Fault-tolerant SIMATICAutomation and DrivesAutomation and DrivesIMATIC S7-400HSThe Fault-tolerant Automation SystemAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart2 Siemens AG 2004 - Subject to change without prior noticeBenefits Avoidance of control system failures due to individual faultsnThis is attained primarily through a redundant configurationFault-tolerance is required in the following cases:nWhen processing valuable materialsnWhen downtimes or production failures would be expensivenWhen a control system failure would result in high restart costsnIn order to enable operation without supervisory or maintenance personnelOverviewAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart3 Siemens AG 2004 - Subject to change without prior noticeIndustries (1)Power generation and distribution(oil, gas, electricity)nPower plantsnPipelinesnOffshorenDistrict heating systemsChemical, electrochemical, petrochemical and pharmaceutical industriesMining Environmental engineeringnWater treatmentnRefuse incinerationPulp and paperSteel and metalOverviewAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart4 Siemens AG 2004 - Subject to change without prior noticeIndustries (2)Food and beveragesGlass industrySemiconductor industry (utilities)TransportnTunnel automationnMarine automationAirportsnRunway lightingnBaggage transportOverviewAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart5 Siemens AG 2004 - Subject to change without prior noticeSystem architectureManagement levelPC network/terminal busProcess levelField levelET 200MEthernetRedundantIM 153Redundantpower supplyH CPUsHot stand-byClientsParallel redundancyServer Parallel redundancyWith archive-matchingSW redundancyWarm stand-byMedia redundancyFault-tolerantcommunicationOverviewRedundantPROFIBUSAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart6 Siemens AG 2004 - Subject to change without prior noticeSystem integrationHidden redundancynTransparent programming(programming same as for non-redundant systems)nStandard system parameterizationnStandard handlingAll SIMATIC programming languages can be used without restrictionPlatform for F andFH systems OverviewAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart7 Siemens AG 2004 - Subject to change without prior noticeRedundancy principle (1)m-of-nFault-tolerant and failsafeHW or SW votingABCm-v-nACold stand-by =manual switchoverRAR1-v-21-v-22oo22oo2Fault-tolerantFailsafe ABAB 12-v-21-v-22oo21oo2Passive redundancyActive redundancyMajority redundancyRedundancy with identical components(homogeneous redundancy)Redundancy principle S7-400HRedundancy featuresHot stand-by = automatic switchover 100 msWarm stand-by =automatic switchover in seconds rangeAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart8 Siemens AG 2004 - Subject to change without prior notice ProcessRedundancy principle (2)IM DIAI AODOIMFMSynchronization,information and status exchangeRedundancy featuresAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart9 Siemens AG 2004 - Subject to change without prior noticeBumpless master-stand-by switchoverSwitchover timenSwitchover time 100msnOutputs are retained during switchovernNo information or alarm/interrupt is lostSwitchover criteriaMaster failurenPower supplynRacknSync modulenSync cablenCPUFailure of a DP string or DP slave interface module does not force a switchoverRedundancy featuresn SwitchoverAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 10 Siemens AG 2004 - Subject to change without prior noticeAutomatic event synchronizationSynchronization procedureSubcontroller ASubcontroller BCycle synchronizationSubcontroller ASubcontroller BTime synchronizationCommand synchronizationSubcontroller ASubcontroller BSubcontroller ASubcontroller BNo synchronizationRedundancy featuresn SynchronizationEvent synchronizationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 11 Siemens AG 2004 - Subject to change without prior noticeSynchronization,Information and status exchangeAutomatic event synchronization PrincipleA I 10.0+FL DW 10LPW100:SO 8.0A I 10.0+FL DW 10LPW100:SO 8.0TPW130:Ackn.ValueSwitchoverSynchronizationSynchronizationRedundancy featuresn SynchronizationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 12 Siemens AG 2004 - Subject to change without prior notice CPU 1 CPU 0Automatic event synchronization CycleSelf-testPIOPIO Match-upPIIPII exchangeSynchronizationUser programUser programSelf-testPIIRedundancy featuresn SynchronizationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 13 Siemens