Maxiflex P3 PAC User Manual
104
-© Omniflex
UMM126XR18.pdf
Mode
Actions
Active
•
Respond to messages addressed to Redundant Controller Node Address.
•
Execute User program
•
Read Inputs from Remote I/O Rack
•
Write Outputs to Remote I/O Rack
•
Read Health Status from Primary Controller
•
Force Primary to change over to Active Mode if Primary is healthy
•
Force Secondary to change over to Standby if Primary is healthy
Standby
•
Do NOT Respond to messages addressed to Controller Node Address
•
Read Sync Blocks from Primary Controller
•
Force Primary to change over to Standby Mode if Primary is unhealthy
•
Force Secondary to change over to Active if Primary is unhealthy
Failure
•
This mode of operation is a hardware failure and the Controller is not
operable therefore no action is expected.
Table 13.2: Action List by Operating Mode – Secondary Controller
13.4.3 Controller Health Status
The Health
status
of the Primary and Secondary Controllers is a key element to the
redundant operation of the system. It is this parameter that determines which controller
operates in the Active mode.
The health status is dependant upon the following three factors:
13.4.3.1.
Status of Supervisory Communications
A controller must always be able to intelligently receive messages from the Supervisory
System, irrespective of whether it is operating in the Active mode or Standby mode. The
Active controller will respond to these messages, and the Standby controller will not.
13.4.3.2.
Status of Controller Hardware
Upon detection of a hardware failure of the primary controller, either by the primary
controller itself, or by the secondary controller, the secondary controller will assume control
(as long as it is healthy). When the health of the primary controller is restored, control will
be automatically restored to the primary controller.
13.4.3.3.
Forced change-over by the User (Primary only)
From time to time you may wish to test the change-over ability of the system from primary
to secondary control. This is accomplished by setting a “Force change-over” flag in the
Primary Controller while in the Active state. This can be done from the supervisory system.
Clearing this flag will cause the primary to resume control.