HIMA HIQuad H41X, Системное руководство

Страница: 65 / 110

System Redundancy
HI 803 211 E Rev. 1.01.00 Page 65 of 110
5 Redundancy
The conceptual design of the HIQuad X system is characterized by high availability. To this end,
all system components can be operated redundantly. The following chapter describes
redundancy aspects for the various system components.
i
A redundancy system only increases the system availability, but not its safety integrity level
(SIL)!
5.1 Processor Module Redundancy
A HIQuad X system can be configured as a mono system with only 1 processor module, or as a
high-availability redundancy system with 2 redundant processor modules.
Processor modules only operate redundantly, if there is a digital depiction of the processor
modules in the Hardware Editor (SILworX) and the configuration is compiled with these settings.
5.1.1 Reducing Redundancy
A HIQuad X system with redundant processor modules continues its safety-related operation
even if one of the processor modules is no longer available, e.g., because a module failed or
was removed. Safety-related operation is still ensured even if one of the two redundant
processor modules fails.
5.1.2 Increasing Redundancy
If a new processor module is added to a running HIQuad X system, it automatically
synchronizes with the configuration of the existing processor module. Safety-related operation is
ensured. Requirements:

The user program run by the processor module is redundantly configured (default setting).

The redundant slot for the processor module is not in use.

At least one system bus is operating.

The position of the mode switch on the added processor module is Stop or Run .

The operating system of the added processor module has either the same version as the
existing processor module or a higher one.
5.2 Redundancy of I/O Modules
In terms of redundancy, two cases can be distinguished for input and output modules:

Module redundancy.

Channel redundancy.
HIMA recommends defining module redundancy before channel redundancy. HIQuad X
supports dual redundancy of input and output modules. Higher redundancy levels are possible
using the corresponding programming logic. For redundant connection of a sensor or actuator to
several I/O modules, observe the input and output values permitted for I/O modules.