.4 Warranty Warranty is subject to the provisions of the conditions of sale of Lenze Automation GmbH or any contractual agreements between the parties. The warranty will be voided by: • improper assembly and use • repairs or inadmissible servicing •...
Page 121 Preface Please pay particular attention to the additional notices which we have marked by symbols throughout this user guide. While some of these notices make you aware of possible dangers, others are intended as a means of orientation. They are described further down below in de- scending order of importance.
Page 122 Preface 2.2.6 Safety Our products normally become part of larger systems or installations. The information below is intended to help you integrate the product into its environment without dangers to humans or material/equipment. DANGER Non-compliance with the user guide Measures for the prevention of dangerous faults or errors may be rendered inef- fective or new hazard sources created.
Page 123 This applies to section 8 (Admissible de- viations when working on parts) in particular. • You are not allowed to repair Safety I/O-module. Please return the module to Lenze Auto- mation GmbH if defective.
Page 124 PLC with IO1000 expansion modules EtherCAT® IO with c250-S expansion modules c250-S Safety System The c250-S System consists of the Safety bus coupler, the Safety controller and a range of Lenze Safety I/O-modules. The c250-S Safety System allows users to add Safety I/O-modules with safe signals to the EtherCAT control unit, making the separate wiring of safety circuits a thing of the past.
Page 125 3.2.2 Safety controller c250-S Safety controller c250-S links up the inputs and outputs of c250-S Safety System and other FSoE system devices. At the basic level, certified function blocks are graphically "wired up" to establish the system's safety programme. In case a project demands more than the technology of the certified blocks can provide, the extra instructions available at the extended level can be used to expand the safety programme.
Page 126 Safety I/O-module provides connections for standard security appliances. It installs at any place of the c250-S block. Its signals are transferred by the EtherCAT bus of a certified Safety controller c250-S and processed in a safe manner. The module outputs safely switch actuators such as contactors, signal lamps or servo converters.
Page 127 System Description 3.2.5 PLCDesigner SafetyPLCopen Library The PLCopen components have been defined by the PLCopen organisation, its members and external organisations specialising in all safety-related aspects. Since these are certified components, they reduce the time and costs involved in developing, verifying and testing a safety application for acceptance. They interlink by logical operations which behave like logical wiring and therefore minimise the time and programming efforts needed to create major parts of safety applications.
Page 128 16 safe Inputs (SDI16) C25BAYA160 • Safety-I/O-Module 16 safe Inputs (SDI16) 4 safe Outputs (SDO4) C25BAYA164 Figure 1: Module layout shows the basic layout of c250-S Safety. Grip Ventilation slots Labelling clip Unlock button Module lock and E-bus Status LEDs...
Page 129 4.2.1 Intended Use c250-S Safety System is a system of I/O modules for interconnecting the process signals in an EtherCAT network. It consists of the bus coupler and a range of I/O modules. The c250-S Safety System comprising Safety controller c250-S, Safety I/O-modules and PLCDesigner Safety Software make the c250-S Safety system fit for the functional safety of ma- chinery.
Page 130 Product Description 4.2.2 Qualified Persons The safety-related products may be used by the following persons only: • Qualified persons who know the applicable concepts of functional safety as well as the rele- vant standards and regulations. • Qualified persons who plan, design, install and put machine and system safety equipment into operation.
Page 131 Product Description 4.3.1 Safe Functional State The system is in a safe functional state when the safe process map shows that all inputs are "null" and when the outputs reflect this "null" state by being deenergised at the output. The data frame again reflects this state by "null"...
Page 132 Whereas Lenze is able to meet this requirement with regard to the production, processing, storage and transport, the purchaser is responsible for all further whereabouts of the product.
Page 133 Product Description Power supply (I/O / system power supply) Supply voltage 24 VDC -15% / +20% Overvoltage category category II to EN 61131-2 Module power consumption approx. 7 mA plus load current Reverse polarity safeguard Nominal insulation voltage 500 V measured between I/O supply and E-bus Noise immunity Zone B to EN 61131-2,...
Page 134 Product Description Note, information Install and operate the Safety IO at max. 2000 m above msl. 4.5.2 Safe Digital Inputs Safe Digital Inputs Quantity and type Safety I/O-module SDI16 SDO4 0.5A and Safety I/O-module SDI16: 16x single-channel or 8x two-channel, (EN 61131-2, Type 3) Safety I/O-module SDI8 SDO2 0.5A: 8x single-channel or 4x two-channel, (EN 61131-2, Type 3) Diagnosis...
Page 135 Product Description 4.5.4 Safe Digital Outputs Safe Digital Outputs Quantity and type Safety I/O-module SDI16 SDO4 0.5A 4x semiconductor, 0.5 A, 24 VDC, tolerance to EN 61131-2 Safety I/O-moduel SDI8 SDO2 0.5A: 2x semiconductor, 0.5 A, 24 VDC, tolerance to EN 61131-2 Safety /O-module SDI16: No outputs Max.
Page 136 Product Description Safety-related Ratings of a Single-channel Application The table below lists the safety-related ratings of a single-channel safety function that uses one input and/or output of the safe I/O module. Note: All components involved in the safety function must be taken into account in order to assess whether the desired safety level is achieved.
Page 137 Product Description Safety-related Ratings of a Two-channel Application The table below lists the safety-related ratings of a two-channel safety function that uses two inputs and/or two outputs of the safe I/O module. Note: All components involved in the safety function must be taken into account in order to assess whether the desired safety level is achieved.
