Safety Integrated - Industry - Siemens

The acknowledgement for the enable is given at the input
ACK_NEC depending on the parameters:
■ For ACK_NEC = 0 an automatic acknowledgement is given.
■ For enable at ACK_NEC = 1 you must acknowledge ACK at
the input by means of a rising edge (as implemented in
this example).
Note
The acknowledgement signal is in this example read via
a failsafe input module (F-DI). For safety door applications
this becomes necessary if the hazardous area is accessible.
For a non-accessible hazardous area, the acknowledge
signal can also be read via a standard input
module.
In order for the F application block to recognize whether the
inputs IN1 and IN2 are only "0" due to a passivation of the respective
F-periphery, you must supply the inputs QBAD_IN1
and QBAD_IN2 with the variable QBAD of the respective F periphery
DB. This prevents for example that for a passivation of
the F-periphery the safety door must be completely opened
prior to acknowledgement.
Warning!
Should you change the example in that ACK_NEC=0 is
set for the parameterization of the FB 217, an automatic
restart of the respective process must be excluded some
other way.
The F-application module supports the requirements according
to EN954-1 and EN 1088.
After restarting the F system, the enable signal Q is reset to
"0". The acknowledgement for the enable is given at the input
OPEN_NEC and ACK_NEC depending on the parameters:
■ For OPEN_NEC = 0 an automatic acknowledge is given
independent of ACK_NEC, as soon as both inputs IN1 and
IN2 have the signal status 1 for the first time after reintegration
of the respective F periphery (safety door is closed).
■ For OPEN_NEC = 1 or if at least on of both inputs IN1 and
IN2 have the signal status "0" even after reintegration of
the respective periphery, an automatic acknowledgement
is given depending on ACK_NEC, or the enable requires
acknowledging ACK at the input by means of a rising edge.
Prior to acknowledgement both inputs IN1 and IN2 must
have had the signal status 0 (safety door completely
opened) and subsequently signal status 1 (safety door
closed). In this example this variant has not been activated.
Warning!
Should you change the example in that OPEN_NEC=0
is set for the parameterization of the FB 217, an automatic
restart of the respective process must be excluded
some other way.
At the output DIAG a non-failsafe information on occurred errors
is provided for servicing purposes. You can read it out via
HMI systems or if necessary evaluate them in your standard
user program.
Note
The safety program does not allow accessing the output
DIAG!
FB "COORDINATION" (FB1, DB1)
After processing the FB 217, processing is continued in FB 1:
#RELEASE
#COND1
&
#ACTUATOR
=
The machine must only start at valid enable from FB 217 (#RE-
LEASE="1") and the start request ("COND1"="1") from the
standard user program.
FC "REINTEGRATION" (FC2)
Network 3 of FB1 calls the FC2, where in case of a passivation
of F-DI or F-DO the reintegration will be implemented. For the
F-DO a memory bit REINT is prepared. With a positive flank of
REINT the F-DO will be reintegrated.
Warning!
In this example, the reintegration of passivated
modules occurs automatically. Use the automatic reintegration
for your application only if it will not
cause any hazards.
A passivation is indicated via LED "SF" lighting up on the module.
The reintegration of an F module may take approx. one
minute.
Functional Example No. AS-FE-I-004-V10-EN 217
G_FB_XX_115
Ex. No.
4