Pac 8000
Pac 8000
Pac 8000
Intelligent Platforms
2/1 carriers
IS 8-module carrier (32-slot addressing) 8727-CA-08
IS 8-module carrier (64-slot addressing) 8729-CA-08
IS 4-module carrier (32-slot addressing) 8720-CA-04
Railbus isolator carrier 8723-CA-RB
IS module power supply carrier 8724-CA-PS
Carrier extender (right hand) 8030-CE-RH
Carrier extender (left hand) 8031-CE-LH
IS carrier extender cable, 0 35m 8011-CC-35
IS carrier extender cable, 0 85m 8012-CC-85
IS carrier extender cable, 1 2m 8013-CC-12
IS power extension cable, 0 35m 8016-CC-35
IS power extension cable, 0 85m 8017-CC-85
IS power extension cable, 1 2m 8018-CC-12
IS carrier extension cable set , 0 35m 8032-CC-35
www.ge-ip.com/process 3
GFA-1769A
8000 Module Carriers 2/2
}
CARRIER SPECIFICATION DIN-rail types 7 I/O Modules 3 & 4
Top hat 35 x 7.5 mm rail or 35 x 15 mm rail to EN 50022
See also System Specification 8 ve (or Neutral)
G-section rail to EN 50035
HAZARDOUS AREA APPROVALS Note: A second connector uses the same pin assignments for
modules 5 & 6 and 7 & 8.
Location of node
Class 1, Div 2, Groups A, B, C, D T4 hazardous location or
Zone 2, IIC T4 hazardous location
Location of field wiring
As node
Field terminals accepted
General purpose, 2/2
I/O modules accepted
General purpose, 2/2
ELECTRICAL
Railbus connectors
Female in, male out
Module address range
132
Bussed field power supply (optional)
Two 8-pin connectors are provided at the top rear of the
carrier to connect power supplies for field power Such
supplies are routed through certain I/O module to provide
power to field circuits * Must not be mixed with 64-slot address carriers
ENVIRONMENTAL
CARRIER SPECIFICATION
See also System Specification Ambient temp
7
8 } I/O Modules 3 & 4
ve (or Neutral)
Operating -40C to +70C
Storage -40C to +85C
HAZARDOUS AREA APPROVALS Note: A second connector uses the same pin assignments for
Relative Humidity modules 5 & 6 and 7 & 8.
Location of carrier
5 to 95% RH (non-condensing)
Class 1, Div 2, Groups A, B, C, D T6 hazardous location or
Zone 2, IIC T6 hazardous location Vibration and Shock
See System specification
Location of field wiring
As carrier
MECHANICAL
Field terminals accepted
General purpose, 2/2 Dimensions
342 (w) x 170 (d) x 22 (h) mm
I/O modules accepted
General purpose, 2/2 Weight
680 g
Applicable standards:
Factory Mutual Research Co., Class No. 3611 for Class I, Mounting methods
Division 2, Groups A, B, C, D hazardous locations Flat panel or DIN rail
CSA Std C22.2 No. 213 for Class I, Division 2, Groups A,
DIN-rail types
B, C, D hazardous locations
Top hat 35 x 7.5 mm rail or 35 x 15 mm rail to EN 50022
ATEX Category 3 (for Zone 2 installation) to
G-section rail to EN 50035
EN50021:1999 protection type n
www.ge-ip.com/process 5
GFA-1769A
8000 Module Carriers 2/2
Dimensions
CARRIER SPECIFICATION
See also System Specification
178 (w) x 170 (d) x 22 (h) mm
Weight
7
8 } I/O Modules 3 & 4
ve (or Neutral)
350 g
HAZARDOUS AREA APPROVALS
Mounting methods
Location of carrier Flat panel or DIN rail
Class 1, Div 2, Groups A, B, C, D T6 hazardous location or
DIN-rail types
Zone 2, IIC T4 hazardous location
Top hat 35 x 7.5 mm rail or 35 x 15 mm rail to EN 50022
Location of field wiring G-section rail to EN 50035
As node
Field terminals accepted
General purpose, 2/2
I/O modules accepted
General purpose, 2/2
ELECTRICAL
Railbus connectors
Female in, male out
Module address range
132
Bussed field power supply (optional)
An 8-pin connector is provided at the top rear of the
carrier to connect power supplies for field power Such
supplies are routed through certain I/O module to provide
power to field circuits * Must not be mixed with 64-slot address carriers
Accommodates one BIM, two PSUs and External dc power supply (optional) Weight
A 6-pin connector is provided at the top/rear of the carrier 680 g
four I/O modules to connect a 12.0 V dc (5%) power supply. This is an
Mounting methods
Screw terminals for LAN alternative to the carrier mounted PSU modules.