Page 138 • time of input data transfer across the EtherCAT bus between the Safety I/O-module and the safe PLC • safe PLC program runtime • time of output data transfer across the EtherCAT bus between the Safety controller c250-S PLC and the Safety I/O-module • signal processing by the Safety I/O-module •...
Page 139 Product Description CAUTION To calculate the safe response time, take account of the fieldbus runtimes and the Safety PLC's cycle time. Avoid personal injury and damage to property The fieldbus runtimes and the Safety PLC's cycle time must be taken account of to rate and calculate the safe response time.
Page 140 Product Description Even if a fault occurs will the module be in a safe state before the safe response time is over. The following failure sources will provoke a change to the safe state: • Faults detected at the module inputs •...
Page 141 Product Description 4.10 Transport and Storage At times of transport and storage, protect Safety I/O-module against inadmissible exposure such as mechanical stress, temperature, humidity and/or aggressive atmospheres. Transport and store Safety I/O-module in its original packaging if possible. Verify that the contacts are neither soiled nor damaged when consigning the unit to stock or re-packaging it.
Page 142 Construction and Functionality Construction and Functionality Labelling and Identification 5.1.1 Imprinted Texts and Symbols certification mark mark of approval model name / type part number version operating conditions wiring diagram serial number on underside manufacturer / address operative earth EDBC250SIO | 2.0...
Page 143 A label showing the serial number is affixed to the aluminium mount on the back of the mod- ule. The numerical code incorporates the production date and a serial number. Lenze can use the numerical code to distinctly identify the model, software and hardware release date. It is a means of traceability.
Page 144 The integrated module lock prevents the modules from coming apart under mechanical load or vibration. CAUTION Interconnecting units of different design Damage to the unit's mechanical elements Use approved modules in a c250-S network only. EDBC250SIO | 2.0...
Page 145 Construction and Functionality 5.3.2 Combi Plug X1 Note, information Only use the connector (spring-assisted or push-in) from the package to connect a unit to the Safety I/O-module. Refer to section ► 6.3 Electrical Installation fur- ther down below for details on how to connect sensors and actuators CAUTION Safe function jeopardised by cross-faults Improper installation may cause malfunctions due to cross-faults at the contacts...
Page 146 Construction and Functionality Connector X1 Function Signal Test pulse output Safe-In 0/4 TP SI 0/4 TP Test pulse output Safe-In 1/5 TP SI 1/5 TP Test pulse output Safe-In 2/6 TP SI 2/6 TP Test pulse output Safe-In 3/7 TP SI 3/7 TP Safe input Safe-In 0 SI 0...
Page 147 Construction and Functionality 5.3.4 Safety I/O-module SDI16 The combi plug is located at the front of Safety I/O-module. The sensors and actuators and the module's power supply all attach to this connector. EDBC250SIO | 2.0...
Page 148 Construction and Functionality Connector X1 Function Signal Test pulse output Safe-In 0/4 TP SI 0/4 TP Test pulse output Safe-In 1/5 TP SI 1/5 TP Test pulse output Safe-In 2/6 TP SI 2/6 TP Test pulse output Safe-In 3/7 TP SI 3/7 TP Safe input Safe-In 0 SI 0...
Page 149 Construction and Functionality 5.3.5 Safety I/O-module SDI8 / SDO2 The spring-assisted combi plug is located at the front of Safety I/O-module. The sensors and actuators and the module's power supply all attach to this connector. Connector X1 Function Signal Test pulse output Safe-In 0/4 TP SI 0/4 TP Test pulse output Safe-In 1/5 TP SI 1/5 TP...
Page 150 Construction and Functionality 5.3.6 Wiring Example Figure 2: Example of how to wire the inputs and outputs The Safety I/O-module is intended to provide functional safety to industrial automation and to protect humans and machines in conformity with Machinery Directive 2006/42/EC. It therefore supports the connection of many different safety-related sensors.
Page 151 Construction and Functionality CAUTION Safe function jeopardised by cross-faults Improper installation may cause malfunctions due to cross-faults at the contacts When test pulses are enabled, the Safety I/O-module will detect cross-faults be- tween the inputs / outputs and other signal lines of the same module. Note that you must prevent cross-faults with the security functions of other modules.
Page 152 Red, on Error Safety I/O in fail-safe state 5.4.3 LED "Power" LED "Power" indicates the state of the power supply to Lenze’s Safety I/O-module module. LED "Power" State Explanation No power supplied to the module. Wrong power supplied to the module.
Page 153 Construction and Functionality 5.4.4 LEDs "Channel" The "Channel" LEDs are allocated to the module's terminals. Every group of 2 LEDs indicates the state of the associated functional unit of output and/or input. "Channel" LEDs of Safety I/O-module SDI16 / SDO4 LEDs "Channel";...
Page 154 Construction and Functionality LEDs "Channel"; Safe digital inputs SI 0 .. SI 7 Channel Function Explanation position No valid input signal on channel 5, logical "0" Input SI 5 state SI 5 Green 24 VDC supplied to channel 5, logical "1" No valid input signal on channel 6, logical "0"...
Page 155 Construction and Functionality LEDs "Channel"; Safe digital outputs SO 0 and SO 1 Channel Function Explanation position No output signal at output 0, logical "0" Status Green Output signal at output 0, logical "1" Output SO 0 Normal operation Diagnosis External power supply or cross-fault No output signal at output 1, logical "0"...
Page 156 Construction and Functionality "Channel" LEDs of Safety I/O-module SDI16 LEDs "Channel"; Safe digital inputs SI 0 .. SI 7 Channel Function Explanation position Normal operation SI 0 & SI 4 Inputs SI 0 & SI 4 Diagnosis External power supply or cross-fault at SI 0 or SI 4 Normal operation SI 1 &...
