Application planning
3.5 Failure scenarios
S7-1500R/H redundant system
80
System Manual, 10/2018, A5E41814787-AA
Sequence of events
1.
The PROFINET ring is interrupted at two points within ≤
1500 ms.
2.
The redundant system switches to an undefined system state: The primary CPU remains
in the RUN operating state. The backup CPU becomes the primary CPU and remains in
RUN operating state.
3.
The two primary CPUs continue to exchange process data with the accessible IO
devices.
4.
The redundancy of the system is defective. The redundant system is in an undefined
system state. The undefined system state can lead to dangerous states in the process.
WARNING
Undefined system state of the S7-1500R redundant system at the same time as a cable
interruption in the PROFINE
T ring at two points within ≤
1500 ms.
Lay the PROFINET cables so that they are securely protected from damage.
PROFINET cables should also always be laid separately from each other. This makes
simultaneous damage to the PROFINET cables (within ≤
1500 ms) unlikely.
Diagnostics
System state and operating states after cable interruptions:
●
Redundant system → System state defective (undefined: Each R
-CPU is in the RUN-Solo
system state).
●
Primary CPU → RUN operating state
–
MAINT LED → yellow light: The R syst
em is not in the RUN-Redundant system state.
The PROFINET ring is open.
–
ERROR LED → flashes red: An IO device has failed.
●
Primary CPU (previously backup CPU) → RUN operating state
–
MAINT LED → yellow light: The R system is not in the RUN
-Redundant system state.
The PROFINET ring is open.
–
ERROR LED → flashes red: An IO device has failed.
Note
To get detailed diagnostics information, evaluate the diagnostics buffer.
Summary of Contents for Simatic S7-1500H
Page 1: ......