Home

User manual UM EN IB IL 24 PSDI 16-PAC - Digi-Key

1. 2 7 2 6 Local diagnostic and status indicators cece cece ee eeee eee ee eee seca eee eeeeaeeeeeeeaae es 2 8 2 7 odale Stale een eee ance Ce ewer ene a ere oe Oe eee ee ee ee 2 10 2 7 1 Operating Salossa ancestries nine stescus iueeee ci iseseenaniacaaee 2 10 2 7 2 Error detection in I O devices 0 0 ceececeeceeeeseeeeeeeeeaneseeeeeeseaneeeeeeeenan 2 10 2 7 3 Device ONOS enrii a a a 2 11 2 7 4 Parameterization CrrOlrs axiveiccvsiesvedstuasdeetes E A 2 11 2 8 Process data WOAS crinis a TEE E EE NaS 2 12 2 8 1 SANT Bridge eree cscs tes a le T 2 12 2 8 2 PROFIsafe PROFIBUS PROFINET ccccccceeeeeeeseessseeeeeeeeeeees 2 12 2 9 Programming data configuration data ccceccececcsseeeeeeeeeeeeaeeeeeeeeeasaaeeeeeeeeenaas 2 13 2 9 1 Local bus INTERBWS rarere ceca ae sae ee 2 13 2 9 2 Other bus systems PROFIBUS PROFINET etc ccecceeeees 2 13 3 Inline potential and data routing and Inline PIUGS ee ceeccseeeeeeeeeeeeeeeeeeneeeteeeeeeeeaeeeeaeeenes 3 1 3 1 Inline potential ANd data rOUtING cccceccccseeceeeeeeeeeeeeeaeeeeeeeeeeeeeeeesseeeeeneeesaaes 3 1 3 2 SUPPIV voltage Uj eiieadh E a 3 1 3 3 SUID VOA GE U iise e a a O 3 1 3 4 Terminal pontassionine Mispe aS 3 3 4 Assembly removal and electrical installation cccccccseccseceseeeseeeseeceeeeseeeseeceueeaeeeeesaeesaees 4 1 4 1 Assembly and removal nneennnennnnennesnnsesrrnsrrrrrrrrerrrrerrrssn
2. Device parameters see Parameterization of the safe inputs and Parameterization of clock outputs UT1 and UT2 PST_Device_ID 10pex for IB IL 24 PSDI 16 PAC F_Destination_Address not included in the checksum calculation iPar_CRC The device parameters are verified with a checksum iPar_CRC F Destination_Address This address is the PROFIsafe address of the module Make sure that it matches the switch position of the 10 pos DIP switch B 2 PHOENIX CONTACT 105411_en_01 B3 Diagnostic messages for parameter errors B 3 1 Diagnostic messages for F Parameters and iParameters for PROFIsafe Table B 2 F Parameter parameter errors ne Se ee The parameterized F_Destination_Address does not Make sure that the PROFIsafe address of the match the PROFIsafe address set on the safety module safety module and the value in F Module F_Destination_Address are the same Invalid parameterization of F_Destination_Address Correct value Addresses 0000 and FFFFhex are not permitted Invalid parameterization of F_Source_Address Correct value Addresses 0000 and FFFFre are not permitted Invalid parameterization of F_WD_Time Correct value A monitoring time of 0 ms is not permitted Invalid parameterization of F_SIL Use a device with the required SIL The safety module F Module cannot support the re The safety module achieves SIL 3 maximum quired SIL The CRC length generated by the safety module F Modu
3. e Hold the safety module perpendicular and snap it onto the DIN rail 7 5 mm in height a Ensure that all featherkeys and keyways on adjacent terminals are securely interlocked Figure 4 2 Snapping on the safety module base 105411 _en_01 PHOENIX CONTACT 4 3 IB IL 24 PSDI 16 PAC Insert plugs Check that all the snap on mechanisms are securely snapped into place Insert the plugs in the specified order A B a Only use the plugs supplied with the module Removal Remove plugs Remove base Y iN Ww tr U Figure 4 3 Inserting the plug Figur Disconnect the power to the station Before snapping on the safety module remove the plugs from the safety module and the adjacent plug from the neighboring Inline terminal on the left Remove the plug by pressing the back shaft latching A and levering off the plug B PA ae gt E l EA WZ D 4 4 Removing the plug Release the base by pressing on the front and back snap on mechanisms A and pull it out perpendicular to the DIN rail B Figure 4 5 Removing the safety module base PHOENIX CONTACT 4 4 105411_en_01 Assembly removal and electrical installation 4 2 Electrical installation WARNING Electric shock unintentional machine startup Prior to electrical installation dis
4. Install the safety module within the Inline station Section Assembly removal and electrical installation on page 4 1 Connect the bus system and supply voltage cables to the IB IL SYS PRO UM E user manual INTERBUS Inline station IL SYS INST UM E or documentation for the bus coupler Wire the inputs according to your application Section Assembly removal and electrical installation on page 4 1 Section Inline potential and data routing and Inline plugs on page 3 1 User manuals for the function blocks used Before applying the operating voltage Ensure that there are no wiring errors e g cross Circuit or short circuit or grounding errors by testing with a multimeter Check whether the ground connection is safe Connect the required voltages to the Inline station IB IL SYS PRO UM E user manual INTERBUS IL SYS INST UM E or documentation for the bus coupler Once the operating voltage has been applied If possible measure the wave form of the voltages to ensure that there are no deviations Measure the input voltages on the module to ensure that they are in the permissible range Use the LEDs on the module to check that the module starts up without any errors Check the mounting and installation Checklist Assembly and electrical installation on page C 4 Carry out the necessary parameterization Section Parameterization of the safety module on page 5 1 Documentation for the config
5. 225g Process data mode with 4 words Process data mode with 4 words and 1 word PCP internal use 500 kbaud or 2 Mbaud 25 C to 55 C 25 C to 70 C 75 on average 85 occasionally no condensation i In the range from 25 C to 55 C appropriate measures against increased humidity must be taken Storage transport 75 on average 85 occasionally no condensation i For a short period slight condensation may appear on the outside of the housing Air pressure Operation Storage transport Degree of protection Housing material Air and creepage distances Protection class Gases that may endanger functions according to DIN 40046 36 DIN 40046 37 Sulfur dioxide SO gt Hydrogen sulfide H2S Resistance of housing material to termites Resistance of housing material to fungal decay Ambient compatibility Connection data for Inline plugs Connection method Conductor cross section 1 2 PHOENIX CONTACT 80 kPa to 108 kPa up to 2000 m above sea level 66 kPa to 108 kPa up to 3500 m above sea level IP20 Plastic PBT self extinguishing VO According to IEC 60664 1 Ill PELV Concentration 10 0 3 ppm Ambient conditions Temperature 25 C 2 K Humidity 75 5 Test duration 10 days Concentration 1 0 3 ppm Ambient conditions Temperature 25 C 2 K Humidity 75 5 Test duration 4 days Resistant Resistant Not resistant to chloroform Spring cage terminal term
6. IB IL 24 PSDI 16 PAC Set the filter time for the input to a value greater than the width of the test pulse for the OSSD sensor The input must be parameterized without cross circuit monitoring 7 12 PHOENIX CONTACT 105411 en_01 105411_en_01 a a Connection examples for safe inputs 7 4 Two channel equivalent assignment of safe inputs For two channel assignment of the inputs two adjacent inputs are always used This as signment is fixed and cannot be parameterized see Section Two channel on page 5 3 For two channel equivalent assignment the state changes from 0 to 1 only when both inputs change state from 0 to 1 If symmetry monitoring is enabled and the state at both inputs does not change within the parameterized time a diagnostic message is generated An input is active when the state of the signal is equal to 1 Cross circuits between different inputs can only be detected if the input signals are sup plied by different clock outputs Please note that if a delayed change in state at one of the two inputs causes the safety switch to be switched on again this can result in delayed transmission of state 1 in the process data image of the inputs e g due to a loose contact Example of correct and incorrect signal change 1 INO_Ch1 aan 1 INO_Ch2 aan INO Ch1 Ch2 i 69403014 Figure 7 5 Correct signal change INO_Ch1 7 0 1 INO _Ch2 7 0
7. User manual UM EN IB IL 24 PSDI 16 PAC Inline module with 16 safe digital inputs 0 mc0cec BMo0mece Witoniaa INSPIRING INNOVATIONS User manual Inline module with 16 safe digital inputs Designation UM EN IB IL 24 PSDI 16 PAC Revision 01 Order No 2992145 This user manual is valid for Designation Revision IB IL 24 PSDI 16 PAC HW FW 00 100 PHOENIX CONTACT Order No 2700994 2013 02 27 105411_en_01 Internet Subsidiaries Published by Please observe the following notes User group of this manual The use of products described in this manual is oriented exclusively to Qualified electricians or persons instructed by them who are familiar with applicable standards and other regulations regarding electrical engineering and in particular the relevant safety concepts Qualified application programmers and software engineers who are familiar with the safety concepts of automation technology and applicable standards Explanation of symbols used and signal words hazards Obey all safety measures that follow this symbol to avoid possible in This is the safety alert symbol It is used to alert you to potential personal injury jury or death There are three different categories of personal injury that are indicated with a signal word DANGER This indicates a hazardous situation which if not avoided will re sult in death or serious injury WARNING This indicates a hazardou
8. 1 Acknowledging the diagnostic message deletes the message and activates the inputs Undervoltage at Uy Supply voltage Un is measured If Uy lt 17 V a diagnostic message is generated 105411 _en_01 PHOENIX CONTACT 9 5 IB IL 24 PSDI 16 PAC 9 4 Parameterization errors Table 9 4 Parameterization errors Error code LED tion ing ized individually Incorrect See FS Each input and clock Module is in the safe Check and correct parameteriza Table 9 5 flash output is parameter parameterization In order to determine what type of parameterization error has occurred use the correspond ing software to access the safe controller PROFIsafe or the standard control system SafetyBridge online and read the error For example with the SAFETYPROG software and INTERBUS Safety proceed as follows e Using the SAFETYPROG software access the safe controller online e Click on the SafePLC button e Click on Errors in the window that opens The errors can now be read e Inthe message window switch to the SafePLC Errors tab The device specific error code is displayed in decimal notation Table 9 5 Parameterization errors 034x The setting for the symmetry monitor Inputs that are parameterized for two TE oe 832 INO_Ch1 amp 2 ing of related inputs is not the same channel operation must have the same INO_Ch1 amp 2 IN7_Ch1 amp 2 symmetry settings 839 IN7_Ch1 amp 2 Correct values and resend
9. Controller specific Output address area Controller specific Controller specific Parameter channel PCP O words 1 word Register length 4 words 4 words The PCP channel is only used internally The switch position of the protocol address switch is specified by the configurable safety module see documentation for the configurable safety module 2 9 2 Other bus systems PROFIBUS PROFINET etc For the programming data configuration data of other bus systems please refer to the cor responding electronic device data sheet GSD EDS 105411 _en_01 PHOENIX CONTACT 2 13 Inline potential and data routing and Inline plugs 3 Inline potential and data routing and Inline plugs 3 1 Inline potential and data routing In order to operate the safety module it must be integrated in an Inline station within the SafetyBridge or PROFIsafe system The bus signals are transmitted via the Inline data jumpers The required supply voltages are transmitted via the Inline potential jumpers For more detailed information on potential and data routing within an Inline station please refer to the IL SYS INST UM E user manual The segment circuit is looped through the safety module and is available again after the module The segment circuit cannot be accessed in the safety module 3 2 Supply voltage U Supply the 24 V supply voltage Ug U v4y at a bus coupler or a suitable power terminal I
10. INO Ch1 Ch2 0 69401029 Figure 7 6 Error during signal change In Figure 7 6 the condition that both signals must be in state O before the change in state from 0 to 1 is not met In this case diagnostic message 018Xpex is generated Key for Figure 7 5 and Figure 7 6 INO_Ch1 Signal sequence at input O channel 1 INO_Ch2 Signal sequence at input O channel 2 INO Safety related signal for two channel input O channel 1 and channel 2 at the Chi Ch2 safe controller PROFIsafe or the configurable safety module SafetyBridge State evaluation The module evaluates the states of the inputs and transmits the result to the safe controller PROFIsafe or the configurable safety module SafetyBridge In the process data image of the safe inputs PHOENIX CONTACT 7 13 IB IL 24 PSDI 16 PAC A is transmitted if a 0 signal is present at at least one of the two inputs or an error has been detected A 1 is transmitted if a 1 signal is present at both inputs and no error has been detect ed and the conditions are met for a change in state according to Figure 7 6 7 4 1 Notes about errors for two channel equivalent assignment of safe inputs For the following examples please note the resulting behavior in the event of an error Note about cross circuits The cross circuit error results in the transmission of the safe state in the process data image of the affected inputs Remove t
11. csciscescieedniaticlce ccs ee ce cleo 7 1 7 1 Explanation of the CxAmMples cccccsecceccsseeeeceeeeeeeeseseeeeeeeaueeseseeueeeeseeeeeesaeees 7 1 7 2 Measures required to achieve a specific safety integrity level ccccccsseees 7 3 7 3 Single channel assignment Of Safe inputs ccccseeeeeeceeeeeeeeeeeeeeecaaeeeeeessaeeees 7 5 7 3 1 Single channel with Cross cirCuit monitoring ceeeeeeeeeeeeeeeeeeeeeees 7 6 7 3 2 Single channel supply through UT1 without cross circuit monitoring 7 8 7 3 3 Single channel supply through OSSD ccccsseeeeeeeeeeeeeeeeeeeeeeeaeees 7 10 7 4 Two channel equivalent assignment of Safe inputs cccccseeeeeeeeeeeeeeeeeeeees 7 13 7 4 1 Notes about errors for two channel equivalent assignment of safe inputs 7 14 7 4 2 Two channel equivalent cross circuit monitoring enabled supply through ASAP USCA CUNGIL 2 cate oat ensues leotetenceduesnen es toutade arenes saetcoteseeeogeaels ee cguuhey 7 15 7 4 3 Two channel equivalent cross circuit monitoring disabled supply through a clock output or external supply cccccseeeeeeeeeeeeeeeeeeseeeeeseeeesaees 7 18 7 4 4 Two channel equivalent external supply OSSD ceeesseeeeees 7 21 7 5 Two channel non equivalent assignment of safe inputs ceeeeeeeeeeeeeeees 7 23 7 5 1 Notes about errors for two channel non equivalent assignment of safe in PS ac E E alee E A EE EAEE A E E EA T E E
12. for assignment see Section Terminal point assignment on page 3 3 Terminal points Marking field 105411_en_01 105411_en_01 Product description 2 3 Housing dimensions 72 141 1054110001 Figure 2 2 Housing dimensions in mm PHOENIX CONTACT 2 3 IB IL 24 PSDI 16 PAC Technical data Parameterization Diagnostics a 2 4 PHOENIX CONTACT 2 4 Safe digital inputs and clock outputs UT1 and UT2 2 4 1 Safe digital inputs The safety module has eight safe digital inputs for two channel assignment or sixteen safe digital inputs for single channel assignment The supply voltage for the inputs can be pro vided externally or via the clock outputs For the technical data for the safe inputs please refer to page 1 4 The individual safe digital inputs of a safety module can be parameterized differently This means that the inputs can be adapted to various operating conditions and different safety integrity levels can be implemented SIL SIL CL Cat PL The safety integrity level SIL SIL CL Cat PL and error detection that can be achieved depend on the parameterization the structure of the sensor and the cable installation see Connection examples for safe inputs on page 7 1 For information on the parameterization of the inputs please refer to Section Parameter ization of the safe inputs on page
13. or a configurable safety module SafetyBridge Start inhibit due to symmetry violation is enabled affected input is in the safe state All module inputs are in the safe state All module inputs are in the safe state Affected inputs in the safe state Check sensor Check clock outputs Check plug and ca bling Check whether the message was trig gered by a short cir cuit cross circuit If not Check value for sym metry Check switches Replace switches during next mainte nance Activate con nected I O devices once e g activate and unlock emer gency stop Power up with error free selftest Exchange Power up with error free selftest Exchange Set both inputs to the safe state Acknowledging the diagnostic message deletes the message Errors messages and removal Acknow ledg ment Acknowledging the diagnostic message deletes the message and activates the input The states at the input are detected immediately In your safe application program ensure that the system cannot be restarted unintentionally following acknowledgment of the diagnostic message PHOENIX CONTACT 9 3 IB IL 24 PSDI 16 PAC Acknowledgment yes 3 Acknowledging the diagnostic message deletes the message The module can only be re started following power up and error free selftest Acknowledgment yes 4 Start inhibit due to symmetry violation is disabled Acknowledging the diagnostic me
14. trial hall with DC voltage and to which any device can be connected A typical system or ma chine distribution is not a DC distribution network For devices that are provided for a typical system or machine distribution the DC connections are viewed and tested as I O signals according to IEC 61326 3 1 105411_en_01 Inline potential and data routing and Inline plugs 3 4 Terminal point assignment Ol z H h N ili 00 h 3 1 0 0 4 1 PI PET eal 3 210 Rj 4 2 5 2 pore 7 210 GL 8 2 3 3 faa 4 3 5 3 J 6 3 7 3 z 8 8 3 al ey l 3 4 JARL 4 4 5 410 Nl 6 4 7 410 08 4 1 548 2 5 3 510 214 5 5 510 BL 6 5 7 5 15 5 8 5 1 6 1 6 2 6 3 6 a 4 6 5 60 l 6 6 7 610 l 8 6 1 2 3 Figure 3 2 Terminal point assignment The Inline plugs are supplied with the module They are keyed and marked accordingly for connection to prevent polarity reversal A Only use the plugs supplied with the module The following applies for the tables below All inputs are safe digital inputs OV GND common ground of inputs and clock outputs FE common functional earth ground Table 3 1 Terminal point assignment for plug 1 Terminal point Signal Channel assignment Se meom naem or e m eck output O C s ovienD Channel ana chame es ovino formet atten E
15. 1 Abbreviations used Abbrevia Standard tion Safety integrity level EN 61508 SIL 2 SIL 3 IL SIL CL SIL claim limit EN 62061 SIL CL 3 Category EN ISO 13849 1 Cat 2 Cat 4 Performance level EN ISO 13849 1 PL e PL d Table 1 2 Abbreviations used Abbrevia tion PELV Protective extra low voltage according to EN 611316 2 Equipment under control OSSD OSSD Output signal switching device OSSD is the part of electrosensitive protective equipment which is con nected to the machine control system and switches off if the sensor part responds during correct operation For terms and abbreviations used for PROFIsafe please refer to Appendix PROFIsafe terms used in the manual on page A 1 1 8 Safety hotline Should you have any technical questions please contact our 24 hour hotline Phone 49 5281 9 462777 E mail safety service phoenixcontact com 105411_en_01 Product description 2 Product description 105411_en_01 2 1 Brief description of the safety module The IB IL 24 PSDI 16 PAC module is an input module which is designed for use within an Inline station The IB IL 24 PSDI 16 PAC safety module can be used as part of an Inline station at any point within a SafetyBridge or PROFIsafe system The transmission speed and the operating mode SafetyBridge or PROFIsafe are set via the 2 pos DIP switch One transmission speed must be used consistently in an INTERBUS system One transmission
