11.03
3 Safety-Related Functions
3.10 Safe programable logic (SPL) (840D SW 4.4.18)
© Siemens AG 2003 All Rights Reserved
SINUMERIK 840D/SIMODRIVE 611 digital SINUMERIK Safety Integrated (FBSI) - Edition 11.03
3-137
Drive monitoring channel:
As before, the PLC user program defines how signals are logically combined.
NCK monitoring channel:
Input and output assignments as well as multiple distribution and assignment
apply as before.
In addition, the signals can also be processed in an NCK-SPL program that
must be written. This program is written as an asynchronous sub-routine using
the CNC function "synchronous actions". The input/output signals can be
combined with other signals and the result output at the internal interface or
NCK I/Os. An SGA can also be converted back internally to an SGE (without
using an external connection).
The NCK-SPL is active after the control has run-up if at least
1. the functions SBH/SG and "external STOPs" have been selected via
$MA_/$MD_SAFE_FUNCTION_ENABLE for at least one axis,
2. one of the NCK-SPL interfaces is used,
i.e. an axial SGE/SGA has been parameterized at one of the SPL
interfaces via its assignment MD or the external SPL interfaces
$A_OUTSE/$A_INSE have been parameterized via
MD $MN_SAFE_OUT_HW_ASSIGN/$MN_SAFE_IN_HW_ASSIGN. When
PROFIsafe I/Os are used (refer to Chapter 3.12) the MD
$MN_PROFISAFE_IN/OUT_ADDRESS apply.
In this case, the "external STOP A" must be parameterized at the SPL interface
for
all
of the axes that use Safety Integrated.
In addition, the following machine data must be set for an error-free
asynchronous sub-routine start after the NCK and the PLC have run-up:
3. $MN_ASUP_START_MASK=7:
Asynchronous sub-routine can be started in all operating states of the NC
(RESET/JOG/not all axes referenced/read-in inhibit active).
4. $MN_ASUP_START_PRIO_LEVEL=1:
Interrupt priority, from which
MD $MN_ASUP_START_MASK becomes active.
Other actions to be executed:
5. A PLC-SPL has to be created and integrated into the PLC user program
6. An NCK-SPL has to be created that is then loaded into directory
/_N_CST_DIR into file /_N_SAFE_SPF (= MMC view standard cycles
/SAFE.SPF)
Note
No alarms may be present for an asynchronous sub-routine start, e.g. alarm
3000 EMERGENCY STOP.
To improve the procedure when commissioning a machine, an SPL can be
started without the axial safety function first being enabled.
Logic operations from
SW 4.4.18 and higher
Activating
SPL start without axial
safety enable