Safety Integrated - Industry - Siemens

Ex. No.
3
The acknowledgement for the enable is given at the input
ACK_NEC depending on the parameters:
■ For ACK_NEC = 0 an automatic acknowledgement is given
(as implemented in this example).
■ For ACK_NEC = 1 an enable requires acknowledging ACK at
the input by means of a rising edge.
In order for the F application block to recognize whether the
inputs IN1 and IN2 are only "0" due to a passivation of the respective
F-periphery, you must supply the inputs QBAD_IN1
and QBAD_IN2 with the variable QBAD of the respective F periphery
DB. This prevents for example that for a passivation of
the F-periphery the safety door must be completely opened
prior to acknowledgement.
Warning!
The parameterization of the variables ACK_NEC=0 is
only permitted, if an automatic restart of the respective
process is excluded otherwise.
Should you supplement the example by means of a manual
acknowledgement, please note the following:
Note
For safety door applications, the acknowledge signal
must be read via a failsafe input module (F-DI), if it is an
accessible hazardous area. For a non-accessible hazardous
area, the acknowledge signal can also be read via a
standard input module.
The F-application module supports the requirements according
to EN954-1 and EN 1088.
After restarting the F system, the enable signal Q is reset to
"0". The acknowledgement for the enable is given at the input
OPEN_NEC and ACK_NEC depending on the parameters:
■ For OPEN_NEC = 0 an automatic acknowledge is given
independent of ACK_NEC, as soon as both inputs IN1 and
IN2 have the signal status 1 for the first time after reintegration
of the respective F periphery (safety door is closed).
In this example this variant has not been activated.
■ For OPEN_NEC = 1 or if at least on of both inputs IN1 and
IN2 have the signal status "0" even after reintegration of
the respective periphery, an automatic acknowledgement
is given depending on ACK_NEC, or the enable requires
acknowledging ACK at the input by means of a rising edge.
Prior to acknowledgement both inputs IN1 and IN2 must
have had the signal status 0 (safety door completely
opened) and subsequently signal status 1 (safety door
closed).
204 Functional Example No. AS-FE-I-003-V10-EN
Warning!
The parameterization of the variables OPEN_NEC=0
is only permitted, if an automatic restart of the respective
process is excluded otherwise.
At the output DIAG a non-failsafe information on occurred errors
is provided for service purposes. You can read it out via
HMI systems or if necessary evaluate them in your standard
user program.
Note
The safety program does not allow accessing the output
DIAG!
FB "COORDINATION" (FB1, DB1)
After processing the FB 217, processing is continued in FB 1:
Network 2
#COND1
The machine must only start at valid enable from FB 217 (#RE-
LEASE="1") and the start request ("COND1"="1") from the
standard user program. Additionally the tumbler (E_MAGNET)
must be monitored (see "Network 3" below). The "machine"
stops by a failure locking.
Network 3
#RELEASE
"E_MAGNET"
#COND1
#RELEASE
&
"ACT_PAS"
&
>=1
#ACTUATOR
=
"COIL"
=
G_FB_XX_103
G_FB_XX_104