16. 24 PSDX S7 Configuring Inline modules with safe inputs or outputs under PROFIsafe on a SIMATIC S7 controller User manuals For the safe controller used For PROFIsafe I O modules For PROFIsafe function blocks Please also observe the relevant information about PROFIBUS PROFINET and PRO Flsafe which is available on the Internet at www profisafe net 105411_en_01 Standard INTERBUS Inline product range 105411_en_01 For your safety When working on the INTERBUS system and its components you must always keep the listed user manuals and other items of product documentation to hand and observe the in formation therein IBS SYS INTRO G4 UME General introduction to the INTERBUS system IBS SYS PRO INST UME Configuring and installing INTERBUS IBS SYS DIAG DSC UM E INTERBUS Diagnostics Guide for Generation 4 controller boards UM QS EN CONFIG and or Config online help Quick start guide and or online help for the Config software UM QS EN PC WORX or online help Quick start guide and or online help for the PC Worx software IBS SYS FW G4 UME Firmware services and error messages IL SYS INST UME Automation terminals of the Inline product range configuration and installation IB IL SYS PRO UME Configuring and installing the INTERBUS Inline product range Documentation for the bus coupler used PHOENIX CONTACT 1 7 IB IL 24 PSDI 16 PAC 1 8 PHOENIX CONTACT 1 7 Abbreviations used Table 1
17. An unex pected change from 0 to 1 is possible e g due to a loose contact Ensure that such a change in state cannot restart the system Cross circuit Input to input No An accumulation of errors can result in the loss of the safety function Input to clock output Yes The error is detected on a change in state as the state only changes in one channel Change in state from 1 to 0 The faulty input remains at 1 A 0 is transmitted in the process data image of the affected inputs Change in state from 0 to 1 A 0 is transmitted in the process data image of the inputs if the faulty input was not previously set to 0 Clock output to clock output No The error is not detected Input to external 24 V Yes Symme try viola tion The error is detected on a change in state as the state only changes in one channel Change in state from 1 to 0 The faulty input remains at 1 A 0 is transmitted in the process data image of the affected inputs Change in state from 0 to 1 A 0 is transmitted in the process data image of the inputs as the faulty input was not previously set to 0 The error is detected in state 1 or on a change in state from 0 to 1 Input to ground Yes None No as the state only changes in one channel Clock output that is not clocked to The error is not detected external 24
18. Application specific Start inhibit due to symmetry Disabled Application specific violation Cross circuit monitoring No cross circuit monitoring Le 7 20 PHOENIX CONTACT 105411 en_01 Connection examples for safe inputs 7 4 4 Two channel equivalent external supply OSSD 24V IN1_Ch1 P IN1_Ch2 i GND IE 70070028 Figure 7 10 Two channel equivalent assignment of inputs external supply OSSD WARNING Loss of functional safety due to parasitic voltages Connect the sensor ground directly to terminal point GND of the safety module An exter nal ground may not be used Basic specifications Sensor Two channel OSSD output with internal testing Sensor supply External OSSD sensor Achievable SIL SIL CL Cat PL SIL 3 SIL CL 3 Cat 4 PL e WARNING Loss of electrical and functional safety To achieve the specified category please refer to Section Measures required to achieve a specific safety integrity level on page 7 3 Please note that in order to achieve the specified PL the sensor must have a high lev el of diagnostic coverage gt 99 and high MTTFd Use sensors that can achieve the required safety integrity level Device diagnostics and behavior of the module in the event of an error To understand the change in state please refer to Example of correct and incorrect signal change on page 7 13 Table 7 10 Two channel equivalent external supply OSSD Error Sik a Detec
19. During this time the D LED flashes at 4 Hz and the bus cannot be started up Communications power present local bus active Red LED Failure state Flashing at 1 Hz Device not parameterized or parameterization was not accepted a Hardware fault communication to safe controller PROFIsafe or configurable CO module SafetyBridge disabled Monitoring the supply voltage Um OFF Communications power not present pema at 1 Flashing at 1 Hz Uj below the permissible voltage range undervoltage ON Un present GreenLED LED Status indicator for safe communication OFF No safe communication a at 0 5 Safe communication running the controller requests operator acknowledgment Hz ON Safe communication running without errors UT1 UT2 o LED Diagnostic message error for each clock output o eer S O O Flashing at 1 Hz Cross circuit of an input with external signals ON Short circuit or overload of the clock output i The clock output is switched off until the acknowledgment is received by the safety module see also Section Clock output UT1 and UT2 errors on page 9 5 IN Green LED Status of each input see Terminal point assignment on page 3 3 Even when the module is not parameterized the physical state at the inputs is indicated However substitute value O is transmitted to the safe controller 105411 _en_01 PHOENIX CONTACT 2 9 IB IL 24 PSDI 1
20. Hardware FS ON Error in the logic Module is inthe safe Exchange fault area state Acknowledgment yes 1 9 6 PROFIsafe errors Acknowledging the diagnostic message deletes the message In addition to the module errors specified the following errors can occur PROFIsafe system errors these messages can be found in Section Diagnostic mes sages for parameter errors on page B 3 PROFIBUS or PROFINET system errors for information on these errors please refer to the documentation for the system used 105411_en_01 PHOENIX CONTACT 9 7 IB IL 24 PSDI 16 PAC 9 7 Acknowledging an error 9 7 1 Acknowledging an error for SafetyBridge An IB IL 24 PSDI 16 PAC error is acknowledged completely via the configurable safety module For instructions on error acknowledgment please refer to the documentation for the con figurable safety module used 9 8 PHOENIX CONTACT 105411 en_01 Errors messages and removal 9 7 2 Acknowledging an error for PROFIsafe Remove the cause of the error Then acknowledge the diagnostic message For instructions on error acknowledgment please refer to the documentation for the con troller used WARNING Acknowledgment may result in a hazardous system state With the exception of a few special cases the acknowledgment of an error immediately returns the safe input to the operating state Before acknowledging an error you must therefore make sure that the acknowledgment
21. Incorrect supply The relevant diagnostic message is transmitted to the safe controller PROFIsafe or the configurable safety module SafetyBridge see Section Errors messages and removal on page 9 1 WARNING Loss of the safety function due to sequential errors In the event of a device error the following measures should be taken to prevent sequen tial errors Disconnect the module from the power supply and replace it 2 1 4 Parameterization errors The FS LED on the safety module flashes Parameterization errors are indicated As long as the module is not parameterized or Inthe event of faulty parameterization Parameterization errors cause the entire module to enter the safe state In the event of faulty parameterization the relevant diagnostic message is transmitted to the safe controller PROFIsafe or the configurable safety module SafetyBridge see Section Parameterization errors on page 9 6 105411 _en_01 PHOENIX CONTACT 2 11 IB IL 24 PSDI 16 PAC 2 12 PHOENIX CONTACT 2 8 Process data words 2 8 1 SafetyBridge The module occupies four words in the Inline system For information on how these words are mapped please refer to the documentation for the configurable logic module used The input data can only be used for the standard control system To access the input sig nals use SafetyBridge function blocks from Phoenix Contact In the following tables both the maximum sing
22. PHOENIX CONTACT The assignment of the input signals to the clock outputs is parameterized as required 105411_en_01 SIL SIL CL Performance level Category 105411_en_01 a a Connection examples for safe inputs 7 2 Measures required to achieve a specific safety in tegrity level The safety integrity level SIL SIL CL performance level and category that can be achieved is specified for each connection example In order to determine the probability of failure according to EN 61508 SIL use this stan dard In order to determine the probability of failure according to EN 62061 SIL CL use this standard When the SIL SIL CL is specified the module takes up 1 of the specified SIL SIL CL Table 7 4 PFD and PFH depending on the SIL SIL CL SIL 2 SIL CL 2 of 102 of 108 1 1 SIL 3 SIL CL 3 1 of 10 1 of 10 Use standard EN ISO 13849 1 to determine the performance level In order to actually achieve the specified category the required measures listed below must be implemented Cat 2 Use proven and basic safety principles according to EN ISO 13849 2 Use appropriately qualified sensors see Section Requirements for controlling devic es sensors on page 2 5 Please note that mechanical failure of the switching device can result in the loss of the safety function Take appropriate measures e g fuse protection redundancy positive opening etc to ensure that the co
23. V 105411 en_01 PHOENIX CONTACT 7 19 IB IL 24 PSDI 16 PAC Table 7 9 Two channel equivalent cross circuit monitoring disabled supply through a clock output or external supply Error type Detec Diag Loss of tion nostics SF Clock output to ground Short cir The error is detected as a change in state from 1 to 0 An unex cuit pected change from 0 to 1 is possible e g due to a loose contact UTx ON Ensure that such a change in state cannot restart the system unintentionally The error is also detected as a short circuit of the clock output The af fected clock output is disabled External 24 V to ground The error is detected as a change in state from 1 to 0 An unex pected change from 0 to 1 is possible e g due to a loose contact Ensure that such a change in state cannot restart the system unintentionally Only applies when symmetry monitoring is active For all inputs that are parameterized without cross circuit monitoring cross circuits and short circuits are not detected by the device diagnostics but only on a change in state of the input signals as the state only changes in one channel Early error detection e g by testing the safety function at regular intervals is required as an accumulation of errors may result in the loss of the safety function Typical parameterization Input xx channel 1 channel 2 C Symmetry 100mS 100ms Application
24. change in state cannot restart the system unintentionally Note about symmetry violation The symmetry violation diagnostic message is only displayed if it was not disabled during parameterization of the affected input Start inhibit due to symmetry violation disabled The symmetry violation message does not result in the transmission of the safe state see also Symmetry start inhibit on page 5 4 The message must be acknowledged However the current status of the inputs is dis played in the process data image of the inputs Start inhibit due to symmetry violation enabled The symmetry violation message results in the transmission of the safe state see also Symmetry start inhibit on page 5 4 The message must be acknowledged The current status of the inputs is displayed in the process data image of the inputs following acknowledgment The message can be used to monitor the wear of the safety switch 7 24 PHOENIX CONTACT 105411 en_01 Connection examples for safe inputs 7 5 2 Two channel non equivalent with cross circuit monitoring supply through UT1 and UT2 S1 IN1_Ch1 S1 S2 Two switching elements UT1 IN1_Ch2 6 S2 UT2 69404222 Figure 7 13 Two channel non equivalent assignment of inputs supply through UT1 and UT2 cross circuit monitoring enabled Basic specifications Sensor supply Internally through clock output UT1 and UT2 cross circuit monitoring enabled Achievable SIL SIL CL Cat
25. e g if a component fails the error is indicated at the safe controller PROFIsafe or a configurable safety module SafetyBridge Clock outputs Number Supply Maximum switching current Saturation voltage Simultaneity Derating Permissible cable lengths Status indicators Diagnostic indicators Power dissipation If Uy 24 V no input is set without load at clock outputs UT1 and UT2 2 From Um 0 2 A short circuit and overload protection Uy 1V 100 No The total length of the connected cables must not exceed 500 m per clock output None One red LED for each UT1 UT2 see Local diagnostic and status indicators on page 2 8 1200 mW If Um 24 V 16 inputs are set load at clock outputs UT1 and UT2is 100 mA 2600 mW each Electrical isolation isolation of the voltage areas separate power supply units Interconnection of the power supply units in the 24 V area is not permitted See also user manual a To provide electrical isolation between the logic level and the I O area it is necessary to supply the bus coupler and this safety module from Separate potentials in the system consisting of bus coupler power terminal and safety module Test distance 5 V supply incoming remote bus 7 5 V supply bus logic 5 V supply outgoing remote bus 7 5 V supply bus logic 7 5 V supply bus logic 24 V supply Uy FE Test voltage 500 V AC 50 Hz 1 min 500 V AC 50 Hz 1 min 500 V AC 50 H
26. exit the error parameterize the device and acknowledge the error message For the technical data for the clock outputs please refer to page 1 5 In the event of short circuit to GND or overload the affected clock output is switched off At the same time the error is indicated at the UT1 and or UT2 LEDs and a diagnostic message is generated at the safe controller PROFIsafe or at a configurable safety module SafetyBridge This error must be acknowledged so that the system can be started up again following error removal Error detection depends on the parameterization If cross circuit detection is activated for an input pair the relevant inputs are permanently assigned to clock outputs UT1 and UT2 Diagnostics are provided via both the local diagnostic indicators and the diagnostic mes sages which are transmitted to the safe controller PROFIsafe or to a configurable safety module SafetyBridge For information on the diagnostic messages of the clock outputs please refer to Section Clock output UT1 and UT2 errors on page 9 5 CAUTION Diagnostic data is not safety related 2 6 PHOENIX CONTACT Do not use the diagnostic data to execute safety related functions or actions 105411_en_01 Product description 2 5 Connection options for sensors depending on the parameterization Sensors that meet various safety requirements depending on the parameterization can be connected to the inputs For connection examples ple
27. input and a 0 is represented in the process image of the input O safe state Depending on the parameterization the following errors can be detected at inputs Cross circuit Symmetry errors Implausible signal change The relevant diagnostic message is transmitted to the safe controller PROFIsafe or the configurable safety module SafetyBridge see Section Safe digital input errors on page 9 3 For information on which errors are detected and when please refer to Section Connection examples for safe inputs on page 7 1 105411_en_01 Product description 2 7 3 Device errors Device errors can lead to safe communication being set Inputs lf a hardware fault in the internal circuit is detected at an input all module inputs enter the safe state and 0 values are represented in the process image of the inputs O safe state The relevant diagnostic message is transmitted to the safe controller PROFIsafe or the configurable safety module SafetyBridge see Section Safe digital input errors on page 9 3 Serious errors All serious errors that can result in the loss of or adversely affect the safety function cause the entire module to enter the safe state The FS LED on the safety module is permanently on The following errors result in the safe state Serious hardware faults in the internal circuit User errors Module overload Module overheating
28. installing the INTERBUS Inline product range SafetyBridge User manual z Inline module with integrated safety logic and safe digital outputs PROFIsafe Quick start guide 1 Configuring Inline modules with safe inputs or outputs under PRO Fisafe on a SIMATIC S7 controller Specification See http www profisafe net PROFIsafe Profile for Safety Technology on PROFIBUS DP and PROFINET IO Version 2 4 February 2007 INTERBUS general User manual 1 General introduction to the INTERBUS system User manual Z Configuring and installing INTERBUS User manual INTERBUS Diagnostics Guide User manual 1 Firmware services and error messages Data sheet 2 Addressing INTERBUS Documentation for software Quick start guide 1 SAFETYPROG Quick start guide Config Quick start guide PC Worx Documentation for PROFIsafe PROFIBUS and PROFINET is available on the Internet at www profibus com pall meta downloads a Make sure you always use the latest documentation It can be downloaded at www phoenixcontact net products 105411 _en_01 PHOENIX CONTACT 1 7 A Appendix PROFIsafe terms used in the manual CRC Consecutive number F Parameter F CPU F Destination_Address F I O device F Slave F Source_Address 105411_en_01 Some of the terms that are used in connection with PROFIsafe in this manual are described below A definition of PROFIsafe terms is also provided in the PROFIs
29. level on page 7 3 Please note that in order to achieve the specified PL cross circuits must be avoided Please note that in order to achieve the specified PL the sensor must have a medium level of diagnostic coverage 90 to 99 and high MT TFd A high level of diagnostic coverage gt 99 is recommended for the application according to PL d Use sensors that can achieve the required safety integrity level 7 8 PHOENIX CONTACT 105411 en_01 Connection examples for safe inputs Device diagnostics and behavior of the module in the event of an error Table 7 6 Single channel without cross circuit monitoring supply through UT1 UT2 external supply or OSSD Error type Detec Diag Loss of tion nostics SF Error in the sensor A contact will not open Pe eee eT The error cannot be detected and results in the loss of the safety func tion A contact will not close No None No The error cannot be detected Other errors Please take into consideration possible errors that can occur in depending on the sensor the sensor Error in the wiring Input None No Behavior when the input is in state 1 Cable interrupt between clock out The error is detected as a change in state from 1 to 0 An unex put and sensor or between sensor pected change from 0 to 1 is possible e g due to a loose contact and input Ensure that such a change in state cannot restart the system unintentionally Be
30. notes in this manual qualified personnel are persons who because of their education experience and instruction and their knowledge of relevant standards reg ulations accident prevention and service conditions have been authorized to carry out any required operations and who are able to recognize and avoid any possible dangers You must observe all information in this manual as well as in the documents listed in Section Documentation on page 1 6 PHOENIX CONTACT 1 1 IB IL 24 PSDI 16 PAC Safety of personnel and equipment Error detection Do not carry out any re pairs Do not open the hous ing security seal Measures to prevent in correct connection and polarity reversal 1 2 PHOENIX CONTACT The safety of personnel and equipment can only be assured if the safety module is used cor rectly see Section Correct usage on page 1 5 Depending on the wiring and the corresponding setting of the safe input module parame ters the SafetyBridge or PROFIsafe system can detect various errors within the safety equipment Repair work may not be carried out on the safety module In the event that an error cannot be removed please contact Phoenix Contact immediately engage a service engineer or send the faulty module directly to Phoenix Contact It is strictly prohibited to open the safety module housing In order to prevent the manipula tion of the safety module and to detect the unauthorized opening of the safe
