Advertisement
Advertisement
User Manual
Guard I/O DeviceNet Safety Modules
Catalog Numbers 1732DS-IB8, 1732DS-IB8XOBV4, 1791DS-IB12, 1791DS-IB8XOB8, 1791DS-IB4XOW4, 1791DS-IB8XOBV4,
1791DS-IB16
Important User Information
Solid-state equipment has operational characteristics differing from those of electromechanical equipment. Safety
Guidelines for the Application, Installation and Maintenance of Solid State Controls (publication SGI-1.1
available from your local Rockwell Automation sales office or online at http://www.rockwellautomation.com/literature/ ) describes some important differences between solid-state equipment and hard-wired electromechanical devices. Because of this difference, and also because of the wide variety of uses for solid-state equipment, all persons responsible for applying this equipment must satisfy themselves that each intended application of this equipment is acceptable.
In no event will Rockwell Automation, Inc. be responsible or liable for indirect or consequential damages resulting from the use or application of this equipment.
The examples and diagrams in this manual are included solely for illustrative purposes. Because of the many variables and requirements associated with any particular installation, Rockwell Automation, Inc. cannot assume responsibility or liability for actual use based on the examples and diagrams.
No patent liability is assumed by Rockwell Automation, Inc. with respect to use of information, circuits, equipment, or software described in this manual.
Reproduction of the contents of this manual, in whole or in part, without written permission of Rockwell Automation,
Inc., is prohibited.
Throughout this manual, when necessary, we use notes to make you aware of safety considerations.
WARNING: Identifies information about practices or circumstances that can cause an explosion in a hazardous environment, which may lead to personal injury or death, property damage, or economic loss.
ATTENTION: Identifies information about practices or circumstances that can lead to personal injury or death, property damage, or economic loss. Attentions help you identify a hazard, avoid a hazard, and recognize the consequence.
SHOCK HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that dangerous voltage may be present.
BURN HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that surfaces may reach dangerous temperatures.
IMPORTANT Identifies information that is critical for successful application and understanding of the product.
Allen-Bradley, Rockwell Software, Rockwell Automation, GuardLogix, SmartGuard, RSNetWorx, RSLogix, Logix 5000, Studio 5000, Guard I/O, CompactBlock, and TechConnect are trademarks of Rockwell Automation,
Inc.
Trademarks not belonging to Rockwell Automation are property of their respective companies.
New and Updated
Information
Summary of Changes
This manual contains new and updated information. Changes throughout this revision are marked by change bars, as shown to the right of this paragraph.
This table contains the changes made to this revision.
Topic
Page
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 3
Summary of Changes
Notes:
4 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Table of Contents
Preface
About the Modules
About the Specifications and Dimensions in This Manual . . . . . . . . . . . . . 9
Chapter 1
Precautions to Mount, Wire, and Clean. . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
About CIP Safety in DeviceNet Safety Architectures . . . . . . . . . . . . . . . . 19
Identify Major Parts of the Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Understand the Operation of Safety
Functions
Chapter 2
Using a Test Output with a Safety Input . . . . . . . . . . . . . . . . . . . . . . . 27
Dual-channel Mode and Discrepancy Time. . . . . . . . . . . . . . . . . . . . . 30
Dual-channels, Equivalent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Dual-channels, Complementary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Safety Input Fault Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Test Outputs Configured as Muting Outputs . . . . . . . . . . . . . . . . . . . . . . 34
Safety Output with Test Pulse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Safety Output Fault Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Compliance with EC Directives . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 5
6
Table of Contents
Chapter 3
Install and Connect Your Modules
Considerations for Module Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Connect I/O Power and I/O Cables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Connect Communication Connectors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Wiring Examples
Chapter 4
Emergency Stop Switch Dual-channel Inputs with Manual Reset . 48
Redundant Safety Contactors. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Dual-load Bipolar Outputs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Relay Outputs with Dual-channel Mode and External Device
Standard Inputs and Outputs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Configure Modules with the Logix
Designer Application
Chapter 5
Add Modules to the I/O Configuration Tree . . . . . . . . . . . . . . . . . . . . . . . 62
Configuration Ownership - Reset Ownership . . . . . . . . . . . . . . . . . . . 73
Configure the Input Configuration Tab. . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Configure the Output Configuration Tab . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Save and Download Module Configuration. . . . . . . . . . . . . . . . . . . . . . . . . 79
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Table of Contents
Configure Modules in
RSNetWorx for DeviceNet Software
Considerations When Replacing
Guard
I/O Modules
Interpret Status Indicators
Get Point Status from Modules by
Using Explicit Messaging
Chapter 6
Add Modules to the I/O Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Safety Network Number (SNN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Configure the Input Channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Configure the Test Output. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Configure the Output Channel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Configure Input and Output Error Latch Times . . . . . . . . . . . . . . . . 90
Save and Download the Module Configuration. . . . . . . . . . . . . . . . . . . . . 92
Set Up the 1791DS I/O Module Definition . . . . . . . . . . . . . . . . . . . . . . . . 93
Set the Connection Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Set the Connection Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
Set the Communication Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Configuration Ownership—Reset Ownership . . . . . . . . . . . . . . . . . 103
Set the Safety Network Number (SNN) . . . . . . . . . . . . . . . . . . . . . . . 105
Chapter 7
Considerations When Replacing Guard I/O Modules. . . . . . . . . . . . . . 115
Why You Need to Manually Set the SNN . . . . . . . . . . . . . . . . . . . . . 116
GuardLogix Controllers versus SmartGuard Controllers. . . . . . . . 117
Replacing an I/O Module When Using a SmartGuard Controller . . . 117
Replacing an I/O Module When Using a GuardLogix Controller . . . 121
I/O Replacement with ‘Configure Only When No Safety
Signature Exists’ Enabled. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
I/O Replacement with ‘Configure Always’ Enabled . . . . . . . . . . . . 126
Chapter 8
Module Status and Network Status Indicators Combination. . . . . . . . 130
1791DS-IB12, 1791DS-IB8XOB8, and 1791DS-IB4XOW4
1732DS-IB8XOBV4, 1732DS-IB8, 1791DS-IB8XOBV4, and
1791DS-IB16 Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
Appendix A
Considerations for Obtaining Point Status . . . . . . . . . . . . . . . . . . . . . . . . 137
1791DS-IB8XOB8 Module Definition Configuration . . . . . . . . . . . . . 138
1791DS-IB4XOW4 Module Definition Configuration . . . . . . . . . . . . 142
1791DS-IB12 Module Definition Configuration . . . . . . . . . . . . . . . . . . 145
I/O Assembly and Reference Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 7
Table of Contents
Safety Data
1791DS-IB12, 1791DS-IB8XOB8, 1791DS-IB4XOW4 Data . . 148
1732DS-IB8, 1732DS-IB8XOBV4, 1791DS-IB8XOBV4, and
Appendix B
Appendix C
Configuration Reference Information
Understanding Parameter Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
I/O Data Supported by Each Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167
Index
8 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Preface
Read and understand this manual before using the described products. Consult your Rockwell Automation representative if you have any questions or comments. This manual describes how to use the Guard I/O modules.
This manual is intended for users of ArmorBlock and CompactBlock Guard I/O modules. Hereafter, in this manual we refer to the modules as Guard I/O modules.
About the Specifications and
Dimensions in This Manual
Product specifications and accessories can change at any time based on improvements and other reasons. Consult with your Rockwell Automation representative to confirm actual specifications of purchased product. Dimensions and weights are nominal and are not for use for manufacturing purposes, even when tolerances are shown.
Studio 5000 Environment
The Studio 5000™ Engineering and Design Environment combines engineering and design elements into a common environment. The first element in the Studio
5000 environment is the Logix Designer application. The Logix Designer application is the rebranding of RSLogix™ 5000 software and will continue to be the product to program Logix5000™ controllers for discrete, process, batch, motion, safety, and drive-based solutions.
The Studio 5000 environment is the foundation for the future of Rockwell
Automation® engineering design tools and capabilities. This environment is the one place for design engineers to develop all of the elements of their control system.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 9
Preface
Additional Resources
Refer to the following as needed for additional help when setting up and using your modules. For specifications refer to the relevant installation instructions.
You can view or download publications at http://www.rockwellautomation.com/literature . To order paper copies of technical documentation, contact your local Allen-Bradley distributor or
Rockwell Automation sales representative.
Resource Description
Provides detailed specifications and information related to installation of Guard I/O modules.
ArmorBlock Guard I/O DeviceNet Module Installation Instructions, publication
1732DS-IN001
CompactBlock Guard I/O DeviceNet Module Installation Instructions, publication
1791DS-IN002
DeviceNet Modules in Logix5000 Control Systems User Manual, publication
DNET-UM004
DeviceNet Safety I/O Modules Series 1791DS Installation Instructions, publication
1791DS-IN001
DeviceNet Safety Scanner for GuardPLC Controllers User Manual, publication
1753-UM002
GuardLogix 5570 Controller Systems Safety Reference Manual, publication
1756-RM099
GuardLogix 5570 Controllers User Manual, publication 1756-UM022
Provides information on how to connect the controller to the network.
Provides detailed specifications and information related to installation of these Guard I/O modules: 1791DS-IB12, 1791DS-IB8XOB8, and 1791DS-IB4XOW4.
Provides information on installing, operating, and maintaining the scanner.
GuardLogix Controller Systems Safety Reference Manual, publication 1756-RM093
GuardLogix Controllers User Manual, publication 1756-UM020
GuardLogix Safety Application Instructions Safety Reference Manual, publication
1756-RM095
GuardPLC Controller Systems User Manual, publication 1753-UM001
GuardPLC Safety Reference Manual, publication 1753-RM002
ODVA Media Planning and Installation Guide, publication 00148-BR001
SmartGuard 600 Controllers Installation Instructions, publication 1752-IN001
SmartGuard 600 Controllers Safety Reference Manual, publication 1752-RM001
SmartGuard 600 Controllers User Manual, publication 1752-UM001
ODVA Planning and Installation Manual, publication 00027 , available from the
EtherNet/IP Library at ODVA.org
Provides information on safety application requirements for GuardLogix 5570 controllers in
Studio 5000 Logix Designer projects.
Provides information on how to install, configure, program, and use GuardLogix 5570 controllers in Studio 5000™ Logix Designer projects.
Provides information on safety application requirements for GuardLogix 5560 and 5570 controllers in RSLogix 5000 projects.
Provides information on how to install, configure, program, and use GuardLogix 5560 and
5570 controllers in RSLogix 5000 projects.
Provides reference information describing the GuardLogix Safety Application Instruction
Set.
Describes in brief the safety concept of the GuardPLC family of controllers.
Explains how the GuardPLC control system can be used in safety applications.
Describes the required media components and how to plan for and install these required components.
Provides information related to installation of SmartGuard 600 controllers.
Describes SmartGuard 600-specific safety requirements and controller features.
Describes how to configure, operate, and troubleshoot the controller.
Describes the required media components and how to plan for and install these required components.
10 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Preface
L-
M
MTBF
ODVA
P
PFD
PFH
Proof test
Terminology
Term
Bus off
Connection
CRTL
DeviceNet safety
EDS
S+
SNN
Standard
Refer to the table for the meaning of common terms.
Meaning
Indicates a status of very high error-count occurrence on a communication cable. A bus off error is detected when the internal error counter counts more errors than the predetermined threshold value. (The error counter returns to zero when the master is started or restarted.)
Logical communication channel for communication between nodes. Connections are maintained and controlled between masters and slaves.
Connection reaction time limit.
An implementation of a safety protocol on a standard DeviceNet network.
Acronym for electronic data sheet, a template that RSNetWorx for DeviceNet software uses to display the configuration parameters, I/O data profile, and connection-type support for a given DeviceNet safety module. These are text files used by RSNetWorx for DeviceNet software to identify products and commission them on a network.
Output +24V DC common.
Sinking output common channel, output switches to the common voltage.
Acronym for mean time between failure, the average time between failure occurrences.
Acronym for Open DeviceNet Vendor Association, a nonprofit association of vendors established for the promotion of DeviceNet networks.
Sourcing output channel, output switches to the plus voltage.
Acronym for probability of failure on demand, the average probability of a system to fail to perform its design function on demand.
Acronym for probability of failure per hour, the probability of a system to have a dangerous failure occur per hour.
Periodic test performed to detect failures in a safety-related system so that, if necessary, the system can be restored to an as-new condition or as close as practical to this condition.
Output +24V DC.
Acronym for safety network number, which uniquely identifies a network across all networks in the safety system. You are responsible for assigning a unique number for each safety network or safety sub-net within a system.
Devices or portions of devices that do not participate in the safety function.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 11
Preface
Notes:
12 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Chapter
1
About the Modules
Before You Begin
Topic
Understand Suitability for Use
Precautions to Mount, Wire, and Clean
About CIP Safety in DeviceNet Safety Architectures
Identify Major Parts of the Modules
Page
This chapter includes important overview information and precautions for using
Guard I/O modules that implement the DeviceNet safety protocol. Also included is an overview of how these Guard I/O modules are used within a safety system.
Always observe the following guidelines when using a module, noting that in this manual we use safety administrator to mean a person qualified, authorized, and responsible to secure safety in the design, installation, operation, maintenance, and disposal of the machine.
• Thoroughly read and understand this manual before installing and operating the module.
• Keep this manual in a safe place where personnel can refer to it when necessary.
• Use the module properly according to the installation environment, performance, and functions of the machine.
• Verify that a safety administrator conducts a risk assessment on the machine and determines module suitability before installation.
• Verify for CE LVD compliance, the external power supply that provides power to the modules is safety extra-low voltage (SELV) rated. Some
Rockwell Automation Bulletin 1606 power supplies are SELV-compliant.
Verify this in the Bulletin 1606 Installation Instructions.
Verify that the Guard I/O firmware version is correct prior to commissioning the safety system, noting that firmware information related to safety controllers is available at http://www.rockwellautomation.com/products/certification/safety .
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 13
Chapter 1 About the Modules
Understand Suitability for
Use
Rockwell Automation is not responsible for conformity with any standards, codes, or regulations that apply to the combination of the products in your application or use of the product.
Take all necessary steps to determine the suitability of the product for the systems, machine, and equipment with which it is used.
Know and observe all prohibitions of use applicable to this product.
Never use the products for an application involving serious risk to life or property without making sure that the system as a whole was designed to address the risks and that the Rockwell Automation product is properly rated and installed for the intended use within the overall equipment or system.
Follow Precautions for Use
ATTENTION: Safety state of the inputs and outputs is defined as the off state.
Safety state of the module and its data is defined as the off state.
Use the Guard I/O module only in applications where the off state is the safety state.
Serious injury may occur due to breakdown of safety outputs. Do not connect loads beyond the rated value to the safety outputs.
Serious injury may occur due to loss of required safety functions. Wire the module properly so that supply voltages or voltages for loads do not touch the safety outputs accidentally or inadvertently.
ATTENTION: Use DC supply satisfying the following requirements to prevent electric shock:
• A DC power supply with double or reinforced insulation, for example, according to IEC/EN 60950 or EN 50178 or a transformer according to
IEC/EN 61558
• A DC supply satisfies requirement for class 2 circuits or limited voltage/current circuit stated in UL 508
• Use an external power supply that is safety extra-low voltage (SELV) rated
14 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
About the Modules Chapter 1
ATTENTION: Follow these precautions for safe use.
• Wire conductors correctly and verify operation of the module before placing the system into operation. Incorrect wiring may lead to loss of safety function.
• Do not apply DC voltages exceeding the rated voltages to the module.
• Apply properly specified voltages to the module inputs. Applying inappropriate voltages may cause the module to fail to perform it’s specified function, which could lead to loss of safety functions or damage to the module.
• Never use test outputs as safety outputs. Test outputs are not safety outputs.
• Note that after installation of the module, a safety administrator must confirm the installation and conduct trial operation and maintenance.
• Do not disassemble, repair, or modify the module. This may result in loss of safety functions.
• Use only appropriate components or devices complying with relevant safety standards corresponding to the required safety category and safety integrity level.
Conformity to requirements of the safety category and safety integrity level must be determined for the entire system.
We recommend you consult a certification body regarding assessment of conformity to the required safety integrity level or safety category.
• Note that you must confirm compliance with the applicable standards for the entire system.
• Disconnect the module from the power supply before wiring.
Devices connected to the module may operate unexpectedly if wiring is performed while power is supplied.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 15
Chapter 1 About the Modules
For 1791DS-IB4XOW4 modules, follow these instructions on isolating transformer use. Refer to the isolating transformer figure.
• Use an isolating transformer to isolate between over-voltage category III and II, such as TR1, to conform to IEC 60742.
• Be sure the insulation between first input and secondary output satisfies at least basic insulation of over-voltage category III.
• Be sure one side of a secondary output of the isolating transformer is grounded to prevent electric shock to personnel due to a short to ground or short to the frame of the isolating transformer.
• Insert fuses, in case of a short to the frame, to protect the isolating transformer and prevent electric shock to personnel, per transformer specifications, at points such as F1, F2, and F3.
Figure 1 - Use of Isolating Transformer
1791DS-IB4XOW4 Module
400V AC/ 230V AC
L1 L2 L3
F3
F4
MA
F5
MB
F6 F7
F8
F1
TR1
F2
MA
MB
F1…F8 - Fuses
MA, MB - Electromagnetic Switches
TR1 - Insulated Transformer
Load
III Over-voltage Category II
44151
16 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
About the Modules Chapter 1
Precautions to Mount, Wire, and Clean
Observe these precautions to prevent operation failure, malfunctions, or undesirable effects on product performance.
Follow these precautions when mounting modules:
• Use DIN rail that is 35 mm (1.38 in.) wide to mount the module into the control panel.
• Mount modules to DIN rail securely.
• Leave at least 50 mm (1.96 in.) above and below the module to allow adequate ventilation and room for wiring for 1791DS-IB12, 1791DS-
IB8XOB8, and 1791DS-IB4XOW4 modules.
• Leave at least 15 mm (0.6 in.) around the module to allow adequate ventilation and room for wiring for 1732DS-IB8, 1732DS-IB8XOBV4,
1791DS-IB8XOBV4, and 1791DS-IB16 modules.
Follow these precautions when wiring modules:
• Do not place communication lines and I/O lines in the same wiring duct or track as high voltage lines.
• Wire correctly after confirming the signal names of all terminals.
• Do not remove the shield from a module before wiring, but always remove the shield after completing wiring to be sure of proper heat dispersion for
1791DS-IB12, 1791DS-IB8XOB8, and 1791DS-IB4XOW4 modules.
• Follow torquing specifications as indicated in the installation instructions.
When cleaning modules, do not use the following:
• Thinner
• Benzene
• Acetone
I/O Module Overview
The Guard I/O modules implement the CIP-safety protocol extensions over
DeviceNet networks and provide various features for a safety system.
Use the modules to construct a safety-control network system that meets the requirements up to Safety Integrity Level 3 (SIL 3) as defined in IEC 61508,
Functional Safety of Electrical, Electronic, and Programmable Electronic Safetyrelated Systems, and the requirements for Safety Category 4 of the EN 954-1 standard, Safety of machinery - Safety related parts of control systems. All
1791DS modules can be mounted vertically or horizontally.
Remote I/O communication for safety I/O data are performed through safety connections supporting CIP safety over a DeviceNet network. Data processing is performed in the safety controller.
The status and fault diagnostics of Guard I/O modules are monitored by a safety controller through a safety connection using a new or existing DeviceNet network.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 17
Chapter 1 About the Modules
The following is a list of features common to Guard I/O modules:
• CIP-safety and DeviceNet protocol conformance
• Safety inputs
– Safety devices, such as emergency stop push buttons, gate switches, and safety light curtains, can be connected.
– Dual-channel mode evaluates consistency between two input signals
(channels), which allows use of the module for Safety Category 3 and 4.
– The time of a logical discrepancy between two channels can be monitored using a discrepancy time setting.
– An external wiring short-circuit check is possible when inputs are wired in combination with test outputs. The module must be wired in combination with test outputs when this function is used.
– Independently adjustable on and off delay is available per channel.
• Test outputs
– Separate test outputs are provided for short circuit detection of a safety input (or inputs).
– Power (24V) can be supplied to devices, such as safety sensors.
– Test outputs can be configured as standard outputs.
– All Guard I/O modules have numerous test outputs, of which some can be used for broken wire detection of a muting lamp.
• Safety outputs
– Solid state outputs
• Dual-channel mode evaluates consistency between two output signals
(channels).
• Safety outputs can be pulse tested to detect field wiring shorts to 24V
DC.
• All 1791DS-IB8XOBV4 modules’ safety outputs use pulse testing to detect a short to 24V DC on the safety source output (P), and a short to
0V DC on the safety sink output (M).
– Relay Outputs
• Dual-channel mode evaluates consistency between two output signals
(channels).
• Up to 2 A is provided per output point.
• Safety relays can be replaced.
• I/O status data - In addition to I/O data, the module includes status data for monitoring I/O circuits.
• Security - The configuration information of the module can be protected by a password.
• Removable I/O connectors - I/O connectors support mechanical keying.
18 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
About the Modules Chapter 1
Programming Requirements
Use the minimum software versions listed here.
Cat. No.
1732DS-IB8,
1732DS-IB8XOBV4,
1791DS-IB12,
1791DS-IB8XOB8,
1791DS-IB4XOW4,
1791DS-IB8XOBV4,
1791DS-IB16
(1) This version or later.
21
Studio 5000 Environment
Version
(1)
Version
(EtherNet/IP Network)
17
Software Version
(DeviceNet Network)
8
RSLinx Software
Version
(1)
2.51
Guard I/O Catalog Numbers
See the table for a listing of the types of Guard I/O modules.
Cat. No.
1732DS-IB8
1732DS-IB8XOBV4
1791DS-IB12
1791DS-IB8XOB8
1791DS-IB4XOW4
1791DS-IB8XOBV4
1791DS-IB16
Description
Safety input module
Safety I/O module with solid state outputs
Safety input module
Safety I/O module with solid state outputs
Safety I/O module with relay outputs
Safety I/O module with solid state outputs
Safety input module
Enclosure Type
Rating
Safety Inputs Test Outputs
Meets IP64/65/
67
8
8
Meets IP20
4
8
12
8
16
4
8
4
4
8
8
16
Safety Outputs
Solid State Relays
-
-
4 bipolar pairs
-
8
-
4 bipolar pairs
-
-
-
-
-
-
4
About CIP Safety in
DeviceNet Safety
Architectures
Use Guard I/O modules in DeviceNet safety architectures as shown below.
