Summary of Contents for Rockwell Automation Allen-Bradley ControlLogix SIL 2
Page 1
Reference Manual Original Instructions Using ControlLogix SIL 2 with 1715 I/O Catalog Numbers ControlLogix 5570, 1715-AENTR, 1715-IB16D, 1715-IF16, 1715-OB8DE, 1715-OF8I...
Page 2
If this equipment is used in a manner not specified by the manufacturer, the protection provided by the equipment may be impaired. In no event will Rockwell Automation, Inc. be responsible or liable for indirect or consequential damages resulting from the use or application of this equipment.
To order paper copies of technical documentation, contact your local Allen-Bradley distributor or Rockwell Automation sales representative. Rockwell Automation is not responsible or liable for indirect or consequential Disclaimer damage that results from the use or application of this equipment. The examples that are given in this manual are included solely for illustrative purposes.
Note if you are using 1715 IO instead of 1756 or 1794 IO then the information on those IO platforms in the information in the Safety Reference Manual does not apply. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
– Use of a 1756-EN2TR or 1756-EN2TRXT is required to achieve SIL 2 in the application. EN2TR is the only communication module Rockwell Automation will continue to certify for ControlLogix SIL 2 safety functions in the future Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
That allows the secondary chassis to take control quickly. For more information on switchover times, see ControlLogix Redundancy User Manual (1756-UM535.) Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 9
Primary with synchronizing secondary 16#F Primary looking for update 16#10 Primary locked for update If the system is running normally, the 1756-RM modules show the following status codes. Figure 1 - Primary Controller Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 10
You can use produced Unicast connections that remote controllers consume. • Local I/O is not supported in either of the Controller chassis The redundant controller application cannot contain these tasks: • Event tasks • Inhibited tasks Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 11
• If the 1756-PA75 or 1756-PB75 (non-redundant) power supply is used with a ControlLogix 5560 Series B or ControlLogix 5570 Series B controller, the Series B version of the power supply must be used (1756- PA75/B or 1756-PB75/B) Controllers Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 12
• Other EtherNet/IP communication modules (1756-ENBT, 1756-EN2T, 1756-EN2TXT) can be used for non-safety loop communication • 1715 IO only communicates via EtherNet/IP so no ControlNet modules are listed here. Figure 3 - Redundancy System Configuration Example Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Making any edit always involves following your own MOC (Management of Change) procedures. There must be a validation before putting the changed code into service. Online edits are the most risky method of doing this and are not recommended. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
• SIL 2 high demand – up to 10 demands per year • SIL 2 fail-safe applications • SIL 2 with fault tolerant inputs • SIL 2 with fault tolerant outputs • SIL 2 with fault tolerant inputs/outputs Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
External Access controls access from external applications like HMIs. It can have values of read/write, read-only, or none. Set all SIL 2 safety-related tags to read-only. The Constant attribute is either on or off. When enabled, it helps Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
(typically the OFF state) if there is a major fault occurring on the controller. See Chapter 3 - Using the1715 I/O. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Verify the download of the application program for proper operation. A typical Verify Download technique is to upload the completed program file and perform a compare of that file against what is stored in the programming terminal. (Offline and uploaded program) Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
To avoid safety-related nuisance trips, use good communication practices to limit the impact of communication processing on the controller. Do not set read rates to the fastest rate possible. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
The remainder of the steps need to follow IEC 61511 standard on process safety, section 11.7.1 Operator Interface requirements. IMPORTANT The High-Speed Jog function is not allowed and must not be used in the project. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 20
Chapter 2 Features of the ControlLogix SIL 2 System Notes: Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
• Add-on Profile for the adapter, version 2.01.014 or later • Add-on Profile for the I/O modules, version 3.01.014 or later • Add-On Instructions when using a ControlLogix system, version 2.001 or later • A 1756-L7 ControlLogix controller Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 22