AG 2004 - Subject to change without prior noticeAutomatic event synchronization Customer benefitsTransparent programmingnAll standard SIMATIC-S7 programming languages nNo command restrictionsnEasy porting of the user programfrom standard CPU to fault-tolerant CPUBumpless switchovernNo loss of informationnNo loss of alarms/interruptsnBecause all redundancy-specific functions are handled by the operating system, the user can feel assured that he/she has done everything right as far as redundancy is concernedRedundancy featuresn SynchronizationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 14 Siemens AG 2004 - Subject to change without prior noticeComprehensive self-test functionsSelf-testScope:nCPUnMemorynSynchronization linkOrganization:nStartup self-testnComplete testnSelf-test in cyclic modenExecutes permanently as background tasknExecutes in its entirety within a specifiable amount of time (default: 90 minutes)Redundancy featuresn Self-testAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 15 Siemens AG 2004 - Subject to change without prior noticeOnline programmingOnline modifications same as for standard systemnAll modifications are automatically copied to both CPUsConnecting a PG nAt MPI interfacenVia busMPI/DPPROFIBUS/EthernetRedundancy featuresn ProgrammingAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 16 Siemens AG 2004 - Subject to change without prior noticeOnline programmingProgramming/parameter assignmentSIMATIC Manager H-station viewRedundancy featuresn ProgrammingAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 17 Siemens AG 2004 - Subject to change without prior noticeOnline ProgrammingProgramming Hardware configurationRedundancy featuresn ProgrammingAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 18 Siemens AG 2004 - Subject to change without prior noticeConfiguration in RUN (CIR)CPU memory configurationAdding or removing:nCentral I/O or CPnDP slavesnPA interface and PA slavesnY-link and slavesnModules in modular DP slavesCPU parameterRedundancy featuresn CIRAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 19 Siemens AG 2004 - Subject to change without prior noticeAutomatic CPU re-incorporation following repairConnect and update stand-by CPU (1)Stand-by requests link-upMaster copies all data to stand-byMASTERSTAND-BYRUN soloSTOPExecute start routine and self-testCPU 1 requests updateMaster copies dynamic dataDisableDelete, Copy and Generate BlocksfunctionsTerminate communication via configured links.Disable low-priority alarmsUser programOSRedundancy featuresn Online repairAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 20 Siemens AG 2004 - Subject to change without prior noticeAutomatic CPU re-incorporation following repairConnect and update stand-by CPU (2)Dynamic data which have changed since the last updateMASTERSTAND-BY(link-up)Inputs, outputs, timers, counters, memory bitsRedundant, synchronous operationEnable alarms/interrupts and communicationDisable all alarms/ interruptsRedundancy featuresn Online repairAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 21 Siemens AG 2004 - Subject to change without prior noticeReplacing modules in RUN modeModules which can be removed and inserted in Run modenI/O and CP nSync module nRedundant IM 153-2nRedundant power suppliesRedundant components which can be replaced with the power off:nStandard power suppliesnCentral IMnCPUnCPU is automatically updated following replacement(program and data)Redundancy featuresn Online repairAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 22 Siemens AG 2004 - Subject to change without prior noticeConfigurationHighlights new CPUsPerformance IncreasenAverage Increase417-4H appr. x 2,5-3414-4H appr. x 1,2-2,2nMore Memeory417-4H from 4 MB to 20MB414-4H from 768KB to 1,4MBHigher ReliabilitynMemory with automatic Ewrror Detection and Correction (EDC)New FeaturenDistance between the Controller up to 10km (before 500m)KonfigurationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 23 Siemens AG 2004 - Subject to change without prior noticeConfigurationTechnical specifications for the CPUsConfigurationTwo CPU types availablenCPU 417-4H with 20MB onboardnCPU 414-4H with1,4MB onboardGeneral technical specifications,e.g. CPU 417-4 or CPU 414-34 integrated interfacesnTwo for the Sync modulesnOne DP interfacenOne MPI/DP interfaceAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 24 Siemens AG 2004 - Subject to change without prior noticeConfigurationRedundant linkFiber-optics (FO)Fiber-optics (FO)Replaceable Sync modulesConfigurationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 25 Siemens AG 2004 - Subject to change without prior noticeCentral Controller ConfigurationDistance between the Controller up to 10mUse of the Sync-Modules for Patch Cables up to 10mnMLFB Module: 6ES7 960-1AA04-0XA0 nMLFB FO-Cable 1m: 6ES7 960-1AA04-5AA0nMLFB FO-Cable 2m: 6ES7 960-1AA04-5BA0nMLFB FO-Cable 10m: 6ES7 960-1AA04-5KA0Distance between the Controller up to 10kmUse of the Sync-Modules for Cables up to 10kmnMLFB Module: 6ES7 960-1AB04-0XA0 nMonomode FO-Cable LC/LC Duplex crossed 9/125KonfigurationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 26 Siemens AG 2004 - Subject to change without prior noticeCentral controller configurationsWith two standard subracksRedundant power supply (PS) optionalPSPSCPUPSPSCPUPSPSCPUPSPSCPUMax. cable length 10kmWith H subrack (with split backplane bus)ConfigurationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 27 Siemens AG 2004 - Subject to change without prior noticeI/O configurationSwitched I/OIMIMSpecial bus module (BM)Active backplane busPROFIBUS DPET 200Mwith active backplane busL+L+Redundant IM 153-2ConfigurationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 28 Siemens AG 2004 - Subject to change without prior noticeI/O configurationSwitched I/O: mode of operationBoth DP masters are active and functioning properlynReading inputs:The inputs are read only from the preferred channelside (active IM)nWriting outputs:The data are accepted by both channels.Only the data in the preferred channel are forwarded to the outputs.ConfigurationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 29 Siemens AG 2004 - Subject to change without prior noticeI/O configurationConnecting PROFIBUS PA via PA linkPROFIBUS DP2 x IM 157DP-PA linkConfigurationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 30 Siemens AG 2004 - Subject to change without prior noticeI/O configurationY-LinkThe Y-link bus coupler creates a network portal from the redundant DP master system to a one-channel DP master systemIM 153-2 with ET 200MIM 157 with PA busY-Link with DP busConfigurationRack 0Rack 1Automation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 31 Siemens AG 2004 - Subject to change without prior noticeI/O configurationY-Link hardware configurationIM 157: n6ES7 157-0AA82-0XA0Y-Link:n6ES7 197-1LB00-0XA0 Bus module BM IM 157n6ES7 195-7HD80-0XA0Bus module BM Y-Linkn6ES7 654-7HY00-0XA0Collective Order No.n6ES7 197-1LA02-0XA0ConfigurationY-LinkIM 157Automation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 32 Siemens AG 2004 - Subject to change without prior noticeI/O configurationY-Link configurationConfigurationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 33 Siemens AG 2004 - Subject to change without prior noticeRedundant communicationPrincipleRedundant communication is attained through redundant connections, which are then used when a problem occurs. Redundant connections can be created from H stations tonOther H stations (one- or two-channel)nHMI PCs (software Redconnect required)Active connectionStand-by connectionCommunicationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 34 Siemens AG 2004 - Subject to change without prior noticeRedundant communicationConfiguration with redundant bus (1)EthernetH-CPU in single modePSPSBusBusCPCPCPCPPSPSCPUCPUCPUCPUEquivalent circuit diagram:CommunicationAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 35 Siemens AG 2004 - Subject to change without prior noticeRedundant communicationConfiguration with redundant bus (2)H-CPU in single modePSPSCPUCPUBusBusCPCPCPUCPUPSPSCPCPCPCPCPCPCommunicationEthernetEquivalent circuit diagram:Automation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 36 Siemens AG 2004 - Subject to change without prior noticeRedundant communicationConfiguration with single busH-CPU in single modePSPSCPUCPUBusCPCPCPCPCPUCPUPSPSCommunicationEthernetEquivalent circuit diagram:Automation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 37 Siemens AG 2004 - Subject to change without prior noticeRedundant communicationConfiguration with ring busRing busS7-400HS7-400HPSPSCPUCPUCPCPCPCPCPUCPUPSPSBusBusH-CPU in single modeCommunicationEquivalent circuit diagram:Automation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 38 Siemens AG 2004 - Subject to change without prior noticeRedundant I/ORedundant I/ONew: Redundant IOSensor/control elementPROFIBUS DPRedundant Communication Redundant Controller Redundant IM Redundant Profibus