Page 157 Construction and Functionality LEDs "Channel"; Safe digital inputs SI 0 .. SI 7 Channel Function Explanation position No valid input signal on channel 7, logical "0" Input SI 7 state SI 7 Green 24 VDC supplied to channel 7, logical "1" Normal operation SI 8 &...
Page 158 Construction and Functionality "Channel" LEDs of Safety I/O-module SDI8 / SDO2 LEDs "Channel"; Safe digital inputs SI 0 .. SI 7 Channel Function Explanation position Normal operation Inputs SI 0 & SI 4 SI 0 & SI 4 diagnosis Cross-fault or external power to SI 0 or SI 4 Normal operation Inputs SI 1 &...
Page 159 Construction and Functionality LEDs "Channel"; Safe digital inputs SI 0 .. SI 7 Channel Function Explanation position No valid input signal on channel 5, logical "0" Input SI 5 state SI 5 Green 24 VDC supplied to channel 5, logical "1" No valid input signal on channel 6, logical "0"...
Page 160 Installation and Operation Installation and Operation Before installing the Lenze Safety I/O-modules, verify that it has been transported and stored at the ambient conditions specified in sections ► 4.10 Transport and Storage and ► 4.5 Tech- nical Data. Module operation is subject to the service conditions specified in section ►4.5 Technical Data.
Page 161 Installation and Operation Note, information Refer to IEC 61131-4, User's Guideline, for general installation instructions to be complied with to ensure that hardware interface factors and the ensuing noise voltages are limited to tolerable levels. Electrical immission safeguard To eliminate electromagnetic interference, connect the control system to the protective earth conductor.
Page 162 Mechanical Installation Environment of installation Protect Lenze Safety I/O-module against inadmissible contamination. Do not allow the units to contaminate more than specified for degree II in IEC 60664-3. Whereas an enclosure providing IP 54 protection (e.g. an appropriate control cabinet) ensures that degree of contamination II is complied with, please consider that operation under con- densing humidity is NOT allowed.
Page 163 6.2.1 Mounting Position Lenze Safety I/O-module mount on 35 mm rails to DIN EN 50022. Mount the rail horizontally and make sure that the modules' multiple socket connectors are pointing away from the wall. To ensure that enough air gets in through the ventilation slots, leave at least 20 mm to the top and 35 mm to the bottom of a module and any adjacent devices or cabinet surfaces.
Page 164 Note, information Order of modules in c250-S systems In order to ensure that the entire c250-S system works properly, arrange the c250-S modules by their specific E-bus load, placing the modules with the high- est E-bus load immediately next to the head module (bus coupler or controller).
Page 165 Correctly mounting the modules is the only way of ensuring that the system works properly. • To prevent inadmissible contamination, mount the cover of the module bus connectors on the rightmost module of the c250-S system. CAUTION Short circuit fault of module bus contacts A short of the module bus contacts may cause the communication with the safe module to fail.
Page 166  Check the earthing in conformity with VDE 0100. Connect the c250-S modules to earth by attaching the metal housing to functional earth. Since the functional earth connector dissipates HF and surge currents, it is of utmost importance for the module's noise immunity.
Page 167 Installation and Operation HF interference is dissipated from the electronics board to the metal housing. The metal hous- ing therefore needs to be suitably connected to a functional earth connector. You would nor- mally ensure that the connection between the module housing and the DIN rail as well as the connection between the DIN rail and the control cabinet conducts well and that the control cabinet is properly connected to earth.
Page 168 Safety I/O-module immediately next to the head module. Refer to section ► 6.1 General Notes on Installation for details about how to interconnect two modules. Please note that the maximum current supplied by the bus coupler limits the number of c250-S modules you may connect to a single block.
Page 169 Note, information Module response to brief voltage interruptions Lenze’s Safety I/O-module module permanently monitors the I/O power and the states of all inputs and outputs. Voltage interruptions will change the state of the outputs which, in turn, will provoke the fail-safe state because voltage inter- ruptions cannot be distinguished from other faults.
Page 170 Installation and Operation 6.3.7 Power Supply Wiring Example 6.3.8 Sensor Connection The Safety I/O-module modules accept contact-type sensors connected to the module's own test pulse outputs or external sensors equipped with OSSD outputs. Choose the type of sensor when configuring the module refer to section ► 6.4.3 Input Parameters. You may also set the parameters to completely disabling the inputs.
Page 171 Installation and Operation General safety information on using the inputs WARNING Non-detection of a corrupt external wiring when test pulse outputs are disabled Unsafe machine state, safety hazard You may use parameter External Inputs to set up the safe module inputs for ex- ternal sensors.
Page 172 Installation and Operation CAUTION Safe wiring required A cross-fault between a safe input and the associated test pulse signal will re- duce the two-channel characteristic when assessing initial faults. Example #1: A cross-fault between safe input "Safe-In 0" and the associated test pulse output "Safe In 0/4 TP"...
Page 173 Installation and Operation Allocation of safe outputs to the test pulse outputs CAUTION Do not use two inputs with the same test pulse signal for any one safety func- tion Faulty wiring will not be detected.  The inputs used for a safety function must not be supplied power from the same test pulse output.
Page 174 Installation and Operation Connector X1 Function Associated signal Safe input Safe-In 0 – pin 4 Test pulse output Safe-In 0/4 TP Safe input Safe-In 4 – pin 8 Safe input Safe-In 1 – pin 5 Test pulse output Safe-In 1/5 TP Safe input Safe-In 5 –...