31. on page 2 2 Date Enter the date on which you began to fill in this checklist Test engineer 1 2 Enter the names of the test engineers Remark Enter a remark if necessary Requirement mandatory These requirements must be met for a safety application in order to complete the relevant phase using the checklist Requirement optional These requirements are optional For points that are not met please enter an appropriate remark in the relevant field 105411_en_01 PHOENIX CONTACT C 1 IB IL 24 PSDI 16 PAC C1 Planning Checklist for planning the use of the safety module Device type equipment identification Test engineer 1 Le Test engineer 2 Requirement mandatory Yes Has the current module user manual been used as the basis for plan oO Revision ning Are the sensors approved for connection to the module according to the technical data and parameterization options Has the voltage supply been planned according to the specifications for the protective extra low voltage in accordance with PELV Is external fuse protection of the module planned according to the spec le ifications in this user manual for supply voltage Up PO le Are measures planned to prevent simple manipulation A ad akiakina Ae A 7 Are requirements for the sensors and cable installation observed ac cording to the SIL SIL CL Cat PL to be achieved and is the correspond ing implementation planned pF Po Are the specifications for the parameteriz
32. parameterized correctly The variables used in your application program have been linked to the safe sensors correctly Perform a function test and error simulation Please observe the checklist Validation on page C 6 during validation PHOENIX CONTACT 8 3 Errors messages and removal 9 Errors messages and removal Depending on the error type errors that are diagnosed are displayed via the local diagnostic indicators and or transmitted to the safe controller PROFIsafe or the configurable safety module SafetyBridge as diagnostic messages The tables below provide an overview of the diagnosed errors their causes effects and possible measures for error removal For SafetyBridge please also refer to the documentation for the configurable safety module used For every error that occurs the cause of the error must first be removed If necessary the error is then acknowledged Errors that must be acknowledged are indicated in the Ac knowledgment column in the tables below lf error codes are indicated by the system which do not appear in the tables below please contact Phoenix Contact Error removal To remove the cause of an error please proceed as described in the Solution column in the tables below Error acknowledgment Instructions on how to acknowledge an error can be found in Section Acknowledging an er ror on page 9 8 Module replacement fol If in the event of failure the safety mod
33. parameters for all inputs are valid and transmitted with out errors Valid input data is only read in this state In every other state the safe state is transmitted for each input O in the process image of the inputs lf errors are detected during parameterization the parameterization data is not transmitted The FS LED on the module flashes to indicate that the parameterization is invalid In addition errors are indicated at the safe controller In this case check and correct the set tings For information on error messages and instructions for their removal please refer to Section Errors messages and removal on page 9 1 Assign the parameterizable F Parameters and iParameters For an overview of the module parameters and possible settings please refer to Appendix F Parameters and iParame ters on page B 1 105411_en_01 Parameterization of the safety module 5 3 Parameterization of the safe inputs Each input pair of a safety module can be parameterized differently and can therefore achieve different safety integrity levels SIL SIL CL Cat PL Two channel If the inputs are operated via two channels the following fixed assignment applies INO_Ch1 to INO_Ch2 INi_Ch1 to IN1_Ch2 IN2_Ch1 to IN2_Ch2 IN38_Ch1 to IN3_Ch2 IN4_Ch1 to IN4_Ch2 IN5_Ch1 to IN5_Ch2 IN6_Ch1 to IN6_Ch2 IN7_Ch1 to IN7_Ch2 For two channel assignment the inputs have a fixed assignment to one anot
34. speed must be used consistently in the relevant Inline station ina SafetyBridge or PROFIsafe system The module has a 10 pos DIP switch which is used to set the SafetyBridge or PROFIsafe address The module has eight safe digital inputs for two channel assignment or sixteen safe digital inputs for single channel assignment The inputs can be parameterized according to the application and enable the integration of sensors in SafetyBridge or PROFIsafe systems Within a SafetyBridge or PROFIsafe system the IB IL 24 PSDI 16 PAC safety module can be used to achieve safety functions with the following requirements Upto SIL 3 according to standard EN 61508 Upto SIL CL 3 according to standard EN 62061 Upto Cat 4 PL e according to standard EN ISO 13849 1 PHOENIX CONTACT 2 1 IB IL 24 PSDI 16 PAC 2 2 PHOENIX CONTACT 2 2 Structure of the safety module Figure 2 1 Structure of the safety module 1 Data jumpers local bus 2 Electronics base with labeling including hardware firmware version designation not shown 3 Switch for setting the transmission speed and operating mode 4 Switch for setting the address For more detailed information on setting the switches please refer to Section Setting the DIP switches on page 4 2 5 6 7 ee Potential jumpers Diagnostic and status indicators for assignment and meaning see Section Local diag nostic and status indicators on page 2 8 Inline plug
35. state see also Symmetry start inhibit on page 5 4 The message must be acknowledged The current status of the inputs is displayed in the process data image of the inputs following acknowledgment The message can be used to monitor the wear of the safety switch 7 14 PHOENIX CONTACT 105411 en_01 Connection examples for safe inputs 7 4 2 Two channel equivalent cross circuit monitoring enabled supply through UT1 and UT2 Possible wiring versions S1 IN1_Ch1 51 S2 UT1 Two switching elements UT2 69404212 Figure 7 7 Two channel equivalent assignment of inputs supply through UT1 and UT2 both clocked Basic specifications Sensor Two channel equivalent with cross circuit monitoring Sensor supply Internally through clock output UT1 and UT2 both clocked Achievable SIL SIL CL Cat PL SIL 3 SIL CL 3 Cat 4 PL e WARNING Loss of electrical and functional safety To achieve the specified category please refer to Section Measures required to achieve a specific safety integrity level on page 7 3 Please note that in order to achieve the specified PL the sensor must have a high lev el of diagnostic coverage gt 99 and high MT TFd Use sensors that can achieve the required safety integrity level 105411 _en_01 PHOENIX CONTACT 7 15 IB IL 24 PSDI 16 PAC Device diagnostics and behavior of the module in the event of an error a Table 7 8 To understand the change in state please refer to
36. the safe inputs A 1 is transmitted if a 1 signal is present at channel 1 of the input and a 0 signal is present at channel 2 of the input and no error has been detected and the conditions are met for a change in state according to Figure 7 12 A 0 is transmitted in all other cases 7 5 1 Notes about errors for two channel non equivalent assign ment of safe inputs For the following examples please note the resulting behavior in the event of an error Note about cross circuits The cross circuit error results in the transmission of the safe state in the process data image of the affected inputs Remove the error and then acknowledge the message Acknowledging the diagnostic message deletes the message and activates the input The states at the input are detected immediately In your safe application program ensure that the system cannot be restarted unintentionally following acknowl edgment of the diagnostic message Please observe the maximum failure detection time of 64 ms Exceptions in the failure detection time are indicated in the tables Ifa 1 signal is present at the input and an error occurs a maximum of 64 ms elapses until the error is detected Within this time another 1 can also be transmitted even in the event of an error Within the failure detection time 64 ms maximum the error can cause the state to change unexpectedly from 0 to 1 Ensure that such a
37. the safety switch is bypassed Input to clock output None Yes The error cannot be detected and results in the loss of the safety func tion as the safety switch is bypassed Input to external 24 V None Yes The error cannot be detected and results in the loss of the safety func tion as the safety switch is bypassed Input to ground Yes None No The error is only detected as a change in state from 1 to O in state 1 of the input An unexpected change from 0 to 1 is possible e g due to a loose contact Ensure that such a change in state cannot restart the system unintentionally Clock output to external 24 V Lc cee a The error cannot be detected as clocking is disabled Clock output to ground Short cir The affected clock output is disabled cuit UTx ON External 24 V to ground The error is only detected as a change in state from 1 to 0 in state 1 of the input An unexpected change from 0 to 1 is possible e g due to a loose contact Ensure that such a change in state cannot restart the system uninten tionally Typical parameterization Parameterization Parameterized as value range Remark Input xx channel 1 channel 2 Assignment Both single channel Filter time t ilter 3 ms Application specific Symmetry Disabled Start inhibit due to symmetry Disabled violation Cross circuit monitoring No cross circuit monitoring 105411_en_01 PHOENIX CONTACT 7 11
38. tionally 105411_en_01 PHOENIX CONTACT 7 9 IB IL 24 PSDI 16 PAC Typical parameterization Parameterization Parameterized as value range Remark Input xx channel 1 channel 2 Assignment Both single channel Symmetry Disabled Start inhibit due to symmetry Disabled violation Cross circuit monitoring No cross circuit monitoring 7 3 3 Single channel supply through OSSD 24V f IN1_Ch1 E GND O 70070027 Figure 7 4 Single channel assignment of inputs external supply OSSD WARNING Loss of functional safety due to parasitic voltages Connect the sensor ground directly to terminal point GND of the safety module An exter nal ground may not be used Basic specifications Sensor Single channel OSSD output with internal testing Sensor supply External OSSD sensor Achievable SIL SIL CL Cat PL_ SIL 2 SIL CL 2 Cat 2 PL d WARNING Loss of electrical and functional safety Toachieve the specified category please refer to Section Measures required to achieve a specific safety integrity level on page 7 3 Please note that in order to achieve the specified PL cross circuits must be avoided Please note that in order to achieve the specified PL the sensor must have a medium level of diagnostic coverage 90 to 99 and high MT TFd A high level of diagnostic coverage gt 99 is recommended for the application according to PL d Use sensors that can achieve the required safe
39. 4 PSDI 16 PAC Processing time of the in put ty in the event of a safety demand 5 6 PHOENIX CONTACT The processing time of the input t n in the event of a safety demand comprises the parame terized filter time tFitter and the firmware runtime tgw It is calculated for the IB IL 24 PSDI 16 PAC module according to the following formula tin tFitter tew Where tin Processing time of the input tEilter Parameterized filter time tew Firmware runtime 250 us 5 4 Parameterization of clock outputs UT1 and UT2 As long as the module is not parameterized The clock outputs are enabled if no errors are present Short circuit detection is activated The clock output settings are specified by the parameterization of the safe inputs If all safe inputs are parameterized without cross circuit monitoring an unclocked DC voltage can be tapped at both clock outputs If cross circuit detection is activated for at least one safe input Low pulses with a maximum pulse width of 1 ms and a maximum period length of 40 ms are output at the clock outputs The time offset between the clocks of the clock outputs is approximately 50 of the period length If clock outputs are parameterized without clock pulses no cross circuits or short circuits can be detected between the channels If clocking is enabled the clock output is operated with a maximum pulse width of 1 ms and a maximum period length of 40 ms The time offset between the clock
40. 5 3 Diagnostics are provided via both the local diagnostic indicators and the diagnostic mes sages which are transmitted to the safe controller PROFIsafe or to a configurable safety module SafetyBridge For information on the diagnostic messages of the inputs please refer to Section Safe dig ital input errors on page 9 3 CAUTION Diagnostic data is not safety related Do not use the diagnostic data to execute safety related functions or actions 105411_en_01 Requirements for control ling devices sensors 105411_en_01 Product description The error detection of the module varies depending on the parameterization This results in specific requirements for the sensors To acquire input signals the signal duration must be greater than the parameterized fil ter time The sensors must be suitable for the application Only use appropriately qualified sensors suitable for the required category SIL SIL CL PL Use switches with a positive opening contact according to IEC 60947 5 1 Part 5 of this standard includes a description of the specific requirements for control switches with a positive opening contact All positive opening control switches which meet these spe cific requirements are marked with the following symbol Use reliable components These include for example Mechanical position switches with personal protection function with positive opening contact according to EN 60947 5 1 Ca
41. 6 PAC a Inputs 2 10 PHOENIX CONTACT 2 7 Safe state The safe state for the module is the transmission of the value equal to O in the image of the inputs to the safe controller PROFIsafe or the configurable safety module SafetyBridge PROFIsafe The safe state for the F Input data is 0 The safe state is entered by means of passivation see Passivation on page A 2 The safe state can be entered in the following cases 1 Operating state 2 Error detection in I O devices 3 Device errors 4 Parameterization errors 2 7 1 Operating state In the operating state the inputs can enter states 1 or O In general state O is the safe state An exception is a non equivalent parameterized input For channel 2 of this input 1 is the safe state 0 is represented in the process data image of the two channel input Table 2 2 Operating state depending on the state of the inputs Type of input Operating state equals 1 Operating state equals 0 in input state safe state Single channel High 1 Low 0 Two channel equivalent High High 1 1 High Low 1 0 Low High 0 1 Low Low 0 0 Two channel non equiva High Low 1 0 Low High 0 1 lent Low Low 0 0 High High 1 1 Please observe the state transitions see Section Symmetry start inhibit on page 5 4 2 7 2 Error detection in I O devices If an error is detected at an input the safe state is set at this
42. B IL 24 PWR IN R The 7 5 V voltage U is generated from this 24 V supply voltage in the bus coupler or power terminal It is supplied to the safety module via the Inline potential jumper UL WARNING Loss of the safety function when using unsuitable power supplies Please note for the voltage supply at the bus coupler or power terminal that Only power supplies according to EN 50178 VDE 0160 PELV may be used Make sure that the output voltage of the power supply does not exceed 32 V even in the event of an error Please also observe the points in Section Electrical safety on page 1 3 The supply voltage U is used to supply the communications power For the technical data for the supply voltage U please refer to Supply voltage UL logic on page 1 3 The maximum current carrying capacity for the supply voltage U is 2 A This current carrying capacity can be reduced if certain terminals are used Please refer to the information in the terminal specific data sheets 3 3 Supply voltage Uj Supply the supply voltage at a bus coupler or a power terminal It is supplied to the safety module via the Inline potential jumper Uy The supply voltage Uym is used to supply the input circuits and the clock outputs For the technical data for the supply voltage Uy please refer to Section Supply voltage UM sen sors clock outputs on page 1 4 105411 _en_01 PHOENIX CONTACT 3 1 IB IL 24 PSDI 16 3 2 The maximum cur
43. Diag Loss of ae a sr nostics SF Error in the sensor Channel failure No The error is detected on a change in state as the state only changes i in one channel i Change in state from 1 to 0 The faulty input remains at 1 A 0 is transmitted in the process data image of the affected inputs Change in state from 0 to 1 A 0 is transmitted in the process data image of the affected inputs as the faulty input was not previously set to state 0 Other errors Please take into consideration all possible errors that can occur depending on the sensor in the sensor 105411 _en_01 PHOENIX CONTACT 7 21 IB IL 24 PSDI 16 PAC Table 7 10 Two channel equivalent external supply OSSD Error type Detec Diag Loss of tion nostics SF Error in the wiring Input The error is detected in state 1 or on a change in state from 0 to 1 Cable interrupt between sensor as the state only changes in one channel and input Input The error must be detected by the sensor Cable interrupt between sensor The sensor must ensure that the safe state is entered in the and GND event of an error Cross circuit Input to input No Yes The error must be detected by the sensor The sensor must ensure that the safe state is entered in the event of an error Input to clock output Yes No The error is detected on a change in state if the clock output is set to 1 as the state only
44. Example of correct and incorrect signal change on page 7 13 Two channel equivalent with cross circuit monitoring supply through UT1 and UT2 Error type Detec Diag Loss of tion nostics SF Error in the sensor A contact will not open A contact will not close Other errors depending on the sensor Error in the wiring Input Cable interrupt between clock out put and sensor or between sensor and input Cross circuit Input to input Yes es Input to assigned clock output Y Input to non assigned clock output Yes Clock output to clock output Yes Input to ground Clock output to ground The error is detected on a change in state as the state only changes in one channel Change in state from 1 to 0 The faulty input remains at 1 A O is transmitted in the process data image of the affected inputs Change in state from 0 to 1 A 0 is transmitted in the process data image of the affected inputs as the faulty input was not previously set to state 0 On a change in state from 0 to 1 a 0 is transmitted in the process data image of the affected inputs as only one channel reports this change in state Please take into consideration all possible errors that can occur in the sensor The error is detected in state 1 or on a change in state from 0 to 1 as the state only changes in one channel The error is detected
