Balluff BNI IOF-329-P02-Z038 Betriebsanleitung Seite 209

BNI IOF-329-P02-Z038
Safe I/O Module, Safety over IO-Link
IP67 Module
15
Diagnostics
The device detects both internal and external errors autonomously and reports the operating
states in various ways and in varying degrees of detail:
–
–
–
This makes troubleshooting and restarting easier.
www.balluff.com
Low degree of information (see Section 15.1 and 15.2 on page 92) suitable for a quick
overview: Status LEDs on the safe I/O module.
Medium degree of information (see Section 15.3 on page 94) for a user-friendly diagnosis
in plain text (e.g. via HMI): Programming/project software.
High degree of information (see Section 15.4 on page 95) necessary for a detailed analysis
in case of errors: Text information on the display of the safe I/O module.
Note
The display can be used to read out more information about the module status than is
possible using the LEDs or programming software in the safe controller (HMI). Only a
certain amount of status information is sent to the safe controller (see Section 15.4).
Error states Safe State
Errors are stored in the error memory of the device if this is possible in terms of time.
The errors are also sent to the host safe controller if there is an active connection with
the device.
Since there can be various reasons for a safe state, the I/O module responds
differently and must be handled differently after the fault has been cleared:
– Functional Safe State (acknowledgeable)
After eliminating the fault (cause) the safe I/O module can be reintegrated using a
controller-side user acknowledgment (acknowledge command).
– Fail Safe State (continuous)
After the cause of the error has been eliminated the safe I/O module must be
reinitialized by a power interruption and then started up again.
In both cases the operating function is then restored.
DANGER
Unintended restarting
The restart behavior of the higher level safety circuit depends on which
safety controller is used and on its configuration or on the control
program.
► Evaluate an automatic restart in the hazard and risk analysis after an error
has been cleared.
► In general avoid automatic restarts.
english 91