Page 175 Installation and Operation Allocation of safe inputs to the test pulse outputs (Safety I/O-module SDI8 / SDO2 0.5A): Connector X1 Function Associated signal Safe input Safe-In 0 – pin 4 Test pulse output Safe-In 0/4 TP Safe input Safe-In 4 – pin 8 Safe input Safe-In 1 –...
Page 176 Installation and Operation Single-channel contact-type sensor CAUTION Setting the Test Pulse Rate In single-channel applications (inputs same as outputs), adapt the test pulse fre- quency to the application. In applications with frequent changes of state, the test pulse frequency should be at least 100x higher than the time of change of application state.
Page 177 Installation and Operation Two-channel contact-type sensors Two-channel contact-type sensors allow different inputs to be connected to the test pulse out- put of a two-channel sensor. A software module of the safe control unit provides the required analysis of the input signals. The software can be used to interconnect any of the safe inputs.
Page 178 Installation and Operation Multi-channel contact-type sensors Multi-channel switches such as mode selectors or switchgear with a "toggle" functionality con- nect to several safe inputs. Remember, though, that the correct function is provided only if test pulse outputs SI 0/4 TP and SI 8/12 TP (Safety I/O-module SDI16 SDO4 0.5A or Safety I/O- module SDI16) are used.
Page 179 Installation and Operation Note, information Use of safe inputs along with the mode selector mode Two safe inputs are allocated to every test pulse output. If a mode selector is used, you may still use inputs SI 4 and SI 12 (if available) with the associated test pulse output (SI 0/4 TP / SI8/12 TP).
Page 180 Installation and Operation Wiring of sensors providing OSSD signals Two-channel sensors delivering OSSD signals can be connected to any safe input of the Safety I/O-module. A software module of the safe control unit provides the required allocation and analysis of the input signals. Sensors with OSSD signals do not support the module's test pulses.
Page 181 If so, the I/O module sends a null signal to the control unit. Lenze’s Safety I/O-module module supports four-wire mats. Two safe digital inputs and the as- sociated test pulse output are used for one mat / bumper.
Page 182 Installation and Operation You may use up to two mat channels. Allocation of safe inputs for the bumper function Parameters Safe inputs to use Test pulse output to use "Safety Mats 0" to "Safety Mats 3" Safety Mats 0 Pressure-sensitive mat / bumper function 1 not selected none Safety Mats 0 SI 0 and SI 1...
Page 183 Installation and Operation 6.3.9 Actuator Connection Resistive loads, inductive loads and resistive loads with some capacitive fractions can be con- nected to the digital power outputs of the Safety I/O-module module. General safety information on using the outputs CAUTION A current of 200 mA (typ.) may be fed back to output SOX+ if external power is supplied and a cross-fault occurs.
Page 184 Installation and Operation CAUTION A break of the load's ground connection may generate safety-critical reverse currents Taking account of all contingent reverse currents, a break of the ground connec- tion of one or several loads at the same time may turn on the load(s). Take the following precautions if a reverse flow of 200 mA (typ.) may activate the load: ...
Page 185 Installation and Operation Figure 8: A GND potential busbar controls single faults and prevent current from flowing back into the module EDBC250SIO | 2.0...
Page 186 Installation and Operation CAUTION External power from another network may provoke a defect of the safe I/O module The outputs' test pulses can detect a cross-fault or external power supplied to the module outputs and set the module to a safe state. External power of a higher voltage supplied to the module from another network and through the outputs may cause current to flow into the module and destroy the it.
Page 187 Installation and Operation Output faults Note, information Faults at the outputs provoke a change to the fail-safe state - external fault The outputs are protected against overload and short circuit, see section ► 4.5.4 Safe Digital Outputs for details. Overload and short circuit cause the module to change to its fail-safe state - external fault.
Page 188 Installation and Operation CAUTION Wrong use of the module outputs Incorrect start of the safety function!  Do not use the module's SOX connectors to actuate the loads of a safety function. Figure 11: Do not use the SOX connectors to actuators any of the actuators. ...
Page 189 Installation and Operation Actuators with external GND reference Provided that the configuration is taken account of, actuators with external GND reference can be connected to the Safety I/O-module. Figure 12: Actuators with external GND reference CAUTION Avoid the carrying over of voltages Malfunction and module defects are likely.
Page 190 Installation and Operation Switching of inductive loads If the internal free wheel circuit is enabled, the digital power outputs of the Safety I/O-module module can be used to operate inductive loads. The graph below illustrates the maximum in- ductance of the load vs. the load current at a maximum output switching frequency of 2.5 Hz. The maximum inductance is limited to 10 H.
Page 191 Installation and Operation External free wheel circuit Note, information Take heed of the perturbation of the external free wheel circuit Depending on the actual safety function, it may or may not be affected by the external free wheel circuit which the safety assessment must take account of. An external free wheel circuit will transduce the magnetic energy when turning off the induc- tive load.
Page 192 Installation and Operation Switching of capacitive loads Switching of capacitive loads must take account of the limits below described with reference to the output current and the test pulse length. Test pulses cyclically test the module's digital outputs. If a capacitive load is connected to the digital power output, you may have to modify the test pulse duration.
