Rockwell Automation T3122 User Manual
ICS Regent
®
PD-6000
Processor Modules
110 VAC, 220/240 VAC and 24 VDC
(128K: T3110, T3111 and T3112)
(512K: T3120, T3121 and T3122)
Issue 1,
The controller assembly's three processor modules store and
execute application programs, scan and up
modules, process communications, and detect system faults.
Each of the processor modules executes the application
programs independently, but in lock-step synchronization
with the other two. And each processor module independently
communicates in lock-step synchronization with the I/O
assembly over its own dedicated I/O Safetybus link.
date the I/O
March, 06
Features
·
Triple modular redundant, fault tolerant (3-2-0) operation.
·
Two-out-three hardware voting of all internal operations.
·
Automatic fault handling without nuisance alarming.
·
Time-stamped fault historian.
·
Hot replacement with pushbutton education of new module (no
need to re-load programs).
·
Battery-backed program storage for power outage protection.
·
Structured function block programming.
·
Mult
·
Front panel indicators on each module show processor,
communications, I/O, program, battery, memory lock, and
power status.
·
TÜV certified for safety, Risk Class 5.
The processor modules use a two-out-of-three voting scheme to
detect faults in the system. The Regent identifies, isolates,
and records transient and permanent faults as they occur. All
iple program execution.
Industrial Control Services
1
Processor Modules
(T3110, 11, 12, 20, 21, and 22)
faults are recorded in the system's fault history. Permanent
faults
processor module. In addition, redundant fault contacts are
activated to signal an external device to alert operators to any
permanent fault.
are also annunciated by an LED on the front of the
Module Operation
A block diagram of a typical processor module is shown in
Figure 1.
Inside each processor module is a main processor, an I/O proc
essor, and a power supply. A battery inside each of the proc
essor module maintains user application programs and the
downloadable portions of
power failure. Each processor module has interfaces to the
processor Safetybus and the I/O Safetybus. These interfaces
consist of an input voter, discrepancy detector logic, and an
output driver.
-
-
the system's RAMcode if there is a
2
Figure 1. Block Diagram of a Processor Module.
The voting and fault detection circuits allow the processor
modules to identify and isolate transient, intermittent, and
Industrial Control Services
Processor Modules
(T3110, 11, 12, 20, 21, and 22)
permanent faults as they occur. All faults are recorded in
system's fault history.
the
Each processor module contains its own power supply that
converts input power to the logic power levels used by the
internal processor circuits. The failure of one power supply
will only effect one processor module —
allowing the other two
modules to continue operating — thus keeping the Regent on
line by virtue of its majority two-out-of-three voting
architecture.
Programs are stored in on-board battery-backed RAM.
Program instructions are fetched from each processor’s
memory and executed by the processors. Data from inputs are
read from the I/O modules in the I/O assembly. The main
processor coordinates the Regent’s activities and solves the
application algorithms programmed by the user. Outputs are
driven by transmitting data through the processor module’s
I/O processor to the I/O assembly.
Communications between the main processor and the I/O
processor are maintained through shared RAM that is used as
a “mail box” for data transfers between the two processors.
-
All three processor modules operate independently in lock
step synchronization with the other two modules,
continuously repeating a scan cycle (Figure 2).
Figure 2. The Regent’s Scan Cycle.
The main processors in each of the three processor modules
run programs and process communications synchronously,
PD-6000
Mar-06
3
Processor Modules
(T3110, 11, 12, 20, 21, and 22)
while the I/O processors in each module read and write I/O
synchronously.
During these synchronous operations, all instructions and
data are d
voting and fault detection occur.
istributed across the Safetybus where automatic
Main Processor
During each scan cycle, the main processor executes
application programs, reading inputs from the shared RAM
and writing outputs to the shared RAM.
In addition to running application programs, the main
processor takes care of system overhead, such as:
•
Background diagnostics including voter tests, read tests of
the EPROMs, and read-write tests of the RAM (this
automatic
•
Communications processing including reading from and
writing to the communications modules every one
millisecond and checking the communications messages at
the end of each scan.
•
Fault filtering and reporting (which are available through
W
INTERPRET’s fault status and fault history features).
•
Reading the communications module’s real-t
real-time clock communications module is installed).
test is also what re-educates a new processor).
ime clock (if a
4
I/O Processor
During each scan cycle the I/O processor receives voted input
data into its local RAM and transfers it to the shared RAM —
making it available to the main processor. After being
processed by the main processor, output data are placed into
the shared RAM and read by the I/O processor into its local
RAM and written to the outputs.
The I/O processor also shares in managing system overhead.
This overhead includes:
•
Background I/O processor tests (voter tests, read EPROM
tests, and read-write local RAM tests).
•
I/O module tests (I/O module voter tests, logic loopback
tests, and coordinating other I/O module tests).
Industrial Control Services
Processor Modules
•
Fault filtering and reporting (which are available through
W
INTERPRET’s fault status and fault history features).
(T3110, 11, 12, 20, 21, and 22)
Testing and Diagnostics
Each processor module’s error detection logic is period
tested to ensure its continued correct operation. Testing is
done using self-tests that are automatically scheduled by each
processor module’s real-time operating system.
Front Panel Indicators and Controls
Figure 3 shows the physical features of the processor modules.
The front panel of each module contains status indicators as
well as a reset button and a memory lock keyswitch.
ically
PD-6000
Mar-06
5
Processor Modules
(T3110, 11, 12, 20, 21, and 22)
6
Processor Indica
Figure 3. Processor Module.
tor
This red and green LED pair indicates the overall health of
the processor module. During normal operation the green
PROC indicator is on. If a module fault occurs the red
indicator turns on and the green indicator turns off.
Communications Indicator
This red and green LED pair indicates the overall health of
the system’s communications. During normal operation the
green COMM indicator is on. If a communications fault
Industrial Control Services
Processor Modules
(T3110, 11, 12, 20, 21, and 22)
occurs the red COMM indicator turns on and the green
COMM indicator turns off.
I/O
Indicator
This red and green LED pair indicates the overall health of
the system’s I/O. During normal operation the green I/O
indicator is on. If an I/O fault occurs the red I/O indicator
turns on and the green indicator turns off.
An I/O module failure causes all of the processor modules to
indicate an I/O fault. An I/O transceiver module, I/O power
supply module, or I/O Safetybus cable fault causes only the
associated processor module to indicate an I/O fault.
Run Indicator
This green LED is off if the Regent has cold-started (system
power-up without 2oo3 validated programs). After the
RAMcode is loaded the Run LED flashes slowly (about ½
Hertz). With at least one program loaded and running this
indicator will flash faster (about 2 Hertz).
The RUN indicator will be on steadily when an application
program scan exceeds the maximum allowable scan time
(approximately 200 milliseconds for the 128 kbyte modules,
and 400 milliseconds for the 512 kbyte modules).
Battery Indicator
The green BATT OK indicator sh
ows whether the module’s
battery has sufficient power to maintain the programs in the
processor. If the battery has adequate power, this LED will be
on. If the battery needs to be replaced this LED will be off (see
Maintenance, page 9).
Memory Lock Indicator
This green LED indicates whether the module’s memory lock
keyswitch is in the on or off position. The MEMLK indicator
will be green when the keyswitch is in the on position.
PD-6000
Mar-06
The system’s memory lock stat
us is voted: If at least two
processor modules are locked, the system is memory locked, if
at least two processor modules are unlocked, the system
memory is unlocked.
7
Loading...