45. PL SIL 3 SIL CL 3 Cat 4 PL e WARNING Loss of electrical and functional safety To achieve the specified category please refer to Section Measures required to achieve a specific safety integrity level on page 7 3 Please note that in order to achieve the specified PL the sensor must have a high lev el of diagnostic coverage gt 99 and high MTTFd Use sensors that can achieve the required safety integrity level To understand the change in state please refer to Example of correct and incorrect signal change on page 7 23 105411_en_01 PHOENIX CONTACT 7 25 IB IL 24 PSDI 16 PAC Device diagnostics and behavior of the module in the event of an error Table 7 11 Two channel non equivalent with cross circuit monitoring supply through UT1 and UT2 Error type Detec Diag Loss of tion nostics SF Error in the sensor A contact will not open The error is detected as the state only changes in one channel A contact will not close Other errors Please take into consideration all possible errors that can occur depending on the sensor in the sensor Error in the wiring Input Yes Symme N The error is detected on a change in state at the latest as the state Cable interrupt between clock out try viola only changes in one channel put and sensor or between sensor tion and input S N N N N Cross circuit Input to input Cross cir cuit Input to assigned clock output Yes Symme The error is detected
46. T moo 48 ovienD Channel ana chame 26 ovienD onameltanachame 105411_en_01 PHOENIX CONTACT 3 3 IB IL 24 PSDI 16 3 4 PHOENIX CONTACT Table 3 2 Terminal point assignment for plug 2 Terminal point Signal Channel assignment 160 a2 om wo e m a C es ovien crameit andona E Coo o 38 m oo O C a me ooo re es ovino crever tara eame O se ovienD Channel Tandchemnel2 Table 3 3 Terminal point assignment for plug 3 Terminal point Signal Channel assignment 160 pest maom Mputachamel at ss ovienD Channel ana chame ss ovienD Channel Tandchemnel2 55 m ooo O i a se ovienD Channel and chame es ovien chanel and tarot Table 3 4 Terminal point assignment for plug 4 Terminal point Sigal Channel assignment 105411_en_01 Inline potential and data routing and Inline plugs Table 3 4 Terminal point assignment for plug 4 Terminal point Signal Channelassignment LED es OV GNO Channel and chamet Ce m owwa o WARNING Loss of functional safety due to parasitic voltages For sensors that require a GND this must be wired to 0 V GND on the plug for the input 105411 _en_01 PHOENIX CONTACT 3 5 Assembly removal and electrical installation 4 Assembly removal and electrical installation 4 1 Assembly and removal 4 1 1 Unpacking the module The module is supplied in an ESD box together with a package slip with installati
47. The error is not detected The error is detected as a change in state from 1 to O cuit The error is also detected as a short circuit of the clock output UTx ON The affected clock output is disabled External 24 V to ground a The error is detected in state 1 or on a change in state from 0 to 1 No No Input to ground No The error is detected in state 1 or on a change in state from 0 to 1 as the state only changes in one channel No as the state only changes in one channel Only applies when symmetry monitoring is active Early error detection e g by testing the safety function at regular intervals is required as an accumulation of errors may result in the loss of the safety function 105411_en_01 PHOENIX CONTACT 7 29 IB IL 24 PSDI 16 PAC Typical parameterization Parameterization Parameterized as value range Remark Input xx channel 1 channel 2 Start inhibit due to symmetry Enabled Application specific violation Cross circuit monitoring No cross circuit monitoring E l 7 30 PHOENIX CONTACT 105411_en_01 Startup and validation 8 Startup and validation 8 1 Initial startup To start up proceed as described in Table 8 1 Table 8 1 Steps for startup Relevant section and literature Set the transmission speed and the mode Section Setting the DIP switches on page 4 2 Set the protocol address Section Setting the DIP switches on page 4 2
48. Up to Cat 4 PL e according to standard EN ISO 13849 1 It is designed for connecting single channel or two channel sensors which can be used in association with safety technology For example the module can be used in the following applications Single or two channel emergency stop or safety door equipment Applications with enable button Applications with two hand control devices Applications with mode selector switches As secondary switchgear for safety related photoelectric barriers Safety circuits according to EN 60204 Part 1 105411 _en_01 PHOENIX CONTACT 1 5 IB IL 24 PSDI 16 PAC Latest documentation SafetyBridge PROFIsafe 1 6 PHOENIX CONTACT 1 6 Documentation Make sure you always use the latest documentation Changes or additions to this document can be found on the Internet at www phoenixcontact net products When working on the SafetyBridge system and its components you must always keep this user manual and other items of product documentation to hand and observe the information therein User manuals For the controller used For SafetyBridge system I O modules For SafetyBridge system function blocks Please also observe the relevant information about the bus system used When working on the PROFIsafe system and its components you must always keep this user manual and other items of product documentation to hand and observe the information therein UM QS EN IB IL
49. aE 9 8 9 7 1 Acknowledging an error for SafetyBridge ccccsssceceeeseeeeeeneeeeeeeees 9 8 9 7 2 Acknowledging an error for PROFIsafe 0 ccceeeeeeeeeeeeeeeeeeeeeeeeeeees 9 9 10 Maintenance repair decommissioning and disposal cceeccsecceeeceeeeseeeeeeeeeeeeeeseeeseeeees 10 1 10A AINVAWMMEMEINC Esia a a r a 10 1 102 REDA enna a E eaueweneter tent 10 1 10 3 Decommissioning and diSpOSal cccccceecceeeeeee ee eeeeeeeeaeeeeeeseeeeeesaaeeeeeesaaeees 10 1 t TeehnicGal data and Ordering Gate ss sicntieienctiotiieniaa rire dinars eer an eae eos 1 1 1 1 SV 0a 9 Ce Ce Renan ee eric eee Bee ree en nS eer ear one ere eee 1 1 1 1 1 DAICW BOGS sea a dese 23stesent acca es cove eanncene sunita eetosans ea neces 1 1 1 1 2 Oe Sell feces astae os aheoa acc antent a ecetcnsieane see taneetoisnattss eaaseatenmenettesaneacese 1 1 1 2 IB IL 24 PSDI TGs PAG wi2e aecatncetecstces seat cosetebaedebiassnaciansaaicaaieabadaasatdesedatedtderatssentde 1 2 1 3 Conformance with EMC DIrective cccsccccccsseeeeceeeeeeeceeeeeeeeeeuseeessueeeeesaaneees 1 6 1 4 f0 2a q o fo rc teereneeer ererere cn creer rere err or rer ttete mere tee nee ere rr errr rr erenre ererrenne tern errr 1 6 1 4 1 Ordering data safety module ce cececeeee cee eeeeeeeeeeeaaaaeeeeeeneeaaeees 1 6 1 4 2 Ordering data COCUMENTATION issc a aai 1 7 A Appendix PROFIsafe terms used in the manual cccceecccee
50. ad ee 7 24 7 5 2 Two channel non equivalent with cross circuit monitoring supply through UT and UTA assciees on beten deen ciaguess suauety dete leeds Cerecseske hab eeedueiateeeneoaeaaes 7 25 LOS Two channel non equivalent cross circuit monitoring disabled supply through a clock output or external supply ss sssssssssessssrrresrrrerrrrerrenn 7 28 8 Stanu AG VAI ATOM ss sssaaa a este oaths weet ages ances arse teed ine aw tewceetaceds 8 1 8 1 UgTUTEET RS C21 gt geben geese tere rere Comers a ure ae tree oer eT Ce er ne Meroe ee 8 1 8 2 Restart after replacing a Safety module ccseccceceseeeeeeeseeeeeeceaeeeeeeseeeeeseeaeees 8 3 8 2 1 Replacing a Safety module ccccccseeeeeeceeeeeceeeeeeeeceaeeeeeseaeeeessaaaes 8 3 il PHOENIX CONTACT 105411_en_01 Table of contents 8 2 2 Rostan oerke o Sieh cat E E O a 8 3 8 3 ANNO sene tect canienee asec ce ote ee riaeree eee ciate eee 8 3 9 Errors messages and TEMOV Al wersenssiseunwcententrontaesdaeeti aonb aieneds a ao eed 9 1 9 1 Dale diotal iNDUL ET O Shisni de eain a aaaea aaae 9 3 9 2 Clock tp t UTT and UT2 errors srania a a E E 9 5 9 3 SUPPIVVONAGE CIT ONS oian E erie 9 5 9 4 Parameterization errors ccccccssececesececeseeeenseececececensueeessaceeenseeeensueeenseseensesenes 9 6 9 5 Generaler OS ernas ene ce E E A 9 7 9 6 PROFRBIIC ENO O renna aa a a meee 9 7 9 7 Acknowledging ANON Ols iaicteatastatcneasdesanttan idebasibadbicnduaGadide aaiae aa
51. afe application program been tested also as online status in SAFETY PROG Has a function test been performed to check all safety functions in which the module is involved i Have measures been taken to achieve a specific Cat Of Do all cables correspond to the specifications Of Does the voltage supply correspond to the specifications for the protec tive extra low voltage in accordance with PELV Is external fuse protection of the module implemented according to the specifications in this user manual for supply voltage UM ia Have measures been taken to prevent simple manipulation Of he Have measures been taken to prevent plugs being mixed up o0 Are the requirements for the sensors and cable installation observed ac cording to the SIL SIL CL Cat PL to be achieved Are the specifications for the parameterization for each channel imple mented For PROFIsafe is the F_iPar_CRC parameter greater than 0 for all de o vices Has it been ensured that any person intentionally starting hazardous movements has a direct view of the danger zone Date Signature test engineer 1 Signature test engineer 2 C 6 PHOENIX CONTACT 105411 _en_01 D Appendix revision history 01 27 02 2013 First publication 105411_en_01 PHOENIX CONTACT D 1
52. afe profile Cyclic Redundancy Check A cyclic redundancy check is used to verify the validity of the process data contained in the safety telegram check whether the assigned address relationships are correct and verify the safety related parameters This value is part of the safety telegram Consecutive number Method for ensuring that the safe data is transmitted completely and in the correct order According to PROFIsafe system description Version 09 November 2007 F Parameters contain information for adapting the PROFIsafe layer to specific customer specifications and for checking the parameterization by means of a separate method di verse The main F Parameters are F_S D_Address A unique address for F Devices within a PROFIsafe island The F Address for technology part of the F Device compares the value with the ad short dress switch locally or with an assigned F Address in order to check the authenticity of the connection F_WD_Time Specifies the millisecond value for the watchdog timer The timer monitors the time that elapses until the next valid PROFIsafe mes sage is received F_SIL Indicates the SIL that the user can expect from the relevant F De vice It is compared with the manufacturer s specification that is stored locally F_iPar_ CRC A checksum that is calculated from all iParameters of the technol ogy specific part of the F Device F_Par_CRC A CRC signature which is created via all F Parameters and
53. al documen tation and the products described in the technical documentation at its own discretion and without giving prior notice insofar as this is reasonable for the user The same applies to any technical changes that serve the purpose of technical progress The receipt of technical documentation in particular user documentation does not consti tute any further duty on the part of Phoenix Contact to furnish information on modifications to products and or technical documentation You are responsible to verify the suitability and intended use of the products in your specific application in particular with regard to observ ing the applicable standards and regulations All information made available in the technical data is supplied without any accompanying guarantee whether expressly mentioned im plied or tacitly assumed In general the provisions of the current standard Terms and Conditions of Phoenix Contact apply exclusively in particular as concerns any warranty liability This manual including all illustrations contained herein is copyright protected Any changes to the contents or the publication of extracts of this document is prohibited Phoenix Contact reserves the right to register its own intellectual property rights for the product identifications of Phoenix Contact products that are used here Registration of such intellectual property rights by third parties is prohibited Other product identifications may be afforded le
54. annel or two channel 105411_en_01 For your safety 1 4 Directives and standards The manufacturers and operators of machines and systems in which the IB IL 24 PSDI 16 PAC module is used are responsible for adhering to all applicable directives and legislation For the standards observed by the module please refer to the certificate issued by the ap proval body and the EC declaration of conformity These documents are available on the In ternet at www phoenixcontact net products 1 5 Correct usage Only use the SafetyBridge or PROFIsafe system in accordance with the instructions in this section The IB IL 24 PSDI 16 PAC safety module is designed exclusively for use in a SafetyBridge or PROFIsafe system It can only perform its safety related tasks within the system if it has been integrated into the execution process correctly and in such a way as to avoid errors You must observe all information in this manual as well as in the documents listed in Doc umentation on page 1 6 In particular only use the module according to the technical data and ambient conditions specified in Section 1 Technical data and ordering data on page 1 1 and onwards Within the SafetyBridge or PROFIsafe system the safety module can be used to achieve safety functions with the following requirements depending on the conditions of use Upto SIL 3 according to standard EN 61508 Upto SIL CL 3 according to standard EN 62061
55. ase refer to Section 7 Connection examples for safe inputs The maximum achievable SIL SIL CL Cat PL is specified in the table In order to achieve this Observe the information in the connection examples see Section 7 Connection ex amples for safe inputs Observe the requirements of the standards with regard to the external wiring and the sensors to be used to achieve a SIL SIL CL Cat PL see Measures required to achieve a specific safety integrity level on page 7 3 Connection to the Inline Single channel sensor or redundant Two channel redundant controlling device sensor plugs sensor Input signal ae ee Equivalent Non equivalent Cross circuit monitoring With With Without With Without With Without Sensors that can be connected Contact based With OSSD outputs Achievable SIL 2 SIL 2 SIL 3 SIL 3 SIL 3 SIL 3 SIL SIL CL Cat PL SILCL2 SILCL2 SILCL3 SILCL3 SILCL3 SILCL3 Cat 2 Cat 2 Cat 4 Cat 3 3 Cat 4 Cat 3 PL d PL d PLe PL d PLe PL d t Ke j Cat 3 can only be achieved with a redundant sensor ie The category that can be achieved depends on the sensor used 105411 en_01 PHOENIX CONTACT 2 IB IL 24 PSDI 16 PAC Cross circuit monitoring Error detection 2 8 PHOENIX CONTACT The clocking for cross circuit monitoring is provided when clock outputs UT1 and UT2 are parameterized accordingly If all inputs are parameterized without cross circui
56. ation for each channel speci M a Has it been ensured that any person intentionally starting hazardous movements nas a atest view ofthe dangerzone nn A Does the planned use correspond to the intended use Are the ambient conditions observed according to the technical data UD C 2 PHOENIX CONTACT 105411 _en_01 ee eee Have the accessories to be used been planned according to the order k ing data in this user manual cables plugs St Have specifications for assembly and electrical installation been defined ia e g EPLAN and communicated to the relevant personnel Se Have specifications for startup been defined and communicated to the rer S Date Signature test engineer 1 Signature test engineer 2 105411 _en_01 PHOENIX CONTACT C 3 IB IL 24 PSDI 16 PAC C2 Assembly and electrical installation Checklist for assembly and electrical installation of the safety module Device type equipment identification Was assembly completed according to the specifications specifications from the planning phase or according to the user manual Was the safety module installed in the control cabinet IP54 D a Do the cable cross sections correspond to the specifications A Is the transmission speed and the operating mode set correctly accord ing to the specifications W Is the protocol address set correctly according to the specifications oap Date Signature test engineer 1 Signature test eng
57. changes in one channel Input to 24 V The error is detected on a change in state as the state only changes i in one channel Input to ground The error is detected in state 1 or on a change in state from 0 to 1 as the state only changes in one channel Only applies when symmetry monitoring is active Typical parameterization Parameterization Parameterized as Remark Input xx channel 1 channel 2 Assignment Two channel equivalent a Start inhibit due to symmetry Disabled Application specific violation Cross circuit monitoring No cross circuit monitoring Set the filter time for the input to a value greater than the width of the test pulse for the OSSD sensor Cross circuit detection must be disabled 7 22 PHOENIX CONTACT 105411 en_01 105411_en_01 H me Connection examples for safe inputs 15 Two channel non equivalent assignment of safe inputs For two channel assignment of the safe inputs two adjacent inputs are always used This assignment is fixed and cannot be parameterized see Section Two channel on page 5 3 For two channel non equivalent assignment the state changes from 0 to 1 only when input INx_Ch1 changes state from 0 to 1 and input INx_Ch2 changes state from 1 to 0 If symmetry monitoring is enabled and the state at both inputs does not change within the parameterized time a diagnostic message is generated The state is active when t
58. connect the power to the system and make sure that it cannot be switched on again unintentionally Make sure installation has been completed before switching the power back on The system may only be started provided the system does not pose a hazard 4 2 1 Electrical installation of the Inline station Electrical installation of the Inline station includes the following Connecting the bus system to the Inline station Connecting the supply voltages for the Inline station Carry out electrical installation for the Inline station according to the IL SYS INST UM E user manual Please also observe the specifications in the documentation for the bus coupler used 4 2 2 Electrical installation of the safety module a During installation always observe the instructions in Electrical safety on page 1 3 Take measures to prevent the incorrect connection polarity reversal and manipulation of connections The supply voltages are supplied at a bus coupler and or a power terminal and are supplied to the safety module via the potential jumpers Therefore the electrical installation of the safety module only involves connecting the sensors The sensors are connected via Inline plugs e Wire the plugs according to your application For the terminal point assignment please refer to Section Terminal point assignment on page 3 3 For wiring proceed as follows e Strip 8 mm off the cable Inline wiring is norma
59. d Before assembling or removing the module disconnect the power to the module and the entire Inline station and ensure that it cannot be switched on again Make sure the entire system is reassembled before switching the power back on Observe the diagnostic indicators and any diagnostic messages The system may only be started provided neither the station nor the system poses a haz ard If replacing a module proceed as described for assembly and removal see Section As sembly removal and electrical installation on page 4 1 Ensure that the new safety module is mounted at the correct position in the local bus The new module must meet the following requirements Same device type Same or later version 8 2 2 Restart Once the safety module has been replaced proceed as described for initial startup see Section Initial startup on page 8 1 The parameterization of the previous module remains the same and is transmitted to the new module when the system is started Plug the Inline plugs into the correct connections Perform a function test after replacing the module 8 3 Validation Carry out a safety validation every time you make a safety related modification to the SafetyBridge or PROFIsafe system When validating your individual EUC check the assignment of the sensor connections Determine whether The correct safe sensors are connected to the safety module The safety module has been
