Link-up and update
8.3 Time monitoring
CPU 410-5H Process Automation
124
System Manual, 09/2014, A5E31622160-AB
The figure below provides an overview of the relevant update times.
Figure 8-1
Meanings of the times relevant for updates
Response to time-outs
If one of the times monitored exceeds the configured maximum value, the following
procedure is started:
1.
Cancel update
2.
Fault-tolerant system remains in standalone mode, with the previous master CPU in RUN
3.
Cause of cancelation is entered in diagnostic buffer
4.
Call OB 72 (with corresponding start information)
The standby CPU then reevaluates its system data blocks.
Following this, after at least one minute, the CPU tries again to perform the link-up and
update. If still unsuccessful after a total of 10 retries, the CPU abandons the attempt. You
yourself will then need to start the link-up and update again.
A monitoring timeout can be caused by:
●
High interrupt load (e.g. from I/O modules)
●
High communication load causing prolonged execution times for active functions
●
In the final update phase, the system needs to copy unusually large amounts of data to
the standby CPU.