Page 193 Installation and Operation 6.3.10 Derating the Modules with Reference to Ambient Temperature CAUTION Do not operate the Safety I/O-module module out of the specified range Faults by component overload Operate the module under the ambient conditions listed in section Technical Data only while observing the appropriate derating.
Page 194 / pressure. One reason for too much pulling force is the wiring being too short. Note, information Only use the MSC from the package to connect to Lenze’s Safety I/O-module. EDBC250SIO | 2.0...
Page 195 How to connect Note, information Destruction by wrong tool Damage to Lenze’s Safety I/O-module module  Use suitable tools for wiring the multiple socket connector only!  Tool: Screwdriver, 0.4 x 2.5 x 75 [mm] blade (DIN 5264-A) EDBC250SIO | 2.0...
Page 196 Installation and Operation Safety I/O-module SDI16 / SDO4 0.5A & Safety I/O-module SDI16 The spring-assisted PUSH-IN connector allows you to quickly attach the wires by direct inser- tion without any tools. Just insert the connector sleeve end of the stripped solid or fine wire in the correct opening.
Page 197 6.4.1 Address Setup c250-S Safety has a safe module address (FSoE slave address) which clearly identifies it in the safe communication network. The address is set manually by means of binary switches on the left side of the module.
Page 198 Installation and Operation WARNING Potentially hazardous failures by starting damaged modules Damages to the internal circuitry caused by wrong handling may jeopardise the safe use of the module. Do not start the module if any components inside are damaged! Replace the module instead! ATTENTION Safety function not available...
Page 199 FSoE Parameters CAUTION Improper operation of parameter setup Malfunction of Lenze’s Safety I/O-module module due to bad parameter setup  Only persons qualified for dealing with safety matters are allowed to add, replace and put Safety I/O Modules into operation.
Page 200 Installation and Operation FSoE parameter Parameter Unit Safety module Description / note Setting / range [Default] FSoE address 1 ... 255 FSoE slave address set at DIP switch Connection ID 1 ... 65535 Unique ID of the connection to a FSoE slave WatchdogTime 20 …...
Page 201 Installation and Operation FSoE parameter Parameter Unit Safety module Description / note Setting / range [Default] External Inputs SDI16 SDO4 and SDI16 Disables the generation of the module's test pulses of the inputs, or at the out- puts if the sensors generate their own test pulses (OSSD), or, optionally, for op- Input0External - Input15External eration without test pulses (OSSD).
Page 202 Installation and Operation FSoE parameter Parameter Unit Safety module Description / note Setting / range [Default] µs Input x filter time [µs] SDI16/SDO4 and SDI16 Test pulse length of input x Input 0 filter time [µs] - Input 15 Input filter of input x filter time [µs] 500 ...
Page 203 Installation and Operation FSoE parameter Parameter Unit Safety module Description / note Setting / range [Default] µs Test pulse duration output x SDI16/SDO4 Test pulse duration of output x Test pulse duration output0 - Test pulse duration output3 700 ... 1500 [1000] The digital test pulse output is interrupted for the set duration of every test pulse.
Page 204 Installation and Operation FSoE parameter Parameter Unit Safety module Description / note Setting / range [Default] Safety Mat x SDI16/SDO4 and SDI16 Safety mat modes (safety mat / bumper) Safety Mat 0 - Safety Mat 3 0 ... 1 SDI8/SDO2 Safety Mat 0 - Safety Mat 1 0 ...
Page 205 Installation and Operation 6.4.3 Input Parameters Parameters "Used Inputs" and "External Inputs" CAUTION Setting the Test Pulse Rate In single-channel applications (inputs same as outputs), adapt the test pulse fre- quency to the application. In applications with frequent changes of state, the test pulse frequency should be at least 100x higher than the time of change of application state.
Page 206 Installation and Operation Parameter "Test frequency input" If used together with the module's test pulse outputs, test pulses cyclically check the input cir- cuit connected to the Safety I/O-module for faults such as short circuits or internal defects. Pa- rameter "Test pulse duration input" sets the switching frequency and, thus, the frequency of test pulses allocated to a digital test pulse output.
Page 207 Installation and Operation 6.4.4 Output Parameters CAUTION Setting the Test Pulse Rate In single-channel applications (inputs same as outputs), adapt the test pulse fre- quency to the application. In applications with frequent changes of state, the test pulse frequency should be at least 100x higher than the time of change of application state.
Page 208 Installation and Operation WARNING Non-detection of incorrect external wiring while test pulses are disabled Unsafe machine state, safety hazard  Use the output test pulses to detect cross-faults at the outputs and other faults.  Note: Consider protecting the cables and/or laying them separately to en- sure a sufficient degree of safety.
Page 209 Note, information Usage note Lenze’s Safety I/O-module module may be used ETG-compliant configurations with conforming products. Such products include slave services, master and de- velopment systems, and functional safety products. Check the products for the "EtherCAT Conformance Tested" logo to see if they have passed an official test for conformity.
Page 210 Installation and Operation Topology of PLCDesigner devices Like in all other PLCDesigner projects, the project environment of safety projects must identi- cally reflect the hardware topology. You can either set up the topology manually or, provided that all device descriptions have been installed, start a search for devices in PLCDesigner. Right-click on the EtherCAT master and pick "Geräte suchen..."...
Page 211 6.6.1 Self-test When system voltage is supplied to the Lenze Safety I/O-module, it initially runs a complete system test. Only if this system test is passed will the module be able to operate and first of all change to its "fail-safe" state.