The Guard I/O family is a set of I/O modules that when connected to a
DeviceNet safety network are suitable for applications up to SIL3, as defined in the IEC 61508 standard, and Safety Category 4, as defined in the EN 954-1 standard.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 19
Chapter 1 About the Modules
Figure 2 - Guard I/O Modules in DeviceNet Safety Architectures
Logix Controller
SmartGuard 600
Controller
Logix Controller
GuardLogix Controller
Guard PLC Controller
DeviceNet
Scanner
Interface
CompactBlock
Guard I/O Module
Safety Communication
Standard Communication
DeviceNet Network
RSNetWorx,
Studio 5000, and
RSLogixGuard Plus Software
ArmorBlock Guard I/O
Module
44196
Safety controllers control the safety outputs. Safety or standard PLC controllers can control the standard outputs.
20 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
About the Modules Chapter 1
Identify Major Parts of the
Modules
See the figures for module identification. For pin-out information, refer to the relevant installation instructions.
Figure 3 - 1791DS-IB4XOW4 Module Identification
Node Address Switches Status Indicators Safety Relay
Communication
Connector
I/O Connections
Figure 4 - 1791DS-IB8XOB8 Module Identification
Node Address Switches Status Indicators
MS NS LOCK
1791DS-IB8XOB8
IN
PWR
0 1 2 3 4 5 6 7
OUT
PWR
0 1 2 3 4 5 6 7
CompactBlock
8 Inputs - 8 Outputs 24VDC
44195
Communication
Connector
I/O Connections
Figure 5 - 1791DS-IB12 Module Identification
Node Address Switches Status Indicators
MS NS LOCK
1791DS-IB12
IN
PWR
0 1 2 3 4 5 6 7 8 9 10 11
CompactBlock
12 Inputs 24VDC
44091
Communication
Connector
44091
I/O Connections
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 21
Chapter 1 About the Modules
Figure 6 - 1791DS-IB8XOBV4 Module Identification
Power Connector
I/O Connectors (output) Status Indicators
8
0
2 8
0
2
6
X10
4 NODE
ADR
6
X1
4
44224
Communication Connector
Node Address Switches
Figure 7 - 1732DS-IB8 Module Identification
I/O Connectors (input)
Node Address Switches
Communication
Connector
Inputs
Status Indicators
I/O
Power
44123
FE
Figure 8 - 1732DS-IB8XOBV4 Module Identification
Outputs
Node Address
Switches
Communication
Connector
Inputs
Status Indicators
I/O Power
FE
44122
22 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
About the Modules Chapter 1
Figure 9 - 1791DS-IB16 Module Identification
Power Connector
I/O Connectors (input) Status Indicators
NC NC
0
8
6
X10
4
2
NODE
ADR
8
0
6
X1
4
2
FE I8 I9 T8 T9 I10 I11 T10 T11M
1791DS-
I12 I13 T12 T13 I14 I15 T 14 T15M
IB16
FE I0 I1 T0 T1 I2 I3 T2 T3M
16 INPUTS
24 Vdc
I4 I5 T4 T5 I6 I7 T6 T7M
44118
Communication Connector
Node Address Switches
I/O Connectors (input)
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 23
Chapter 1 About the Modules
Notes:
24 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Chapter
2
Understand the Operation of Safety Functions
Safety I/O Modules
Topic
Test Outputs Configured as Muting Outputs
Page
Read this chapter for information related to the safety functions of the modules.
Also included is a brief overview on international standards and directives that you should be familiar with.
The following status is the safety state of the Guard I/O modules:
• Safety outputs: off
• Safety input data to network: off
Figure 10 - Safety Status
DeviceNet Network Inputs to Network
Safety
Status
Output Off Input
44076
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 25
Chapter 2 Understand the Operation of Safety Functions
The module is designed for use in applications where the safety state is the off state.
Self-diagnostic Functions
Self-diagnostics are performed when the power is turned on and periodically during operation. If a fatal internal module error occurs, the red module status
(MS) indicator is illuminated, and the safety outputs and input data and status to the network turn off.
Configuration Lock
I/O Status Data
Safety Inputs
After configuration data has been downloaded and verified, the configuration data within the module can be protected by using RSNetWorx for DeviceNet software.
For GuardLogix systems, this status indicator is not used. Reference information about safety signatures in the GuardLogix Controller Systems Safety Reference
Manual, publication 1756-RM093 or the GuardLogix 5570 Controller System
Safety Reference Manual, publication 1756-RM099 .
In addition to I/O data, the module provides status data for monitoring the I/O circuits. The status data includes the following data, which can be read by the controllers. Note that 1 = ON/Normal and 0 = OFF/Fault/Alarm.
• Individual Point Input Status
• Combined Input Status
• Individual Point Output Status
• Combined Output Status
• Individual Test Output Status
• Individual Output Readback (actual ON/OFF state of the outputs)
Status data indicates whether each safety input, safety output, or test output is normal (normal status: ON, faulted status: OFF). For fatal errors, communication connections may be broken, so the status data cannot be read.
Status bits are OFF in the GuardLogix data table when the connection is lost.
Combined status is provided by an AND of the status of all safety inputs or all safety outputs. When all inputs or outputs are normal the respective combined status is ON. When one or more of them has an error, the respective combined status is OFF. This is known as the combined safety input status or combinedsafety output status.
Read this section for information about safety inputs and their associated test outputs. A safety input may be used with test outputs. Safety inputs are used to monitor safety input devices.
26 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Understand the Operation of Safety Functions Chapter 2
Using a Test Output with a Safety Input
A test output can be used in combination with a safety input for short circuit detection. Configure the test output as a pulse test source and associate it to a specific safety input.
The test output can also be configured for a power supply to source 24V DC for an external device, for example, a light curtain.
Figure 11 - Example Use of a 1791DS-IB12 Module
Safety Input
Terminal
24V DC Output with Test Pulse
External Contact
24V
Cat. No.
1732DS-IB8
1732DS-IB8XOBV4
1791DS-IB12
1791DS-IB8XOB8
1791DS-IB4XOW4
1791DS-IB8XOBV4
1791DS-IB16
Figure 12 - Test Pulse in a Cycle
OUT
X
Y
Pulse Width (X)
500 μs
500 μs
700 μs
700 μs
700 μs
500 μs
500 μs
On
Off
44078
Pulse Period (Y)
600 ms
600 ms
648 ms
648 ms
648 ms
600 ms
600 ms
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 27
Chapter 2 Understand the Operation of Safety Functions
When the external input contact is closed, a test pulse is output from the test output terminal to diagnose the field wiring and input circuitry. Using this function, short-circuits between input signal lines and the power supply (positive side), and short-circuits between input signal lines can be detected.
Figure 13 - Short-circuit Between Input Signal Lines
24V
V
G
T0
24V
0V
External Contact
IN0
Short-circuit Between Input Signal Lines and Power
Supply (positive side)
T1
External Contact
IN1
44079
Short-circuit Between Input Signal Lines
28 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Understand the Operation of Safety Functions Chapter 2
Single Channel Mode
If an error is detected, safety input data and safety input status turn off.
Figure 14 - Normal Operation and Fault Detection (not to scale)
Normal Operation
Remote
I/O
Data
Fault Detection
Remote
I/O
Data
Safety Input
Status 0
Safety Input
Status 0
T0
External Device
Input Terminal 0
Safety Input 0
T0
External Device
Input Terminal 0
Safety Input 0
24V
0V
ON
OFF
ON
OFF
ON
OFF
ON
OFF
24V
0V
ON
OFF
ON
OFF
ON
OFF
ON
OFF
Fault Detected
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 29
Chapter 2 Understand the Operation of Safety Functions
Dual-channel Mode and Discrepancy Time
To support redundant-channel safety devices, the consistency between signals on two channels can be evaluated. Either equivalent or complementary can be selected. This function monitors the time during which there is a discrepancy between the two channels.
If the length of the discrepancy exceeds the configured discrepancy time
(0…65,530 ms in increments of 10 ms), the safety input data and the individualsafety input status turns off for both channels.
IMPORTANT The dual-channel function is used with two consecutive inputs that are paired together, starting at an even input number, such as inputs 0 and 1, 2 and 3, and so on.
IMPORTANT Do not set the discrepancy time longer than necessary. The purpose of the discrepancy time is to allow for normal differences between contact switching when demands are placed on safety inputs. For this testing to operate correctly, only a single demand on the safety input is expected during the discrepancy time. If the discrepancy time is set too high, and multiple demands occur during this time, then both safety input channels will fault.
This table shows the relation between input terminal states and controller input data and status.
Table 1 - Terminal Input Status and Controller I/O Data
Dual-channel Mode
Dual-channels, Equivalent
Dual-channels,
Complementary
Input Terminal
IN0 IN1
ON
OFF
OFF
ON
ON
OFF
OFF
ON
ON
OFF
ON
OFF
ON
OFF
ON
OFF
Controller Input Data and Status
Safety
Input 0 Data
Safety
Input 1 Data
Safety
Input 0 Status
ON
OFF
OFF
ON
OFF
OFF
OFF
OFF
OFF
OFF
OFF
ON
ON
ON
OFF
ON
ON
OFF
OFF
ON
OFF
ON
ON
OFF
Safety
Input 1 Status
ON
OFF
ON
ON
OFF
ON
OFF
OFF
Dual- channel
Resultant
Data
Dualchannel
Resultant
Status
Normal OFF
OFF
OFF
ON
OFF
Fault
Fault
Normal
Fault
OFF Normal
ON Normal
OFF Fault
30
Dual-channels, Equivalent
In Equivalent mode, both inputs of a pair should typically be in the same
(equivalent) state. When a transition occurs in one channel of the pair prior to the transition of the second channel of the pair, a discrepancy occurs. If the second channel transitions to the appropriate state prior to the discrepancy time elapsing, the inputs are considered equivalent. If the second transition does not occur before the discrepancy time elapses, the channels will fault. In the fault state the input and status for both channels are set low (off ). When configured as an
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Understand the Operation of Safety Functions Chapter 2 equivalent dual pair, the data bits for both channels will always be sent to the controller as equivalent, both high or both low.
Figure 15 - Equivalent, Normal Operation and Fault Detection (not to scale)
Normal Operation
IN0
ON
OFF
IN1
Safety Input 0
ON
OFF
ON
OFF
Discrepancy Time
Remote
I/O
Data
Safety Input 1
ON
OFF
Fault Detection
Remote
I/O
Data
Safety Input
Status 0, 1
IN0
IN1
Safety Input 0
Safety Input 1
Safety Input
Status 0, 1
ON
OFF
ON
OFF
ON
OFF
ON
OFF
ON
OFF
ON
OFF
Discrepancy Time
Fault Detected
Dual-channels, Complementary
In Complementary mode, the inputs of a pair should typically be in the opposite
(complementary) state. When a transition occurs in one channel of the pair prior to the transition of the second channel of the pair, a discrepancy occurs. If the second channel transitions to the appropriate state prior to the discrepancy time elapsing, the inputs are considered complementary.
If the second transition does not occur before the discrepancy time elapses, the channels will fault. The fault state of complementary inputs is the evennumbered input turned off and the odd-numbered input turned on. Note that if faulted, both channel status bits are set low. When configured as a
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 31
Chapter 2 Understand the Operation of Safety Functions complementary dual-channel pair, the data bits for both channels will always be sent to the controller in complementary, or opposite states.
Figure 16 - Complementary, Normal Operation and Fault Detection (not to scale)
ON
Normal
Operation
IN0
OFF
IN1
Safety Input 0
ON
OFF
ON
OFF
Discrepancy Time
Remote
I/O
Data
Safety Input 1
ON
OFF
Remote
I/O
Data
Safety Input
Status 0, 1
Fault Detection
IN0
IN1
Safety Input 0
Safety Input 1
Safety Input
Status 0, 1
ON
OFF
ON
OFF
ON
OFF
ON
OFF
ON
OFF
ON
OFF
Discrepancy Time
Fault Detected
32 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Understand the Operation of Safety Functions Chapter 2
Safety Input Fault Recovery
If an error is detected, the safety input data remains in the off state. Follow this procedure to activate the safety input data again.
1.
Remove the cause of the error.
2.
Place the safety input (or safety inputs) into the safe state.
The safety input status turns on (fault cleared) after the input-error latch time has elapsed and the I/O indicator (red) turns off. The input data can now be controlled.
Input Delays
On-delay - An input signal is treated as Logic 0 during the on-delay time (0…126 ms, in increments of 6 ms) after the input contact’s rising edge. The input turns on only if the input contact remains on after the on-delay time has elapsed. This helps prevent rapid changes of the input data due to contact bounce.
Figure 17 - On-delay
ON
ON
Remote I/O
Data Safety
ON
ON
44094
Off-delay - An input signal is treated as Logic 1 during the off-delay time (0…126 ms, in increments of 6 ms) after the input contact’s falling edge. The input turns off only if the input contact remains off after the off delay time has elapsed. This helps prevent rapid changes of the input data due to contact bounce.
Figure 18 - Off-delay
ON
Remote I/O Data
Safety Input
Safety Input
ON
OFF
OFF
44095
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 33
Chapter 2 Understand the Operation of Safety Functions
Test Outputs Configured as
Muting Outputs
When test outputs are used as muting outputs, typically for a muting lamp, a circuit test is used to diagnose whether the circuit and lamp are operational. The muting circuit test is run every 3 seconds, regardless of whether the circuit is logic
HI or LO. This could cause your muting output to flicker during normal operation when it is logic LO.
The muting circuit test must fail twice in succession when the muting circuit is logically HI, before a fault is declared. The results of the muting circuit test do not affect the muting status when the circuit is logically LO.
A muting circuit fault will cause the muting status bit to go LO.
A muting circuit fault is declared 3…6 seconds after the fault occurs if the muting circuit is logically HI for at least 6 seconds, because of the 3-second test interval and that the muting circuit test must fail twice in successession. If the muting circuit is logically HI for less than 6 seconds during a machine cycle, then the asynchronous test and program scans could cause the fault detection to be delayed for several machine cycles.
There is a difference in the operation of the muting status between some of the
DeviceNet safety I/O modules. This table shows the operation of the muting status of all modules.
Cat. No.
1791DS-IB16
(1)
1791DS-IB8XOBV4
1732DS-IB8XOBV4
Lamp
HI
Circuit
Good
Description
Muting status HI/1
LO
Bad
Good
Bad
Good
Muting status LO 1 second/HI 5 seconds (repeats)
LO status typically appears 3…6 seconds after fault
Muting status resets automatically
Muting status LO/0
Muting status LO/0
Muting status HI/1 1791DS-IB12
1791DS-IB8XOB8
1791DS-IB4XOW4
HI
LO
Bad
Good
Bad
Muting status Lo 1 second/HI 5 seconds (repeats)
Muting status resets automatically
Muting status HI/1
Muting status HI/1
(1) This module’s muting status bit goes LO when a fault occurs or when the circuit is logically LO.
For catalog numbers 1791DS-IB16, 1791DS-IB8XOBV4, 1732DS-IB8, and
1732DS-IB8XOBV4, when using these GuardLogix safety application instructions that monitor muting, should include the following codes to operate properly when the muting status bit goes LO if the circuit is logically LO:
• DCSTM
• FSBM
• TSAM
• TSSM
34 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
In this code, the actual muting status bit is used in the first rung, and the DN bit of the timer is used in the muting status parameter of the instruction. The actual test output data bit is used in both the first and last rungs.
Understand the Operation of Safety Functions Chapter 2
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 35
Chapter 2 Understand the Operation of Safety Functions
Safety Outputs
Read this section for information about safety outputs.
Safety Output with Test Pulse
When the safety output is on, the safety output can be test pulsed, as shown in the figure and table.
Using this function, short-circuits between output signal lines and the power supply (positive side) and short-circuits between output signal lines can be detected. If an error is detected, the safety output data and individual safety output status turn off.
Cat. No.
1732DS-IB8
1732DS-IB8XOBV4
1791DS-IB12
1791DS-IB8XOB8
1791DS-IB4XOW4
1791DS-IB8XOBV4
1791DS-IB16
Pulse Width (X)
Not applicable
700 μs
Not applicable
470 μs
Not applicable
700 μs
Not applicable
Pulse Period (Y)
Not applicable
600 ms
Not applicable
648 ms
Not applicable
600 ms
Not applicable
Figure 19 - Test Pulse in a Cycle
OUT
X
Y
On
Off
44096
IMPORTANT To prevent the test pulse from causing the connected device to malfunction, pay careful attention to the input response time of the device.
36 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Understand the Operation of Safety Functions Chapter 2
Dual-channel Setting
When the data of both channels is in the on state, and neither channel has a fault, the outputs are turned on. The status is normal. If a fault is detected on one channel, the safety output data and individual safety output status turn off for both channels.
Figure 20 - Dual-channel Setting (not to scale)
Normal Operation
Remote
I/O
Data
Fault Detection
Remote
I/O
Data
OUT0
OUT1
Safety Output
Status 0, 1
OUT0
OUT1
Safety Output
Status 0, 1
ON
OFF
ON
OFF
ON
OFF
ON
OFF
ON
OFF
ON
OFF
Error
Detected
Safety Output Fault Recovery
If a fault is detected, the safety outputs are switched off and remain in the off state. Follow this procedure to activate the safety output data again.
1.
Remove the cause of the error.
2.
Place the safety output (or safety outputs) into the safety state.
The safety output status turns on (fault cleared) when the output-error latch time has elapsed. The I/O indicator (red) turns off. The output data can now be controlled.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 37
Chapter 2 Understand the Operation of Safety Functions
Controlling Devices
See this table for information about controlling devices.
ATTENTION:
Use appropriate devices as indicated in the Controlling
Device Requirements table. Serious injury may occur due to loss of
safety functions.
Table 2 - Controlling Device Requirements
Device
Emergency stop switches
Door interlocking switches, limit switches
Safety sensors
Relays with forcibly- guided contacts, contactors
Other devices
Requirement
Use approved devices with direct opening mechanisms complying with IEC/EN
60947-5-1.
Use approved devices with direct opening mechanisms complying with IEC/EN
60947-5-1 and capable of switching microloads of 24V DC, 3 mA.
Use approved devices complying with the relevant product standards, regulations, and rules in the country where used.
Allen-Bradley Bulletin Safety Components
Bulletin 800F, 800T
Bulletin 440K, 440G, 440H for interlock switch
Bulletin 440P, 802T for limit switch
Guardmaster products, refer to specific product publications for details
Use approved devices with forcibly-guided contacts complying with EN 50205. For feedback purposes, use devices with contacts capable of switching micro loads of
24V DC, 3 mA.
Bulletin 700S, 100S
Evaluate whether devices used are appropriate to satisfy the requirements of safety category levels.
-
Safety Precautions
ATTENTION: As serious injury may occur due to loss of required safety function, follow these safety precautions.
• Do not use test outputs of the modules as safety outputs.
• Do not use DeviceNet standard I/O data or explicit message data as safety data.
• Do not use LED status indicators on the I/O modules for safety operations.
• Do not connect loads beyond the rated value to the safety outputs.
• Wire the Guard I/O modules properly so that 24V DC line does not touch the safety outputs accidentally or unintentionally.
• Clear previous configuration data before connecting devices to the network.
• Set unique DeviceNet node addresses before connecting devices to the network.
• Perform testing to confirm that all of the device configuration data and operation is correct before starting system operation.
• When replacing a device, configure the replacement device suitably and confirm that it operates correctly.
• When installing or replacing modules, clear any previous configuration before connecting input or output power to the device.
38 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Understand the Operation of Safety Functions Chapter 2
Legislation and Standards
Read this section to familiarize yourself with related legislation and standards information. Relevant international standards include the following:
• IEC 61508 (SIL 1-3)
• IEC 61131-2
• IEC 60204-1
• IEC 61000-6-2
• IEC 61000-6-4
• IEC 62061
The modules received the following certification from ODVA, when product is marked.
• DeviceNet Conformance Test
• DeviceNet Safety Conformance Test
Europe
In Europe, Guard I/O modules may be subject to the European Union (EU)
Machinery Directive Annex IV, B, Safety Components, items 1 and 2. The type approval of TUV-Rheinland addresses compliance to applicable requirements of the following directives and standards.
• EU legislation
– Machinery Directive
– Low-voltage Directive
– EMC Directive
• European standards
– EN 61508 (SIL1-3)
– EN 954-1 (Category 4, 3, 2, 1, B)
– EN 61131-2
– EN 418
– EN 60204-1
– IEC 61000-6-2
– IEC 61000-6-4
– IEC 13849
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 39
Chapter 2 Understand the Operation of Safety Functions
North America
In North America, the TUV-Rheinland type approval includes Guard I/O compliance to the relevant standards and related information including the following:
• U.S. standards - ANSI RIA15.06, ANSI B11.19, NFPA 79
• The modules are UL-certified functionally safe and carry the NRGF label, when product is marked.
• The modules received UL Listing to standards of U.S. and Canada when product is marked.
Japan
In Japan, type test requirements are provided in Article 44 of the Industrial Safety and Health Law. These requirements apply to complete systems and cannot be applied to a module by itself. Accordingly, to use the module in Japan as a safety device for press machine or shearing tool pursuant to Article 42 of the abovementioned law, it is necessary to apply for testing of the entire system.
40 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
EC Directives
Understand the Operation of Safety Functions Chapter 2
These products conform to the EMC Directive and Low-voltage Directive. For additional information, refer to the relevant installation instructions.
EMC Directive
Rockwell Automation devices that comply with EC directives also conform to the related EMC standards so that they can more easily be built into other devices or the overall machine. The actual products have been checked for conformity to
EMC standards. Whether they conform to the standards in the system used by the customer, however, must be confirmed by the customer.
EMC-related performance of Rockwell Automation devices that comply with
EMC directive vary depending on the configuration, wiring, and other conditions of the equipment or control panel in which the Rockwell Automation devices are installed. The customer must, therefore, perform the final check to confirm that devices and the overall machine conform to EMC standards.
Compliance with EC Directives
DeviceNet products that comply with EC directives must be installed as follows:
• All Type IP20 DeviceNet units must be installed within control panels.
• Use reinforced insulation or double insulation for the DC power supplies used for the communication power supply, internal- circuit power supply, and the I/O power supplies.