60. device in a safe system F System PROFIsafe address Each safe module has a PROFIsafe address This address must be set on the safety mod ule F I O device via DIP switches and then configured in the configuration tool for the safe controller used PROFIsafe monitoring Monitoring time for safety related communication between the safe controller F CPU and time safe I O device F I O device This time is parameterized in the F_WD_Time F Parameter Consecutive number See Consecutive number A 2 PHOENIX CONTACT 105411_en_01 B Appendix F Parameters and iParameters B1 F Parameters a The values indicated in italics in Table B 1 are preset by the system and cannot be mod ified manually Table B 1 Overview of the F Parameters for the module Degani velue F_Source_ Automatic Address F_Destination_ Automatic Address 7 F_SIL SIL 3 The parameter uniquely identifies the PROFIsafe source address controller address The address is assigned automatically PROFIsafe destination address address of the safe device The address is assigned automatically However the value can be modified Make sure that the value set under F_Destination_Address and the value that you have set via the 10 pos DIP switch are the same Value range 1 1022 Monitoring time in the safety module A valid current safety telegram must arrive from the safe controller within the monitor ing time Otherwise the safety
61. drawn up an appropriate safety concept for your machine or system This includes a hazard and risk analysis according to the directives and standards specified in Section Directives and stan dards on page 1 5 as well as a test report checklist for validating the safety function See Appendix checklists on page C 1 SafetyBridge please refer to the documentation for the configurable safety module used The target safety integrity level SIL according to EN 61508 SIL CL according to EN 62061 or performance level and category according to EN ISO 13849 1 is ascertained on the basis of the risk analysis The safety integrity level ascertained determines how to connect and parameterize the safety module within the overall safety function Within the SafetyBridge or PROFIsafe system the safety module can be used to achieve safety functions with the following requirements depending on the conditions of use Upto SIL 3 according to standard EN 61508 Upto SIL CL 3 according to standard EN 62061 Upto Cat 4 PL e according to standard EN ISO 13849 1 Carry out a validation every time you make a safety related modification to your overall sys tem Use your test report to ensure that The safe devices are connected to the correct safe sensors and actuators The safe input and output channels have been parameterized correctly The variables have been linked to the safe sensors and actuators correctly single ch
62. e SafetyBridge Make sure that the addresses are the same The parameterized SafetyBridge address does not match the address set on the safety module The configurable safety module detected a distortion in Attempt transmission again the configuration and parameter data record If the error occurs permanently the data record in the controller is distorted In this case you can get SAFECOMF to generate a new data re cord 441 ga Internal error Please contact Phoenix Contact 446 B 4 PHOENIX CONTACT 105411_en_01 C Appendix checklists The checklists listed in this section provide support during the planning assembly and elec trical installation startup parameterization and validation of the IB IL 24 PSDI 16 PAC module These checklists may be used as planning documentation and or as verification to ensure the steps in the specified phases are carried out carefully Archive the completed checklists to use as reference for recurring tests The checklists do not replace the validation initial startup and regular testing performed by qualified personnel The following section of a checklist shows an example of a completed checklist Checklist Version HWIFW o0 Date ary 17 2008 Key Equipment identification Enter the device type and or the equipment identification for the relevant device Version HW FW Enter the hardware and firmware version of the device see Section Structure of the safety module
63. e 5 4 Start inhibit due to symmetry Disabled Disabled default setting a diagnostic message is gener violation Enabled ated in the event of symmetry violation Enabled a diagnostic message is generated in the event of symmetry violation In addition the affected input is set to the safe state Cross circuit detection No cross circuit monitoring As soon as cross circuit monitoring is enabled for an as Cross circuit monitoring signed input pair clock outputs UT1 and UT2 are clocked INx_CH1 gt UT1 Otherwise they are enabled without clocking INx_CH2 gt UT2 a The default values are shown in bold Symmetry Symmetry monitoring can be used to monitor the contact wear of the switch Symmetry start inhibit monitoring checks the extent to which the related filtered inputs enter another state simul taneously Symmetry is violated if the inputs indicate different states for a time greater than the value parameterized for symmetry This applies for positive and negative edges The safe controller PROFIsafe or the configurable safety module SafetyBridge is in formed of asymmetry violation by a diagnostic message If start inhibit due to symmetry vi olation is enabled symmetry violation locks the affected input Key for the following diagrams S Symmetry monitoring Diag Diagnostics Q Acknowledgment of the diagnostic message after acknowledging the diagnostic message the current state is read For no
64. e of the affected inputs Remove the error and then acknowledge the message Please observe the maximum failure detection time of 64 ms Ifa 1 signal is present at the input and an error occurs a maximum of 64 ms elapses until the error is detected Within this time another 1 can also be transmitted even in the event of an error Within the failure detection time 64 ms maximum the error can cause the state to change unexpectedly from 0 to 1 Ensure that such a change in state cannot restart the system unintentionally Please note that the processing time for the input tyy increases by up to 64 ms in the event of an error For supply for single channel assignment use the relevant clock output or an external sup ply external 24 V or OSSD State evaluation The module evaluates the states of the inputs and transmits the result to the safe controller PROFIsafe or the configurable safety module SafetyBridge In the process data image of a safe input A 0 is transmitted if a 0 signal is present at the input or an error has been detected A 1 is transmitted if a 1 signal is present at the input and no error has been detected PHOENIX CONTACT 1 5 IB IL 24 PSDI 16 PAC 7 3 1 Single channel with cross circuit monitoring If an input pair is parameterized as single channel with cross circuit monitoring the follow ing fixed assignment applies INx_Ch1 is permane
65. eceeeeceeeeseeeeaueeseeeeseeesaeeesaeeeees A 1 B Appendix F Parameters and IPAraMeters cccccceecceseecescecseeseuseseeeeeseeseeeenseeesseeseuesseeseass B 1 B 1 F ParamelorS scienna a ONE EAE B 1 B2 MF UAT VOUS TS sc cctecesciteailaje este cn secee laden ines sa neactantel uation B 2 B3 Diagnostic messages for parameter ECFLOMS ccccccsseeeeeeceeeeeeeseeeeeeeeseeeeeesaees B 3 B 3 1 Diagnostic messages for F Parameters and iParameters for PROFIsafe B 3 B 3 2 Diagnostic messages for parameter errors for SafetyBridge B 4 105411_en_01 PHOENIX CONTACT lil iv IB IL 24 PSDI 16 PAC C Appendix checklists PHOENIX CONTACT T E eae acetal eneieeantas tae C 1 PAU a E a Potente citanosegeegay C 2 Assembly and electrical installation oo cceceecceecceeeeeeeeeeeeeseeeeeseeeeesseeeeesaeeenss C 4 Startup and parameterization oa eeeeccssesccccceeeeeceeeeeeeeceaeeeeeeeeeeeeeeseeeeeeseeeeeeess C 5 MAIMGARIOUY Srcsaesziabsessansiecseres E hanes C 6 PEREI EE EEE T teeta E oat cca T lee up IR A aan ater D 1 105411_en_01 For your safety 1 For your safety Requirements Qualified personnel Documentation 105411_en_01 A Purpose of this manual The information in this document is designed to familiarize you with how the IB IL 24 PSDI 16 PAC safety module works its operating and connection elements and its parameter set tings This information will enable you to use the IB IL 24 PSDI 16 PAC
66. ected as a change in state from 1 to 0 in state 1 of the input An unexpected change from 0 to 1 is possible e g due to a loose contact Ensure that such a change in state cannot restart the system unintentionally Clock output to ground Short cir N The affected clock output is disabled cuit UTx ON Typical parameterization Parameterization Parameterized as value range Remark Input xx channel 1 channel 2 Assignment Both single channel Filter time t ilter 3 ms Application specific Symmetry Disabled Start inhibit due to symmetry Disabled violation Cross circuit monitoring Cross circuit monitoring 105411_en_01 PHOENIX CONTACT 1 7 IB IL 24 PSDI 16 PAC 7 3 2 Single channel supply through UT1 without cross circuit monitoring S1 S1 IN1_Ch1 Safety switch UT1 UTI 62403101 Supply through UT1 Figure 7 2 Single channel assignment of inputs supply through UT1 S1 S1 IN1_Ch1 Safety switch 24 V 24 V 70070018 Supply through external 24 V Figure 7 3 Single channel assignment of inputs external supply Basic specifications Sensor supply Internally through clock output UT1 or UT2 cross circuit monitoring disabled External 24 V Achievable SIL SIL CL Cat PL SIL 2 SIL CL 2 Cat 2 PL d WARNING Loss of electrical and functional safety To achieve the specified category please refer to Section Measures required to achieve a specific safety integrity
67. ensors Cat 4 Use proven and basic safety principles according to EN ISO 13849 2 Use appropriately qualified sensors see Section Requirements for controlling devic es sensors on page 2 5 Please note that mechanical failure of the switching device can result in the loss of the safety function All errors that cannot be detected can result in the loss of the safety function Take ap propriate measures to prevent such errors Suitable measures include for example protected cable installation or double insulation Please note the information in the fol lowing tables An accumulation of errors must not result in the loss of the safety function Following the third error evaluation can be aborted if the probability of further errors occurring is low Please take into consideration errors with a common cause 105411_en_01 105411_en_01 Connection examples for safe inputs 7 3 Single channel assignment of safe inputs For the single channel assignment of safe inputs the inputs operate independently of one another The assignment of each input signal to the clock output cannot be freely selected For the following examples please note the resulting behavior in the event of an error Note about cross circuits Please note that cross circuits with other inputs can only be detected if cross circuit monitoring is enabled The cross circuit error results in the transmission of the safe state in the process data imag
68. ensures error free transmission of the F Parameters Failsafe control system safe controller F Parameter PROFIsafe destination address address of the safe device see also F Parameter Failsafe I O device safe input and or output modules Modules with integrated safety functions which are approved for safety related operation Failsafe slave F Parameter PROFlsafe source address address of the safe controller see also F Parameter PHOENIX CONTACT A 1 IB IL 24 PSDI 16 PAC F System Failsafe system A failsafe system is a system that remains in the safe state or immediately enters a safe state when specific failures occur iParameter Individual safety parameter of a device Passivation If the safety module F I O device detects an error it switches the affected channel or all channels of the module to the safe state the channels are then passivated The detected errors are indicated at the safe controller For a safe input module when the F System is passivated instead of the process values present at the safe inputs substitute values 0 are provided for the safety program For a safe output module when the F System is passivated instead of the output values pro vided by the safety program substitute values 0 are transferred to the safe outputs PROFIsafe Safety related bus profile based on PROFIBUS DP or PROFINET It defines the communi cation between a safety program and the safe I O device F I O
69. event of overload The power supply unit must be able to supply four times 400 the nominal current of the external fuse Safe digital inputs Number Input design Supply Input current Maximum permissible current for 0 Minimum permissible current for 1 Permissible input voltage range Voltage range for 0 Voltage range for 1 Maximum switching frequency Filter time teitter Minimum filter time 1 4 PHOENIX CONTACT 8 two channel or 16 single channel According to the requirements of EN 61131 2 Type 3 Via clock outputs UT1 and UT2 or external supply Approximately 2 7 mA at 24 V typical 1 5 mA 2 0 mA 3 V to 30 V 3 V to 5 V 11 V to 30 V 10 Hz Can be parameterized see Section Parameterization of the safe inputs on page 5 3 3 ms accuracy 0 ms 0 5 ms 105411_en_01 Safe digital inputs Processing time of the input Simultaneity Symmetry evaluation Derating Permissible cable lengths Status indicators Technical data and ordering data tin tFiter tFw see Processing time of the input tIN in the event of a safety demand on page 5 6 100 Yes can be parameterized accuracy 25 No 500 m from the clock output to the safe input total based on forward and re turn path One green LED per input see Local diagnostic and status indicators on page 2 8 i The switching state of the inputs is constantly monitored In the event of an error
70. gal protection even where they may not be indicated as such Table of contents l FROYO Y e no hed clan cekee tem Atnb neat n nha T L tanita aeeaces 1 1 1 1 General safety NOS seciescseeeuvchnceeetereiewtdin rece vietes gia aeeveeste ries esteceiedicne ends 1 1 1 2 EISCINIG AS ANSLY carole settee A ae el ieee Peete eel Leese alah 1 3 1 3 Safety of the machine OF Syste aisir aa REA EE aE 1 4 1 4 Directives and standardS nn snnoeenoeennerereerrrnrrrerrrrerrrnerrtesrrerrrrerrrrenrrrenrrenteee 1 5 1 5 Corect USAGES sasiye n r E 1 5 1 6 DOCUMEMAUO Morssina a a a 1 6 1 7 PDDICVIATIONS USSG Cespe nate cerntenmuresreneneneteatacagieeaaaee 1 8 1 8 Da SLY MOTIING woes ete ett eal ON oar ise alle eta nate Aa oel andl ec det eae 1 8 2 PROGUCTOCSCIDUOM ororen ones a O e e E E aE 2 1 2 1 Brief description of the safety MOCUIE cccccseeeeecesseeeeeneeeeeeeceseeeeseaeeeeessaees 2 1 2 2 Structure of the Safety module ccccceeeceeceesseeeceeeeceesceeeeeceseuseeecenaeeeesseseess 2 2 2 3 Housing dimensions raien a a a a aa aE e 2 3 2 4 Safe digital inputs and clock outputs UT1 and UT2 ee eecccseeeeeeceseeeeeeeeeeees 2 4 2 4 1 Safe digital inputs cess csseteetats oeednnrectiteeantan aeeuauienanteueeersetes bi veneipectantaaneedeeutses 2 4 2 4 2 Clock outputs UT1 And UT2 2 0 ccccecceeceeeeeeceeeeeeeeeseeeeesaeeeeeesaaaeeess 2 6 2 5 Connection options for sensors depending on the parameterization
71. havior when the input is in state 0 Please note that if this error causes the safety switch to be switched on again this can result in delayed transmission of state 1 in the process data image of the inputs e g due to a loose contact Cross circuit Input to input None Yes The error cannot be detected and results in the loss of the safety func tion as the safety switch is bypassed Input to clock output None Yes The error cannot be detected and results in the loss of the safety func tion as the safety switch is bypassed Input to external 24 V None Yes The error cannot be detected and results in the loss of the safety func tion as the safety switch is bypassed Input to ground Yes None No The error is only detected as a change in state from 1 to O in state 1 of the input An unexpected change from 0 to 1 is possible e g due to a loose contact Ensure that such a change in state cannot restart the system unintentionally Clock output to external 24 V Gee es ee The error cannot be detected as clocking is disabled Clock output to ground Short cir The affected clock output is disabled cuit UTx ON External 24 V to ground No The error is only detected as a change in state from 1 to 0 in state 1 of the input An unexpected change from 0 to 1 is possible e g due to a loose contact Ensure that such a change in state cannot restart the system uninten
72. havior when the input is in state 1 Cable interrupt between clock out The error is detected as a change in state from 1 to 0 An unex put and sensor or between sensor pected change from 0 to 1 is possible e g due to a loose contact and input Ensure that such a change in state cannot restart the system unintentionally Behavior when the input is in state 0 Please note that if this error causes the safety switch to be switched on again this can result in delayed transmission of state 1 in the process data image of the inputs e g due to a loose contact 7 6 PHOENIX CONTACT 105411 en_01 Connection examples for safe inputs Table 7 5 Single channel supply through UT1 clocked or UT2 clocked Error type Detec Diag Loss of tion nostics SF Cross circuit Input to input None Yes The error cannot be detected and results in the loss of the safety func tion as the safety switch is bypassed If the inputs are assigned different clock outputs this error is detected as across circuit after 64 ms Input to assigned clock output None Yes The error cannot be detected and results in the loss of the safety func tion as the safety switch is bypassed Input to non assigned clock output See Note about cross circuits on page 7 5 cuit Clock output to clock output CR The error is only detected in state 1 of the input cuit Input to ground None The error is only det
73. he error and then acknowledge the message Acknowledging the diagnostic message deletes the message and activates the input The states at the input are detected immediately In your safe application program ensure that the system cannot be restarted unintentionally following acknowl edgment of the diagnostic message Please observe the maximum failure detection time of 64 ms Exceptions in the failure detection time are indicated in the tables Ifa 1 signal is present at the input and an error occurs a maximum of 64 ms elapses until the error is detected Within this time another 1 can also be transmitted even in the event of an error Within the failure detection time 64 ms maximum the error can cause the state to change unexpectedly from 0 to 1 Ensure that such a change in state cannot restart the system unintentionally Note about symmetry violation The symmetry violation diagnostic message is only displayed if it was not disabled during parameterization of the affected input Start inhibit due to symmetry violation disabled The symmetry violation message does not result in the transmission of the safe state see also Symmetry start inhibit on page 5 4 The message must be acknowledged However the current status of the inputs is dis played in the process data image of the inputs Start inhibit due to symmetry violation enabled The symmetry violation message results in the transmission of the safe
