AutomationandDrives IMATICS7 400H S TheFault tolerantAutomationSystem Benefits AvoidanceofcontrolsystemfailuresduetoindividualfaultsThisisattainedprimarilythrougharedundantconfigurationFault toleranceisrequiredinthefollowingcases WhenprocessingvaluablematerialsWhendowntimesorproductionfailureswouldbeexpensiveWhenacontrolsystemfailurewouldresultinhighrestartcostsInordertoenableoperationwithoutsupervisoryormaintenancepersonnel Overview Industries 1 Powergenerationanddistribution oil gas electricity PowerplantsPipelinesOffshoreDistrictheatingsystemsChemical electrochemical petrochemicalandpharmaceuticalindustriesMiningEnvironmentalengineeringWatertreatmentRefuseincinerationPulpandpaperSteelandmetal Overview Industries 2 FoodandbeveragesGlassindustrySemiconductorindustry utilities TransportTunnelautomationMarineautomationAirportsRunwaylightingBaggagetransport Overview Systemarchitecture Managementlevel PCnetwork terminalbus Processlevel Fieldlevel ET200M Ethernet RedundantIM153 Redundantpowersupply HCPUsHotstand by ClientsParallelredundancy ServerParallelredundancyWitharchive matching SWredundancyWarmstand by Mediaredundancy Fault tolerantcommunication Overview RedundantPROFIBUS Systemintegration HiddenredundancyTransparentprogramming programmingsameasfornon redundantsystems StandardsystemparameterizationStandardhandlingAllSIMATICprogramminglanguagescanbeusedwithoutrestrictionPlatformforFandFHsystems Overview Redundancyprinciple 1 m of nFault tolerantandfailsafe HWorSWvoting A B C m v n A Coldstand by manualswitchover R A R 1 v 2 1 v 2 2oo2 2oo2 Fault tolerant Failsafe A B A B 1 2 v 2 1 v 2 2oo2 1oo2 Passiveredundancy Activeredundancy Majorityredundancy Redundancywithidenticalcomponents homogeneousredundancy RedundancyprincipleS7 400H Redundancyfeatures Hotstand by automaticswitchover 100msWarmstand by automaticswitchoverinsecondsrange Process Redundancyprinciple 2 IM DI AI AO DO IM FM Synchronization informationandstatusexchange Redundancyfeatures Bumplessmaster stand byswitchover SwitchovertimeSwitchovertime 100msOutputsareretainedduringswitchoverNoinformationoralarm interruptislostSwitchovercriteriaMasterfailurePowersupplyRackSyncmoduleSynccableCPUFailureofaDPstringorDPslaveinterfacemoduledoesnotforceaswitchover Redundancyfeatures Switchover Automaticeventsynchronization Synchronizationprocedure SubcontrollerA SubcontrollerB Cyclesynchronization SubcontrollerA SubcontrollerB Timesynchronization Commandsynchronization SubcontrollerA SubcontrollerB SubcontrollerA SubcontrollerB Nosynchronization Redundancyfeatures Synchronization Eventsynchronization Synchronization Informationandstatusexchange Automaticeventsynchronization Principle A I10 0 F L DW10 L PW100 S O8 0 A I10 0 F L DW10 L PW100 S O8 0 T PW130 Ackn Value Switchover Synchronization Synchronization Redundancyfeatures Synchronization Automaticeventsynchronization Cycle Self test PIO PIO Match up PII PIIexchange Synchronization Userprogram Userprogram Self test PII Redundancyfeatures Synchronization Automaticeventsynchronization CustomerbenefitsTransparentprogrammingAllstandardSIMATIC S7programminglanguagesNocommandrestrictionsEasyportingoftheuserprogramfromstandardCPUtofault tolerantCPUBumplessswitchoverNolossofinformationNolossofalarms interruptsBecauseallredundancy specificfunctionsarehandledbytheoperatingsystem theusercanfeelassuredthathe shehasdoneeverythingrightasfarasredundancyisconcerned Redundancyfeatures Synchronization Comprehensiveself testfunctions Self testScope CPUMemorySynchronizationlinkOrganization Startupself testCompletetestSelf testincyclicmodeExecutespermanentlyasbackgroundtaskExecutesinitsentiretywithinaspecifiableamountoftime default 90minutes Redundancyfeatures Self test Onlineprogramming OnlinemodificationssameasforstandardsystemAllmodificationsareautomaticallycopiedtobothCPUsConnectingaPGAtMPIinterfaceViabus MPI DP PROFIBUS Ethernet Redundancyfeatures Programming Onlineprogramming Programming parameterassignmentSIMATICManagerH stationview Redundancyfeatures Programming OnlineProgramming Programming Hardwareconfiguration Redundancyfeatures Programming ConfigurationinRUN CIR CPUmemoryconfigurationAddingorremoving CentralI OorCPDPslavesPAinterfaceandPAslavesY linkandslavesModulesinmodularDPslavesCPUparameter Redundancyfeatures CIR AutomaticCPUre incorporationfollowingrepair Connectandupdatestand byCPU 1 Stand byrequestslink up Mastercopiesalldatatostand by MASTER STAND BY RUNsolo STOP Executestartroutineandself test CPU1requestsupdate Mastercopiesdynamicdata DisableDelete CopyandGenerateBlocksfunctions Terminatecommunicationviaconfiguredlinks Disablelow priorityalarms Userprogram OS Redundancyfeatures Onlinerepair AutomaticCPUre incorporationfollowingrepair Connectandupdatestand byCPU 2 Dynamicdatawhichhavechangedsincethelastupdate MASTER STAND BY link up Inputs outputs timers counters memorybits Redundant synchronousoperation Enablealarms interruptsandcommunication Disableallalarms interrupts Redundancyfeatures Onlinerepair Rep