• DeviceNet products that comply with EC directives also conform to the
Common Emission Standard (EN 50081-2). Radiated emission characteristics (10-m regulations) may vary depending on the configuration of the control panel used, other devices connected to the control panel, wiring, and other conditions. You must confirm that the overall machine or equipment complies with EC directives.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 41
Chapter 2 Understand the Operation of Safety Functions
Examples to Reduce Noise
These examples show how to reduce noise in 1791DS-IB12, 1791DS-IB8XOB8, and 1791DS-IB4XOW4 modules.
EXAMPLE Reduce electrical noise from the communication cable by installing a ferrite core on the communication cable within 10 cm (3.93 in.) of the DeviceNet master unit. Use Ferrite Core (Data Line Filter) LF130B, manufactured by
Easy Magnet Co., or an equivalent.
Impedance Specifications
ImpedanceValue
25 MHz
156 Ω
100 MHz
250
Ω
Ferrite Core
Dimensions are in mm (in.).
30
(1.18)
33
(1.30)
13
(0.51)
29
(1.14)
EXAMPLE
EXAMPLE
31522-M
Wire the control panel with cables that are as short as possible and ground to 100
Ω
or less.
Keep DeviceNet communication cables as short as possible and ground to
100
Ω
or less.
42 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Chapter
3
Install and Connect Your Modules
Topic
Considerations for Module Installation
Connect I/O Power and I/O Cables
Connect Communication Connectors
Page
Considerations for Module
Installation
The communication baud rate of the entire network is determined by the communication baud rate of the master unit. The communication baud rate does not need to be set for each module.
ATTENTION: You can configure Test Outputs to be used as standard outputs. You can connect actuators to Test Output points that are expecting a Standard configuration.
ATTENTION: Test Output points configured as Pulse Test or Power
Supply become active whenever you apply input power to the module.
These configured functions are independent of the I/O connections to the module.
ATTENTION: If a module with Test Outputs configured as Pulse Test or Power
Supply is incorrectly installed in an application where actuators are connected to these Test Output points, the actuators will be activated when network power and input power are applied.
ATTENTION: To prevent this possibility, use the following procedures:
• When installing a module, be sure that the module is correctly configured for the application or in the out-of-box condition before applying input power.
• When replacing a module, be sure that the module is correctly configured for the application or in the out-of-box condition before applying input power.
• Reset modules to their out-of-box condition when removing them from an application.
• Be sure that all modules in replacement stock are in their out-of-box condition.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 43
Chapter 3 Install and Connect Your Modules
Install the Module
IMPORTANT Follow these instructions when installing a module:
• Use the module in an environment that is within the general specifications.
• Use the 1791DS modules in an enclosure rated IP54 (IEC60529) or higher.
• Use DIN rail that is 35 mm (1.38 in.) wide to mount the 1791DS module in the control panel.
• Always use an end plate on each end of the 1791DS modules to secure properly.
• Place other heat sources an appropriate distance away from the module to maintain ambient temperatures around the module below specified maximums.
See the figures for required spacing for module installation.
IMPORTANT You can install modules horizontally or vertically.
Figure 21 - Module Installation (1791DS-IB12, 1791DS-IB8XOB8, and 1791DS-IB4XOW4 modules)
35 (1.38) Dimensions are in mm (in.).
End Plate
50 (1.96)
Min
50 (1.96)
Min
End Plate
44 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Figure 22 - Module Installation
Dimensions are in mm (in.).
Install and Connect Your Modules Chapter 3
35 (1.38) DIN Rail
Connect I/O Power and
I/O Cables
1732DS-IB8XOBV4 module is shown.
1732DS-IB8 modules have identical dimensions.
End Plate
1791DS-IB8XOBV4 module is shown.
1791DS-IB16 modules have identical dimensions.
44225
See module installation instructions for wire type and wire size specifications.
IMPORTANT • Note that I/O connectors are detachable.
• Tighten the screws on the I/O connector to the specified torque setting as shown in the installation instructions.
• Since the I/O connector has a structure that helps prevent incorrect wiring, make connections at the specified locations corresponding to the terminal numbers.
• When present, do not remove debris shield from the module before wiring.
• When present, always remove the debris shield after completing wiring to be sure of proper heat dispersion.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 45
Chapter 3 Install and Connect Your Modules
Connect Communication
Connectors
Colored stickers on the communication connector match the colors of the wires to be inserted. Check that the colors of the wires match when wiring the connectors. The colors are as follows.
Color
Red
-
White
Blue
Black
Signal
Power cable positive side (V+)
High side of communication data (CAN_H)
Shield
Low side of communication data (CAN_L)
Power cable negative side (V-)
IMPORTANT When connecting a communication connector with the module, tighten the screws on the communication connector to the specified torque setting as shown in the installation instructions.
The internal power for the module is supplied from the communication power supply (V+, V-).
Set the Node Address
To set the node address, follow this procedure.
IMPORTANT The node-address setting rotary switches must be set while the communication power supply is turned off.
Figure 23 - Sample Node Address Digits
|
0
| |
0
|
8
2
8
2
6 |
X10
4
Tens Digit
6 |
X1
4
Ones Digit
1.
Set the node address by using the two rotary switches on the front panel of the module, noting that the default setting is 63 and a value between
00…63 is valid for proper use.
2.
Use the left rotary switch to set the tens digit of node address (decimal).
3.
Use the right rotary switch to set the ones digit.
If the node address switches are set from 64…99, the node address needs to be set from RSNetWorx for DeviceNet software.
46 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Input Examples
Chapter
4
Wiring Examples
Topic
Page
Read this chapter for information about wiring and safety categories. These examples show wiring and configuration methods for various safety categories used in SIL 2 or SIL 3 systems.
For other wiring examples, refer to the Safety Accelerator Toolkit for GuardLogix
Systems CD, publication SAFETY-CL002, or download toolkit files from the
Integrated Architecture Tools and Resources website at http://www.ab.com/go/iatools .
Read this section for input examples by application. For details, refer to the installation instructions for each catalog number.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 47
Chapter 4 Wiring Examples
Emergency Stop Switch Dual-channel Inputs with Manual Reset
This example shows wiring and controller configuration when using a Guard I/O module with an emergency stop switch that has dual-channel inputs with manual reset. If used in combination with the programs in a safety controller, this wiring is Safety Category 4 in accordance with EN 954-1 wiring requirements.
IN+
FE IN-
I0
T0
I1
T1
I2 T2
E1
S1
E1: 24V DC Power Supply
S1: Emergency Stop Switch
(positive opening mechanism)
S2: Reset Switch
FE: Functional Earth Ground
Controller
Configuration
Safety Input 0
Safety Input 1
Safety Input 2
Test Output 0
Test Output 1
Test Output 2
S2
31802-M
Parameter Name Configuration Setting
Safety Input 0 Channel Mode
Safety Input 0 Test Source
Test Pulse from Test Output
Test Output 0
Dual-channel Safety Input 0/1 Mode Dual-channel Equivalent
Dual-channel Safety Input 0/1 Discrepancy Time 100 ms (application dependent)
Safety Input 1 Channel Mode
Safety Input 1 Test Source
Test Pulse from Test Output
Test Output 1
Safety Input 2 Channel Mode
Safety Input 2 Test Source
Dual-channel Safety Input 2/3 Mode
Test Output 0 Mode
Test Output 1 Mode
Test Output 2 Mode
Used as Standard Input
Not Used
Single Channel
Pulse Test Output
Pulse Test Output
Power Supply Output
48 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Wiring Examples Chapter 4
Two-hand Monitor
This example shows wiring and controller configuration when using a Guard I/O module with a two-hand monitor. If used in combination with the programs in a safety controller, this wiring is Safety Category 4 in accordance with EN 954-1 wiring requirements.
S11
I0 I2
FE
T1
I1 I3
S12
IN+ INT0 T2
Controller
Configuration
Safety Input 0
Safety Input 1
Safety Input 2
Safety Input 3
Test Output 0
Test Output 1
T1
T1 T3
E1: 24V DC Power Supply
S11 and S12: Two-hand
Switches
E1
+ -
Parameter Name
31803-M
Configuration Setting
Safety Input 0 Channel Mode
Safety Input 0 Test Source
Test Pulse from Test Output
Test Output 0
Dual-channel Safety Input 0/1 Mode Dual-channel Complementary
Dual-channel Safety Input 0/1 Discrepancy Time 100 ms (application dependent)
Safety Input 1 Channel Mode
Safety Input 1 Test Source
Safety Input 2 Channel Mode
Safety Input 2 Test Source
Test Pulse from Test Output
Test Output 1
Test Pulse from Test Output
Test Output 0
Dual-channel Safety Input 2/3 Mode Dual-channel Complementary
Dual-channel Safety Input 2/3 Discrepancy Time 100 ms (application dependent)
Safety Input 3 Channel Mode
Safety Input 3 Test Source
Test Pulse from Test Output
Test Output 1
Test Output 0 Mode
Test Output 1 Mode
Pulse Test Output
Pulse Test Output
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 49
Chapter 4 Wiring Examples
Mode Select Switch
IN+
IN-
This example shows wiring and controller configuration when using a Guard I/O module with a mode select switch.
I0
T0
I1
T1
I2
T2
I3
T3
I4
T4
I5
T5
I6
T6
I7
T7
FE
E1
E1: 24V DC Power Supply
S1: Mode Select Switch
FE: Functional Earth Ground
Controller
Configuration
Safety Input 0
S1
Safety Input 1
Safety Input 2
Safety Input 3
Safety Input 4
Safety Input 5
Safety Input 6
Safety Input 7
S1 S1 S1
Parameter Name
Safety Input 0 Channel Mode
Safety Input 0 Test Source
Dual-channel Safety Input 0/1 Mode
Safety Input 1 Channel Mode
Safety Input 1 Test Source
Safety Input 2 Channel Mode
Safety Input 2 Test Source
Dual-channel Safety Input 2/3 Mode
Safety Input 3 Channel Mode
Safety Input 3 Test Source
Safety Input 4 Channel Mode
Safety Input 4 Test Source
Dual-channel Safety Input 4/5 Mode
Safety Input 5 Channel Mode
Safety Input 5 Test Source
Safety Input 6 Channel Mode
Safety Input 6 Test Source
Dual-channel Safety Input 6/7 Mode
Safety Input 7 Channel Mode
Safety Input 7 Test Source
S1 S1 S1
Configuration Setting
Safety Input
None
Single Channel
Safety Input
None
Safety Input
None
Single Channel
Safety Input
None
Safety Input
None
Single Channel
Safety Input
None
Safety Input
None
Single Channel
Safety Input
None
S1
31804-M
50 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Wiring Examples Chapter 4
Light Curtain
This example shows wiring and controller configuration when using a Guard I/O module with a light curtain. If used in combination with the programs in a safety controller, this wiring is Safety Category 2, 3, or 4, based on the light curtain being used, in accordance with EN 954-1 wiring requirements.
FE IN+ INI0 T0 I1 T1
Controller
Configuration
Safety Input 0
Safety Input 1
E1
24
COM
Connect the OSSD1 and OSSD2 to
I0 and I1, respectively. Connect the 24V power supply commons.
E1: 24V DC Power Supply
31805-M
Parameter Name Configuration Setting
Safety Input 0 Channel Mode
Safety Input 0 Test Source
Safety
None
Dual-channel Safety Input 0/1 Mode Dual-channel Equivalent
Dual-channel Safety Input 0/1 Discrepancy Time 100 ms (application dependent)
Safety Input 1 Channel Mode
Safety Input 1 Test Source
Safety
None
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 51
Chapter 4 Wiring Examples
Reset Switch
These examples show wiring and controller configuration when using a
Guard I/O module with a reset switch.
I0 T0 I1 T1
24V
Controller
Configuration
Safety Input 0
Test Output 0
Connect the switch between I0 and T0. T0 must be configured as a 24V power supply.
31819-M
Parameter Name Configuration Setting
Safety Input 0 Channel Mode
Safety Input 0 Test Source
Dual-channel Safety Input 0/1 Mode
Test Output 0 Mode
Standard
None
Single channel
Power supply
I0 T0 I1 T1
24V
Controller
Configuration
Safety Input 0
Connect the switch between 24V DC and I0.
Parameter Name
Safety Input 0 Channel Mode
Safety Input 0 Test Source
Dual-channel Safety Input 0/1 Mode
31820-M
Configuration Setting
Standard
None
Single channel
52 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Source Output Examples
Wiring Examples Chapter 4
Read this section for source output examples by application. For details, refer to the installation instructions for each catalog number.
V0
Redundant Safety Contactors
This example shows wiring and controller configuration when using a Guard I/O module with redundant safety contactors.
Note that all safety outputs of this Guard I/O module are permanently configured for use as Dual-channel mode only. When used in combination with the programs of the safety controller, this circuit configuration is Safety Category
4 in accordance with EN 954-1 requirements.
IN0 V1 OUT 0 OUT 1
K1
K2
G0 T0 G1 G1
E1
E1, E2: 24V DC Power
Source
K1, K2: Contactor
Controller
Configuration
Safety Input 0
K1
K2 E2
V0, G0: Input Power Connection
V1, G1: Output Power Connection
Test Output 0
Safety Output 0
Safety Output 1
Parameter Name
Safety Input 0 Channel Mode
Safety Input 0 Test Source
Dual-channel Safety Input 0/1 Mode
Test Output 0 Mode
Safety Output 0 Channel Mode
Dual-channel Safety Output 0/1 Mode
Safety Output 1 Channel Mode
K1
G1
K2
Configuration Setting
Test Pulse from Test Output
Test Output 0
Single Channel
Pulse Test Output
Safety Pulse Test
Dual-channel
Safety Pulse Test
M
31806-M
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 53
Chapter 4 Wiring Examples
V0
G0
Single Channel
This example shows wiring and controller configuration when using a Guard I/O module with a single channel. If used in combination with the programs in a safety controller, this wiring is Safety Category 4 in accordance with EN 954-1 wiring requirements.
IN0 V1 OUT 0
K1
T0 G1 G1
M
K1
K1
FE1
V0, G0: Input Power Connection
V1, G1: Output Power Connection
M: Three-phase Motor
FE2
31821-M
54 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Bipolar Output Examples
Wiring Examples Chapter 4
Read this section for bipolar output examples by application. For details, refer to the installation instructions for each catalog number.
IN+
PS1 PS2
INOUT+ OU T-
Dual-load Bipolar Outputs
This example shows wiring and controller configuration when using a Guard I/O module with solid-state outputs in Dual-channel mode.
Note that all safety outputs of this Guard I/O module are permanently configured for use as Dual-channel mode only. When used in combination with the programs of the safety controller, this circuit configuration is Safety Category
4 in accordance with EN 954-1 requirements.
K1
K2
K2
K1 M
FE O0
P
O1
M
LS+ 02
P
03
M
LS+
FE I0 I1 T0 T1 I2 I3 T2 T3M
PS1, PS2: User 24V DC power supply. (A single power supply can be used for both input and output power.)
Controller
Configuration
Safety Input 0
Test Output 0
Safety Output 0
Safety Output 1
K1 K2
Parameter Name
Safety Input 0 Channel Mode
Safety Input 0 Test Source
Dual-channel Safety Input 0/1 Mode
Test Output 0 Mode
Safety Output 0 Channel Mode
Safety Output 1 Channel Mode
Configuration Setting
Test Pulse from Test Output
Test Output 0
Single Channel
Pulse Test Output
Safety Pulse Test
Safety Pulse Test
31807-M
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 55
Chapter 4 Wiring Examples
Single Channel
PS1
This example shows wiring and controller configuration when using a Guard I/O module with a single channel. If used in combination with the programs in a safety controller, this wiring is Safety Category 4 in accordance with EN 954-1 wiring requirements.
PS2
O0P
IN+ INOUT+ OU TFE O0P O1M
M
K1
FE I0 I1 T0 T1
E1, E2: 24V DC Power Source
K1: Contactor
M: Three-phase Motor
K1
PS1, PS2: User 24V DC power supply. (A single power supply can be used for both input and output power.)
31822-M
56 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Relay Output Examples
Wiring Examples Chapter 4
Read this section for relay output examples by application. For details, refer to the installation instructions for each catalog number.
Relay Outputs with Dual-channel Mode and External Device
Monitoring Input
This example shows wiring and controller configuration when using a Guard I/O module with relay outputs in dual-channel mode and an external device monitoring input. If used in combination with the programs in a safety controller, this wiring is Safety Category 4 in accordance with EN 954-1 wiring requirements.
V0
G0
I0
T0
V1
G1
0
C0
E1
K1
K2
E2
F1
K1
, E2: 24V DC Power Source
, K2: Magnetic Contactors
Three-phase Motor
, F2: Fuses
V0, G0: Input Power Connection
V1, G1: Output Power Connection
Controller
Configuration
Safety Input 0
Test Output 0
Safety Output 0
Safety Output 1
Parameter Name
Safety Input 0 Channel Mode
Safety Input 0 Test Source
Dual-channel Safety Input 0/1 Mode
Test Output 0 Mode
Safety Output 0 Channel Mode
Dual-channel Safety Output 0/1 Mode
Safety Output 1 Channel Mode
1
C1
F2
M
K1
K2
K2
Configuration Setting
Test Pulse from Test Output
Test Output 0
Single Channel
Pulse Test Output
Safety
Dual-channel
Safety
AC Supply
31808-M
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 57
Chapter 4 Wiring Examples
Interlock String
This example shows wiring and controller configuration when using a Guard I/O module with an interlock string. If used in combination with the programs in a safety controller, this wiring is Safety Category 4 in accordance with EN 954-1 wiring requirements.
OUT 0
C0
1
OUT 1
0
C1
0e
C0E
1e
C1e
24V 24V
Robot
31823-M
58 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Test Output Examples
Wiring Examples Chapter 4
Read this section for test output examples by application. For details, refer to the installation instructions for each catalog number.
Standard Inputs and Outputs
SW1
This example shows wiring and controller configuration when using a Guard I/O module with standard inputs and outputs.
PS1: User 24V DC power supply.
PS1
IN+ INOUT+ OU T-
Controller
Configuration
Safety Input 1
Test Pulse 0
Load
FE I0 I1 T0 T1 I2 I3 T2 T3M
Parameter Name
Safety Input 1 Channel Mode
Safety Input 1 Test Source
Dual-channel Safety Input 0/1 Mode
Test Output 0 Mode 1
Configuration Setting
Standard Input
None
Single Channel
Standard Output
31809-M
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 59
Chapter 4 Wiring Examples
PS1
IN+ IN-
Muting Lamp Output
This example shows wiring and controller configuration when using a Guard I/O module with a muting lamp output.
FE I0 I1 T0 T1 I2 I3 T2 T3M
Controller
Configuration
Test Output 3
PS1: User 24V DC Power Supply
Parameter Name
Test Output 3 Mode
L1
Configuration Setting
Muting Lamp Output
31810-M
60 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Use the Help Button
Chapter
5
Configure Modules with the Logix Designer
Application
.
Topic
Add Modules to the I/O Configuration Tree
Configure the Input Configuration Tab
Configure the Test Output Tab
Configure the Output Configuration Tab
Save and Download Module Configuration
76
Page
At the bottom of a dialog box, click Help for information about how to complete entries in the dialog box. At the bottom of a warning dialog box, click Help to get information about that specific error.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 61
Chapter 5 Configure Modules with the Logix Designer Application
Add Modules to the
I/O Configuration Tree
To add a module to the I/O configuration tree, follow these guidelines.
1.
From the I/O Configuration tree, right-click the 1756-DNB module and choose New Module.
The Select Module dialog box appears with a list that includes Safety.
2.
Expand the Safety category, select the appropriate module, and click OK.
62 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules with the Logix Designer Application Chapter 5
3.
From the Module Properties dialog box, complete entries for the General dialog box. a. For Name, type a unique name.
b. For Node, choose the DeviceNet Node number, noting this number and the switches on the actual modules must match. c. For Description, if desired, type a description.
d. For Safety Network Number, use the default setting.
For a detailed explanation of the safety network number (SNN), see the
GuardLogix Controller Systems Safety Reference Manuals listed in the
Additional Resources on page 10
.
The purpose of the Safety Network Number (SNN) is to make sure that every module in a system can be uniquely identified.
For example, assume there are two identical GuardLogix control systems—System A and System B—that are connected to a common
Ethernet network. System A and System B have three DeviceNet networks with assorted standard and safety I/O modules. In systems like this, modules can have the same node number, but if each
DeviceNet network has a unique SNN, each node will not have the same SNN and node number combination.
Another example of the usage of SNNs is when 1756-DNB modules are in the same chassis and the DeviceNet cables are inadvertently disconnected. If the cables are reattached incorrectly, the connection in the safety modules are broken because each 1756-DNB module is now connected to devices with different SNNs.
We suggest that all safety modules on a network have the same SNN, to make documentation easier. During configuration, the Logix Designer application defaults a safety device’s SNN to match the SNN of the lowest safety node on the network.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 63
Chapter 5 Configure Modules with the Logix Designer Application
Set Up the Module Definition
Follow these steps to edit the module definition.
1.
From the Module Properties dialog box, click Change.
64
This dialog box appears.
Integer is the only Data
Format available.
2.
From the Series pull-down menu, choose your module’s series level.
3.
From the Revision pull-down menu, choose your module’s revision level.
4.
Assign the electronic keying.
Choose
Exact Match
Compatible Module
Description
All of the parameters must match or the inserted module rejects a connection to the controller.
Allows an I/O module to determine whether it can emulate the module defined in the configuration sent from the controller.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules with the Logix Designer Application Chapter 5
5.
Assign the input data.
Choose
Safety
Description
These tags are created for the target module:
· RunMode for module mode
· ConnectionFaulted for communication status
· Safety Data for safety inputs from the module
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 65
Chapter 5 Configure Modules with the Logix Designer Application
Choose
Safety-Readback
Description
This option creates safety and readback tags, with readback indicating the presence of 24V on the output terminal. Safety-
Readback is not available for input-only safety modules.
Small Safety (1791DS-IB12 module only)
This option is for 12-point safety input modules that use 8 or fewer safety inputs. The Small Safety option reduces the amount of data that the 12-point module sends to the controller to improve network performance. Safety data and point status tags are created. Point status is diagnostic status for each of the eight input points.
66 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules with the Logix Designer Application Chapter 5
6.
Assign the input status.
Choose
None
Pt. Status
Description
There are no status tags, only data for the inputs.
There is one status tag for each input and output point.