74. he state of the signal at channel 1 is equal to 1 and the signal at channel 2 is equal to O Cross circuits between different inputs can only be detected if the input signals are sup plied by different clock outputs Please note that if a delayed change in state at one of the two inputs causes the safety switch to be switched on again this can result in delayed transmission of state 1 in the process data image of the inputs e g due to a loose contact Example of correct and incorrect signal change 1 INO_Ch1 6 1 INO_Ch2 INO Ch1 Ch2 69402017 Figure 7 11 Correct signal change INO_Ch1 1 0 1 INO _Ch2 0 INO Ch1 Ch2 0 69402018 Figure 7 12 Error during signal change In Figure 7 12 the condition that both signals must be in the opposite state before the change in state is not met In this case diagnostic message 018x is generated Key for Figure 7 5 and Figure 7 6 INO_Ch1 Signal sequence at input 0 channel 1 INO_Ch2 Signal sequence at input 0 channel 2 INO Ch1 Ch2 Safety related signal for two channel input O channel 1 and channel 2 at the safe controller PROFIsafe or the configurable safety mod ule SafetyBridge PHOENIX CONTACT 7 23 IB IL 24 PSDI 16 PAC State evaluation The module evaluates the states of the inputs and transmits the result to the safe controller PROFIsafe or the configurable safety module SafetyBridge In the process data image of
75. her The input information of both inputs is mapped to one bit The unused bits are always set to 0 Single channel If two channel operation in the external wiring of the inputs is not required the inputs can be parameterized in such a way that they operate independently of one another single chan nel Parameterization Parameterize all safe input pairs in pairs The parameterization options are described in Table 5 1 Table 5 1 Parameterization of inputs Assignment Not used Parameterization is always for one input pair Used both single channel For unused inputs the data is filled with O Two channel equivalent For two channel the assignment of the inputs to one an Two channel non equiva other is specified and cannot be modified lent 105411 en_01 PHOENIX CONTACT 5 3 IB IL 24 PSDI 16 PAC Table 5 1 Parameterization of inputs Filter time titer The filter time is used to suppress interference for the input signals Select the filter time so that the duration of the input signal is greater than the filter time For inputs that are parameterized for two channel operation select the same filter time for both channels 1 The filter time directly affects the response time of the safety function Symmetry Disabled Parameterization is only active if the input is parameterized 100 ms for two channel operation Select the same value for both 1s channels ae See also Symmetry start inhibit on pag
76. in state 1 Cross Cir cuit The error is detected on a change in state as the state only changes in one channel Change in state from 1 to 0 The faulty input remains at 1 A O is transmitted in the process data image of the affected inputs Change in state from 0 to 1 A 0 is transmitted in the process data image of the inputs if the faulty No No No No input was not previously set to state 0 Cross cir No See Note about cross circuits on page 7 14 cuit No No No Cross cir cuit J The error is detected for inputs which are assigned to different clock outputs Symme The error is detected in state 1 or on a change in state from 0 to 1 try viola as the state only changes in one channel tion UTx ON The error is also detected as a short circuit of the clock output The affected clock output is disabled Short cir The error is detected in state 1 or on a change in state from 0 to 1 cuit as the state only changes in one channel Only applies when symmetry monitoring is active 7 16 PHOENIX CONTACT 105411_en_01 Connection examples for safe inputs Typical parameterization Start inhibit due to symmetry Enabled Application specific violation Cross circuit monitoring Cross circuit monitoring 105411 en_01 PHOENIX CONTACT 7 17 IB IL 24 PSDI 16 PAC 7 4 3 Two channel equivalent cro
77. inals 0 2 mm to 1 5 mm solid or stranded 24 16 AWG 105411_en_01 Mechanical requirements Vibration according to IEC 60068 2 6 Shock according to IEC 60068 2 27 Safety characteristics according to IEC 61508 EN 61508 Achievable SIL Probability of a dangerous failure on demand by the safety function PFD Probability of a dangerous failure per hour for the entire module PFH Hardware fault tolerance HFT of the module Permissible duration of use Safety characteristics according to DIN EN 62061 Achievable SIL claim limit Safe failure fraction SFF Probability of a dangerous failure per hour for the entire module PFH Hardware fault tolerance HFT of the module Permissible duration of use Safety characteristics according to EN ISO 13849 1 Achievable performance level Diagnostic coverage DC Mean time to dangerous failure MTTFd Supply voltage U logic Technical data and ordering data Operation 2g Criterion A 15g over 11 ms Criterion A SIL 2 single channel SIL 3 two channel Depends on the parameterization and wiring see Section Connection op tions for sensors depending on the parameterization on page 2 7 and Sec tion Connection examples for safe inputs on page 7 1 SIL 2 1 of 102 maximum corresponds to 1 x 107 SIL 3 1 of 10 maximum corresponds to 1 x 10 SIL 2 1 of 10 maximum corresponds to 1 x 10 8 SIL 3 1 of 10 maximum correspo
78. ineer 2 C 4 PHOENIX CONTACT 105411 _en_01 C3 Startup and parameterization Checklist for startup and parameterization of the safety module Was startup completed according to the specifications specifications from the planning phase or according to the user manual During startup is it ensured that any person starting hazardous move ments intentionally can only do so with a direct view of the danger zone Are all parameters parameterized for the inputs pf Are unused inputs parameterized as not used 0 Are safety distances that must be observed calculated according to the response and delay times implemented Date Signature test engineer 1 Signature test engineer 2 105411_en_01 PHOENIX CONTACT C 5 IB IL 24 PSDI 16 PAC C4 Validation Checklist for validating the safety module Test engineer 1 CY Test engineer 2 Requirement mandatory Yes Device type equipment identification Have all the mandatory requirements for the Planning checklist been met Have all the mandatory requirements for the Assembly and electrical in a stallation checklist been met Oo Have all the mandatory requirements for the Startup and parameteriza io tion checklist been met Oo i Does the parameterization of the safe inputs correspond to the version Oo and the actual connection of the controlling device Has the assignment of the sensors to the inputs and the variables of the s
79. le does not match the required length Invalid F Parameter record version Check device description The safety module F Module version does not match Only V2 mode permitted the required version The checksum determined by the safety module F Check F Parameters repeat calculation Module via the PROFIsafe parameters CRC1 does not match the CRC1 transmitted in the parameter tele gram 71 255 During active process data communication a new F Pa Only send modified parameter data when pro rameter block was received which differs from the F Pa cess data communication is not active rameter block currently used Incorrect type ID for the F Parameter block Check device description F_Block_ID i ae Invalid parameterization of F_CRC_Length Check device description 105411_en_01 PHOENIX CONTACT B 3 IB IL 24 PSDI 16 PAC Table B 3 iParameter parameter errors Error code hex O3F2 iPar_CRC is incorrect Check iParameters repeat calculation O3FA iPar_CRC is not equal to F_iPar_CRC Apply correct value O3FB PST_Device_ID is incorrect Correct value 70pex for IB IL 24 PSDI 16 PAC F_ Destination Address in the iParameters is incorrect Correct value Make sure that the value set under F_Destination_Address and the value that you have set via the 10 pos DIP switch are the same B 3 2 Diagnostic messages for parameter errors for SafetyBridge Table B 4 Parameter errors SafetyBridge error a
80. le channel and maximum two channel as signment are illustrated Depending on the parameterization other process data word as signments are also possible Assignment of inputs to the process data input word in the standard control system Byte bit view bye nna pt df 7 io oh tat fet fo single chan N3_ INS IN2 IN2 IN1 IN1 INO INO A al _Ch2 _Ch1 _Ch2 _Ch1 _Ch2 _Ch1 _Ch2 _Ch1 INO INO INO INO two channel Word bit view pt is dadaa tt fio 9 a Byte bit view Byte 2 ie OOOO ptf 7 io fo tats fet lo Input is le chan IN7 IN7 IN6 IN6 IN5 IN5 IN4 IN4 a Ch2 _Ch1 Ch2 Ch1 Ch2 _Ch1 _Ch2 _Ch1 on 2 n Input two channel 182 o A The diagnostic data is transmitted to the standard control system via the configurable safety module 2 8 2 PROFIsafe PROFIBUS PROFINET The module occupies four words in the Inline system and four words in the PROFIBUS sys tem The way in which these words are mapped in the higher level control system is specific to the controller used and is described in the quick start guide for the controller 105411_en_01 Product description 2 9 Programming data configuration data 2 9 1 Local bus INTERBUS Table 2 3 Local bus INTERBUS Protocol SafetyBridge PROFIsafe Operating mode Mode 2 Mode 1 ID code A3hex 163gec CBhex 203 dec Length code O4nex 04 gec O4nex 04 dec Input address area Controller specific
81. llite number EVERE AERA SERED po fT TE 1 dec to 31 dec 1 dec to 1 6dec 4 2 PHOENIX CONTACT 105411_en_01 Assembly removal and electrical installation Table 4 2 Switch position for PROFIsafe PROFIsafe Address switch Thex to SFFrex Procedure If the DIP switch settings have to be modified proceed as follows e Use the switch to set the transmission speed to 500 kbaud or 2 Mbaud e Set the protocol address a Set the DIP switches before assembling the module in the Inline station The switches cannot be accessed when the safety terminal is installed in the Inline station 4 1 4 Assembly and removal of the safety module For general information on assembling and removing Inline terminals please refer to the IL SYS INST UM E user manual Set the DIP switches prior to assembly see Section Setting the DIP switches on page 4 2 The DIP switches cannot be accessed when the safety module is installed in the Inline station Assembly Observe a mounting distance of 30 mm above and 40 mm below the safety module Shorter distances may inhibit proper handling during installation e Disconnect the power to the station Snap on base e Before snapping on the safety module remove the inserted plugs from the safety ter minal and the adjacent plugs from the neighboring Inline terminal on the left This pre vents the potential routing knife contacts and the keyway featherkey connections from being damaged
82. lly done without ferrules However it is possible to use ferrules If us ing ferrules make sure they are properly crimped e Pusha screwdriver into the slot of the appropriate terminal point Figure 4 6 detail 1 so that you can insert the wire into the spring opening Phoenix Contact recommends using a SZF 1 0 6X3 5 screwdriver Order No 1204517 see Phoenix Contact CLIPLINE catalog e Insert the wire Figure 4 6 detail 2 Remove the screwdriver from the opening This clamps the wire 105411 _en_01 PHOENIX CONTACT 4 5 IB IL 24 PSDI 16 PAC 6452B032 Figure 4 6 Connecting unshielded cables e Insert the assembled plugs in the corresponding module slot see Section Terminal point assignment on page 3 3 e Mark all connections to prevent connections to the Inline plugs being mixed up see IL SYS INST UM E user manual 4 6 PHOENIX CONTACT 105411 en_01 Parameterization of the safety module 5 Parameterization of the safety module SafetyBridge address a Parameterization of inputs 105411_en_01 5 1 Parameterization in a SafetyBridge system Parameterization includes the following Assigning the SafetyBridge address for the corresponding configurable safety module Parameterizing the inputs The SafetyBridge address is a unique ID for the safety module in the SafetyBridge structure It is assigned in the configuration software for the assigned configurable safety module The address of
83. lugs or Inline plugs listed in the ordering data 105411_en_01 PHOENIX CONTACT 4 1 IB IL 24 PSDI 16 PAC 4 1 3 Setting the DIP switches The module has a 2 pos and a 10 pos DIP switch The DIP switches are located on the left hand side of the safety module 500KBD Mode2 ry Figure 4 1 DIP switch A Switch for setting the transmission speed and the operating mode B Switch for setting the address 2 pos DIP switch The transmission speed and the operating mode Mode are set via the 2 pos DIP switch Left switch The transmission speed can be set to 500 kbaud or 2 Mbaud Transmission speed The transmission speed is set to 2 Mbaud by default Only use devices with a uniform transmission speed within an Inline station a local bus It is not possible to operate a mixture of devices with different transmission speeds Right switch For PROFIsafe set Mode 1 Mode For SafetyBridge set Mode 2 10 pos DIP switch proto The SafetyBridge address or the PROFIsafe address F Address is set via the 10 pos DIP col address switch For more detailed information on the SafetyBridge address please refer to the documen tation for the configurable safety module used PROFIsafe set the PROFIsafe address for the PROFIsafe device PROFIsafe addresses 1 to 1023 1hex to 3FFhex are permitted Overview of the switch po sitions Table 4 1 Switch position for SafetyBridge V3 SafetyBridge Address switch Island number Sate
84. m operated switches with positive opening contact Emergency stop buttons cable operated switches with positive opening contact according to EN 60947 5 1 Controlling devices can be evaluated on a single channel or two channel connection depending on the application Under certain circumstances switches e g for position monitoring must be designed redundantly depending on the risk In order to achieve Cat 3 Cat 4 SIL 3 SIL CL 3 or PL d or e controlling devices must usually be designed redundantly Please observe any special environmental requirements in your application when se lecting the controlling devices Please observe the applicable C standards in your application e g EN 1010 in which for example the number of controlling devices required to achieve a particular category is specified PHOENIX CONTACT 2 5 IB IL 24 PSDI 16 PAC a Technical data Behavior in the event of an error Error detection Diagnostics 2 4 2 Clock outputs UT1 and UT2 The module has two independent clock outputs They provide the supply voltage for the safe inputs Each of these clock outputs can provide a pulse pattern to detect cross circuits and short circuits in the external wiring of the inputs The clock outputs are also switched on and monitored when not parameterized If a short circuit occurs at a clock output when it is in this state the clock output is switched off This is indicated by the local diagnostic LED To
85. module enters the safe state The selected monitoring time must be sufficiently high for telegram delays to be toler ated by the communication but still ensure a sufficiently fast error response in the event of an error e g interruption in communication Value range 1 65534 in 1 ms increments Unit ms Safety integrity SIL according to IEC 61508 of the safety module WARNING Safety functions up to SIL 3 can be achieved with the safety module The safety integrity level that can actually be achieved depends on the param eterization the structure of the sensor and the cable installation see Connection examples for safe inputs on page 7 1 F_CRC_Length 3 byte CRC This parameter transmits the length of the CRC2 code to be expected in the safety telegram to the safe controller 105411_en_01 PHOENIX CONTACT B 1 IB IL 24 PSDI 16 PAC Table B 1 Overview of the F Parameters for the module Default value F_Block_ID 1 Parameter block type identification es __ lipoma r Pranses is bo oR pan F_Par_Version 1 Version number of the F Parameter block aaa A F_iPar_CRC CRC checksum via the iParameters The value must be greater than 0 When verifying the safety function check whether the F_iPar_CRC parameter is greater than 0 for all devices If not check the iParameters and the CRC checksum in the iParameter and F Parameter B2 iParameters The iParameters are individual device parameters They include
86. module within a SafetyBridge or PROFIsafe system according to your requirements Validity of the user manual This manual is only valid for the IB IL 24 PSDI 16 PAC module in the version indicated on the inner cover page 1 1 General safety notes WARNING Depending on the application incorrect handling of the safety module can pose serious risks for the user When working with the safety module within the SafetyBridge or PROFIsafe system please observe all the safety notes included in this section Knowledge of the following is required The non safety related target system e g INTERBUS PROFIBUS PROFINET The SafetyBridge or PROFIsafe system The components used in your application The Inline product range Operation of the software tools used Safety regulations in the field of application In the context of the use of the SafetyBridge or PROFIsafe system the following operations may only be carried out by qualified personnel Planning Configuration parameterization programming Installation startup servicing Maintenance decommissioning This user manual is therefore aimed at Qualified personnel who plan and design safety equipment for machines and systems and are familiar with regulations governing safety in the workplace and accident pre vention Qualified personnel who install and operate safety equipment in machines and sys tems In terms of the safety
87. mple of correct and incorrect signal change on page 7 23 7 28 PHOENIX CONTACT 105411 en_01 Connection examples for safe inputs Device diagnostics and behavior of the module in the event of an error Table 7 12 Two channel non equivalent without cross circuit monitoring supply through a clock output or external supply Error type Detec Diag Loss of tion nostics SF Error in the sensor A contact will not open The error is detected as the state only changes in one channel A contact will not close Other errors Please take into consideration all possible errors that can occur depending on the sensor in the sensor Error in the wiring sor and input Cross circuit Input to input Yes a The error is detected as the state only changes in one channel Input cable interrupt between clock Yes No The error is detected on a change in state at the latest as the state output and sensor or between sen only changes in one channel Input to clock output The error is detected as the state only changes in one channel Change in state from 1 to 0 The faulty input remains at 1 A 0 is transmitted in the process data image of the affected inputs Clock output to clock output The error is not detected Input to external 24 V The error is detected on a change in state at the latest as the state only changes in one channel Clock output to external 24 V Clock output to ground Yes Short cir
88. n equivalent parameterization a negated signal is present at input INO_Ch2 shown in the diagrams 5 4 PHOENIX CONTACT 105411 en_01 Parameterization of the safety module 1 1 IN h1 INO_Ch1 a 0 7 0 1 1 IN h2 INO_Ch2 OC 0 LS 0 ai a1 Bit Bit i 0 i 0 Diag Diag 0 0 S S 76020007 Figure 5 1 Example for a signal change within the parameterized time for symmetry monitoring INO_Ch1 1 INO_Ch1 1 0 gt 0 1 1 IN h2 INO _Ch2 OC 0 a 0 P 1 Bit Bit 0 0 Diag 1 Diag i 0 0 S S 76020008 Figure 5 2 Example for a signal change outside the parameterized time for symmetry monitoring start inhibit due to symmetry violation is disabled 1 INO_Ch1 T 0 1 INO _Ch2 T 0 Bit 1 0 es D iag o 1 Co S S S S S S 76020009 Figure 5 3 Example for a signal change outside the parameterized time for symmetry monitoring start inhibit due to symmetry violation is enabled After acknowledging the diagnostic message see Section Acknowledging an error on page 9 8 the current state at the input is immediately transmitted to the safe controller PROFIsafe or the configurable safety module SafetyBridge If a startup inhibit is re quired following error acknowledgment this must be implemented by the user in the appli cation program A symmetry violation can also be triggered by a cross circuit see Section Connection ex amples for safe inputs on page 7 1 105411 _en_01 PHOENIX CONTACT 5 5 IB IL 2