Chapter 3 Using the 1715 I/O Figure 6 - Typical Duplex Configuration IMPORTANT For duplex configurations, a SIL 2 fault-tolerant architecture has dual-input, dual adapter, and dual output modules. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
The I/O base units can be connected directly to the adapter base unit and other I/O base units, or through expansion cables. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Figure 7 - Typical 1715 I/O System with Dual Adapters and a Mix of Simplex and Duplex I/O Modules IMPORTANT The I/O base units only connect to the right side of the Adapter base unit. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 25
Using the 1715 I/O Chapter 3 1715-AENTR Adapter Redundant Pair The 1715 adapter communicates via the EtherNet/IP network using CIP protocol to a 1756 ControlLogix controller, which conveys system I/O data. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 26
1715-A2A Adapter Base Unit The adapter base unit holds a pair of adapters. It also contains connectors for power (2) and network connections (4). The network connections can support Star or DLR protocols. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 27
Simplex or Duplex mode. These I/O modules can be included in your system: • 1715-IB16D 16-channel digital input module • 1715-OB8DE 8-channel digital output module • 1715-IF16 16-channel analog input module • 1715-OF8I 8-channel analog output module Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 28
Power Requirements A 24V DC power supply is required. For proper duplex operation, two power supplies are recommended. This is not required for fail-safe safety systems but for availability or energize-to-action systems. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 29
Duplex I/O module (first in pair) Duplex I/O module (second in pair) I/O base unit Simplex I/O module Duplex I/O module (first in pair) Duplex I/O module (second in pair) Power connections Ethernet connections Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 30
Chapter 3 Using the 1715 I/O Notes: Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
• A 1756-L7 ControlLogix controller IMPORTANT Safety functions that are being edited are not SIL 2 certified from the start of the online edits to the completions of the validation of the changes. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
• Channel health and status • Field faults • An echo of the front panel indicators for each module Input modules support high availability when configured for duplex operation and using the appropriate termination assembly. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 33
The fail-safe lowest commanded value irrespective of the scaling factor is 0 mA. The application cannot change the scaling factor; only an online update can change the scaling factor. The fail-safe guard is 1% (0…2 mA) and not user-configurable. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
The value of the CRTL forms part of the safety considerations for the system. You are responsible for calculating and verifying that the CRTL meets the safety reaction time for your safety function. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
The advantage of a lower task period is that it increases the number of times the Add-On Instruction is scanned; thus processing packets at a faster rate. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
1715 SIL 2 Add-On Instructions must be imported into the RSLogix 5000® project. Import only the Add-On Instructions you need based on your SIL 2 configuration. The CRC-calculator Add-On Instruction is imported when you import any of the other Add-On Instructions. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 37
You read inputs from an Add-On Instruction tag that is called ‘reconciled input data’ , and write outputs to an Add-On Instruction tag called ‘requested output data.’ Figure 9 - Module Data Flow Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 38
Chapter 4 Using 1715 Hardware in a ControlLogix SIL 2 System Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 39
Input modules send data only one way; from the input module to the controller. Output Data System Output modules send data both ways. Status is sent from the module to the controller and the controller send output requests to the module. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
The user manual also contains all probability of a dangerous failure on demand (PFD) and probability of failure per hour (PFH) values for Energize-to-Action configurations. Rockwell Automation Publication 1715-RM001A-EN-P - June 2019...
Page 42
Rockwell Automation maintains current product environmental information on its website at http://www.rockwellautomation.com/rockwellautomation/about-us/sustainability-ethics/product-environmental-compliance.page. Allen-Bradley, ControlLogix, FactoryTalk, GuardLogix, Listen. Think. Solve., Rockwell Automation, Rockwell Software, RSLogix 5000, and Studio 5000 Logix Designer are trademarks of Rockwell Automation, Inc. Trademarks not belonging to Rockwell Automation are property of their respective companies.
Need help?
Do you have a question about the Allen-Bradley ControlLogix SIL 2 and is the answer not in the manual?
Questions and answers