Pt. Status - Muting There is a muting status tag for test output T3, T7, T11, and T15 with point status for each input and output point.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 67
Chapter 5 Configure Modules with the Logix Designer Application
Choose
Combined Status - Muting
Description
· A single BOOL tag represents an AND of the status bits for all the input points. For example, if any input channel has a fault, this bit goes LO.
(1)
· A single BOOL tag represents an AND of the status bits for all the output points.
· A muting status tag for test output T3, T7, T11, and T15.
Pt. Status-Muting-Test Output · Status tags for each of the input and output points.
· Muting status tag for test output T3, T7, T11, and T15.
· Status tags for each of the test outputs.
(1) When using combined status, use explicit messaging to read individual point status for diagnostic purposes.
7.
Assign the output data.
IMPORTANT The test outputs that are configured as standard outputs on the module must not be used for safety purposes.
Choose
None
Safety
Description
Results in an input only connection to the module. Inputs and status are read, but no outputs are written.
Creates these safety tags and enables these outputs for use in the safety task.
68 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Choose
Test
Combined
Configure Modules with the Logix Designer Application Chapter 5
Description
Creates these tags and enables the test outputs on the module. These outputs are standard outputs and must not be used for safety purposes.
Creates these tags and enables all modules outputs, safety and test.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 69
Chapter 5 Configure Modules with the Logix Designer Application
Values and States of Tags
Use this table to determine the values and states of the tags.
Data
Input data Safety Input Data
SAFETY
Combined Safety Input Status
SAFETY
Output data
Individual Safety Input Status
SAFETY
Combined Safety Output Status
SAFETY
Individual Safety Output Status
SAFETY
Muting Lamp Status
SAFETY
Output Readback
STANDARD
Individual Test Output Status
STANDARD
Safety Output Data
SAFETY
Standard Output Data
STANDARD
Description
Indicates the ON/OFF status of each input circuit.
· ON: 1 OFF: 0
An AND of the status of all input circuits.
· All circuits are normal: 1
· An error was detected in one or more input circuits: 0
Indicates the status of each input circuit.
· Normal: 1 Fault (Alarm): 0
An AND of the status of all safety output circuits.
· All circuits are normal: 1
· An error has been detected in one or more output circuits: 0
Indicates the status of each safety output circuit.
· Normal: 1 Fault (Alarm): 0
Indicates the status when circuit T3, T7, T11, and T15 is configured as the muting lamp output.
· Normal: 1 Fault (Alarm): 0
Monitors the presence of 24V on the output circuit. Readback is ON
(1) if 24V is on output terminal.
· ON: 1 OFF: 0
Indicates the status of each of the test output circuits.
· Normal:1 Fault (Alarm): 0
Controls the safety output.
· ON: 1 OFF: 0
Controls the test output when Test Output mode is set to a standard output.
· ON: 1 OFF: 0
IMPORTANT Safety denotes information the controller can use in safety-related functions. Standard denotes additional information that must not be relied on for safety functions.
70 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure the Safety Tab
Configure Modules with the Logix Designer Application Chapter 5
Read this for information about how to complete entries when you click the
Safety tab.
1.
From the Module Properties dialog box, click the Safety tab.
2.
To configure the Requested Packet Interval (RPI), click Advanced.
You see the Advanced Connection Reaction Time Limit Configuration dialog box.
For more information about the Connection Reaction Time Limit, see the
GuardLogix Controllers User Manual, publication 1756-UM020 .
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 71
Chapter 5 Configure Modules with the Logix Designer Application
3.
In the Requested Packet Interval (RPI) box, enter the input connection
RPI to support your application (between 6 and 500 ms).
Selecting too small an RPI unnecessarily consumes network bandwidth; selecting too large an RPI increases safety reaction time. Selecting the appropriate RPI results in a system with optimized performance.
As an example, a safety input module with only ESTOP switches connected to it generally may work well with settings of 50…100 ms.
An input module with a light curtain guarding a hazard may need the fastest response that is possible.
IMPORTANT Analyze each safety channel to determine what is appropriate. The default Time-out Multiplier of 2 and Network Delay Multiplier of 200 will create an input-connection reaction time limit of four times the
RPI and an output-connection reaction time limit of three times the
RPI. Changes to these parameters should be approved by a safety administrator.
TIP We recommend keeping the Time-out Multiplier and Network
Delay Multiplier at their default values of 2 and 200.
A connection status tag exists for every connection.
When the connection reaction time limit and requested packet interval are set appropriately, this status tag always remains LO. Monitor all connection status bits to verify that they are not going HI intermittently due to timeouts.
72 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules with the Logix Designer Application Chapter 5
Configuration Ownership - Reset Ownership
The connection between the owner and the Guard I/O module is based on the following:
· Guard I/O DeviceNet node address
· Guard I/O safety network number
· GuardLogix slot number
· GuardLogix safety network number
· Path from GuardLogix controller to Guard I/O module
· Configuration signature
If any of these change, the connection between the GuardLogix controller and the Guard I/O module is lost, and the yellow yield in the project tree appears.
Reset ownership to reestablish the connection by using this procedure.
1.
From within the Logix Designer application, open the safety I/O module properties.
2.
Click the Safety tab.
3.
Click Reset Ownership.
Configuration Signature
The configuration signature is created by the Logix Designer application and verified by the safety module. The configuration signature provides SIL 3 integrity of the configuration of a Guard I/O module.
· When a GuardLogix controller first connects to an unconfigured
Guard I/O module, the complete configuration is downloaded to the I/O module.
· Any time the GuardLogix controller attempts to connect to a Guard I/O module, if the configuration signatures are the same, then the configuration does not need to be downloaded, because they already match.
· Any time the GuardLogix controller attempts to connect to a Guard I/O module and the signatures do not match, the module checks the module node address, electronic keying, and safety network number. If these are all correct, the controller will attempt to configure the module.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 73
Chapter 5 Configure Modules with the Logix Designer Application
Configure the
Input Configuration Tab
Follow this procedure to complete the input configuration. Refer to Chapter 2 for related information.
1.
From the Module Properties dialog box, click the Input Configuration tab.
74
2.
Assign the Point Operation Type.
When you choose Equivalent or Complementary, you must also assign an appropriate Discrepancy Time.
Choose
Single
Equivalent
(1)
Description
Inputs are treated as single channels. Note that in many cases, dualchannel safety inputs are configured as two individual single channels. This does not affect pulse testing because it is handled on an individual channel basis.
Inputs are treated as a dual-channel pair. The channels must match within the discrepancy time or an error is generated.
Input are treated as a dual-channel pair. They must be in opposite states within the discrepancy time or an error is generated.
(1) Be aware that configuring discrepancy time on safety I/O modules masks input discrepancies detected by the controller safety instructions. Status can be read by the controller to obtain this fault information.
A discrepancy time setting of 0 ms means that the channels in a dual configuration can be discrepant for an infinite amount of time without a fault being declared.
For a discrepancy time setting of 0 ms, the evaluated status of the inputs still go to the Safe State in the event of a ‘cycle inputs’ required condition, but due to the 0 ms discrepancy time, a fault will not be declared.
A ‘cycle inputs’ required condition occurs when one input terminal goes from its normal Active>Inactive>Active state while the other input terminal remains in its normal Active state. Even though no fault is declared, the inputs must be cycled before the evaluated status of the inputs can return to the Active state.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules with the Logix Designer Application Chapter 5
3.
Assign the Point Mode.
Choose
Not Used
Safety Pulse Test
Safety
Standard
Description
The input is disabled. It remains logic 0 if 24V is applied to the input terminal.
Pulse testing is performed on this input circuit. A test source on the
Guard I/O module must be used as the 24V source for this circuit. The test source is configured by using the test source pull-down menu.
The pulse test will detect shorts to 24V and channel-to-channel shorts to other inputs.
A safety input is connected but there is no requirement for the Guard
I/O module to perform a pulse test on this circuit. An example is a safety device that performs its own pulse tests on the input wires, such as a light curtain.
A standard device, such as a reset switch, is connected. This point cannot be used in dual-channel operation.
4.
Assign the Test Source for each safety input on the module you want pulse tested.
Choose Description
None
Test Output 0
Test Output 1
Test Output 2
Test Output 3
Test Output 4…15
(1)
If pulse testing is being performed on an input point, then the test source that is sourcing the 24V for the input circuit must be selected.
If the incorrect test source is entered, the result is pulse test failures on that input circuit.
(1) The number of test outputs varies per catalog number.
5.
Assign the Input Delay Time, Off -> On (0…126 ms, in increments of
6 ms).
Filter time is for OFF to ON transition. Input must be HI after input delay has elapsed before it is set logic 1. This delay time is configured per channel with each channel specifically tuned to match the characteristics of the field device, for maximum performance.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 75
Chapter 5 Configure Modules with the Logix Designer Application
6.
Assign the Input Delay Time, On -> Off (0…126 ms, in increments of
6 ms).
Filter time is ON to OFF transition. Input must be LO after input delay has elapsed before it is set logic 0. This delay time is configured per channel with each channel specifically tuned to match the characteristics of the field device, for maximum performance.
7.
From the Input Error Latch Time box, enter the time the module holds an error to make sure the controller can detect it (0…65,530 ms, in increments of 10 ms - default 1000 ms).
This provides you more reliable diagnostics and enhances the chances that a nuisance error is detected. The purpose for latching input errors is to make sure that intermittent faults that may only exist for a few milliseconds are latched long enough to be read by the controller. The amount of time to latch the errors should be based on the RPI, the safety task watchdog, and other application-specific variables.
8.
Click OK.
Configure the
Test Output Tab
This section describes how to work with the Test Output Configuration dialog box. Refer to this table for information on configuring test outputs.
Follow this procedure to complete the test output configuration.
1.
From the Module Properties dialog box, click the Test Output tab.
76 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules with the Logix Designer Application Chapter 5
2.
Assign the Point Mode
(1)
.
Choose Description
Not Used (default)
Standard
Pulse Test
Power Supply
Muting Lamp Output (terminal T3,
T7, T11, and T15 only)
The standard output is disabled.
The output point is enabled for use by the GuardLogix controller.
The test output is being used as a pulse test source.
A constant 24V is placed on the output terminal. It can be used to provide power to a field device.
An indicator lamp is connected to the output. When this lamp is energized, a burned-out bulb, broken wire, or short to GND error condition can be detected. Typically, the lamp is an indicator used in light curtain applications.
There is also a Test Output Fault Action parameter that can only be read or written to via explicit messaging. If communication to the module times out, you can set the test outputs to Clear OFF (default) or Hold Last State.
3.
Click OK.
Configure the
Output Configuration Tab
This section provides a procedure for configuring safety outputs by using the information in this table and completing the entries referring to the figure.
Follow this procedure to complete the safety output configuration.
1.
From the Module Properties dialog box, click the Output Configuration tab.
2.
Assign the Point Operation Type.
Choose
Single
(1)
Description
The output is treated as a single channel.
Dual (default) The Guard I/O module treats the outputs as a pair. It always sets them
HI or LO as a matched pair. Safety logic must set both of these outputs
ON or OFF as the same time or the module declares a channel fault.
(1) Does not apply to bipolar outputs.
(1) Directly related to safety.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 77
Chapter 5 Configure Modules with the Logix Designer Application
3.
Assign the Point Mode.
Choose
Not Used (default)
Safety
Safety Pulse Test
Description
The output is disabled.
The output point is enabled, and it does not perform a pulse test on the output.
The output point is enabled and performs a pulse test on the output.
When the output is energized, the output pulses LO briefly. The pulse test detects if 24V remains on the output terminal during this LO pulse due to a short to 24V or if the output is shorted to another output terminal.
4.
From the Output Error Latch Time box, enter the time the module holds an error to make sure the controller can detect it (0…65,530 ms, in increments of 10 ms - default 1000 ms).
This provides you more reliable diagnostics and enhances the changes that a nuisance error is detected.
The purpose for latching output errors is to make sure that intermittent faults that may only exist for a few milliseconds are latched long enough to be read by the controller. The amount of time to latch the errors will be based on the RPI, the safety task watchdog, and other application-specific variables.
5.
Click OK.
78 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules with the Logix Designer Application Chapter 5
Save and Download Module
Configuration
We recommend that after a module is configured you save your work.
If after downloading the program the MS and NS status indicators on the Guard
I/O module are not both solid green, this may be due to loss of ownership. The ownership is based on the following:
· Guard I/O DeviceNet node number
· Guard I/O safety network number
· GuardLogix slot number
· GuardLogix safety network number
· Path from GuardLogix controller to Guard I/O module
· Configuration signature
If any of these change, the connection between the GuardLogix controller and the Guard I/O module is lost, and the yellow yield in the project tree appears.
Reset ownership to reestablish the connection using this procedure.
1.
From the Module Properties dialog box, click the Safety tab.
2.
Click Reset Ownership.
3.
Click OK.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 79
Chapter 5 Configure Modules with the Logix Designer Application
Notes:
80 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Chapter
6
Configure Modules in RSNetWorx for DeviceNet
Software
Before You Begin
Topic
Add Modules to the I/O Configuration
Save and Download the Module Configuration
Set Up the 1791DS I/O Module Definition
Page
This chapter provides information about how to configure Guard I/O modules by using RSNetWorx for DeviceNet software and a SmartGuard controller. Refer to the corresponding software help files for network-configurator operating procedures.
This chapter covers how to configure a SmartGuard controller and Guard I/O module by using Universal Serial Bus (USB) connectivity.
Be sure you have these required items:
• RSNetWorx for DeviceNet software, version 8.0 or later
• RSLinx software, version 2.51 or later
• SmartGuard USB driver
The SmartGuard USB driver should already be in your RSLinx software. If it is not, load the driver onto your computer, noting the folder location as you need to browse to it later.
• Personal computer with a Microsoft Windows 2000, Microsoft Windows
2000 Terminal Server, or Microsoft Windows XP operating system
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 81
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
Add Modules to the
I/O Configuration
Follow these steps to add modules to the I/O configuration.
1.
In RSNetWorx for DeviceNet software, drag the appropriate hardware onto the window to match your physical layout.
The devices have default names and node numbers when created.
2.
Right-click a device and choose Properties.
82 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
3.
From the General tab, change these values.
a. In the Name box, type a unique name.
b. In the Description box, type a description (optional).
c. In the Address box, enter the DeviceNet node number.
This DeviceNet node number and the switches on the actual module must match.
4.
Click the Safety tab.
On the Safety tab, you set the safety network number (SNN) and the configuration signature.
Safety Network Number (SNN)
The purpose of the safety network number (SNN) is to make sure that every module in a system can be uniquely identified.
For example, assume there are two identical GuardLogix control systems—
System A and System B—that are connected to a common Ethernet network.
System A and System B have three DeviceNet networks with assorted standard and safety I/O modules. In systems like this, modules can have the same node number, but if each DeviceNet network has a unique SNN, each node will not have the same SNN and node number combination.
Another example of the usage of SNNs is when 1756-DNB modules are in the same chassis and the DeviceNet cables are inadvertently disconnected. If the cables are reattached incorrectly, the connection in the safety modules are broken because each 1756-DNB module is now connected to devices with different
SNNs.
We suggest that all safety modules on a network have the same SNN, to make documentation easier. During configuration, the Logix Designer application
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 83
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software software defaults a safety device’s SNN to match the SNN of the lowest safety node on the network.
The safety connection between a controller and I/O module is based on many items, one of which is the SNN of both devices. They do not have to match for a safety connection to be established, but the connection will be broken if the SNN of either device changes.
The safety network defaults to match the SNN of the lowest node on the network. If your safety controller is the lowest node on the network, then all of the safety I/O modules on the network will have the same SNN as the controller.
As this is the recommended method of configuring the SNN, you may not need to do anything more with the SNN.
For a detailed explanation of the SNN, see the GuardLogix Controller Systems
Safety Reference Manuals listed in the Additional Resources on page 10 .
84 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
Configuration Signature
The configuration signature is generated by the safety module each time the configuration is changed. It consists of an ID of the module configuration and the time and date the module configuration was created or changed. The configuration signature provides SIL 3 integrity of the configuration of a Guard
I/O module.
The safety connection between a controller and I/O module is based on many items, one of which can be the configuration signature of the safety I/O module.
If the configuration signature must match, the configuration signature must remain the same once the safety connection is established or the connection will be broken.
Figure 24 - Safety Connection and Configuration Signature
SmartGuard Safety Controller’s Safety Connection Tab
When configured as shown below, the I/O module configuration signature must match the offline signature for a connection to be established.
Safety Module’s
Note that the configuration signature of the safety module matches that of the SmartGuard controller, so the safety
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 85
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
Configure the I/O Module
The following sections use the Safety Configuration tab. Input and output points change based on the type of module that you configure.
Configure the Input Channel
Follow these steps to configure the input channel.
1.
Double-click Input Points xx
/ xx
.
The Input Points folder expands. In this example, 00/01 is shown.
86 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
2.
Assign the Operation Type.
When you choose Equivalent or Complementary, you must also assign an appropriate operation discrepancy time.
Choose
Single
Equivalent
(1)
Complementary
Description
Inputs are treated as single channels. In many cases, dual-channel safety inputs are configured as two individual, single channels. This does not affect pulse testing because it is handled on an individual basis.
Inputs are treated as a dual-channel pair. The channels must match within the discrepancy time or an error is generated.
Inputs are treated as a dual-channel pair. They must be in opposite states within the discrepancy time or an error is generated.
(1) Be aware that configuring discrepancy time on safety I/O modules masks input discrepancies detected by the controller safety instructions. Status can be read by the controller to obtain this fault information.
A discrepancy time setting of 0 ms means that the channels in a dual configuration can be discrepant for an infinite amount of time without a fault being declared.
For a discrepancy time setting of 0 ms, the evaluated status of the inputs still go to the safe state in the event of a ‘cycle inputs’ required condition.
But, due to the 0 ms discrepancy time, a fault will not be declared.
A ‘cycle inputs’ required condition occurs when one input terminal goes from its normal active>inactive>active state while the other input terminal remains in its normal active state. Even though no fault is declared, the inputs must be cycles before the evaluated status of the inputs can return to the active state.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 87
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
3.
Assign the Mode.
Choose
Not Used
Safety Pulse Test
Safety
Standard
Description
The input is disabled. It remains logic 0 if 24V is applied to the input terminal.
Pulse testing is performed on this input circuit. A test source on the Guard I/o module must be used as the 24V source for this circuit. The test source is configured by using the test source pull-down menu. The pulse test will detect shorts to 24V and channel-to-channel shorts to other inputs.
A safety input is connected but there is no requirement for the Guard I/O module to perform a pulse test on this circuit. An example is a safety device that performs its own pulse tests on the input wires, such as a light curtain.
A standard device, such as a reset switch, is connected. This point cannot be used in dual-channel operation.
4.
Assign the Test Source for each safety input on the module you want pulse tested.
Choose Description
1
2
None
0
3
4…15
(1)
If pulse testing is being performed on an input point, then the test source that is sourcing the 24V for the input circuit must be selected.
If the incorrect test source is entered, the result is pulse test failures on that input circuit.
(1) The number of test outputs varies per catalog number.
5.
Assign the Input Delay Time, Off -> On (0…126 ms, in increments of
6 ms).
Filter time is for OFF to ON transition. Input must be HI after input delay has elapsed before it is set logic 1. This delay time is configured per channel with each channel specifically tuned to match the characteristics of the field device, for maximum performance.
88 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
6.
Assign the Input Delay Time, Off -> On (0…126 ms, in increments of
6 ms).
Filter time is ON to OFF transition. Input must be LO after input delay has elapsed before it is set logic 0. This delay time is configured per channel with each channel specifically tuned to match the characteristics of the field device, for maximum performance.
Configure the Test Output
Follow these steps to configure the test outputs.
1.
Double-click Test Output Points.
The Test Output Points folder expands.
2.
Assign the Test Output Mode.
Choose Description
Not Used (default)
Standard
Pulse Test
Power Supply
Muting Lamp Output (terminal T3,
T7, T11, and T15 only)
The standard output is disabled.
The output point is enabled for use by the GuardLogix controller.
The test output is being used as a pulse test source.
A constant 24V is placed on the output terminal. It can be used to provide power to a field device.
An indicator lamp is connected to the output. When this lamp is energized, a burned-out bulb, broken wire, or short to GND error condition can be detected. Typically, the lamp is an indicator used in light curtain applications.
There is also a Test Output Fault Action parameter that can only be read or written to via explicit messaging. If communication to the module times out, you can set the test outputs to Clear OFF (default) or Hold Last State.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 89
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
Configure the Output Channel
Follow these steps to configure the safety output channel.
1.
Double-click Output Points xx
/ xx
.
The Output Points folder expands. In this example, 00/01 is shown.
90
2.
Assign the Operation Type.
Choose
Single
(1)
Description
The output is treated as a single channel.
Dual (default) The Guard I/O module treats the outputs as a pair. It always sets them
HI or LO as a matched pair. Safety logic must set both of these outputs
ON or OFF as the same time or the module declares a channel fault.
(1) Does not apply to bipolar outputs.
3.
Assign the channel Mode.
Choose Description
Not Used (default)
Safety
Safety Pulse Test
The output is disabled.
The output point is enabled, and it does not perform a pulse test on the output.
The output point is enabled and performs a pulse test on the output.
When the output is energized, the output pulses LO briefly. The pulse test detects if 24V remains on the output terminal during this LO pulse due to a short to 24V or if the output is shorted to another output terminal.
Configure Input and Output Error Latch Times
Follow these steps to configure the input and output error latch times.
1.
Double-click General.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
The General folder expands.
2.
Enter the Input Error Latch Time, the time the module holds an error to make sure the controller can detect it (0…65,530 ms, in increments of 10 ms—default 1000 ms).
This provides you more reliable diagnostics and enhances the changes that a nuisance error is detected. The purpose for latching input errors is to make sure that intermittent faults that may only exist for a few milliseconds are latched long enough to be read by the controller.
The amount of time to latch the errors will be based on the RPI, the safety task watchdog, and other application-specific variables.
3.
Enter the Output Error Latch Time, the time the module holds an error to make sure the controller can detect it (0…65,530 ms, in increments of 10 ms—default 1000 ms).
This provides you more reliable diagnostics and enhances the changes that a nuisance error is detected. The purpose for latching output errors is to make sure that intermittent faults that may only exist for a few milliseconds are latched long enough to be read by the controller.
The amount of time to latch the errors will be based on the RPI, the safety task watchdog, and other application-specific variables.
4.