89. nds to 1 x 109 Depends on the parameterization see Table 7 4 on page 7 3 20 years SIL CL SIL 2 single channel SIL CL SIL 3 two channel Depends on the parameterization and wiring see Section Connection op tions for sensors depending on the parameterization on page 2 7 and Sec tion Connection examples for safe inputs on page 7 1 99 SIL 2 1 of 10 maximum corresponds to 1 x 10 8 SIL 3 1 of 10 maximum corresponds to 1 x 109 Depends on the parameterization see Table 7 4 on page 7 3 20 years PL e two channel PL d single channel Depends on the parameterization and wiring see Section Connection op tions for sensors depending on the parameterization on page 2 7 and Sec tion Connection examples for safe inputs on page 7 1 99 For single channel assignment 76 years For two channel assignment 100 years The safety terminal is supplied with communications power via the bus coupler or a designated power terminal in the station Potential routing is used for the communications power in the Inline station For the technical data please refer to the data sheet for the bus coupler or power terminal used Current consumption 105411_en_01 190 mA maximum PHOENIX CONTACT 1 3 IB IL 24 PSDI 16 PAC Supply voltage U sensors clock outputs The safety terminal is supplied with main voltage Uy via the bus coupler or a power terminal in the station Poten
90. ng the operating equipment please take into consideration the contamination and surge voltages which may occur during operation The IB IL 24 PSDI 16 PAC module is designed for surge voltage category Il according to DIN EN 60664 1 If you expect surge voltages in the system which exceed the values de fined in surge voltage category II take into consideration additional measures for voltage limitation Installation and configura Please observe the instructions for installing and configuring the system see Section Doc tion umentation on page 1 6 WARNING Depending on the application incorrect installation and upgrades can pose serious risks for the user The user is obliged to design the devices used and their installation in the system accord ing to these requirements This also means that existing plants and systems retrofitted with SafetyBridge or PROFIsafe must be checked and tested again in this respect 105411 _en_01 PHOENIX CONTACT 1 3 IB IL 24 PSDI 16 PAC Draw up and implement a safety concept a Check hardware and pa rameterization 1 4 PHOENIX CONTACT 1 3 Safety of the machine or system The machine system manufacturer and the operator are solely responsible for the safety of the machine or system and the implemented application in which the machine or system is used The Machinery Directive must therefore be observed In order to use the safety module described in this document you must have
91. ntacts can be opened e g following welding or mechanical fail ure when a switch is actuated Please note that a single error can result in the loss of the safety function between tests Ensure that the external wiring is tested by the machine control system on machine startup and at suitable intervals This test must detect the loss of the safety function PHOENIX CONTACT 7 3 IB IL 24 PSDI 16 PAC 7 4 PHOENIX CONTACT Cat 3 Use proven and basic safety principles according to EN ISO 13849 2 Use appropriately qualified sensors see Section Requirements for controlling devic es sensors on page 2 5 Please note that mechanical failure of the switching device can result in the loss of the safety function Take appropriate measures e g fuse protection redundancy positive opening etc to ensure that the contacts can be opened e g following welding or mechanical fail ure when a switch is actuated Please take into consideration errors with a common cause All errors that cannot be detected can result in the loss of the safety function Take ap propriate measures to prevent such errors Suitable measures include for example protected cable installation or double insulation Please note the information in the fol lowing tables Ensure that a single error does not result in the loss of the safety function If single channel sensors are not available for this category use two channel s
92. ntly assigned to clock output UT 1 INx_Ch2 is permanently assigned to clock output UT2 S1 IN1_Ch1 S1 Safety switch UT 1 1054110003 Figure 7 1 Single channel assignment of inputs Basic specifications Sensor supply Internally through clock output UT1 clocked or UT2 clocked Achievable SIL SIL CL Cat PL SIL 2 SIL CL 2 Cat 3 PL d WARNING Loss of electrical and functional safety Toachieve the specified category please refer to Section Measures required to achieve a specific safety integrity level on page 7 3 Please note that in order to achieve the specified PL the sensor must have a medium level of diagnostic coverage 90 to 99 and medium MTTFd A high level of diag nostic coverage gt 99 is recommended for the application according to PL d Use sensors that can achieve the required safety integrity level Device diagnostics and behavior of the module in the event of an error Table 7 5 Single channel supply through UT1 clocked or UT2 clocked Error type Detec Diag Loss of tion nostics SF Error in the sensor A contact will not open re aa The error cannot be detected and results in the loss of the safety func tion A contact will not A contact will not close No None No The error cannot be detected error cannot be detected E errors no freer take into consideration Le errors that can occur in depending on the sensor the sensor Error in the wiring Input Be
93. ocessing time of the input tiy please observe the system specific PRO Flsafe behavior e g watchdog time duration of demand processing time of the safe con troller PHOENIX CONTACT 6 1 Connection examples for safe inputs 7 Connection examples for safe inputs 105411_en_01 7 1 Explanation of the examples Depending on the type of wiring the inputs of a module can achieve different safety integrity levels SIL SIL CL Cat PL simultaneously as long as the settings do not contradict one another The following examples only describe the options for the electrical connection of sensors to the safe inputs Should you have any questions regarding applications to be implemented please contact the Phoenix Contact safety hotline see Safety hotline on page 1 8 The following are specified for each example Basic specifications The main data for the example is specified in the table Device diagnostics and behavior of the module in the event of an error Diagnostic capability depends on the parameterization Ifa message is transmitted to the safe controller PROFIsafe or the configurable safety module SafetyBridge in the event of an error the message is specified in the tables For information on the relevant error code possible solutions and information as to whether acknowledgment is required please refer to Section Errors messages and removal on page 9 1 The symmetry violation diagnostic message i
94. of an error Table 7 9 Two channel equivalent cross circuit monitoring disabled supply through a clock output or external supply Error type Detec Diag Loss of tion nostics SF Error in the sensor A contact will not open Yes No The error is detected on a change in state as the state only changes in one channel Change in state from 1 to 0 The faulty input remains at 1 A 0 is transmitted in the process data image of the affected inputs Change in state from 0 to 1 A 0 is transmitted in the process data image of the affected inputs as the faulty input was not previously set to state 0 No On a change in state from 0 to 1 a 0 is transmitted in the process data image of the affected inputs as only one channel reports this change in state Please take into consideration all possible errors that can occur in the sensor lt A contact will not close es Other errors depending on the sensor Error in the wiring Cable interrupt between clock out put or external supply and sensor unintentionally Cable interrupt between sensor and Yes input Symme try viola tion The error is detected in state 1 or on a change in state from 0 to 1 as the state only changes in one channel Yes None No Behavior when the input is in state 1 The error is detected as a change in state from 1 to O
95. on Cross circuit monitoring Cross circuit monitoring E l 105411_en_01 PHOENIX CONTACT 7 27 IB IL 24 PSDI 16 PAC 7 5 3 Two channel non equivalent cross circuit monitoring dis abled supply through a clock output or external supply S1 S1 S2 IN1_Ch1 Two switching elements IN1_Ch2 UT1 UT2 S2 Supply through UT1 or UT2 UT1 UT2 69404223 Figure 7 14 Two channel non equivalent assignment of inputs supply through UT1 or UT2 cross circuit monitoring disabled S1 S1 S2 IN1_Ch1 Two switching elements 24 V IN1_Ch2 S o5 Supply through external 24 V 24 V 70070023 Figure 7 15 Two channel non equivalent assignment of inputs external supply Basic specifications Two channel non equivalent Sensor supply Internally through clock output UT1 or UT2 clocking disabled or externally Achievable SIL SIL CL Cat PL SIL 3 SIL CL 3 Cat 3 PL d WARNING Loss of electrical and functional safety Toachieve the specified category please refer to Section Measures required to achieve a specific safety integrity level on page 7 3 Please note that in order to achieve the specified PL the sensor must have a medium level of diagnostic coverage 90 to 99 and medium MTTFd A high level of diag nostic coverage gt 99 is recommended for the application according to PL d Use sensors that can achieve the required safety integrity level To understand the change in state please refer to Exa
96. on a change in state as the state only changes try viola in one channel tion The error is detected if the other input is set to 1 See Note about cross circuits on page 7 24 Y Input to non assigned clock output Yes Cross cir cuit Clock output to clock output Y Cross cir cuit Y e e Input to ground e None The error is detected on a change in state at the latest as the state only changes in one channel Clock output to ground Short cir No The error is detected on a change in state at the latest as the state J O O O O S o The error is detected for inputs which are assigned to different clock utputs S No S cuit only changes in one channel UTx ON The error is also detected as a short circuit of the clock output The affected clock output is disabled Only applies when symmetry monitoring is active An error in input circuit INx_Ch2 can only be detected in the event of a safety demand Ear ly error detection e g by testing the safety function at regular intervals is required as an accumulation of errors may result in the loss of the safety function 7 26 PHOENIX CONTACT 105411 en_01 Connection examples for safe inputs Typical parameterization Parameterization Parameterized as value range Remark Input xx channel 1 channel 2 Symmetry Disabled Disabled Application _Application specific Start inhibit due to symmetry Disabled Application specific violati
97. on instruc tions Please read the complete package slip carefully The module may only be installed and removed by qualified personnel b NOTE Electrostatic discharge Ate The safety module contains components that can be damaged or destroyed by electro static discharge When handling the safety module observe the necessary safety precau tions against electrostatic discharge ESD according to EN 61340 5 1 and EN 61340 5 2 4 1 2 General WARNING Unintentional machine startup Do not assemble or remove the module while the power is connected Before assembling or removing the module disconnect the power to the module and the entire Inline station and ensure that it cannot be switched on again Make sure the entire system is reassembled before switching the power back on Observe the diagnostic indicators and any diagnostic messages The system may only be started provided neither the station nor the system poses a haz ard The IB IL 24 PSDI 16 PAC safety terminal is designed for use within an Inline station Only use the safety terminal in the 24 V DC area of an Inline station To ensure reliable operation install the safety terminal in housing protected from dust and humidity IP54 or higher In order to prevent manipulation secure the housing control cab inet control box against being opened by unauthorized persons Mount all Inline terminals on 35 mm DIN rails Only connect the cables using the supplied Inline p
98. parameter data to the module 035x The value for symmetry monitoring is Correct value and resend parameter ns aie 848 INO_Ch1 outside the permissible range data to the module INO_Ch1 IN7_Ch1 x 8 F 855 IN7_Ch1 INO_Ch2 IN7_Ch2 856 INO_Ch2 863 IN7_Ch2 9 6 PHOENIX CONTACT 105411 en_01 9 5 Table 9 6 General errors Error code hex Device tem perature at critical value Error due to receipt of an unexpected message Error due to receipt of an unexpected message while ac knowledging a diag nostic message The device firmware handles this diag nostic message with the highest priority Only when this mes sage has been ac knowledged cor rectly are other errors indicated if present General errors Immediate shut down Further tem perature increase causes the module to switch to the safe state The acknowledg ment process dur ing which an unex pected message was received is aborted The corre sponding error re mains in the error memory Diagnostic message 01F3 is in dicated Errors messages and removal Check and adapt Ambient condi tions Derating Switching fre quency Check and adapt the assignment of the di agnostic and confir mation variables at the corresponding function block see documentation for the controller used Acknowledge diag nostic message 01F3 so that the next message from the error memory can be indicated
99. rable safety module In this case check and correct the settings PHOENIX CONTACT 5 1 IB IL 24 PSDI 16 PAC PROFIsafe address Parameterization of inputs F Parameters and iParam eters 5 2 PHOENIX CONTACT 5 2 Parameterization in a PROFIsafe system Parameterization includes the following Assigning the PROFIsafe address via the configuration software of the control system manufacturer Parameterizing the inputs Assigning the parameterizable F Parameters and iParameters The PROFIsafe address is a unique ID for the safety module in the PROFIsafe structure It is assigned in the configuration software Set this address via the DIP switches prior to as sembling the safety module see Setting the DIP switches on page 4 2 The parameterization of the safe inputs determines the behavior of the module and there fore has a considerable effect on the safety integrity level that can be achieved To parameterize the module the parameterization of the safe controller created in the pa rameterization tool is automatically written to the module on every power up or reset The following conditions must be met The supply voltage is present The local bus is in the RUN state The communication connection has been established between the controller and safe ty module The module cannot be operated if it is not parameterized In this case the FS LED flashes The module is ready to operate if the
100. rent carrying capacity for the main circuit Uj is 8 A total current with the segment circuit that is not used in the safety terminal This current carrying capacity can be reduced if certain terminals are used Please refer to the information in the terminal specific data sheets If the limit value of the potential jumpers Up and Us is reached total current of Us and Up a new power terminal must be used NOTE Module damage due to polarity reversal Polarity reversal places a burden on the electronics and despite protection against polar ity reversal can damage the module Therefore polarity reversal must be prevented PHOENIX CONTACT For the behavior of the safety module in the event of an error at the supply voltage Uy please refer to Section Supply voltage errors on page 9 5 Us for supply at a bus coupler or a power terminal not required in the safety terminal 24V DC External fuse PELV 8 A maximum Um for supply at a bus coupler ora power terminal Y tioo IH WEI HIT LSI If GND for supply at a bus coupler or a power terminal 76191004 Figure 3 1 Supply Uy with connection to functional earth ground according to EN 60204 1 NOTE Damage to module electronics in the event of surge voltage Do not use a DC distribution network DC distribution network according to IEC 61326 3 1 A DC distribution network is a DC power supply network which supplies a complete indus
101. resrrrnrnrrerrnnerreesrrenrneene 4 1 4 1 1 Unpacking the module isss esn a N 4 1 4 1 2 GENF o E arene etry errtcel errr rn eet et ferent eeeeeees 4 1 105411_en_01 PHOENIX CONTACT i IB IL 24 PSDI 16 PAC 4 1 3 Setting the DIP switches siicdswiseries tetiasstesctndsslneshencdawedssactereetadiaaneiel 4 2 4 1 4 Assembly and removal of the safety module ccccssseeeeeeeeeeeeeens 4 3 4 2 EICCIICAIINSTAN ALON spss oes ace ecswceleacessatnce a a E aceite ication 4 5 4 2 1 Electrical installation of the Inline Station ccccceccseseeeeeeeeeeeeeneees 4 5 4 2 2 Electrical installation of the safety module cccccsseeeeeeeeeeeeeeenees 4 5 5 Parameterization of the Safety module cccecccseececeeeeeeeeeeseeeeeseeeeeseeeeseaeesseeeeseeeesseeeeseeeeess 5 1 5 1 Parameterization in a SafetyBridge system cccccseeceeeeeeeeeeeeeeneeeeeeseeeeeesenaees 5 1 5 2 Parameterization in a PROFIsafe system ccccccseseeeeeeeeeeeeeeeeeeeeeeeeaeeeeeenaees 5 2 5 3 Parameterization of the Safe iNDUtS ccccccccseeeeeceeeeeeeeeeeseeeeesaeeeeeesaeeeeesenaees 5 3 5 4 Parameterization of clock outputs UT1 and UT2 ec eeeeeeeeceteeeeeeeeeeeeeeenaees 5 6 6 DUFATION OF a Salely demand silva ccs etiandetivaldavancnse Anes seeaduavadetacvencs amine cabaret amee amarante 6 1 6 1 Dally Brd GEren a e e E E O E NNS 6 1 6 2 eal 0 el os ae a E E ee 6 1 7 Connection examples tor Sate INOUtS
102. s of the clock outputs is approximately 50 of the period length Typical pulse pattern T lt 1 ms T lt 1 ms T lt 1 ms UT T T T 3 0 E E E N __ t _ _ _ 10 20 30 40 50 60 70 80 490 100 110 t ms T T T UT2 lt 1 ms lt 1 ms lt 1 ms J 0 ro cr ar SSS SS SSS S S D cal 10 20 30 40 50 60 70 80 90 100 110 t ms 73410011 Figure 5 4 Typical pulse pattern 105411_en_01 Parameterization of the safety module Key T Test pulse Pulse width lt 1 ms Period length lt 40 ms 105411_en_01 PHOENIX CONTACT 5 7 Duration of a safety demand 6 Duration of a safety demand 105411_en_01 The duration of a safety demand must be greater than the processing time of the corre sponding input t see also Processing time of the input tIN in the event of a safety de mand on page 5 6 6 1 SafetyBridge If the safety module detects a safety demand after the processing time of the input tiy has elapsed when using SafetyBridge this time is extended by the module until the configurable safety module has received the safety demand 6 2 PROFIsafe If the safety module detects a safety demand safe 0 after the processing time of the input tn has elapsed when using PROFIsafe this time is extended by the module until the con secutive number has changed twice WARNING Loss of functional safety Observe the behavior of the controller when processing the safe inputs In addition to the pr
103. s only displayed if it was not disabled dur ing parameterization of the affected input Typical parameterization The table illustrates an example of all the parameters for the specified assignment Key for all figures and tables in this section Table 7 1 Figures S Floating switch mechanical or electrical g 73410009 Table 7 2 Device diagnostics and behavior of the module in the event of an error tables UT1 or UT2 LED diagnostic message for each clock output Clocked Clocking enabled PHOENIX CONTACT 7 1 IB IL 24 PSDI 16 PAC Table 7 3 Parameterization tables Bold Mandatory setting Normal Typical setting another setting is possible depending on the appli cation Not evaluated Errors cross circuits short circuits which can be prevented by correct installation e g protected cable installation isolated cable installation double insulation use of ferrules are not described in the following tables Therefore for example only errors between inputs which are on the same plug are de scribed For example in the event of correct installation cross circuits with inputs outputs of other plugs cannot occur For all examples please also observe the measures specified in the individual tables which must be taken to achieve the specified SIL SIL CL Cat PL and all measures accord ing to standards EN 61508 EN 62061 and EN ISO 13849 1 to achieve the specified SIL SIL CL Cat PL 7 2