Page 212 Installation and Operation 6.6.2 Safety I/O-module Module Faults The cyclic system test will duly detect all faults in the module within the minimum safe failover time specified in section Technical Data in conformity with the requirements of the standards listed in the certificate. The module will change to its fail-safe state. This is indicated by LED "Safe Status"...
Page 213 EtherCAT connection interrupted Check wiring of the EtherCAT fieldbus ca- "Safe Status" lights up red bles Internal module fault Check that c250-S modules interconnect properly Module is in safe state, LED I/O power is low Check I/O power "Safe Status" lights up red Check wiring EDBC250SIO | 2.0...
Page 214 Installation and Operation 6.6.7 Error Codes Error codes (object dictionary 0x2007 or 0x2017 - Err.code) Error Code (hex) Cause Comment Effect Corrective Action 0x0001 Internal software error Internal module monitoring has detected an error. Inputs and out- puts change to the safe state, FSoE communication stops. Module in safe state Module RESET by turning the system power off and back on again –...
Page 215 Installation and Operation Note, information For a detailed description of the entry in object 2007h or 2017h "Err.code", refer to the table in section 8.1.13. 6.6.8 EtherCAT Link Lost All modules change to their fail-safe state when the EtherCAT link is lost or interrupted. Once the fault has been removed, an Error Acknowledge is enough to restart the EtherCAT bus.
Page 216 Installation and Operation 6.6.10 Wrong configuration of the Lenze Safety I/O-module By design, safety control units prevent configuration errors from provoking dangerous states. Therefore, after downloading a safety project with a bad configuration, all safety module are in a fail-safe state. The master shows the incorrect configuration.
Page 217 Installation and Operation Error Acknowledge: Input or output errors can be reset by the safety PLC. WARNING Reset / acknowledge may cause a dangerous state Apart from the exceptions specified, acknowledging an error will immediately restore the safe output to its normal state of operation. ...
Page 218 Installation and Operation Maintenance / Servicing 6.8.1 General Only qualified persons are allowed to work on c250-S Safety System. CAUTION Unsafe and undefined machine state Destruction or malfunction  Do not plug, mount, unplug or touch the connectors during operation! ...
Page 219 CAUTION Unsafe and undefined machine state Risk of injury  Turn off the power supply of the control unit and the c250-S modules before replacing a Safety I/O-module.  After you have replaced any Safety I/O-modules, separately test the safety function before you restart the machine or system.
Page 220 The process must fully comply with the specified procedure. Make sure that the modules of the c250-S Safety system you are taking out of service are pro- vided for further use as intended. Refer to section Technical Data for detailed transport and storage requirements.
Page 221 Connection Examples Connection Examples This section describes examples of applications that make use of the Safety I/O-module func- tions to provide a safety function. It also describes the resulting safety ratings. CAUTION Using the examples described in this section is not enough to obtain the safety function needed to reduce the risk as established in the risk assessment (SIL/Cat./PL).
Page 222 Connection Examples Safety Function with Single-channel Input CAUTION Setting the Test Pulse Rate In single-channel applications (inputs same as outputs), adapt the test pulse fre- quency to the application. In applications with frequent changes of state, the test pulse frequency should be at least 100x higher than the time of change of application state.
Page 223 Connection Examples Safety ratings of single-channel sensors The safety ratings listed in the table below reflect the maximum values a single-channel safety function may achieve when using a single input of the safe I/O module. They solely apply to the part of the safety function covered by the safe I/O module. All components involved in the safety function must be taken into account in order to assess whether the desired safety rat- ings are achieved.
Page 224 Connection Examples Safety Function with Two-channel Input For applications requiring single-fault safety such as EMER- GENCY OFF, EMERGENCY STOP, you may connect two digital inputs to two switching devices of safe sensors and further to the safety module. A software module of the safety PLC provides the required analysis of the switching contacts.
Page 225 Connection Examples Two-hand Actuation Two contact-type sensors can be connected to four safe digital inputs. A software module of the safety PLC provides the analysis required for two-hand operation. Two-hand circuit type 2 Software component " FB_TWOHAND_TYP2" supports function "two-hand circuit type 2" in conformity with European Standard EN 574.
Page 226 Connection Examples Safety ratings of two-channel sensors The safety ratings listed in the table below reflect the maximum values a two-channel safety function may achieve when using four inputs of the safe I/O module. They solely apply to the part of the safety function covered by the safe I/O module. All components involved in the safety function must be taken into account in order to assess whether the desired safety rat- ings are achieved.
Page 227 Connection Examples Mode Selector, Rotary Table In mode selector mode "Mode Selector", you may connect 2to 8 inputs of test pulse output SI0/4 TP to a mode selector (test pulse output SI8/12 TP for Rotary Switch 1). Disable the test pulse outputs you do not need.
Page 228 Connection Examples Safety ratings of mode selector applications in conjunction with certified switches/sensors of a matching safety rat- Highest safety integrity level to EN 62061:2010 SIL3 Highest safety integrity level to IEC 61508:2010 SIL3 Category and highest performance level to EN ISO 13849-1:2015 Cat.
Page 229 Connection Examples Safety Mats, Connecting Blocks and Bumpers Safety mats protect operators in danger zones. Connecting blocks and bumpers are normally used as safeguards along closing edges or against potentially hazardous moving objects. They share the same tripping method. Two parallel areas of contact are kept at a certain distance and do not make contact until the device is actuated.