Click Apply.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 91
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
Save and Download the
Module Configuration
We recommend that you save your work after configuring a module. If the download is successful, you see a similar message to the message below.
92 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Set Up the 1791DS I/O
Module Definition
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
Follow these steps to set up the 1791DS I/O module definition.
1.
Right-click the SmartGuard controller and choose Properties.
2.
Click the Safety Connection tab.
All 1791DS modules that the controller could make a safety connection to should appear in the list.
The rest of these steps assumes that the module is a combination input and output module. We describe how to add two connections: one of inputs and one of outputs. You can add individual safety connections for the inputs and outputs. SmartGuard 600 controller can have as many as 32 connections.
3.
Right-click the I/O module and choose Add Connection.
4.
Choose the Connection Name from the pull-down menu.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 93
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
Make your choice based on the input data and status needs of your application.
To see the specific data that will be generated for each connection name, in the 1791DS module properties dialog box click the Safety I/O tab.
Expand each choice to see the tags created for input data, input status, output data, and output status.
5.
Assign the input data.
Choose
Safety
Description
The Safety Data tag for safety inputs from the module is created for the target module.
94 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Choose
Readback
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
Description
This option creates safety and readback tags, with readback indicating the presence of 24V on the output terminal. Safety-
Readback is not available for input-only safety modules.
Small Safety (1791DS-IB12 module only)
This option is for 12-point safety input modules that use 8 or fewer safety inputs. The Small Safety option reduces the amount of data that the 12-point module sends to the controller to improve network performance. Safety data and point status tags are created. Point status is diagnostic status for each of the eight input points.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 95
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
6.
Assign the input status.
Choose
None
Pt. Status
Description
There are no status tags, only data for the inputs.
There is one status tag for each input and output point.
Pt. Status - Muting There is a muting status tag for test output T3, T7, T11, and T15 with point status for each input and output point.
96 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Choose
Combined Status - Muting
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
Description
· A single BOOL tag represents an AND of the status bits for all the input points. For example, if any input channel has a fault, this bit goes LO.
(1)
· A single BOOL tag represents an AND of the status bits for all the
· A muting status tag for test output T3, T7, T11, and T15.
Pt. Status-Muting-Test Output · Status tags for each of the input and output points.
· Muting status tag for test output T3, T7, T11, and T15.
· Status tags for each of the test outputs.
(1) When using combined status, use explicit messaging to read individual point status for diagnostic purposes.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 97
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
7.
Assign the output data.
IMPORTANT The test outputs that are configured as standard outputs on the module must not be used for safety purposes.
Choose
None
Safety
Description
Results in an input only connection to the module. Inputs and status are read, but no outputs are written.
Creates these safety tags and enables these outputs for use in the safety task.
Test Creates these tags and enables the test outputs on the module. These outputs are standard outputs and must not be used for safety purposes.
98 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Choose
Combined
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
Description
Creates these tags and enables all modules outputs, safety and test.
Typically, you should choose Combined Status for the input status.
This limits the packet size for normal communication. If you need detailed status when a fault occurs, that data is read explicitly via MSG instructions.
Choose the appropriate input connection and add the output connection, if necessary.
Set the Connection Type
From the Connection Type pull-down menu, choose the appropriate connection type.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 99
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
The Multicast connection type enables other safety controllers to read the safety input data by using this input connection. The Point to Point connection type does not enable this functionality.
For other safety controllers to use this safety connection to read the input data, the connections must be identical.
The RPI, connection name, and channel configuration must match so that this connection can be used by the other safety controller.
Set the Connection Configuration
The safety connection between a controller and I/O module is based on many items, one of which can be the configuration signature of the safety I/O module.
If the configuration signature must match, the configuration signature must remain the same once the safety connection is established or the connection is broken.
To obtain SIL 3 integrity of a Guard I/O module, from the Configuration pulldown menu, choose ‘Configuration signature must match’. For more information about the configuration signature, refer to
100 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
Set the Communication Parameters
Follow these steps to configure the communication parameters.
1.
From the Add Safety Connection dialog box, click Advanced.
The Advanced Safety Connection Properties dialog box appears.
For more information about the Connection Reaction Time Limit, see the
GuardLogix Controllers User Manual, publication 1756-UM020 .
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 101
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
2.
In the Requested Packet Interval (RPI) box, enter the input connection
RPI to support your application (from 6…500 ms).
Selecting too small an RPI unnecessarily consumes network bandwidth; selecting too large an RPI increases safety reaction time. Selecting the appropriate RPI results in a system with optimized performance.
As an example, a safety input module with only ESTOP switches connected to it generally may work well with settings of 50…100 ms.
An input module with a light curtain guarding a hazard may need the fastest response that is possible.
IMPORTANT Analyze each safety channel to determine what is appropriate. The default Time-out Multiplier of 2 and Network Delay Multiplier of 200 will create an input-connection reaction time limit of four times the RPI and an output-connection reaction time limit of three times the RPI.
Changes to these parameters should be approved by a safety administrator.
TIP We recommend keeping the Time-out Multiplier and Network
Delay Multiplier at their default values of 2 and 200.
A connection status tag exists that sums up all the safety I/O connections.
Safety I/O Error Status
OFF No errors.
ON Errors exist in one or more of the safety connections.
Safety I/O Communication Status
OFF Errors exist in one or more of the safety connections.
ON No errors.
When the connection reaction time limit and requested packet interval are set appropriately, these status tags should remain in their ‘no errors’ condition. Monitor these connection status bits to verify that they are not changing intermittently due to timeouts.
102 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
Configuration Ownership—Reset Ownership
The connection between the owner and the Guard I/O module is based on the following:
• Guard I/O DeviceNet node address
• Guard I/O safety network number
• GuardLogix slot number
• GuardLogix safety network number
• Path from GuardLogix controller to Guard I/O module
• Configuration signature
If any of these change, the connection between the controller and the Guard I/O module is lost. Reset the Guard I/O module to attempt to reestablish the connection by using this procedure.
The most common use of resetting the device is when the 1791DS module has previously had a safety connection to another controller. Until that prior owner is reset, the module will not make a new safety connection.
1.
When online with the 1791DS module, right-click the module and choose
Reset Safety Device.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 103
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
The Reset Safety Device dialog box appears.
Configuration Owner and Output Connection Owner(s) are checked by default.
2.
To reset the device to an out-of-box condition, check Password and Safety
Network Number.
If you attempt to reset the device when a safety connection is active and the
SmartGuard controller is in Run mode, you see this message.
Put the SmartGuard controller into Idle mode and attempt to reset the
1791DS module again.
104 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
Set the Safety Network Number (SNN)
If you attempt to set the safety network number (SNN) when a safety connection is active and the SmartGuard controller is in Run mode, you see this message.
When you attempt to change the SNN, this dialog box appears.
Current SNN
Follow these steps to change the SNN.
1.
To change the SNN based on time, click Time-based and then click
Generate.
2.
To change the SNN based on a value of your own, click Manual and enter your value in the box.
3.
Once you have your new SNN established, click OK.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 105
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
The new SNN is sent to the 1791DS module. This dialog box appears informing you that the 1791DS configuration will be cleared when the
SNN is changed.
Next, this dialog box appears to allow you to confirm which module is about to have its SNN set.
The network status indicator on the module that is about to have its SNN set is flashing red/green.
4.
Click OK to confirm.
This dialog box appears and the network status indicator should stop flashing red/green.
106 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
Set Your Password
You can set a password so that the configuration of the 1791DS module cannot be changed without first entering the password. Use of this password is not required to obtain SIL 3 integrity, because the configuration signature is part of the safety connection. If the configuration signature changes, the safety connection is lost.
If you forget your password, you must contact Rockwell Automation to have it reset.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 107
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
I/O Data Tab
You can put the 1791DS module in the scan list of a DeviceNet scanner, for example, a 1756-DNB bridge module.
The 1791DS module will automatically appear in your list of available devices.
Open the properties for the 1756-DNB module and click the Scanlist tab.
The 1791DS module has preconfigured options for reading (and writing) standard data. To view them, open the properties of the 1791DS module and click the I/O Data tab. These sizes and data contained within them cannot be altered.
108 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Troubleshooting
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
These message types will appear differently, depending on the safety I/O module you select, but in general the:
• bit-strobe and polled connections provide the I/O data values and channel status.
• polled connection can write standard data to the I/O module.
Only use this if the test outputs are configured as standard outputs, and those standard outputs can then be controlled from the scanner.
• change of state (COS) and cyclic connections provide power status, which cannot be obtained from bit strobe or polled connections.
If you attempt to go into Execute mode after a change is made to the 1791DS module (which breaks the safety connection to the SmartGuard controller), you will see the D6 message on the SmartGuard controller’s ASCII display.
To resolve this anomaly, in the SmartGuard 600 properties dialog box, click the
Safety Connection tab. This message appears if there has been an update to a
1791DS module that is not reflected in the offline configuration.
Click Yes to resolve those differences. Next, click Apply and then Yes to download the updated software changes to the SmartGuard 600 controller.
If the differences are resolved, you can go into Execute mode without seeing the
D6 message on the SmartGuard controller’s ASCII display.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 109
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
If you see the following message after attempting to download, the likely scenario is that the 1791DS module was previously owned by a different safety controller.
You must reset the owner before the 1791DS module will make a new safety connection.
To reset the 1791DS module, right-click the module and choose Reset Safety
Device.
The Reset Safety Device dialog box appears.
110
Check Password and Safety Network Number so that the 1791DS module is totally reset. Click Reset.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
If the reset is successful, you see this message.
Note that the configuration owner is now reset, so the 1791DS module can connect to a new owner, that is, the SmartGuard controller.
When you browse the network, the 1791DS module appears like this.
The exclamation point means the SNN has not been set (as shown below). This makes sense because the device has just been reset.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 111
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
Double-click the module. This dialog box appears.
The SNN that exists in the 1791DS module does not match what is in
RSNetWorx for DeviceNet software. For more information about the SNN, see
.
Click Download. This dialog box appears.
This lets you confirm which 1791DS module is about to have its SNN set. The network status indicator on the module that is about to have its SNN set is flashing red/green. Click OK to confirm the set.
This dialog box appears and the network status indicator on the affected module stops flashing red/green.
112 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configure Modules in RSNetWorx for DeviceNet Software Chapter 6
Click OK. This dialog box appears.
Click Download to complete the download of your new configuration.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 113
Chapter 6 Configure Modules in RSNetWorx for DeviceNet Software
Notes:
114 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Considerations When Replacing Guard
I/O Modules
Chapter
7
Topic
Considerations When Replacing Guard I/O Modules
Replacing an I/O Module When Using a SmartGuard Controller
Replacing an I/O Module When Using a GuardLogix Controller
Page
This chapter provides things to consider when replacing Guard I/O modules when they are connected to GuardLogix or SmartGuard controllers. For more information, refer to the controller user manuals listed in the Additional
Considerations When
Replacing Guard I/O Modules
When Guard I/O modules are connected to a GuardLogix or SmartGuard controller, consider the following when replacing the modules.
The topic of replacing a safety I/O module that sits on a DeviceNet network is more complicated than standard devices because of the safety network number
(SNN). The node number (Mac ID) and SNN make up the safety node’s identifier. Safety devices require this more complex identifier to guarantee that duplicate node numbers do not compromise communication between the correct nodes.
The DeviceNet network supports 64 node numbers, so if you have 100 devices on multiple DeviceNet networks, there are at least 36 duplicate node numbers being used. Even though the duplicate nodes are on separate DeviceNet networks, this must still be considered in a safety system.
In this example, the DNB scanner #1 is connected to node 5. The DNB scanner
#2 is connected to another node 5. If the cables get inadvertently crossed, the scanners may be communicating with the incorrect node 5.
Figure 25 - Crossed Cable Example
DNB #1 DNB #2 DNB #1 DNB #2
5 5 5 5
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 115
Chapter 7 Considerations When Replacing Guard I/O Modules
This crossed-cable scenario is unacceptable for a safety system. The SNN guarantees unique identification of every safety device. In this next example, all of the devices connected to DNB scanner #1 have an SNN of 100. All devices connected to DNB scanner #2 have an SNN of 101. If the cables get inadvertently crossed, the node connected to DNB scanner #1 changes from
100/5 to 101/5. The node connected to DNB scanner #2 changes from 101/5 to
100/5. Therefore, the safety connections are not made if the cables get crossed.
Figure 26 - Connections Not Made Example
DNB #1
5
SNN 100
DNB #2
5
SNN 101
DNB #1
5
SNN 100
DNB #2
Connections not made.
5
SNN 101
Why You Need to Manually Set the SNN
The examples above showed how the SNN is used to guarantee safety-connection integrity after the system is operational. But the SNN is also used to guarantee integrity on the initial download to the Guard I/O module.
If a safety signature exists, then the Guard I/O module must have a proper SNN/ node number identification that matches the module within the project, before it can receive its configuration. And to keep integrity, the setting of the module’s
SNN is required to be a manual action. This manual action is to use the ‘set’ function on an out-of-box Guard I/O module.
116 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Considerations When Replacing Guard I/O Modules Chapter 7
Figure 27 - Setting the SNN with a GuardLogix Controller
Figure 28 - Setting the SNN with a SmartGuard Controller
GuardLogix Controllers versus SmartGuard Controllers
There is one major difference in functionality between the GuardLogix and
SmartGuard safety controllers that affects the replacement of safety I/O modules. GuardLogix controllers retain I/O module configuration on-board and are able to download the configuration to the replacement module. SmartGuard controllers do not retain I/O module configuration so you need to use
RSNetWorx for DeviceNet software to download the configuration to the replacement module.
Replacing an I/O Module
When Using a SmartGuard
Controller
Follow these steps to replace an I/O module when using a SmartGuard controller.
1.
Set the rotary switches of the replacement module to match the node number of the original module.
2.
In RSNetWorx for DeviceNet software, open your project.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 117
Chapter 7 Considerations When Replacing Guard I/O Modules
If the replacement module is out-of-box or has an SNN that does not match the original module, the module appears with an exclamation mark.
3.
Right-click the module and choose Download to Device.
This dialog box appears.
4.
Click Yes.
This dialog box appears informing you that the SNN of the replacement module does not match the SNN in the software.
118
5.
Click Download to set the SNN on the replacement module.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
This dialog box appears.
Considerations When Replacing Guard I/O Modules Chapter 7
6.
Click OK.
This dialog box appears, confirming that the SNN has ben set.
The download now occurs. Once completed successfully, you see this message in the main project view: ‘The device at address xx
has been downloaded. Any device-specific messages related to the download operation are displayed separately.’
Assuming this is the proper configuration from the original DNT file, the
SNN and configuration signature now match that of the original. If you are already connected to the SmartGuard controller, a connection is made.
The SmartGuard controller does not need to be taken out of RUN mode to download to the replacement module.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 119
Chapter 7 Considerations When Replacing Guard I/O Modules
If you download this configuration to a temporary setup, place the module on the network and it automatically connects to the SmartGuard controller.
If the configuration downloaded to the module was not from the original
DNT file, the configuration signature will not match the original. Even if you recreate the same parameters in a new DNT file, the time and date portions of the signature will be different so the connection to the
SmartGuard controller is not made. If this occurs, click the Safety
Connection tab for the SmartGuard controller that prompts you that the signature is different and provides you with the option to match the new signature. However, you should first re-validate the safety system, because it is not using the original DNT file.
7.
Click Yes.
This takes the SmartGuard controller our of RUN mode.
You see this dialog box.
8.
Click Yes to download the new connection configuration to the
SmartGuard controller.
After the download is complete, place the SmartGuard controller back in
RUN mode and the connection to the replacement module is established.
120 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Replacing an I/O Module
When Using a GuardLogix
Controller
Considerations When Replacing Guard I/O Modules Chapter 7
Follow the appropriate steps to replace an I/O module when using a GuardLogix controller.
I/O Replacement with ‘Configure Only When No Safety Signature
Exists’ Enabled
IMPORTANT If you use a GuardLogix controller for SIL 3 during module replacement and functional testing, then you must choose ‘Configure Only When No Safety
Signature Exists’. This option makes sure that if a safety signature exists
(and you must have a safety signature to be SIL 3), that the safety network number (SNN) of the replacement distributed I/O module must match that of the GuardLogix controller before a connection between them can be made.
If a safety signature exists, clicking Set downloads the correct SNN from the correct GuardLogix project to the replacement module. The only exception would be when the SNN is already the same as the replacement module, in which case no action is required.
Once the correct SNN has been downloaded to the Guard I/O module, the
GuardLogix controller automatically configures the module.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 121
Chapter 7 Considerations When Replacing Guard I/O Modules
If the project is configured as ‘Configure Only When No Safety Signature Exists’, follow the appropriate steps to replace a Guard I/O module based on your scenario.
GuardLogix Project
Safety Signature
Exists
Yes
Replacement Module
SNN
Out-of-box
Fault
SNN not set, device out-of-box
Action Required
No
Yes or No
Yes
No
Out-of-box
Same as original
Different from original
Different from original
None
None
SNN mismatch
SNN not set, device out-of-box
SNN mismatch
Click Set.
Refer to Scenario 1 - New Module is
Out-of-box and Safety Signature
None.
None.
1. Click Reset Ownership.
2. Click Set.
Refer to Scenario 2 - New Module
SNN is Different from Original and
Safety Signature Exists on page 123.
Click Reset Ownership.
Refer to Scenario 3 - New Module
SNN is Different from Original and
No Safety Signature Exists on page 124 .
Scenario 1 - New Module is Out-of-box and Safety Signature Exists
1.
Remove the old I/O module and install the new module.
2.
Right-click your GuardLogix controller and choose Properties.
3.
Click to the right of the safety network number to open the Safety
Network Number dialog box.
4.
Click Set.
122 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Considerations When Replacing Guard I/O Modules Chapter 7
The Set Safety Network Number in Module confirmation dialog box appears.
5.
Verify that the Network Status (NS) status indicator is alternating red/ green on the correct module before clicking Yes to set the SNN and accept the replacement module.
6.
Follow your company-prescribed procedures to functionally test the replaced I/O module and system and to authorize the system for use.
Scenario 2 - New Module SNN is Different from Original and Safety Signature Exists
1.
Remove the old I/O module and install the new module.
2.
Right-click your Guard I/O module and choose Properties.
3.
Click the Safety tab.
4.
Click Reset Ownership.
5.
Click OK.
6.
Right-click your GuardLogix controller and choose Properties.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 123
Chapter 7 Considerations When Replacing Guard I/O Modules
7.
Click to the right of the safety network number to open the Safety
Network Number dialog box.
8.
Click Set.
124
The Set Safety Network Number in Module confirmation dialog box appears.
9.
Verify that the Network Status (NS) status indicator is alternating red/ green on the correct module before clicking Yes to set the SNN and accept the replacement module.
10.
Follow your company-prescribed procedures to functionally test the replaced I/O module and system and to authorize the system for use.
Scenario 3 - New Module SNN is Different from Original and No Safety Signature Exists
1.
Remove the old I/O module and install the new module.
2.
Right-click your Guard I/O module and choose Properties.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
3.
Click the Safety tab.
Considerations When Replacing Guard I/O Modules Chapter 7
4.
Click Reset Ownership.
5.
Click OK.
6.
Follow your company-prescribed procedures to functionally test the replaced I/O module and system and to authorize the system for use.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 125
Chapter 7 Considerations When Replacing Guard I/O Modules
I/O Replacement with ‘Configure Always’ Enabled
ATTENTION: Enable the ‘ Configure Always’ feature only if the entire CIP
Safety Control System is not being relied on to maintain SIL 3 behavior during the replacement and functional testing of a module.
When the ‘Configure Always’ feature is enabled, the controller automatically checks for and connects to a replacement module that meets all of the following requirements:
• The controller has configuration data for a compatible module at that network address.
• The module is in out-of-box condition or has an SNN that matches the configuration.
Although chances are small, this allows the possibility of the wrong controller taking ownership of the replacement module.
For modules with different SNNs, clicking Reset Ownership places the module in an out-of-box condition. Once in out-of-box mode, no action is needed for the
GuardLogix controller to take ownership of the module.
126 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Considerations When Replacing Guard I/O Modules Chapter 7
If the project is configured for ‘Configure Always’, follow the appropriate steps to replace a Guard I/O module based on your scenario.
GuardLogix Project
Safety Signature
Exists
Yes or No
Yes or No
Yes or No
Replacement Module
SNN
Out-of-box
Same as original
Different from original
Fault
None
None
SNN mismatch
Action Required
None.
None.
Click Reset Ownership.
Follow the steps below.
1.
Remove the old I/O module and install the new module.
2.
Right-click your Guard I/O module and choose Properties.
3.
Click the Safety tab.
4.
Click Reset Ownership.
5.
Click OK.
6.
Follow your company-prescribed procedures to functionally test the replaced I/O module and system and to authorize the system for use.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 127
Chapter 7 Considerations When Replacing Guard I/O Modules
Notes:
128 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Chapter
8
Interpret Status Indicators
Module Indicators
Topic
Module Status and Network Status Indicators Combination
1791DS-IB12, 1791DS-IB8XOB8, and 1791DS-IB4XOW4 Status Indicators
1732DS-IB8XOBV4, 1732DS-IB8, 1791DS-IB8XOBV4, and 1791DS-IB16
Page
See the figure and tables for information on how to interpret LED module indicators.
Figure 29 - LED Module Indicators
24V DC Input Power Indicator
24V DC Output Power Indicator
(1791DS-IB8XOBV4 modules only)
Module Status Indicator
Configuration Lock Indicator
Network Status Indicator
Network
Activity
Indicator
I0…I15 - Safety Input Status Indicator
T0…T15 - Test Output Status indicator
00…07 - Safety Output Status Indicator (1791DS-IB8XOBV4 module)
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 129
Chapter 8 Interpret Status Indicators
Module Status and Network
Status Indicators
Combination
State
M
Solid green
NS
Solid green
MS
Flashing green
NS
Solid green
MS
Flashing green
NS
Off
MS
Flashing green
NS
Flashing green
MS
Flashing green/red
NS
Off
MS
Solid red
NS
Off
MS
Flashing red
NS
Off
MS
Flashing green
NS
Solid red
MS
Flashing green
NS
Solid red
Status
Normal operation
Online/connected
Standby
Online/connected
Standby
Not online or not powered
Standby
Online/not connected
Initialization status
Not online or not powered
Fatal fault
Not online or not powered
Minor fault
Not online or not powered
Standby
Fatal link fault
Standby
Fatal link fault
MS
NS
Flashing Green
Flashing red
Standby
Minor communication fault
The Module Status (MS) indicator displays the status of a node on the network.