Automation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 39 Siemens AG 2004 - Subject to change without prior noticeRedundant I/OPossible redundancy structures (1)Central I/O modulesDistributed I/O modulesRedundant I/OAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 40 Siemens AG 2004 - Subject to change without prior noticeRedundant I/OPossible redundancy structures (2)Distributed switchedI/O modulesH-CPU in single modeRedundant I/OAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 41 Siemens AG 2004 - Subject to change without prior noticeRedundant I/ORedundant quality stagesHighest quality levelnUse of F-IO by exploiting the high-quality diagnostic functions required for failsafe operationnE.g. when it is necessary to control duration-1 faults associated with output signalsMedium quality levelnUse of modules with diagnostic functionsLow-cost quality levelnUse of modules without diagnostic functionsRedundant I/OAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 42 Siemens AG 2004 - Subject to change without prior noticeRedundant I/OHardware configurationSlotDP addressRedundant DITime discrepancy in msResponse time followingdiscrepancyPossible options:nAND gatenOR gatenUse last valid valueRedundant I/OAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 43 Siemens AG 2004 - Subject to change without prior noticeRedundancy tabAppears only for redundancy-capable modules.Type of redundancy(none or 2)Station 2,PROFIBUSaddress 3,slot 4 contains a compatiblemodule. This module is selected as redundant DIRedundant I/OHardware configurationRedundant I/OAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 44 Siemens AG 2004 - Subject to change without prior noticeRedundant I/O Wiring digital inputsWith two sensorsWith one sensorSince the function is not suitable for all module types, the manual or Internet should be consulted to find out which modules can currently be used.Redundant I/O Redundant Profibus Both Inputs are read in parallel.The correct value is selected and processed automaticallyDIDIMaster I/ORedundant I/OAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 45 Siemens AG 2004 - Subject to change without prior noticeRedundant I/O Wiring analog inputsWith voltage sensor With current sensor With 2 sensors 4-wire transducers only IRAI-IAI-IIWith current sensor Since the function is not suitable for every module type, the manual or Internet should be consulted to find out which modules can currently be used.Redundant I/OThe CPU reads both inputs. The correct value is selectedand processed automaticallyAIAIMaster I/ORedundant I/O Redundant Profibus Automation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 46 Siemens AG 2004 - Subject to change without prior noticeRedundant I/O Wiring digital outputsWithout diodes*With diodes *Since the function is not suitable for every module type, the manual or Internet should be consulted to find out which modules can currently be used.DQDQ* Dependant on the module typeActuatorRedundant I/OBoth Outputs are setDODOMaster I/ORedundant I/O Redundant Profibus Automation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 47 Siemens AG 2004 - Subject to change without prior noticeRedundant I/O Wiring analog outputsSince the function is not suitable for all module types, the manual or Internet should be consulted to find out which modules can currently be usedActuatorIRedundant I/OEach Output outputs half the value.When one of the modules fails, the output that is still intactprovides the full valueBoth Outputs are setAOAOMaster I/ORedundant I/O Redundant Profibus Automation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 48 Siemens AG 2004 - Subject to change without prior noticeRedundant I/O Integrating the user programThe user program is integrated with the Functional I/O Redundancy library, which is part of STEP7 V5.3The redundant I/O are available to the user for programming as transparent I/OnThe rules state that the lowest address must always be used for programming.Method of operation:nThe inputs are read by FB RED_IN and copied back to the POI following the discrepancy analysisnThe user writes the outputs to the lowest address in the usual manner. FB RED_OUT automatically copies the relevant value to the second address.Redundant I/OAutomation and DrivesFault-tolerant SIMATICOverviewRedundancy featuresConfigurationCommunicationRedundant I/On Switchovern Synchronizationn Self-testn Programmingn CIRn Online repairA&D AS, 07/2004, Chart 49 Siemens AG 2004 - Subject to change without prior noticeThank you