Page 230 Connection Examples Safety ratings of applications using two outputs for a safety function Highest safety integrity level to EN 62061:2010 SIL3 Highest safety integrity level to IEC 61508:2010 SIL3 Category and highest performance level to EN ISO 13849- Cat. 4/PL e 1:2015 Hardware fault tolerance (HFT) in two-channel application (a fault of the application cannot cause the safeguard to...
Page 231 Connection Examples Connecting Two Actuators with Internal GND Reference The wiring example illustrates how two outputs of the safe I/O module are used to actuate a safety function. Switch contacts K1 and K2 both affect the safety function together. Using the SOX terminals of the outputs allows the actuator to separate from the GND con- nection and, thus, change to its safe state when external power is supplied to an cross-...
Page 232 Connection Examples Connecting Two Parallel Actuators to One Safe Output CAUTION Setting the Test Pulse Rate In single-channel applications (inputs same as outputs), adapt the test pulse fre- quency to the application. In applications with frequent changes of state, the test pulse frequency should be at least 100x higher than the time of change of application state.
Page 233 Connection Examples The wiring example illustrates how one output of the safe I/O module is used to actuate a safety function. Use a two-channel actuator to achieve the safety integrity levels of the table below. Please read the sections below to better understand the wiring examples. CAUTION Fault exclusion required - schematic a) Take precautions against short circuits or cross-faults on the lead connecting the...
Page 234 Connection Examples In order to monitor the relay states, you must connect the positively drive n.c. contacts of K1 and K2 to safe digital inputs. Set the safe PLC to analyse the values returned and, thus, the states of the switching devices. Best safety ratings of applications using one output for a safety function Highest safety integrity level to EN 62061:2010 SIL3...
Page 235 Appendix Appendix Object Dictionary 8.1.1 Device Type 1000 Designation Value Name Device Type Index 1000 Object Code VARIABLE No. of Elements Data Type UNSIGNED32 Access Read only PDO Mapping Value Range 8.1.2 Error Register 1001 Designation Value Name Error Register Index 1001 Object Code...
Page 236 Object Code VARIABLE No. of Elements Data Type STRING (27) - STRING (29) BitSize 216 - 232 Access Read only PDO Mapping Value Range Default Value Lenze Safety I/O 164 Lenze Safety I/O 82 Lenze Safety I/O 160 EDBC250SIO | 2.0...
Page 237 Appendix 8.1.5 Hardware Version 1009 Designation Value Name Hardware Version Index 1009 Object Code VARIABLE No. of Elements Data Type STRING (4) BitSize Access Read only PDO Mapping Value Range Default Value 312E3130 (1.10) 8.1.6 Software Version 100A Designation Value Name Software Version Index...
Page 238 Appendix Designation Value Name Number of Entries Subindex Data Type UNSIGNED8 Access Read only PDO Mapping Default Value >4< Designation Value Name Vendor ID Subindex Data Type UNSIGNED32 Access Read only PDO Mapping Default Value Designation Value Name Product Code Subindex Data Type UNSIGNED32...
Page 239 Appendix Designation Value Name Serial Number Subindex Data Type UNSIGNED32 Access Read only PDO Mapping Units YY MM DD NNNNN yyyyyy mmmm ddddd nnnnnnnnnnnnnnnnn 6-bit 4-bit 5-bit 17-bit Year 2014 is coded as '0'. Value Range 14 01 01 00001 (0x00420001) … 77 12 31 99999 (0xFF3F869F) Example 16052300001 ...
Page 240 Appendix 8.1.10 Supply 3.3 V voltage 2003 for CPU1 and 2013 for CPU2 Designation Value Name Supply 3.3V Voltage Index 2003 / 2013 Object Code VARIABLE No. of Elements Data Type UNSIGNED16 Access Read only PDO Mapping Units Value Range 0 …...
Page 241 Appendix Note, information The temperature value is not intended for safety-related evaluation. Do not use in safety functions! 8.1.13 Errorcode 2007 for CPU1 and 2017 for CPU2 Designation Value Name Errorcode Index 2007 / 2017 Object Code VARIABLE No. of Elements Data Type UNSIGNED16 Access...
Page 242 Appendix Explanation 0x02A0 MRAM_NOT_INITIALIZED MRAM communication is not initialized. 0x02A1 MRAM_READ_ERR MRAM read error. 0x02A2 MRAM_WRITE_ERR MRAM write error. 0x02A3 MRAM_INDEX_OUT_OF_RANGE MRAM entry index out of valid range. 0x02A4 MRAM_CORRUPT_PAGE_SIZE MRAM page size invalid. 0x02A5 MRAM_CRC_ERR MRAM data CRC check failed. 0x02A6 MRAM_MAGICNUMBER_ERR MRAM magic number not recognized.
Page 243 Appendix Explanation 1508 0x05E4 RESET_POWER_ON_DOWN Reset due to power up or down. 1509 0x05E5 RESET_NMI Reset due to non maskable interrupt. 1510 0x05E6 RESET_BROWNOUT Reset due to brown out detection. 1511 0x05E7 RESET_NO_REASON Reset due to unknown reason. 1537 0x0601 INPUT_TIMEOUT Input test pulse timed out.
Page 244 Appendix Explanation 1597 0x063D INP_TP_CROSSTALK Input 13 test pulse cross talk detected. 1598 0x063E INP_TP_CROSSTALK Input 14 test pulse cross talk detected. 1599 0x063F INP_TP_CROSSTALK Input 15 test pulse cross talk detected. 1600 0x0640 INP_TP_NOT_RECOGNIZED Safety input 0/4 test pulse not detected (TPO 0). 1601 0x0641 INP_TP_NOT_RECOGNIZED...
Page 245 Appendix Explanation Invalid number of test pulses detected for safety se- 1630 0x065E INP_TP_INV_CNT_FOR_SEL lector switch (Input 14). Invalid number of test pulses detected for safety se- 1631 0x065F INP_TP_INV_CNT_FOR_SEL lector switch (Input 15). 1632 0x0660 INP_INTTP_NOT_RECOGNIZED Internal input 0 test pulse not detected. 1633 0x0661 INP_INTTP_NOT_RECOGNIZED...
Page 246 Appendix Explanation 1660 0x067C INP_INTTP_CROSSTALK Internal input 12 test pulse cross talk detected. 1661 0x067D INP_INTTP_CROSSTALK Internal input 13 test pulse cross talk detected. 1662 0x067E INP_INTTP_CROSSTALK Internal input 14 test pulse cross talk detected. 1663 0x067F INP_INTTP_CROSSTALK Internal input 15 test pulse cross talk detected. 1664 0x0680 SWINP_TP_CROSSTALK...