The Network Status (NS) indicator displays the status of the entire network. See the table for meanings indicated by the combination of colors and status.
Description
Safety I/O communication in progress.
Recommended Action
None - normal status - safety I/O communication and standard I/O communication are being performed.
Standard I/O communication or message communication in progress.
None - normal status - standard I/O communication and/or message communication are being performed.
Waiting for completion of node address duplication check at the master.
If this indicator status occurred for only specific module terminals, check that the module communication rate settings are correct and restart the module.
Waiting for safety or standard connection.
None - wait for connection to complete.
Module performing initialization process or waiting for configuration.
Watchdog timer error.
Switch settings are incorrect.
None - wait for process or configuration to complete.
Replace the module.
Check the switch settings and restart the module.
Node address duplication.
Reset the module so that it has a unique node address, and then restart the module.
Bus Off status (communication stopped due to consecutive data errors).
Check the following items and restart the module:
· Do master and module communication rates match?
· Are lengths of cables (trunk and branch lines) correct?
· Are cables broken or loose?
· Are terminating resistors connected to both ends of the trunk line only?
· Is noise interference excessive?
Communication timeout.
Check the following items and restart the module:
· Do master and module communication rates match?
· Are lengths of cables (trunk and branch lines) correct?
· Are cables broken or loose?
· Are terminating resistors connected to both ends of the trunk line only?
· Is noise interference excessive?
· Is the network grounded properly ?
: Lit : Flashing : Not lit
130 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Interpret Status Indicators Chapter 8
1791DS-IB12,
1791DS-IB8XOB8, and
1791DS-IB4XOW4
Status Indicators
Refer to the tables for information on how to interpret status indicators on the
1791DS-IB12, 1791DS-IB8XOB8, and 1791DS-IB4XOW4 modules.
Table 3 - Module Status (MS) Indicator
State
Solid green
Status
Normal
Flashing green Standby
Solid red Fatal fault
Flashing red
Flashing green/ red
Off
Minor fault
Initialization status
No power
Description
Normal operating status.
Waiting for safety communication from the safety controller.
Hardware fault.
Switch settings incorrect.
The module is performing initialization process or waiting for configuration.
Power is not being supplied to the module.
Waiting for initial processing to start.
The module is being reset.
Recommended Action
None- normal operation.
Wait for module to establish communication.
Check for electrical noise and eliminate the source. If the anomaly persists, replace the module.
Correct the switch settings.
Wait for the configuration to complete.
Supply power to the module.
Wait for processing to start.
Wait for the module to reset.
Table 4 - Network Status (NS) Indicator
State
Solid green
Status Description
Online/connected
Flashing green Online/not connected
Network is operating normally (communication established).
Network is operating normally, however, communication is not established.
None - normal operation.
Verify your network and module configuration.
Solid red Fatal link failure Correct the communication fault.
Communication fault.
Module detected that network communication is not possible.
Node address duplication detected.
Abusive fault detected.
Flashing red
Off
Minor communication fault Communication timeout.
Not online or not powered Waiting for node address duplication check at the master.
The power supply is off.
Correct the communication fault.
Wait for check to complete.
Apply power.
Table 5 - Configuration Lock (LOCK) Indicator
State
Solid yellow
Status
Normal and locked
Description
Normal configuration, and configuration is locked by RSNetWorx for DeviceNet software.
Recommended Action
None.
Flashing yellow
Off
Normal and not locked Normal configuration, but configuration is not locked in the module.
Configuration not performed Configuration has not been performed.
None.
Perform the configuration.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 131
Chapter 8 Interpret Status Indicators
Table 6 - Input Power (IN PWR) Indicator
State
Solid green
Off
Status
Normal
No input power
Description
Normal status of input power.
Input power is not supplied.
Recommended Action
None.
Apply input power.
Table 7 - Output Power (OUT PWR) Indicator
State
Solid green
Off
Status
Normal
Description
Normal status of output power.
No output power
Output power exceeds power range
Output power is not supplied.
Output power exceeds the upper/lower limit of power range.
Recommended Action
None.
Supply output power.
Correct output power.
IMPORTANT
Table 8 - Input (IN0 through INn
(1)
) Indicators
State
Solid yellow
Off
Solid red
Flashing red
Status
On
Off
Fault
Fault in other channel
Description
Safety input is on.
Safety input is off.
A fault occurred in an input circuit.
When dual channels are set: a fault occurred in the other channel.
(1) Where ‘n’ indicates the input number.
IMPORTANT
The I/O indicators are not lit while the module is being configured.
Recommended Action
None.
None.
Check connected device and wiring.
Correct fault in other channel.
The I/O indicators are not lit while the module is being configured.
Table 9 - Output (OUT0 through OUTn
(1)
) Indicators
State
Solid yellow
Off
Solid red
Flashing red
Status
On
Off
Fault
Fault in other channel
Description
Safety output is on.
Safety output is off.
A fault occurred in an output circuit.
When dual channels are set, a fault occurred in the other channel.
(1) Where ‘n’ indicates the output number.
Recommended Action
None.
None.
Check connected device and wiring.
Correct fault in other channel.
132 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Interpret Status Indicators Chapter 8
1732DS-IB8XOBV4,
1732DS-IB8,
1791DS-IB8XOBV4, and
1791DS-IB16 Status
Indicators
Refer to the tables for information on how to interpret status indicators on the
1732DS-IB8XOBV4, 1732DS-IB8, 1791DS-IB8XOB8, and 1791DS-IB16 modules.
Table 10 - Module Status (MS) Indicator
State
Off
Solid green
Solid red
Status
No power or autobauding
Normal operation
Unrecoverable fault
Description
No power is applied to the DeviceNet connector.
The module is operating normally.
The module has detected an unrecoverable fault.
Flashing green Module needs commissioning due to missing, incomplete, or incorrect configuration
Flashing red Recoverable fault
User-initiated firmware update
Module is unconfigured.
The module detected a recoverable fault.
User-initiated firmware update is in progress.
Flashing red and green
Device in self test The module is performing its power-cycle diagnostic tests.
Recommended Action
Apply power to this connector.
None.
Cycle power to the module. If the anomaly persists, replace the module.
Reconfigure the module. For additional information, inspect the
Network Status (NS) indicator.
Cycle power to the module or reset the module.
Wait for the firmware update to complete.
Wait for the module to complete its power-cycle diagnostics.
Table 11 - Network Status (NS) Indicator
State
Off
Flashing green Module online with no connections in established state
Solid green Module online with connections in established state
Flashing red
Solid red
Status
Module not online or no power
One or more I/O connections in timed-out state
User-initiated firmware update
Critical link failure
Flashing red and green
Communication faulted module
Description
The module is not online with the network.
The module identified the communication rate of the network but no connections are established.
The module is operating normally.
The module detected a recoverable network fault.
User-initiated firmware update is in progress.
The module detected an error that prevents it from communicating on the network.
The module detected a network access error and is in communication faulted state. The module has received and accepted an Identity Communication Faulted Request-long protocol message.
Recommended Action
Verify your network.
Verify your network and module configuration.
None.
Verify your network and module configuration.
Wait for the firmware update to complete.
Cycle power to the module. If the anomaly persists, replace the module.
Verify your network and module configuration.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 133
Chapter 8 Interpret Status Indicators
Table 12 - Configuration Lock (LOCK) Indicator
State
Off
Status
No configuration
Description
Invalid configuration data.
Recommended Action
Provide valid configuration data.
Solid yellow
Flashing yellow
The configuration is owned by a CIP safety originator, such as
GuardLogix software
Locked
The configuration is owned by a CIP safety originator, such as
GuardLogix software.
Not locked
None.
Valid configuration, locked by a network configuration tool such as RSNetWorx for DeviceNet software.
Valid configuration, owned by a software configuration tool such as RSNetWorx for DeviceNet software.
None.
None.
Table 13 - 24V DC Input Power Indicator
State
Off
Solid green
Solid yellow
Status
No power
Normal operation
Input power out of specification
Description
No power is applied.
The applied voltage is within specifications.
The input power is out of specification.
Table 14 - 24V DC Output Power Indicator
State
Off
Solid green
Solid yellow
Status
No power
Normal operation
Output power out of specification
Description
No power is applied.
The applied voltage is within specifications.
The output power is out of specification.
Recommended Action
Apply power to this section.
None.
Check your connectors, wiring, and voltages, For additional information, see the applicable installation instructions.
Recommended Action
Apply power to this section.
None.
Check your connectors, wiring, and voltages. For additional information, see the applicable installation instructions.
Table 15 - Safety Input Indicator
State
Off
Solid yellow
Solid red
Status
Safety input off or module being configured
Safety input on
Fault detected
Flashing red Partner fault detected
Description
The safety input is off or the module is being configured.
Recommended Action
Turn the safety input on or wait for the module to be configured.
The safety input is on.
A fault in the external wiring or input circuit detected.
A fault in the partner input circuit of a dual input configuration detected.
None.
Check configuration, field wiring, and devices. If no anomaly is found, replace the module.
Check the field wiring and verify your configuration for the partner circuit. If no anomaly is found, replace the module.
134 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Interpret Status Indicators Chapter 8
Table 16 - Safety Output Indicator
State
Off
Solid yellow
Solid red
Status
Safety output off or module being configured
Safety output on
Fault detected
Flashing red Partner fault detected
Description
The safety output is off or the module is being configured.
The safety output is on.
A fault in the output circuit was detected.
Recommended Action
Turn the safety output on or wait for the module to be configured.
None.
Check the circuit wiring and end device. If no anomaly is found, replace the module.
Both tags in a dual channel circuit do not have the same value.
Make sure logic is driving tag values to the same state (off or on).
A fault in the partner output circuit of a dual output configuration was detected.
Check the circuit wiring and end device of the partner. If no anomaly is found, replace the module.
Table 17 - Test Output Indicator (1791DS-IB8XOBV4, 1791DS-IB16 only)
State
Off
Solid yellow
Solid red
Status
Test output off or module being configured
Output on
Fault detected
Description
The test output is off or the module is being configured.
Output is on.
A fault in the external wiring or input circuit detected.
Recommended Action
Turn the test output on or wait for the module to be configured.
None.
Check the field wiring. If no anomaly is found, replace the module. Outputs configured for muting could indicate undercurrent or burned-out lamp.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 135
Chapter 8 Interpret Status Indicators
Notes:
136 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Appendix
A
Get Point Status from Modules by Using Explicit
Messaging
Topic
Considerations for Obtaining Point Status
1791DS-IB8XOB8 Module Definition Configuration
1791DS-IB4XOW4 Module Definition Configuration
I/O Assembly and Reference Data
Basic Format of Explicit Messages
Page
Considerations for Obtaining
Point Status
This appendix provides information about how to use explicit messaging to get diagnostic status information from the modules.
To maximize throughput when using DeviceNet safety I/O modules, consider the requested packet interval, baud rate, and the size of the I/O assembly.
Keeping the I/O assembly at 2-bytes or fewer does not provide individual point status necessary to quickly diagnose what point faulted from an operator terminal.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 137
Appendix A Get Point Status from Modules by Using Explicit Messaging
To obtain individual point status of the Guard I/O module from the Module
Definition dialog box, from the Input Status pull-down menu, choose Pt. Status.
TIP You can also obtain overall status implicitly from this dialog box by choosing Combined Status from the Input Status pull-down menu. If the
Combined Status changes, use explicit messaging to obtain the point-level status.
1791DS-IB8XOB8 Module
Definition Configuration
Follow this procedure to configure the 1791DS-IB8XOB8 module definition.
1.
In the Module Definition dialog box, from the Input Status pull-down menu, choose Combined Status.
138 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Get Point Status from Modules by Using Explicit Messaging Appendix A
This creates a 2-byte input assembly, as shown for the 1791DS-IB8XOB8 module.
2.
Use the InputStatus and OutputStatus bits to detect if one or more of the
I/O points on the module have a fault.
• If any input or output status bit goes to a value of 0 (0=bad, 1=good), use an explicit message to determine which individual data points have faulted. Use the InputState and OutputStatus bits to condition your msg rung as follows.
• Note that the second rung can be used to read the status on mode transition and once a fault is detected, continue reading until the fault is corrected.
• Place these rungs in the standard task.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 139
Appendix A Get Point Status from Modules by Using Explicit Messaging
This figure shows the MSG instruction parameters for reading
Instance 803 from the 1791DS-IB8XOB8 module.
In this example, we created a UDT from the destination type.
• You can find the UDT called Assembly803_1791DS_IB8XOB8 in an
ACD file. This UDT is based on the Assembly803 for
1791DS_IB8XOB8 module.
• There are other assemblies in the EDS file that can be used, but this one is the most inclusive.
• Make sure the Communication Path is set to the correct module.
140 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Get Point Status from Modules by Using Explicit Messaging Appendix A
This figure shows the 1791DS-IBXOB8 Assembly803 UDT.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 141
Appendix A Get Point Status from Modules by Using Explicit Messaging
1791DS-IB4XOW4 Module
Definition Configuration
Follow this procedure to configure the 1791DS-IB4XOW4 module definition.
1.
In the Module Definition dialog box, from the Input Status pull-down menu, choose Combined Status-Muting.
This creates a 1-byte input assembly, as shown for the 1791DS-IB4XOW4 module.
142 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Get Point Status from Modules by Using Explicit Messaging Appendix A
2.
Use the InputStatus and OutputStatus bits to detect if one or more of the
I/O points on the module have a fault.
• If any input or output status bit goes to a value of 0 (0=bad, 1=good), use an explicit message to determine which individual data points have faulted. Use the InputState and OutputStatus bits to condition your msg rung as follows.
• Note that the second rung can be used to read the status on mode transition and once a fault is detected, continue reading until the fault is corrected.
• Place these rungs in the standard task.
This figure shows the MSG instruction parameters for reading
Instance 819 from the 1791DS-IB4XOW4 module.
In this example, we created a UDT from the destination type.
• You can find the UDT called Assembly819_1791DS_IB4XOW4 in an
ACD file. This UDT is based on the Assembly819 for
1791DS_IB4XOW4 module.
• There are other assemblies in the EDS file that can be used, but this one is the most inclusive.
• Make sure the Communication Path is set to the correct module.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 143
Appendix A Get Point Status from Modules by Using Explicit Messaging
This figure shows the 1791DS-IB4XOW4 Assembly819 UDT.
144 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
1791DS-IB12 Module
Definition Configuration
Get Point Status from Modules by Using Explicit Messaging Appendix A
Follow this procedure to configure the 1791DS-IB12 module definition.
1.
In the Module Definition dialog box, from the Input Status pull-down menu, choose Combined Status-Muting.
This creates a 2-byte assembly, as shown for the 1791DS-IB12 module.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 145
Appendix A Get Point Status from Modules by Using Explicit Messaging
2.
Use the CombinedStatus bit to detect if one or more of the I/O points on the module have a fault.
• If the CombinedStatus bit goes to a value of 0 (0=bad, 1=good), use an explicit message to determine which individual data points have faulted. Use the CombinedStatus bits to condition your msg rung as follows.
• Note that you can use the second rung to read the status on mode transition and once a fault is detected, continue reading until the fault is corrected.
• Place these rungs in the standard task.
This figure shows the MSG instruction parameters for reading
Instance 786 from the 1791DS-IB12 module.
146
In this example, we created a UDT from the destination type.
• You can find the UDT called Assembly786_1791DS_IB12 in an ACD file. This UDT is based on the Assembly786 for the 1791DS_IB12 module.
• There are other assemblies in the EDS file that can be used, but this one is the most inclusive.
• Make sure the Communication Path is set to the correct module.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Get Point Status from Modules by Using Explicit Messaging Appendix A
This figure shows the 1791DS-IB12 Assembly786 UDT.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 147
Appendix A Get Point Status from Modules by Using Explicit Messaging
I/O Assembly and Reference
Data
See the tables for I/O assembly and reference data.
1791DS-IB12, 1791DS-IB8XOB8, 1791DS-IB4XOW4 Data
The bits in the tag definitions of the Logix Designer application and RSNetWorx for DeviceNet software are different than those shown in this section. This table defines the name associations for clarification with the programming software.
Bit Definitions
Safety Input 0
Safety Input 11
Safety Input 0 Status
Safety Input 11 Status
Safety In Status
Muting Lamp Status
Safety Output 0
Safety Output 7
Standard Output 0
Standard Output 3
Safety Output 0 Status
Safety Output 7 Status
Safety Out Status
Safety Output 0 Monitor
Safety Output 7 Monitor
Test Output 0 Status
Test Output 3 Status
Logix Designer Application Tag Name
Pt00Data
Pt11Data
Pt00InputStatus
Pt11InputStatus
InputStatus
MutingStatus
Pt00Data
Pt07Data
Test00Data
Test03Data
Pt00OutputStatus
Pt07OutputStatus
OutputStatus
Pt00Monitor
Pt07Readback
Pt00TestOutputStatus
Pt03TestOutputStatus
148 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Get Point Status from Modules by Using Explicit Messaging Appendix A
These tables provide reference data concerning input and output data.
