Mitsubishi Electric MELSEC iQ-R Series Programming Manual page 4

[Design Precautions]
WARNING
● Configure a circuit so that the external power supply is turned off first and then the programmable
controller. If the programmable controller is turned off first, an accident may occur due to an incorrect
output or malfunction.
● For the operating status of each station after a communication failure, refer to manuals for the network
used. For the manuals, please consult your local Mitsubishi representative. Incorrect output or
malfunction due to a communication failure may result in an accident.
● When connecting an external device with a CPU module or intelligent function module to modify data
of a running programmable controller, configure an interlock circuit in the program to ensure that the
entire system will always operate safely. For other forms of control (such as program modification,
parameter change, forced output, or operating status change) of a running programmable controller,
read the relevant manuals carefully and ensure that the operation is safe before proceeding. Improper
operation may damage machines or cause accidents. When a Safety CPU is used, data cannot be
modified while the Safety CPU is in SAFETY MODE.
● Especially, when a remote programmable controller is controlled by an external device, immediate
action cannot be taken if a problem occurs in the programmable controller due to a communication
failure. To prevent this, configure an interlock circuit in the program, and determine corrective actions
to be taken between the external device and CPU module in case of a communication failure.
● Do not write any data to the "system area" and "write-protect area" of the buffer memory in the
module. Also, do not use any "use prohibited" signals as an output signal from the CPU module to
each module. Doing so may cause malfunction of the programmable controller system. For the
"system area", "write-protect area", and the "use prohibited" signals, refer to the user's manual for the
module used. For areas used for safety communications, they are protected from being written by
users, and thus safety communications failure caused by data writing does not occur.
● If a communication cable is disconnected, the network may be unstable, resulting in a communication
failure of multiple stations. Configure an interlock circuit in the program to ensure that the entire
system will always operate safely even if communications fail. Failure to do so may result in an
accident due to an incorrect output or malfunction. When safety communications are used, an
interlock by the safety station interlock function protects the system from an incorrect output or
malfunction.
● Configure safety circuits external to the programmable controller to ensure that the entire system
operates safely even when a fault occurs in the external power supply or the programmable controller.
Failure to do so may result in an accident due to an incorrect output or malfunction.
● If safety standards (ex., robot safety rules, etc.,) apply to the system using the module, servo amplifier
and servo motor, make sure that the safety standards are satisfied.
● Construct a safety circuit externally of the module or servo amplifier if the abnormal operation of the
module or servo amplifier differs from the safety directive operation in the system.
● Do not remove the SSCNET cable while turning on the control circuit power supply of modules and
servo amplifier. Do not see directly the light generated from SSCNET connector of the module or
servo amplifier and the end of SSCNET cable. When the light gets into eyes, you may feel
something wrong with eyes. (The light source of SSCNET complies with class 1 defined in
JISC6802 or IEC60825-1.)
2