Page 247 Appendix Explanation Output 1 detected overload signal from output 1857 0x0741 OUT_THERMOERR driver chip. Output 2 detected overload signal from output 1858 0x0742 OUT_THERMOERR driver chip. Output 3 detected overload signal from output 1859 0x0743 OUT_THERMOERR driver chip. 1872 0x0750 OUT_LSTP_TIMEOUT Output 0 test pulse of low side switch timed out.
Page 248 Appendix Explanation Inconsistent time values for test pulses of inputs of 2051 0x0803 MAT_PARA_DURATION mat 3. 2064 0x0810 MAT_TP_DIFF Inconsistent test pulses stay present for mat 0. 2065 0x0811 MAT_TP_DIFF Inconsistent test pulses stay present for mat 1. 2066 0x0812 MAT_TP_DIFF Inconsistent test pulses stay present for mat 2.
Page 249 Appendix Explanation 3073 0x0C01 TH_TIMEOUT Internal test sequence timeout 3088 0x0C10 MC1_ID_INVALID Identification CPU1 failed 3089 0x0C11 MC2_ID_INVALID Identification CPU 2 failed 3090 0x0C12 MC3_ID_INVALID Identification CPU 3 failed 3104 0x0C20 CLK_ERROR Partner clock frequency is out of valid range 3105 0x0C21 CLK_PARTNER_LOW...
Page 250 Appendix Explanation 3922 0x0F52 FSOE_UNKNOWN_CMD (ErrReg 16) FSoE frame contains invalid connection id (ErrReg 3923 0x0F53 FSOE_INVALID_CONNID 3924 0x0F54 FSOE_INVALID_CRC FSoE frame contains invalid CRC (ErrReg 16) 3925 0x0F55 FSOE_WD_EXPIRED FSoE watchdog timer expired (ErrReg 16) FSoE address set on DIP and as safe parameter are 3926 0x0F56 FSOE_INVALID_ADDRESS...
Page 251 Appendix 8.1.14 Errorposition 2008 for CPU1 and 2018 for CPU2 Designation Value Name Errorposition Index 2008 / 2018 Object Code VARIABLE No. of Elements Data Type UNSIGNED16 Access Read only PDO Mapping Default Value 0000h 8.1.15 Errormodule 2009 for CPU1 and 2019 for CPU2 Designation Value...
Page 252 Appendix Explanation OBJ_SYNCLINE_ID Error in Module "CSyncSafetyPartner.cpp" OBJ_TIMETABLE_ID Error in Module "CTimeTableManager.cpp" OBJ_TESTHANDLER_ID Error in Module "CTestHandler.cpp" OBJ_CLOCKTEST_ID Error in Module "CClockTest.cpp" OBJ_TEMPSENSOR_ID Error in Module "CTempSensor.cpp" OBJ_TIME_ITERATOR_ID Error in Module "CTimeTableIterator.cpp" OBJ_INTHANDLER_ID Error in Module "InterruptHandler.cpp" OBJ_FOREGROUND_ID Error in Module "CForeGround.cpp" OBJ_BACKGROUND_ID Error in Module "CBackGround.cpp"...
Page 253 Appendix Explanation OBJ_INPUTMNGR_ID Error in Module " CInputMngr.cpp (Safe-In 2)" OBJ_INPUTMNGR_ID Error in Module " CInputMngr.cpp (Safe-In 3)" OBJ_INPUTMNGR_ID Error in Module " CInputMngr.cpp (Safe-In 4)" OBJ_INPUTMNGR_ID Error in Module " CInputMngr.cpp (Safe-In 5)" OBJ_INPUTMNGR_ID Error in Module " CInputMngr.cpp (Safe-In 6)" OBJ_INPUTMNGR_ID Error in Module "...
Page 254 Appendix 8.1.16 Errorclass 200A for CPU1 and 201A for CPU2 Designation Value Name Errorclass CPU 1/2 Index 200A / 201A Object Code VARIABLE No. of Elements Data Type UNSIGNED8 Access Read only PDO Mapping Default Value The table below explains the entries in object 200A or 201A "Err.class".
Page 255 Appendix 8.1.18 AD Converter Reference Voltage 2010 Designation Value Name AD Converter Reference Voltage Index 2010 Object Code VARIABLE No. of Elements Data Type UNSIGNED16 Access Read only PDO Mapping Unit Default Value No default value 8.1.19 EtherCAT Read Errors 0x2020 Designation Value Name...
Page 256 Appendix 8.1.21 Safe State 0x2055 Designation Value Name Safe State Index 2055 Object Code VARIABLE No. of Elements Data Type UNSIGNED8 Access Read only PDO Mapping Value 0xF0 (functional operating) – 0x55 (safe state) Default Value No default value 8.1.22 Fail Safe Command 0x250E Designation Value...
Page 257 Appendix Designation Value Name Tx FSoE Command Subindex Data Type UNSIGNED8 Access Read only PDO Mapping Tx PDO Value Undefined Fail Safe Data Reset Data Session Parameter Connection Default Value No default value EDBC250SIO | 2.0...
Page 258 Appendix 8.1.23 Objects - For internal use only The following objects are objects whose use is not intended by the end user. They are partly used for configuration purposes and are not readable. Objekt Bedeutung 0x1010h Store Parameters 0x1011h Restore default parameters 0x10F0h Backup parameter handling 0x10F1h...
Page 259 Appendix Objekt Bedeutung 0x8000h Input Parameter 0x8001h Output Parameter 0x8002h Test pulse duration 0x8003h Test frequency 0x9001h FSOE Communication Parameter 0xF980h Safe Address Standards Complied With 8.2.1 Product Standard Applied • EN 61131-2:2008-04 Programmable logic controllers – Part 2: Equipment requirements and tests 8.2.2 Safety Standards and Directives •...
Page 260 Appendix Increased EMC immunity levels for safety-related applications: For the testing of the safety I / O modules, the following three standards for safety-related ap- plications were taken into account. The interfaces were tested with the highest test levels from the standards. •...
Page 261 Appendix Approvals Lenze’s Safety I/O-module module has been granted the following permits: EC Type-Examination by Notified TUV Rheinland, Notified Body for Machinery, NB 0035 Body according Annex IX of Di- EC Type-Examination Certificate rective 2006/42/EG Reg.-Nr./No.: 01/205/5581.00/20 File Number E343358 Conformance and interoperability tests passed at an EtherCAT Test Center (ETC).
Page 262 PLCDesigner v3.15 SP5 or higher with integrated safety function modules 8.5.3 Spare Parts There are no spare parts for the Safety I/O-module module. You are not allowed to repair Lenze’s Safety I/O-module module. Please return the defective module to Lenze Automation GmbH. EDBC250SIO | 2.0...
Page 264 © 08/2019 | EDBC250SIO | .[.I | 2.0 | TD15 Lenze Automation GmbH Postfach 10 13 52, 31763 Hameln Hans−Lenze−Str. 1, 31855 Aerzen GERMANY HR Hannover B 205381 Ü +49 5154 82−0 Ø +49 5154 82−2800 Ù sales.de@lenze.com Ú www.lenze.com Û...

This manual is also suitable for:

C25baya42 C25baya82 C25baya160 C25baya164

Lenze c250-S Operating Instructions Manual

1 Version Details

2 Preface

3 System Description

4 Product Description

5 Construction and Functionality

6 Installation and Operation

7 Connection Examples

8 Appendix

Quick Links

Need help?

Questions and answers

Related Manuals for Lenze c250-S

Summary of Contents for Lenze c250-S

This manual is also suitable for:

Table of Contents