Table 18 - Input Data for 1791DS-IB12, 1791DS-IB8XOB8, 1791DS-IB4XOW4 Modules
Instance
Hex
(decimal)
203
(515)
204
(516)
20C
(524)
224
(548)
22C
(556)
300
(768)
310
(784)
Module
1791DS-IB4XOW4
1791DS-IB8XOB8
1791DS-IB12
1791DS-IB12
1791DS-IB12
1791DS-IB12,
1791DS-IB8XOB8,
1791DS-IB4XOW4
1791DS-IB12
Byte
0
0
0
1
0
0
0
1
1
2
0
Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
Reserved Safety Input 3 Safety Input 2 Safety Input
1
Safety Input 7 Safety Input 6 Safety Input 5 Safety Input 4 Safety Input 3 Safety Input 2 Safety Input
1
Safety Input 7 Safety Input 6 Safety Input 5 Safety Input 4 Safety Input 3 Safety Input 2 Safety Input
1
Reserved Safety Input
11
Safety Input
10
Safety Input
9
Safety Input 7 Safety Input 6 Safety Input 5 Safety Input 4 Safety Input 3 Safety Input 2 Safety Input
1
Safety Input 7
Status
Safety Input 6
Status
Safety Input 5
Status
Safety Input 4
Status
Safety Input 3
Status
Safety Input 2
Status
Safety Input
1 Status
Safety Input 7 Safety Input 6 Safety Input 5 Safety Input 4 Safety Input 3 Safety Input 2 Safety Input
1
Safety Input 3
Status
Safety Input 2
Status
Safety Input 1
Status
Safety Input 0
Status
Safety Input
11
Safety Input
10
Safety Input
9
Safety Input
11 Status
Reserved
Safety Input
10 Status
Safety Input 9
Status
Safety Input 8
Status
Safety Input 7
Status
Safety Input 7
Status
Safety Input
5 Status
Output
Power Error
Safety Input
0
Safety Input
0
Safety Input
0
Safety Input
8
Safety Input
0
Safety Input
0 Status
Safety Input
0
Safety Input
8
Safety Input
4 Status
Input Power
Error
311
(785)
312
(786)
320
(800)
1791DS-IB12
1791DS-IB12
1791DS-IB8XOB8
0
1
2
3
0
1
2
3
0
1
1
Safety Input 7 Safety Input 6 Safety Input 5 Safety Input 4 Safety Input 3 Safety Input 2 Safety Input
1
Muting Lamp
Status
Combined
Safety In
Status
Reserved Safety Input
11
Safety Input
10
Safety Input
9
Safety Input 7 Safety Input 6 Safety Input 5 Safety Input 4 Safety Input 3 Safety Input 2 Safety Input
1
Safety Input 3
Status
Safety Input
11 Status
Safety Input 2
Status
Safety Input
10 Status
Safety Input 1
Status
Safety Input 9
Status
Safety Input 0
Status
Safety Input 8
Status
Safety Input
11
Safety Input 7
Status
Safety Input
10
Safety Input 6
Status
Safety Input
9
Safety Input
5 Status
Safety Input
0
Safety Input
8
Safety Input
0
Safety Input
8
Safety Input
4 Status
Muting Lamp
Status
Reserved
Safety Input 7 Safety Input 6 Safety Input 5 Safety Input 4 Safety Input 3 Safety Input 2 Safety Input
1
Safety Input 3
Status
Safety Input 2
Status
Safety Input 1
Status
Safety Input 0
Status
Safety Input
11
Safety Input
10
Safety Input
9
Safety Input
11 Status
Safety Input
10 Status
Safety Input 9
Status
Safety Input 8
Status
Safety Input 7
Status
Safety Input 6
Status
Safety Input
5 Status
Safety Input
0
Safety Input
8
Safety Input
4 Status
Muting Lamp
Status
Safety Input 7 Safety Input 6 Safety Input 5 Safety Input 4 Safety Input 3 Safety Input 2 Safety Input
1
Muting Lamp
Status
Reserved
Combined
Safety In
Status
Combined
Safety Out
Status
Reserved
Test Output 3
Status
Test Output 2
Status
Test Output 1
Status
Test Output 0
Status
Safety Input
0
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 149
Appendix A Get Point Status from Modules by Using Explicit Messaging
Table 18 - Input Data for 1791DS-IB12, 1791DS-IB8XOB8, 1791DS-IB4XOW4 Modules (continued)
Instance
Hex
(decimal)
321
(801)
Module
1791DS-IB8XOB8
Byte
0
Bit 7 Bit 6 Bit 5 Bit 4
322
(802)
323
(803)
330
(816)
331
(817)
332
(818)
333
(819)
1791DS-IB8XOB8
1791DS-IB8XOB8
1791DS-IB4XOW4
1791DS-IB4XOW4
1791DS-IB4XOW4
1791DS-IB4XOW4
1
2
3
0
1
2
3
4
0
1
2
3
4
0
0
1
0
1
2
0
1
2
Bit 3 Bit 2 Bit 1 Bit 0
Safety Input 7 Safety Input 6 Safety Input 5 Safety Input 4 Safety Input 3 Safety Input 2 Safety Input
1
Safety Input 7
Status
Safety Output
7 Status
Safety Input 6
Status
Safety Output
6 Status
Safety Input 5
Status
Safety Output
5 Status
Safety Input 4
Status
Safety Output 4
Status
Safety Input 3
Status
Safety Output
3 Status
Safety Input 2
Status
Safety Output
2 Status
Safety Input
1 Status
Safety Output
1 Status
Safety Input
0
Safety Input
0 Status
Safety
Output 0
Status
Muting Lamp
Status
Reserved
Safety Input 7 Safety Input 6 Safety Input 5 Safety Input 4 Safety Input 3 Safety Input 2 Safety Input
1
Safety Input 7
Status
Safety Output
7 Status
Safety Input 6
Status
Safety Output
6 Status
Safety Input 5
Status
Safety Output
5 Status
Safety Input 4
Status
Safety Input 3
Status
Safety Input 2
Status
Safety Input
1 Status
Safety Output
7 Readback
Safety Output
6 Readback
Safety Output
5 Readback
Safety Input
0
Safety Input
0 Status
Safety Output 4
Status
Safety Output
3 Status
Safety Output
2 Status
Safety Output 4
Readback
Safety Output
3 Readback
Safety Output
2 Readback
Safety Output
1 Status
Safety
Output 0
Status
Safety Output
1 Readback
Safety
Output 0
Readback
Muting Lamp
Status
Reserved
Safety Input 7 Safety Input 6 Safety Input 5 Safety Input 4 Safety Input 3 Safety Input 2 Safety Input
1
Safety Input 7
Status
Safety Input 6
Status
Safety Input 5
Status
Safety Input 4
Status
Safety Input 3
Status
Safety Input 2
Status
Safety Input
1 Status
Safety Output
7 Status
Safety Output
6 Status
Safety Output
5 Status
Safety Output
7 Readback
Muting Lamp
Status
Muting Lamp
Status
Safety Output
6 Readback
Reserved
Combined
Safety In
Status
Safety Input 3
Status
Safety Input 2
Status
Safety Output
5 Readback
Combined
Safety Out
Status
Safety Input 1
Status
Safety Output 4
Status
Safety Output
3 Status
Safety Output
2 Status
Safety Output
1 Status
Safety
Output 0
Status
Safety Output 4
Readback
Safety Output
3 Readback
Safety Output
2 Readback
Safety Output
1 Readback
Safety
Output 0
Readback
Reserved
Test Output 3
Status
Test Output 2
Status
Test Output 1
Status
Safety Input 3 Safety Input 2 Safety Input
1
Test Output 0
Status
Safety Input
0
Safety Input 0
Status
Safety Input 3 Safety Input 2 Safety Input
1
Safety Input
0
Safety Input
0 Status
Safety Input
0
Muting Lamp
Status
Safety Output
3 Readback
Reserved
Safety Input 3
Status
Safety Input 2
Status
Safety Output 2
Readback
Safety Input 1
Status
Safety Output 1
Readback
Safety Input 0
Status
Safety Output
3 Status
Safety Output
2 Status
Safety Output 0
Readback
Safety Output
3 Status
Safety Output
2 Status
Safety Output
1 Status
Safety
Output 0
Status
Safety Input 3 Safety Input 2 Safety Input
1
Safety Input
0
Safety Output
1 Status
Safety
Output 0
Status
Muting Lamp
Status
Reserved
Safety Input 3
Status
Safety Input 2
Status
Safety Output
3 Readback
Safety Output 2
Readback
Safety Input 1
Status
Safety Output 1
Readback
Safety Input 0
Status
Safety Input 3 Safety Input 2 Safety Input
Safety Output 0
Readback
Safety Output
3 Status
Safety Output
2 Status
1
Safety Output
1 Status
Safety Input
0
Safety
Output 0
Status
Muting Lamp
Status
Reserved Test Output 3
Status
Test Output 2
Status
Test Output 1
Status
Test Output 0
Status
150 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Get Point Status from Modules by Using Explicit Messaging Appendix A
Table 18 - Input Data for 1791DS-IB12, 1791DS-IB8XOB8, 1791DS-IB4XOW4 Modules (continued)
Instance
Hex
(decimal)
340
(832)
341
(833)
342
(834)
Module
1791DS-IB12
1791DS-IB8XOB8
1791DS-IB4XOW4
Byte
0
1
0
1
0
1
2
Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
Reserved
Reserved
Reserved
Safety Output
7 Readback
Reserved
Safety Output 6
Readback
Safety Output 5
Readback
Safety Output 4
Readback
Safety Output
3 Readback
Test Output 3
Status
Safety Output
2 Readback
Output
Power Error
Test Output 2
Status
Test Output 1
Status
Input Power
Error
Test Output 0
Status
Reserved
Test Output 3
Status
Test Output 2
Status
Test Output 1
Status
Test Output 0
Status
Test Output 3
Status
Safety Output
3 Readback
Test Output 2
Status
Output
Power Error
Safety Output
2 Readback
Safety Output
1 Readback
Input Power
Error
Safety
Output 0
Readback
Table 19 - Output Data for 1791DS-IB12, 1791DS-IB8XOB8, 1791DS-IB4XOW4 Modules
Instance Hex
(decimal)
Module
21
(33)
1791DS-IB12, 1791DS-
IB8XOB8, 1791DS-
IB4XOW4
1791DS-IB4XOW4 233
(563)
234
(564)
1791DS-IB8XOB8
350
(848)
351
(849)
1791DS-IB4XOW4
1791DS-IB8XOB8
Byte
0
0
0
0
0
1
Bit 7
Reserved
Reserved
Safety
Output 7
Standard
Output 3
Safety
Output 7
Reserved
Bit 6 Bit 5
Safety Output
6
Safety
Output 5
Standard
Output 2
Standard
Output 1
Safety Output
6
Safety
Output 5
Bit 4 Bit 3
Standard
Output 3
Bit 2
Standard
Output 2
Bit 1
Standard
Output 1
Bit 0
Standard
Output 0
Safety Output
4
Standard
Output 0
Safety Output
4
Safety Output
3
Safety Output
2
Safety Output
1
Safety
Output 0
Safety
Output 3
Safety
Output 3
Safety
Output 3
Standard
Output 3
Safety Output
2
Safety Output
2
Safety Output
2
Standard
Output 2
Safety
Output 1
Safety
Output 1
Safety
Output 1
Standard
Output 1
Safety
Output 0
Safety
Output 0
Safety
Output 0
Standard
Output 0
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 151
Appendix A Get Point Status from Modules by Using Explicit Messaging
1732DS-IB8, 1732DS-IB8XOBV4, 1791DS-IB8XOBV4, and 1791DS-IB16
Data
The bits in the tag definitions of the Logix Designer application and RSNetWorx software are different than those shown in this section. This table defines the name associations for clarification with the programming software.
Bit Definitions
Safety Input 0…7
Safety Input 0…7 Status
Combined Safety In Status
Muting Lamp Status
Safety Output 0…7
Safety Output 0…7 Status
Combined Safety Out Status
Safety Output 0…7 Readback
Test Output 0…7 Data
Test Output 0…7 Status
Logix Designer Application Tag Name
Module Name:I.Pt00Data - Pt15Data
Module Name:I.Pt00InputStatus - Pt15InputStatus
Module Name:I.InputStatus
Module Name:I.MutingStatus
Module Name:O.Pt00Data - Pt07Data
Module Name:I.Pt00OutputStatus - Pt07OutputStatus
Module Name:I.OutputStatus
Module Name:I.Pt00Readback - Pt07Readback
Module Name:I.Test00Data - Test07Data
Module Name:I.Pt00TestOutputStatus - Pt07TestOutputStatus
These tables provide reference data concerning input and output data.
Table 20 - Input Data for 1732DS-IB8, 1732DS-IB8XOBV4, 1791DS-IB8XOBV4, 1791DS-IB16 Modules
Instance Hex
(decimal)
Module
204
(516)
224
(548)
1732DS-IB8,
1732DS-IB8XOBV4,
1791DS-IB8XOBV4
205
(517)
225
(549)
300
(768)
301
(769)
314
(788)
1791DS-IB16
1791DS-IB16
1732DS-IB8,
1791DS-IB16
1732DS-IB8,
1732DS-IB8XOBV4,
1791DS-IB8XOBV4
1732DS-IB8
Byte Bit 7
0
0
1
0
0
1
2
3
0
0
0
1
Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
Safety Input
7
Safety Input
7
Safety Input
7 Status
Safety Input
7
Safety Input 6 Safety Input
5
Safety Input 4 Safety Input
3
Safety Input 6 Safety Input
5
Safety Input 4 Safety Input
3
Safety Input 6
Status
Safety Input
5 Status
Safety Input 6 Safety Input
5
Safety Input 4
Status
Safety Input
3 Status
Safety Input 4 Safety Input
3
Safety Input
15
Safety Input
7
Safety Input
15
Safety Input
7 Status
Safety Input
15 Status
Reserved
Safety Input
14
Safety Input 6 Safety Input
5
Safety Input
14
Safety Input
13
Safety Input 6
Status
Safety Input
14 Status
Safety Input
13
Safety Input
5 Status
Safety Input
13 Status
Safety Input
12
Safety Input 4 Safety Input
3
Safety Input
12
Safety Input
11
Safety Input 4
Status
Safety Input
12 Status
Safety Input
11
Safety Input
3 Status
Safety Input
11 Status
Reserved
Safety Input 2 Safety Input 1 Safety Input 0
Safety Input 2 Safety Input 1 Safety Input 0
Safety Input 2
Status
Safety Input 1
Status
Safety Input 0
Status
Safety Input 2 Safety Input 1 Safety Input 0
Safety Input
10
Safety Input 9 Safety Input 8
Safety Input 2 Safety Input 1 Safety Input 0
Safety Input
10
Safety Input 9
Safety Input 2
Status
Safety Input 1
Status
Safety Input
10 Status
Safety Input 9
Status
Safety Input 8
Safety Input 0
Status
Safety Input 8
Status
Input Power
Error
Output Power
Error
Input Power
Error
Safety Input
7
Reserved
Safety Input 6 Safety Input
5
Safety Input 4 Safety Input
3
Safety Input 2 Safety Input 1 Safety Input 0
Muting Lamp 7
Status
Muting Lamp 3
Status
152 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Get Point Status from Modules by Using Explicit Messaging Appendix A
Table 20 - Input Data for 1732DS-IB8, 1732DS-IB8XOBV4, 1791DS-IB8XOBV4, 1791DS-IB16 Modules (continued)
Instance Hex
(decimal)
315
(789)
Module
1791DS-IB16
324
(804)
334
(820)
335
(821)
344
(836)
354
(852)
1732DS-IB8XOBV4,
1791DS-IB8XOBV4
1732DS-IB8,
1732DS-IB8XOBV4,
1791DS-IB8XOBV4
1791DS-IB16
1732DS-IB8XOBV4,
1791DS-IB8XOBV4
Byte Bit 7
0
1
2
0
1
0
1
2
0
1
2
3
4
0
1
2
3
0
1
2
3
4
Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
Safety Input
7
Safety Input
7 Status
Safety
Output 7
Status
Safety
Output 7
Readback
Reserved
Safety Input
7
Safety Input
15
Safety Input 6 Safety Input
5
Safety Input
14
Reserved
Safety Input
13
Safety Input 4 Safety Input
3
Safety Input
12
Reserved Reserved
Safety Input
11
Muting Lamp
15 Status
Safety Input 2 Safety Input 1
Safety Input
10
Muting Lamp
11 Status
Safety Input 9
Safety Input 0
Safety Input 8
Muting Lamp 7
Status
Muting Lamp 3
Status
Combined
Safety In
Status
Safety Input
7
Combined
Safety In
Status
Safety Input
7
Safety Input 6 Safety Input
Combined
Safety Out
Status
5
Reserved
Safety Input 6 Safety Input
5
Safety Input 4 Safety Input
3
Safety Input 4 Safety Input
3
Safety Input 2 Safety Input 1
Muting Lamp 7
Status
Safety Input 2 Safety Input 1
Safety Input 0
Muting Lamp 3
Status
Safety Input 0
Safety Input
7 Status
Reserved
Safety Input 6
Status
Safety Input
5 Status
Safety Input 4
Status
Safety Input
3 Status
Safety Input
7
Safety Input
15
Safety Input
7 Status
Safety Input
15 Status
Reserved
Safety Input 6 Safety Input
5
Safety Input
14
Safety Input
13
Safety Input 4 Safety Input
Safety Input
12
3
Safety Input
11
Safety Input 6
Status
Safety Input
5 Status
Safety Input
14 Status
Safety Input
13 Status
Safety Input 4
Status
Safety Input
12 Status
Safety Input
3 Status
Safety Input
11 Status
Safety Input
7
Safety Input
7 Status
Safety Input 2
Status
Safety Input 1
Status
Safety Input 0
Status
Muting Lamp 7
Status
Muting Lamp 3
Status
Safety Input 2 Safety Input 1 Safety Input 0
Safety Input
10
Safety Input 9
Safety Input 2
Status
Safety Input 1
Status
Safety Input
10 Status
Safety Input 9
Status
Safety Input 8
Safety Input 0
Status
Safety Input 8
Status
Reserved Reserved
Safety Input 6 Safety Input
Safety Input 6
Status
5
Safety Input
5 Status
Reserved Muting Lamp
15 Status
Muting Lamp
11 Status
Muting Lamp 7
Status
Muting Lamp 3
Status
Safety Input 2 Safety Input 1 Safety Input 0 Safety Input 4 Safety Input
3
Safety Input 4
Status
Safety Input
3 Status
Safety Input 2
Status
Safety Input 1
Status
Safety Input 0
Status
Safety
Output 7
Status
Reserved
Safety Output
6 Status
Safety
Output 5
Status
Safety Output
4 Status
Safety
Output 3
Status
Safety Output
2 Status
Safety Output 1
Status
Safety Output
0 Status
Muting Lamp 7
Status
Muting Lamp 3
Status
Safety Input 2 Safety Input 1 Safety Input 0 Safety Input 6 Safety Input
5
Safety Input 4 Safety Input
3
Safety Input 6
Status
Safety Input
5 Status
Safety Input 4
Status
Safety Input
3 Status
Safety Output
6 Status
Safety
Output 5
Status
Safety Output
6 Readback
Safety
Output 5
Readback
Safety Output
4 Status
Safety
Output 3
Status
Safety Output
4 Readback
Safety
Output 3
Readback
Safety Input 2
Status
Safety Output
2 Status
Safety Output
2 Readback
Safety Input 1
Status
Safety Output 1
Status
Safety Output 1
Readback
Muting Lamp 7
Status
Safety Input 0
Status
Safety Output
0 Status
Safety Output
0 Readback
Muting Lamp 3
Status
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 153
Appendix A Get Point Status from Modules by Using Explicit Messaging
Table 20 - Input Data for 1732DS-IB8, 1732DS-IB8XOBV4, 1791DS-IB8XOBV4, 1791DS-IB16 Modules (continued)
Instance Hex
(decimal)
364
(868)
Module
1732DS-IB8, 1732DS-
IB8XOBV4, 1791DS-
IB8XOBV4
Byte Bit 7
0
Bit 6 Bit 5 Bit 4 Bit 3 Bit 2
365
(869)
374
(884)
384
(900)
385
(901)
1791DS-IB16
1732DS-IB8XOBV4,
1791DS-IB8XOBV4
1732DS-IB8
1791DS-IB16
1
2
3
0
1
2
3
4
5
6
0
1
2
3
4
5
0
1
0
1
2
Bit 1 Bit 0
Safety Input
7
Safety Input
7 Status
Safety Input 6
Status
Safety Input
5 Status
Safety Input 4
Status
Safety Input
3 Status
Test Output 7
Status
Test Output 6
Status
Test Output 5
Status
Test Output 4
Status
Test Output 3
Status
Test Output 2
Status
Test Output 1
Status
Reserved
Safety Input 6 Safety Input
5
Safety Input 4 Safety Input
3
Safety Input 2 Safety Input 1
Safety Input 2
Status
Safety Input 1
Status
Safety Input 0
Safety Input 0
Status
Test Output 0
Status
Muting Lamp 7
Status
Muting Lamp 3
Status
Standard
Output 7
Standard
Output 15
Safety Input
7 Status
Safety Input
15 Status
Standard
Output 6
Standard
Output 14
Safety Input 6
Status
Safety Input
14 Status
Standard
Output 5
Standard
Output 13
Safety Input
5 Status
Safety Input
13 Status
Standard
Output 4
Standard
Output 12
Safety Input 4
Status
Safety Input
12 Status
Standard
Output 3
Standard
Output 11
Safety Input
3 Status
Safety Input
11 Status
Standard
Output 2
Standard
Output 10
Safety Input 2
Status
Safety Input
10 Status
Standard
Output 1
Standard
Output 9
Safety Input 1
Status
Safety Input 9
Status
Standard
Output 0
Standard
Output 8
Safety Input 0
Status
Safety Input 8
Status
Test Output 7
Status
Test Output 6
Status
Test Output
15 Status
Safety Input
7
Safety Input
7 Status
Test Output
14 Status
Reserved Reserved
Safety Input 6 Safety Input
Safety Input 6
Status
Test Output 5
Status
Test Output 4
Status
Test Output
13 Status
Reserved Reserved
5
Safety Input
5 Status
Test Output
12 Status
Safety Input 4
Status
Test Output 3
Status
Test Output
11 Status
Safety Input
3 Status
Test Output 2
Status
Test Output
10 Status
Test Output 1
Status
Test Output 9
Status
Muting Lamp
15 Status
Muting Lamp
11 Status
Muting Lamp 7
Status
Muting Lamp 3
Status
Safety Input 4 Safety Input
3
Safety Input 2
Status
Safety Input 1
Status
Test Output 0
Status
Test Output 8
Status
Safety Input 2 Safety Input 1 Safety Input 0
Safety Input 0
Status
Safety
Output 7
Status
Safety Output
7 Readback
Safety Output
6 Status
Safety Output
6 Readback
Safety
Output 5
Status
Safety
Output 5
Readback
Safety Output
4 Status
Safety
Output 3
Status
Safety Output
2 Status
Safety Output 1
Status
Safety Output
0 Status
Safety Output
4 Readback
Safety Output
3 Readback
Safety Output
2 Readback
Safety Output 1
Readback
Safety Output 0
Readback
Test Output 7
Status
Test Output 6
Status
Reserved
Reserved
Test Output 5
Status
Test Output 4
Status
Test Output 3
Status
Test Output 2
Status
Test Output 1
Status
Test Output 0
Status
Muting Lamp 7
Status
Muting Lamp 3
Status
Input Power
Error
Test Output 7
Status
Reserved
Test Output 7
Status
Test Output
15 Status
Test Output 6
Status
Test Output 6
Status
Test Output
14 Status
Test Output 5
Status
Test Output 4
Status
Test Output 5
Status
Test Output
13 Status
Test Output 4
Status
Test Output
12 Status
Test Output 3
Status
Test Output 2
Status
Test Output 1
Status
Test Output 3
Status
Test Output 2
Status
Test Output
11 Status
Test Output
10 Status
Test Output 1
Status
Test Output 9
Status
Test Output 0
Status
Input Power
Error
Test Output 0
Status
Test Output 8
Status
154 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Get Point Status from Modules by Using Explicit Messaging Appendix A
Table 20 - Input Data for 1732DS-IB8, 1732DS-IB8XOBV4, 1791DS-IB8XOBV4, 1791DS-IB16 Modules (continued)
Instance Hex
(decimal)
394
(916)
Module
1732DS-IB8XOBV4,
1791DS-IB8XOBV4
3A4
(932)
Byte Bit 7
0
1
0
1
2
Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
Reserved
Test Output 7
Status
Test Output 6
Status
Test Output 5
Status
Test Output 4
Status
Test Output 3
Status
Test Output 2
Status
Test Output 1
Status
Reserved
Output Power
Error
Output Power
Error
Input Power
Error
Test Output 0
Status
Input Power
Error
Safety Output
7 Readback
Safety Output
6 Readback
Safety
Output 5
Readback
Safety Output
4 Readback
Safety Output
3 Readback
Safety Output
2 Readback
Safety Output 1
Readback
Test Output 7
Status
Test Output 6
Status
Test Output 5
Status
Test Output 4
Status
Test Output 3
Status
Test Output 2
Status
Test Output 1
Status
Safety Output 0
Readback
Test Output 0
Status
Table 21 - Output Data for 1791DS-IB8XOBV4, 1732DS-IB8, 1732-IB8XOBV4 Modules
Instance
Hex
(decimal)
22
(34)
23
(35)
Module
1791DS-IB8XOBV4,
1732DS-IB8, 1732-
IB8XOBV4
1791DS-IB16
Byte
0
0
Bit 7
Standard
Output 7
Bit 6
Standard
Output 6
Bit 5
Standard
Output 5
234
(564)
2C4
(708)
1
1791DS-IB8XOBV4, 1732-
IB8XOBV4
1791DS-IB8XOBV4, 1732-
IB8XOBV4
0
0
1
Standard
Output 7
Standard
Output 15
Safety
Output 7
Safety
Output 7
Standard
Output 7
Standard
Output 6
Standard
Output 14
Standard
Output 5
Standard
Output 13
Safety Output
6
Safety
Output 5
Safety Output
6
Safety
Output 5
Standard
Output 6
Standard
Output 5
Bit 4
Standard
Output 4
Bit 3
Standard
Output 3
Standard
Output 4
Standard
Output 12
Standard
Output 3
Standard
Output 11
Safety Output
4
Safety
Output 3
Safety Output
4
Safety
Output 3
Standard
Output 4
Standard
Output 3
Bit 2
Standard
Output 2
Bit 1
Standard
Output 1
Standard
Output 2
Standard
Output 10
Standard
Output 1
Standard
Output 9
Safety Output
2
Safety
Output 1
Safety Output
2
Safety
Output 1
Standard
Output 2
Standard
Output 1
Bit 0
Standard
Output 0
Standard
Output 0
Standard
Output 8
Safety
Output 0
Safety
Output 0
Standard
Output 0
Explicit Messages
Table 22 - Reading the Cause of the Safety Input Error
Explicit
Message
Safety Input
Cause of Error
Information
Read
Read/
Write
Read
Function
Service
Code
Reads the cause for the status bit
(1…n) specified by the Instance
ID turning OFF.
0E
Class
ID
3D
Command (hex)
Instance ID Attribute ID Data Size
01…n 6E -
Response (hex)
0: No error
01: Configuration invalid
02: External test signal error
03:Internal input error
04: Discrepancy error
05: Error in the other dual channel input
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 155
Appendix A Get Point Status from Modules by Using Explicit Messaging
Table 23 - Reading the Cause of the Safety Output Error
Explicit Message Read/
Write
Function
Service
Code
Safety Output Cause of
Error (Fault)
Information
Read Reads the cause for the status bit (1…n) specified by the Instance
ID turning OFF.