104. s situation which if not avoided could result in death or serious injury CAUTION This indicates a hazardous situation which if not avoided could result in minor or moderate injury This symbol together with the signal word NOTE and the accompanying text Q alert the reader to a situation which may cause damage or malfunction to the device hardware software or surrounding property This symbol and the accompanying text provide the reader with additional in formation or refer to detailed sources of information How to contact us Up to date information on Phoenix Contact products and our Terms and Conditions can be found on the Internet at www phoenixcontact com Make sure you always use the latest documentation It can be downloaded at www phoenixcontact net products If there are any problems that cannot be solved using the documentation please contact your Phoenix Contact subsidiary Subsidiary contact information is available at www phoenixcontact com PHOENIX CONTACT GmbH amp Co KG Flachsmarktstra e 8 32825 Blomberg GERMANY Should you have any suggestions or recommendations for improvement of the contents and layout of our manuals please send your comments to tecdoc phoenixcontact com PHOENIX CONTACT Please observe the following notes PHOENIX CONTACT General terms and conditions of use for technical documentation Phoenix Contact reserves the right to alter correct and or improve the technic
105. se the correct operation of the safety module can no longer be ensured 10 3 Decommissioning and disposal The machine or system manufacturer specifies the procedure for decommissioning Decommissioning may only take place according to these specified procedures When decommissioning a SafetyBridge or PROFIsafe system or parts thereof ensure that the safety modules used Are correctly reused in another system In this case please observe the storage and transport requirements according to the technical data see IB IL 24 PSDI 16 PAC on page 1 2 Or Are disposed of according to the applicable environmental regulations and in this case can never be reused 105411 en_01 PHOENIX CONTACT 10 1 Technical data and ordering data 1 Technical data and ordering data 1 1 System data 1 1 1 SafetyBridge For the system data for your system please refer to the corresponding documentation for the controller used 1 1 2 PROFIsafe PROFIsafe PROFIsafe profile 2 4 DAT 2 mS For the system data for your system please refer to the corresponding documentation for the controller used 105411_en_01 PHOENIX CONTACT 1 1 IB IL 24 PSDI 16 PAC 1 2 General data Housing dimensions width x height x depth Weight with plugs Operating mode SafetyBridge PROFIsafe Transmission speed INTERBUS local bus Ambient temperature Operation Storage transport Humidity Operation IB IL 24 PSDI 16 PAC 48 8 mm x 141 mm x 71 5 mm
106. ss circuit monitoring disabled supply through a clock output or external supply S1 S1 S2 IN1_Ch1 Two switching elements S2 UT1 UT2 IN1_Ch2 amp Supply through UT1 or UT2 UT1 UT2 69402030 Figure 7 8 Two channel equivalent assignment of inputs supply through UT1 or UT2 cross circuit monitoring disabled IN1_Ch1 2 S1 2 Two switching elements IN1_ Ch2 se Z 24 V 24 V 70070024 External supply Figure 7 9 Two channel equivalent assignment of inputs external supply cross circuit monitoring disabled Basic specifications Two channel equivalent Sensor supply Internally through clock output UT1 or UT2 or externally Achievable SIL SIL CL Cat PL SIL 3 SIL CL 3 Cat 3 PL d WARNING Loss of electrical and functional safety To achieve the specified category please refer to Section Measures required to achieve a specific safety integrity level on page 7 3 Please note that in order to achieve the specified PL the sensor must have a medium level of diagnostic coverage 90 to 99 and medium MTTFd A high level of diag nostic coverage gt 99 is recommended for the application according to PL d Use sensors that can achieve the required safety integrity level To understand the change in state please refer to Example of correct and incorrect signal change on page 7 13 7 18 PHOENIX CONTACT 105411_en_01 Connection examples for safe inputs Device diagnostics and behavior of the module in the event
107. ssage deletes the message Start inhibit due to symmetry violation is enabled Acknowledging the diagnostic message deletes the message and activates the disabled in puts again 9 4 PHOENIX CONTACT 105411 en_01 Errors messages and removal 9 2 Clock output UT1 and UT2 errors Table 9 2 Clock output errors Error code LED Acknow hex ledg ment Short circuit UT1 or Affected clock out Check plug and ca or overload UT2 ON put is disabled bling acknowledge x 0 Clock output UTI Assigned inputs are error at all inputs if x 8 Clock output UT2 set to O necessary Acknowledgment yes 1 Acknowledging the diagnostic message deletes the message and re enables the clock out put and the assigned inputs In your safe application program ensure that the system can not be restarted unintentionally following acknowledgment of the diagnostic message The clock outputs are also switched on and monitored when not parameterized If a short circuit occurs at a clock output when it is in this state the clock output is switched off To exit the error parameterize the device and acknowledge the error message 9 3 Supply voltage errors Table 9 3 Supply voltage Uj errors Error code LED hex Undervoltage UM Uy below the per All module inputs are Check supply volt Um flashing missible voltage in the safe state age level and correct range Check supply line length and load Acknowledgment yes
108. t monitoring a DC voltage can be tapped at the clock outputs without clock pulses As soon as cross circuit monitoring has been parameterized for at least one input pair pulses are output at clock outputs UT1 and UT2 For inputs that are parameterized with cross circuit monitoring the assignment is as fol lows Inputs for channel 1 INx_CH1 are assigned to clock output UT 1 Inputs for channel 2 INx_CH2 are assigned to clock output UT2 For information on error detection according to clocking please refer to Section Clock out puts UT1 and UT2 on page 2 6 For information on the special features of error detection please refer to the connection ex amples 2 6 Local diagnostic and status indicators 1054110002 Figure 2 3 Local diagnostic and status indicators on the IB IL 24 PSDI 16 PAC module 105411_en_01 Product description Table 2 1 Local diagnostic and status indicators OFF Communications power not present power not Communications power not present si LEE at 0 5 Communications power present local bus not active Hz Flashing at 4 Hz Communications power present error at the interface between previous and flash ing terminal the terminals after the flashing terminal cannot be addressed E g loose contact at the bus interface terminal before the flashing terminal has failed another terminal was snapped on during operation not permitted Observe the module startup time of approximately 30 s
109. t must be acknowledged are indicated with Yes in the Acknowledgment col umn Special conditions for re enabling an input or the module are specified in brackets e g Yes 1 in the Acknowledgment column and explained below the relevant table 105411_en_01 Table 9 1 Error code hex Cross circuit 012x x 0 7 INO_Ch1 IN7_Ch1 x 8 F INO _Ch2 IN7_Ch2 Symmetry vio 013x lation x 0 7 INO Ch1 amp 2 IN7_Ch1 amp 2 Hardware 014x fault x 0 7 INO_Ch1 IN7_Ch1 x 8 F INO _Ch2 IN7_Ch2 Hardware fault Error during 018x signal change x 0 7 INO Ch182 IN7_Ch1 amp 2 Acknowledgment yes 1 Acknowledgment yes 2 105411_en_01 9 1 Safe digital input errors Cross circuit with an other input or with a clock output Not safety related Only for inputs pa rameterized for two channel operation used to evaluate the contacts of con nected switches State change in both channels takes lon ger than the value parameterized for symmetry This message can also be triggered by a cross circuit short circuit Only for inputs pa rameterized for two channel operation implausible signal change at indicated input pair Safe digital input errors Affected input is in the safe state Start inhibit due to symmetry violation is disabled inputs continue to be de tected and their states transmitted to the safe controller PROFIsafe
110. the connected satellites here IB IL 24 PSDI 16 PAC is based on the island number of the configurable safety module and the position in the bus navigator of the soft ware tool Set this address via the DIP switches prior to assembling the safety module see Setting the DIP switches on page 4 2 For more detailed information on the SafetyBridge address please refer to the documen tation for the configurable safety module used The parameterization of the safe inputs determines the behavior of the module and there fore has a considerable effect on the safety integrity level that can be achieved To parameterize the module the parameterization of the configurable safety module cre ated in the parameterization tool is automatically written to the module on every power up or reset The supply voltage must be present and the local bus must be in the RUN state The module cannot be operated if it is not parameterized In this case the FS LED flashes The module is ready to operate if the parameters for all inputs are valid and transmitted with out errors Valid input data is only read in this state In every other state the safe state is transmitted for each input O in the process image of the inputs lf errors are detected during parameterization the parameterization data is not transmitted The FS LED on the module flashes to indicate that the parameterization is invalid In addi tion errors are indicated at the configu
111. tial routing is used for the main voltage in the Inline station For the technical data please refer to the data sheet for the bus coupler or power terminal used WARNING Loss of the safety function when using unsuitable power supplies Only use power supplies according to EN 50178 VDE 0160 PELV Nominal voltage Tolerance Ripple Permissible voltage range Current consumption Permissible interruption time Surge protection Protection against polarity reversal 24 V DC according to EN 61131 2 and EN 60204 15 20 including an entire AC voltage component with peak value of 5 3 6 Vpp 19 2 V DC to 30 0 V DC ripple included 10 mA typical plus current consumption of the inputs when supplied through the clock out puts plus current consumption of the connected initiators when supplied through the clock outputs 10 ms output voltage of the clock outputs can fail Yes in the bus coupler power terminal Yes in the bus coupler power terminal Q NOTE Module damage due to polarity reversal Polarity reversal places a burden on the electronics and despite protection against polarity reversal can damage the module Therefore po larity reversal must be prevented Undervoltage detection Diagnostic indicators External fuse protection Yes at 17 V approximately Green Uy LED see Local diagnostic and status indicators on page 2 8 8 A slow blow maximum Q NOTE Module damage in the
112. ty integrity level Device diagnostics and behavior of the module in the event of an error Table 7 7 Single channel supply through OSSD Error type Detec Diag Loss of tion nostics SF Error in the sensor 7 10 PHOENIX CONTACT 105411 en_01 Connection examples for safe inputs Table 7 7 Single channel supply through OSSD Error type Detec Diag Loss of tion nostics SF Depends on the sensor Please take into consideration possible errors that can occur in the sensor Error in the wiring Input Yes None No Behavior when the input is in state 1 Cable interrupt between clock out The error is detected as a change in state from 1 to 0 An unex put and sensor or between sensor pected change from 0 to 1 is possible e g due to a loose contact and input Ensure that such a change in state cannot restart the system unintentionally Behavior when the input is in state 0 Please note that if this error causes the safety switch to be switched on again this can result in delayed transmission of state 1 in the process data image of the inputs e g due to a loose contact Input No None No The error must be detected by the sensor Cable interrupt between sensor The sensor must ensure that the safe state is entered in the and GND event of an error Cross circuit Input to input None Yes The error cannot be detected and results in the loss of the safety func tion as
113. ty module a se curity seal is applied to the module This security seal is damaged in the event of unauthorized opening In this case the correct operation of the safety module can no longer be ensured Take measures to prevent the incorrect connection polarity reversal and manipulation of connections 105411_en_01 For your safety 1 2 Electrical safety WARNING Hazardous shock currents and the loss of functional safety Disregarding instructions for electrical safety may result in hazardous shock currents and the loss of functional safety In order to ensure electrical safety please observe the following points Direct indirect contact Protection against direct and indirect contact according to VDE 0100 Part 410 must be en sured for all components connected to the system In the event of an error parasitic volt ages must not occur single fault tolerance This can be achieved by Using power supply units with safe isolation PELV Decoupling circuits which are not PELV systems using optocouplers relays and other components which meet the requirements of safe isolation Power supply units for 24 Only use power supply units with safe isolation and PELV according to EN 50178 VDE 0160 V supply PELV This prevents short circuits between primary and secondary sides Make sure that the output voltage of the power supply does not exceed 32 V even in the event of an error Insulation rating When selecti
114. ule is replaced please proceed as described in lowing an error Section 4 Assembly removal and electrical installation and Section Restart after replac ing a safety module on page 8 3 105411 _en_01 PHOENIX CONTACT 9 1 IB IL 24 PSDI 16 PAC Structure of the error code Error code Error location Example LED Acknowledgment 9 2 PHOENIX CONTACT Notes on the tables below The error code of a diagnostic message consists of the code for the error cause and the code for the error location Error code Code for Code for error cause error location E g The error code is specified in Table 9 1 and onwards In the error code specified x specifies the location of the error The value range for x is specified in the relevant row of the table For some errors a single channel is specified as the error location e g INO_Ch1 Some errors only occur for inputs outputs parameterized for two channel operation Here the channel pair is specified as the error location e g INO_Ch1 amp 2 Safe input errors Table 9 1 Error cause Error code hex Cross circuit x 0 7 INO_Ch1 IN7_Ch1 x 8 F INO_Ch2 IN7_Ch2 012x Cross circuit 012x Error location This means for example 0122 Cross circuit at IN2_Ch1 input 2 channel 1 012A Cross circuit at IN2_Ch2 input 2 channel 2 The LED column specifies which local diagnostic LEDs indicate the error Errors tha
115. urable safety module used SafetyBridge Documentation for the controller used PROFIsafe 105411 en_01 PHOENIX CONTACT 8 1 IB IL 24 PSDI 16 PAC Table 8 1 Steps for startup Program the safety function User manuals for the function blocks used Documentation for the configurable safety module used SafetyBridge Documentation for the controller used PROFIsafe For PROFIsafe when verifying the safety function check Checklist Validation on page C 6 whether the F_iPar_CRC parameter is greater than 0 for all apn oat l ith safe in devices If not modify the settings Quick start guide for configuring Inline modules with safe in puts or outputs under PROFIsafe on your controller Perform a function test and validation Check whether the Checklist Validation on page C 6 safety function responds as planned during programming and parameterization When connecting the supply voltages use the diagnostic and status indicators to check whether the module has started up correctly or whether any errors are indicated For instruc tions on how to proceed in the event of an error please refer to Section Errors messages and removal on page 9 1 8 2 PHOENIX CONTACT 105411 en_01 105411_en_01 Startup and validation 8 2 Restart after replacing a safety module 8 2 1 Replacing a safety module WARNING Unintentional machine startup Do not assemble or remove the module while the power is connecte
116. will not cause the machine to switch to a dangerous state When planning the machine or system make sure that acknowledgment is only possible if the danger zone is visible If in the event of failure the safety module is replaced please proceed as described in Section 4 Assembly removal and electrical installation and Section 8 2 Restart after re placing a safety module 105411 _en_01 PHOENIX CONTACT 9 9 Maintenance repair decommissioning and disposal 10 Maintenance repair decommissioning and disposal 10 1 Maintenance The device is designed in such a way that maintenance work is not required during the du ration of use However depending on the application and connected I O devices it may be necessary to test the function of the I O devices and the safety chain at regular intervals The duration of use of the module is 20 years Repeat testing within this time is not required Carry out maintenance of connected I O devices e g light grid according to the relevant manufacturer specifications 10 2 Repair Repair work may not be carried out on the safety module In the event of an error send the module to Phoenix Contact It is strictly prohibited to open the safety module In order to prevent the manipulation of the module and to detect the unauthorized opening of the module a security seal is applied to the module This security seal is damaged in the event of unauthorized opening In this ca
117. z 1 min The isolating distance between Uy and FE is covered by a varistor 105411_en_01 PHOENIX CONTACT 1 5 IB IL 24 PSDI 16 PAC Approvals For the latest approvals please visit www phoenixcontact net products 1 3 Conformance with EMC Directive Conformance with EMC Directive 2004 108 EC Noise immunity test according to DIN EN 61000 6 2 Electrostatic discharge ESD EN 61000 4 2 Criterion B IEC 61000 4 2 6 kV contact discharge 8 kV air discharge Electromagnetic fields EN 61000 4 3 Criterion A field strength 10 V m IEC 61000 4 3 Fast transients burst EN 61000 4 4 Criterion B test voltage 2 kV IEC 61000 4 4 Surge voltage EN 61000 4 5 Test intensity 2 Criterion B IEC 61000 4 5 DC supply lines 0 5 kV 0 5 kV symmetrical asymmetrical Signal lines 1 0 kV 2 0 kV symmetrical asymmetrical Conducted interference EN 61000 4 6 Criterion A test voltage 10 V IEC 61000 4 6 Noise emission test according to DIN EN 61000 6 4 Noise emission EN 55011 Class A industrial applications 1 4 Ordering data 1 4 1 Ordering data safety module Description Type Order No Pcs Pkt Inline module with safe digital inputs IB IL 24 PSDI 16 PAC 2700994 1 1 6 PHOENIX CONTACT 105411 en_01 Technical data and ordering data 1 4 2 Ordering data documentation Description Type Order No Pcs Pkt Inline User manual Automation terminals of the Inline product range User manual Configuring and

User manual UM EN IB IL 24 PSDI 16-PAC - Digi-Key

Contents

Download Pdf Manuals

Related Search

Related Contents