0E
Class
ID
3B
Command (hex)
Instance ID Attribute ID Data Size
01…n 6E -
Response (hex)
0: No error
01: Configuration invalid
02: Over current detected
03: Short circuit detected
04: Output ON error
05: Error in the other dual-channel output
06: Internal-relay output circuit error
(replace module)
07: Relay failure (replace relay)
08: Dual-channel violation
09: Short circuit detected at safety output
Table 24 - Monitoring the Test Output Point
Explicit Message
Test Output Cause of
Error (Fault)
Information
Read/
Write
Function
Service
Code
Read Reads the cause for the status bit (1…n) specified by the
Instance ID turning
OFF.
0E
Class
ID
09
Command (hex)
Instance ID Attribute ID Data Size
01…n 76 -
Response (hex)
0 = No error
01: Configuration invalid
02: Overload detected
03: Cross circuit detected
05: Output ON error
06: Undercurrent detected for muting lamp
-
Table 25 - Setting Hold/Clear for Communication Errors (Test Output)
Explicit Message Read/
Write
Function
Service
Code
Class
ID
Setting for Output Status
(Hold or Clear) after
Communication Error
Read
Setting for Output Status
(Hold or Clear) after
Communication Error
Write
Reads whether hold or clear is set as the output status after a communication error for an output specified by the instance ID. The setting can be read for a specified number of points.
0E
Sets whether hold or clear as the output status after a communication error for an output specified by the instance ID. The setting can be read for a specified number of points.
09
Command (hex)
Instance ID Attribute ID Data Size
01…08 05 -
01…08 byte
00: Clear
01: Hold
Response (hex)
1 byte
00: Clear
01: Hold
156 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Basic Format of Explicit
Messages
Get Point Status from Modules by Using Explicit Messaging Appendix A
The basic format of each command and response is as follows.
Table 26 - Command Block
Destination Node Address Service Code Class ID Instance ID Attribute ID Data
· Destination Node Address - The node address of the module that is sending the explicit messages is specified with a 1 byte hexadecimal.
· Service Code, Class ID, Instance ID, Attribute ID - The parameters used for specifying the command, processing object, and processing content.
· Data - Data is not required when the read command is used.
Table 27 - Normal Response Block
Number of Bytes Received Source Node Address Service Code Data
Table 28 - Error Response Block
Number of Bytes Received 0004 hex (fixed) Source Node Address Service Code Error Code
· Number of Bytes Received - The number of bytes received from the source node address is returned in hexadecimal. When an error response is returned for an explicit message, the number of bytes is always 0004 hex.
· Source Node Address - The node address of the node from which the command was sent is returned in hexadecimal.
· Service Code - For normal completions, the service code specified in the command with the leftmost bit turned ON is stored as shown in the
See Function, Command Service Code, and Response Service Code on page 157
.
Table 29 - Function, Command Service Code, and Response Service Code
Function
Read Data
Write Data
Reset
Save
0E
05
Command Service Code (hex)
10
16
8E
85
Response Service Code (hex)
90
96
When an error response is returned for an explicit message, the value is always 94 hex.
· Data - Read data is included only when a read command is executed.
· Error code - The explicit message error code
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 157
Appendix A Get Point Status from Modules by Using Explicit Messaging
Table 30 - Error Codes
Error Name
0CFF
20FF
0EFF
10FF
14FF
19FF
2AFF
Response
Code (hex)
08FF
09FF
16FF
15FF
13FF
Service not supported
Invalid attribute value
Object does not exist
Too much data
Not enough data
Object state conflict
Invalid parameter
Attribute is not setable
Device state conflict
Attribute not supported
Store operation failure
Group 2 only server general failure
.
Cause
The service code is incorrect.
The specified attribute value is not supported. The data written was outside valid range.
The specified instance ID is not supported.
The data is larger than the specified size.
The data is smaller than the specified size.
The specified command cannot be executed due to an internal error.
The specified operation command data is not supported.
An attribute ID supported only for reading has been executed for a write service code.
The specified command cannot be executed due to an internal error.
The specified attribute is not supported.
The data cannot be stored in memory.
The specified command or attribute is not supported or the attribute was not set.
Explicit Messages
Table 31 - Reading General Status
Explicit Message Read/
Write
General Status Read Read
Function
Read the specified Slave’s status flags (8 bits).
Command (hex)
Service
Code
Class ID Instance ID Attribute
ID
Data Size
Response
Bit 0: Input power error
Bit 1: Output power error
Bit 2…7: Reserved
Table 32 - Setting and Monitoring a Safety Input
Explicit
Message
Safety Input
Cause of Error
Information
Read
Read/
Write
Read
Function
Reads the cause for the normal flag (1…12) specified by the
Instance ID turning OFF.
Command (hex)
Service
Code
Class ID Instance ID Attribute ID Data Size
0E 3D 01…0C 6E -
Response (hex)
0: No error
01: Configuration invalid
02: External test signal error
03:Internal input error
04: Discrepancy error
05: Error in the other dual channel input
158 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Get Point Status from Modules by Using Explicit Messaging Appendix A
Table 33 - Setting a Safety Output
Explicit Message Read/
Write
Function
Safety Output Cause of
Error (Fault)
Information
Read Reads the cause for the normal flag (1…8) specified by the Instance
ID turning OFF.
0E
Command (hex)
Service
Code
Class ID Instance ID Attribute ID Data Size
3B 01…08 6E -
Response (hex)
0: No error
01: Configuration invalid
02: Over current detected
03: Short circuit detected
04: Output ON error
05: Error in the other dual channel output
06: Internal-relay output circuit error
(replace module)
07: Relay failure (replace relay)
08: Dual channel violation
09: Short circuit detected at safety output
Table 34 - Monitoring the Test Output Point
Explicit Message Read/
Write
Function Command (hex)
Service
Code
Safety Output Cause of
Error (Fault)
Information
Read Reads the cause for the normal flag (1…8) specified by the
Instance ID turning
OFF.
0E
Class ID Instance ID
09 01…04
Attribute ID
6E -
Data Size
Response (hex)
0 = No error
01: Configuration invalid
02: Overload detected
03: Cross circuit detected
05: Output ON error
06: Undercurrent detected for muting lamp
Table 35 - Setting Hold/Clear for Communication Errors (Test Output)
Explicit Message Read/
Write
Function Command (hex)
Service
Code
Class ID Instance ID Attribute ID Data Size
Setting for Output Status
(Hold or Clear) after
Communication Error
Read
Setting for Output Status
(Hold or Clear) after
Communication Error
Write
Reads whether hold or clear is set as the output status after a communication error for an output specified by the instance ID. The setting can be read for a specified number of points.
Sets whether hold or clear as the output status after a communication error for an output specified by the instance ID. The setting can be read for a specified number of points.
01…08 -
01…08 byte
00: Clear
01: Hold
-
Response (hex)
00: Clear
01: Hold
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 159
Appendix A Get Point Status from Modules by Using Explicit Messaging
Notes:
160 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Appendix
B
Safety Data
This appendix lists calculated values for probability of failure on demand (PFD), probability of failure per hour (PFH), and mean time between failures. PFD and
PFH calculations comply with IEC61508, edition 2, 2010.
Calculated values of probability of failure on demand and probability of failure per hour appear in
Table 36 and Table 37 and must be calculated for the devices
within the system to comply with the SIL level required for application.
You must be responsible for following the requirements of ISO 13849-1:2008, to assess performance levels in your safety system.
Within the proof test interval, every I/O module must be functionally tested by individually toggling each input point and verifying that each point is detected by the controller.
Additionally, each output point must be individually toggled by the controller and you must verify that the output point changes state.
For more information, refer to these publications.
Resource
GuardLogix 5570 Controller Systems Safety Reference
Manual, publication 1756-RM099
GuardLogix Controller Systems Safety Reference Manual, publication 1756-RM093
Description
Provides information on safety application requirements for GuardLogix 5570 controllers in Studio
5000 Logix Designer projects.
Provides information on safety application requirements for GuardLogix 5560 and 5570 controllers in RSLogix 5000 projects.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 161
Appendix B Safety Data
Figure 30 - PFD versus Proof Test Interval 1791DS-IB8XOBV4, 1732DS-IB8XOBV4
PFD
Proof Test Interval [years]
Figure 31 - PFD versus Proof Test Interval 1791DS-IB12, 1791DS-IB8XOB8, 1791DS-IB4XOW4
PFD
Proof Test Interval [years]
162 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Safety Data Appendix B
Table 36 - Probability of Failure Data (IEC 61508, Edition 2, 2010)
Cat. No.
Description Calculated PFD
2 Years
(17,520 hours)
5 Years
(43,800 hours)
1791DS-IB8XOBV4 4.16E-06 1.04E-05
1791DS-IB16
1732DS-IB8XOBV4
1732DS-IB8
CIP Safety 8-point input/4 bi-polar output module
CIP Safety 16-point input module
CIP Safety 8-point input/4 bi-polar output module
CIP Safety 8-point input module
4.11E-06
4.16E-06
4.11E-06
1.03E-05
1.04E-05
1.03E-05
10 Years
(87,600 hours)
2.08E-05
2.06E-05
2.08E-05
2.06E-05
Table 37 - Probability of Failure Data (IEC 61508, Edition 1, 1999)
Cat. No.
Description Calculated PFD
1791DS-IB12
2 Years
(17,520 hours)
1.754E-06
1791DS-IB8XOB8
1791DS-IB4XOW4
CIP Safety 12-point input module
CIP Safety 8-point input/8-point output module
CIP Safety 4-point input/4-point relay output module
1.755E-06
4.151E-05
5 Years
(43,800 hours)
4.419E-06
4.421E-06
1.207E-04
(1) The 20-year PFD data for this product applies only to product with a manufacture date code of 2009/
01/01 (January 1, 2009) or later. See the product label for the date code.
20 Years
(175,200 hours)
4.16E-05
PFH
(1/hour)
5.02E-10
4.11E-05
4.16E-05
4.11E-05
Spurious Trip
Rate (SPR)
MTTF
(years)
5.608E-06 20.34
3.301E-06
5.608E-06
3.301E-06
4.072E-09
34.56
20.34
34.56
10 Years
(87,600 hours)
20 Years
(1)
(175,200 hours)
PFH
(1/hour)
(1)
8.962E-06
8.963E-06
6.013E-06
6.013E-06
6.84E-11
6.84E-11
2.978E-04
4.96E-10
5.02E-10
4.96E-10
7.684E-04
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 163
Appendix B Safety Data
Notes:
164 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configuration Reference Information
Appendix
C
Topic
Understanding Parameter Groups
I/O Data Supported by Each Module
Page
Understanding
Parameter Groups
The modules have these parameter groups:
•
•
•
•
Set all parameters by using the Logix Designer application or RSNetWorx for
DeviceNet software.
Table 38 - General Parameters
Parameter Name
Safety Output Error Latch Time
Safety Input Error Latch Time
Test Output Idle State
Value
0…65,530 ms (in increments of
10 ms)
Description
Safety output errors are latched for this time.
0…65,530 ms
(in increments of 10 ms)
Safety input or test output errors are latched for this time.
Clear OFF or Keep Output Data Definition of output data is in idle state.
Default
1000 ms
1000 ms
Clear OFF
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 165
Appendix C Configuration Reference Information
Table 39 - Safety Input Parameters
Parameter Name
Input Point Operation Type
Input Point Mode
Safety Input Test Source
Input Delay Time Off -> On
Input Delay Time On -> Off
Value
Single Channel
Description
Use as single channel.
Dual-channel Equivalent Use as dual-channel. Normal when both channels are ON or OFF.
Dual-channel Complementary Use as dual-channel. Normal when one channel is ON and the other channel is OFF.
Not Used
Safety Test Pulse
External input device is not connected.
Use with a contact output device and in combination with a test output. By using this setting, short-circuits between input signal lines and the power supply (positive side) and short-circuits between input signal lines can be detected.
A solid-state output safety sensor is connected.
A standard device, such as a reset switch, is connected.
The test output that is used with the input.
Safety
Standard
Not Used
Test Output 0
Test Output 1
Test Output 2
Test Output 3
0…126 ms (in increments of
6 ms)
0…126 ms (in increments of
6 ms)
Filter time for OFF to ON transition.
Filter time for ON to OFF transition.
IMPORTANT If the test pulse from test output is set to the Safety Input Channel mode, the safety-input test source and pulse test output of the test output must be set to the Test Output mode.
166 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Configuration Reference Information Appendix C
Table 40 - Test Output Parameters
Parameter Name
Test Output Mode
Test Output Fault Action
(1)
Value
Not Used
Standard
Pulse Test
Power Supply
Muting Lamp Output (Terminal T3 or T7 only)
Clear OFF
Hold Last Data
Description
An external device is not connected.
The output is connected to a standard device.
A contact output device is connected. Use in combination with a safety input.
The power supply of a Safety Sensor is connected. The voltage supplied to I/
O power (V, G) is output from the test output terminal.
An indicator is connected and turned ON to detect broken lines in an external indicator.
Action to perform when a communication error is detected.
Default
Not Used
Clear OFF
(1) Not directly related to safety.
Table 41 - Safety Output Parameters
Parameter Name
Output Point Mode
Value
Not Used
Safety
Safety Pulse Test
Output Point Operation Type Single Channel
Dual-channel
Description
An external output devices is not connected.
When the output is ON, the test pulse is not output (remains ON).
By using this function, short-circuits between output signal lines and the power supply
(positive side) and short-circuits between output signal lines can be detected.
Use as single channel.
Use as dual-channel. When both channels are normal, outputs can be turned ON.
Default
Not Used
Dual-channel
Allocate Remote I/O
I/O Data Supported by
Each Module
The module internally stores I/O allocation data. Use the Logix Designer application or RSNetWorx for DeviceNet software to set the connection paths for the allocation of I/O data in the master unit. No settings are made by default.
Be sure to set the required connection paths.
The module stores this I/O data:
• SAFETY: Information the controller can use in safety-related functions
• STANDARD: Additional information that must not be relied on for safety functions
These tables show the I/O data supported by each module. Refer to I/O
Assembly Data for data arrangements.
You can allocate up to four items of I/O-data safety connections, including one output, and up to two items of I/O-data standard connections for the master unit
(such as a scanner).
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 167
Appendix C Configuration Reference Information
Table 42 - 1791DS-IB12 Modules
Configuration Software Setting
(see module definition
(1)
)
Inputs Outputs
•
•
•
•
•
•
•
•
•
•
•
•
Safety
Small Safety - Point Status
Safety - Point Status
Safety - Combined Status - Muting Status
Safety - Point Status - Muting Status
20C
224 •
•
22C
310 •
•
311 •
Safety - Point Status - Muting Status - Test Output Status 312 •
Test
Test Output Status with General Status Assembly
21
340
(1) Found in the Logix Designer application, I/O Module Properties, General tab.
•
•
•
•
•
•
•
•
•
•
•
168 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Table 43 - 1791DS-IB8XOB8 Modules
Configuration Software Setting (see
Module Definition
(1)
)
Inputs
Configuration Reference Information Appendix C
Outputs
•
•
•
•
•
•
• Safety
Safety - Combined Status - Muting Status
204 •
320 • •
• Safety - Point Status - Muting Status 321 •
• •
• •
•
Safety - Readback - Point Status - Muting
Status
Safety - Readback - Point Status - Muting
Status - Test Output Status
Test
322 •
323 •
21
•
•
•
•
• •
•
• • •
• • • •
Safety
Combined
234
351
• Output Readback/Test Output Status with
General Status Assembly
341
(1) Found in the Logix Designer application, I/O Module Properties, General tab.
• •
•
• •
•
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 169
Appendix C Configuration Reference Information
Table 44 - 1791DS-IB4XOW4 Modules
Configuration Software Setting (see
Module Definition
(1)
)
Inputs Outputs
•
•
•
•
•
•
• Safety
Safety - Combined Status - Muting Status
203 •
330 • •
• Safety - Point Status - Muting Status 331 •
• •
• •
•
Safety - Readback - Point Status - Muting
Status
Safety - Readback - Point Status - Muting
Status - Test Output Status
Test
332 •
333 •
21
•
•
•
•
• •
•
• • •
• • • •
Safety
Combined
233
350
• Output Readback/Test Output Status with
General Status Assembly
342
(1) Found in the Logix Designer application, I/O Module Properties, General tab.
• •
•
• •
•
170 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Table 45 - 1791DS-IB8XOBV4 Modules
Configuration Software Setting (see
Module Definition
(1)
)
Inputs
Configuration Reference Information Appendix C
Outputs
•
•
•
•
•
•
• Safety
Safety - Combined Status - Muting
204 •
324 • •
• •
• Safety - Point Status - Muting 344
Safety - Readback - Point Status - Muting 354 •
• •
•
Safety - Readback - Point Status - Muting - Test
Output
374 •
Test 22
•
•
•
•
•
• •
•
• • •
• • • •
Safety
Combined
234
2C4
•
• •
•
(1) Found in the Logix Designer application, I/O Module Properties, General tab.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 171
Appendix C Configuration Reference Information
Table 46 - 1732DS-IB8 Modules
Configuration Software Setting (see
Module Definition
(1)
)
Inputs Outputs
•
•
• •
•
Safety
Safety - Point Status - Muting Status
204 •
334 •
• • Safety - Point Status - Muting - Test Output 364 •
• • Safety - Combined Status - Muting 314 • •
•
•
•
• •
•
•
•
• Safety - Point Status
Test
224 •
22
•
(1) Found in the Logix Designer application, I/O Module Properties, General tab.
•
•
172 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Table 47 - 1732DS-IB8XOBV4 Modules
Configuration Software Setting (see
Module Definition
(1)
)
Inputs
Configuration Reference Information Appendix C
Outputs
•
•
•
• • Safety
Safety - Combined Status - Muting
204 •
324 • •
• •
• Safety - Point Status - Muting 344
Safety - Readback - Point Status - Muting 354 •
• •
•
Safety - Readback - Point Status - Muting - Test
Output
374 •
Test 22
•
•
•
•
•
• •
•
• • •
• • • •
Safety
Combined
234
2C4
•
• •
•
(1) Found in the Logix Designer application, I/O Module Properties, General tab.
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013 173
Appendix C Configuration Reference Information
Table 48 - 1791DS-IB16 Modules
Configuration Software Setting (see
Module Definition
(1)
)
Inputs Outputs
•
• •
•
Safety
Safety - Point Status - Muting
205 •
335 •
• • Safety - Point Status - Muting - Test Output 365 •
• • Safety - Combined Status - Muting 315 • •
•
•
• • • Safety - Point Status
• • Test
None
225 •
23
C7
(1) Found in the Logix Designer application, I/O Module Properties, General tab.
•
•
•
•
•
174 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Index
A
about catalog numbers
acetone
administrator, safety
architectures safety
assembly and reference data
installation
isolating transformer
L
legislation and standards
limit, connection reaction time
Logix Designer application
,
B
before you begin
benzene
bus off
C
cables
catalog numbers
cleaning
colored stickers
configuration lock
configure always checkbox
configure the module
,
connecting communication connectors
connection
controlling devices
M
mean time between failure
model types
mounting
MTBF
See mean time between failure.
N
node address setting
noise
O
ODVA
,
off-delay function
on-delay function
out-of-box condition
output configuration dialog
D
data, reference
dialog
Output Configuration
Safety
Test Output Configuration 76
DIN rail
directives
E
EC directives
electronic data sheet
EMC directives
P
parameters general
groups
safety input
test output
PFD
See probability of failure on demand.
PFH
See probability of failure per hour.
precautions for use
probability of failure on demand
probability of failure per hour
proof test
publications, related
F
ferrite core
firmware
H
help button
I
I/O configuration tree
Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
R
reference data
related publications
replace units
rotary switches
RSLogix 5000 software version
175
Index
RSNetWorx for DeviceNet software
version
S
safety dialog
safety functions safety input
safety output
safety network number
,
self-diagnostics
SLogix 5000 software version
SNN
standards
Studio 5000 environment version
Studio 5000 software
switches, rotary
T
thinner
torquing
transformer, isolating
tree, configuration
V
ventilation
176 Rockwell Automation Publication 1791DS-UM001J-EN-P - May 2013
Rockwell Automation Support
Rockwell Automation provides technical information on the Web to assist you in using its products.
At http://www.rockwellautomation.com/support , you can find technical manuals, technical and application notes, sample code and links to software service packs, and a MySupport feature that you can customize to make the best use of these tools. You can also visit our Knowledgebase at http://www.rockwellautomation.com/knowledgebase for FAQs, technical information, support chat and forums, software updates, and to sign up for product notification updates.
For an additional level of technical phone support for installation, configuration, and troubleshooting, we offer
TechConnect SM support programs. For more information, contact your local distributor or Rockwell Automation representative, or visit http://www.rockwellautomation.com/support/ .
Installation Assistance
If you experience a problem within the first 24 hours of installation, review the information that is contained in this manual. You can contact Customer Support for initial help in getting your product up and running.
United States or Canada 1.440.646.3434
Outside United States or Canada Use the Worldwide Locator at http://www.rockwellautomation.com/rockwellautomation/support/overview.page
, or contact your local
Rockwell Automation representative.
New Product Satisfaction Return
Rockwell Automation tests all of its products to help ensure that they are fully operational when shipped from the manufacturing facility. However, if your product is not functioning and needs to be returned, follow these procedures.
United States
Outside United States
Contact your distributor. You must provide a Customer Support case number (call the phone number above to obtain one) to your distributor to complete the return process.
Please contact your local Rockwell Automation representative for the return procedure.
Documentation Feedback
Your comments will help us serve your documentation needs better. If you have any suggestions on how to improve this document, complete this form, publication RA-DU002 , available at http://www.rockwellautomation.com/literature/ .
Rockwell Otomasyon Ticaret A.Ĺž., Kar Plaza Ä°Ĺź Merkezi E Blok Kat:6 34752 Ä°çerenköy, Ä°stanbul, Tel: +90 (216) 5698400
Publication 1791DS-UM001J-EN-P - May 2013
Supersedes Publication 1791DS-UM001I-EN-P - October 2010 Copyright © 2013 Rockwell Automation, Inc. All rights reserved. Printed in the U.S.A.

Public link updated
The public link to your chat has been updated.
Advertisement