Flat panel or DIN rail
DIN rail or panel mounting Bussed field power supply (optional)
An 8-pin connector is provided at the top rear of the DIN-rail types
Printed wiring board carrier to connect power supplies for field power Such Top hat 7.5 x 35 mm rail or 35 x 15 mm rail to EN 50022
supplies are routed through certain I/O module to provide G-section rail to EN 50035
Rugged polycarbonate moulding
power to field circuits
Routes Bussed Field Power to I/O modules
Isolated earthing bar for cable LAN CONNECTORS
screen/shield LAN A
6-way, screw-terminal (x2)
LAN B
CARRIER SPECIFICATION
6-way, screw-terminal (x2)
See also System Specification
MATERIALS
CARRIER MOUNTING MODULES
Carrier moulding
PSU Modules (main and redundant) Modified poly-phenylene oxide
8910-PS-DC
Printed wiring board
Bus Interface Module Epoxy resin woven glass laminate
(Modbus) 8505-BI-MB
Node Services Module) ENVIRONMENTAL
8510-NS-MO
Ambient temp
I/O modules Operating -40C to +70C
General purpose (2/2) various Storage -40C to +85C
Relative Humidity
HAZARDOUS AREA APPROVALS 5 to 95% RH (non-condensing)
www.ge-ip.com/process 7
GFA-1769A
8000 Module Carriers 2/2
}
Each LAN has duplicate connections wired in parallel - pin 1 to pin 1, pin 2 to pin 2, etc
3 + 12 V I/O Modules 1 & 2
4 + 12 V +ve (or Live)
Mode 1: RS422 Note: Pins for power supplies are provided in pairs This enables one pin to be used for the
supply input and the second to loop to another connector, when required
Mode 2: RS485
no termination
terminated
Mode 4: RS422
Accommodates one BIM, two PSUs and External dc power supply (optional) Weight
A 6-pin connector is provided at the top/rear of the carrier 680 g
four I/O modules to connect a 12.0 V dc (5%) power supply. This is an
Mounting methods
Sub-miniature, 9-pin, D connectors for LAN alternative to the carrier mounted PSU modules.
Flat panel (4 fixings) or DIN rail
DIN rail or panel mounting Bussed field power supply (optional)
An 8-pin connector is provided at the top rear of the
Printed wiring board carrier to connect power supplies for field power Such DIN-rail types
supplies are routed through certain I/O module to provide Top hat 7.5 x 35 mm rail or 35 x 15 mm rail
Rugged polycarbonate moulding to EN 50022
power to field circuits
Routes Bussed Field Power to I/O modules G-section rail to EN 50035
MATERIALS
CARRIER MOUNTING MODULES
Carrier moulding
PSU Modules (main and redundant) Modified poly-phenylene oxide
8910-PS-DC
Printed wiring board
Bus Interface Module) Epoxy resin woven glass laminate
(Profibus-DP) 8502-BI-DP
Node Services Module) ENVIRONMENTAL
8510-NS-MO
Ambient temp
I/O modules Operating -40C to +70C
General purpose (2/2) various Storage -40C to +85C
Relative Humidity
HAZARDOUS AREA APPROVALS 5 to 95% RH (non-condensing)
Location of node Vibration and Shock
Class 1, Div 2, Groups A, B, C, D T4 hazardous location or See System specification
Zone 2, IIC T4 hazardous area
Location of field wiring
As per node
Field terminals accepted
General purpose or Zone 2/Div 2
I/O modules accepted
General purpose, or Zone 2/Div 2
www.ge-ip.com/process 9
GFA-1769A
8000 Module Carriers 2/2
Note: Pins for power supplies are provided in pairs This enables one pin to be used for the
supply input and the second to loop to another connector, when required
LAN A Weight 4 + 12 V
9-pin, D, sub-minature, female 680 g
5 0V
LAN B Mounting methods
9-pin, D, sub-minature, female Flat panel (2 fixings) or DIN rail 6 No Connection
DIN-rail types
Switchable terminations for Modbus RS485, Modbus RS422
Top hat 7.5 x 35 mm rail or 35 x 15 mm rail to EN 50022 Note: Pins for power supplies are provided in pairs This
or Profibus-DP
G-section rail to EN 50035 enables one pin to be used for the supply input and the
second to loop to another connector, when required
CARRIER MOUNTING MODULES
Bus Interface Module)
(Profibus-DP) 8502-BI-DP
(Modbus) 8505-BI-MB
Location of node
Zone 2, IIC T4 hazardous area or Class 1, Div 2, Groups
A, B, C, D T4 hazardous location
ENVIRONMENTAL
Ambient temp
Operating -40C to +70C
Storage -40C to +85C
Relative Humidity
5 to 95% RH (non-condensing)
Vibration and Shock
See System Specification
www.ge-ip.com/process 11
GFA-1769A
8000 Module Carriers 2/2
MODBUS APPLICATIONS
Pin 9 NC NC NC
LAN B RS485
terminated
Terminals Modbus RS422 BModbus RS485
Pin 4 RxD RxD/TxD Note: Switch model may vary but switching directions remain the same
RS485
None
2
Note: Pins with assignments shown in italics are normally not connected; they occur Note: Any required termination should be implemented in the PROFIBUS D-type plug
because of the universal nature of the interface
4
HAZARDOUS AREA APPROVALS
Location of node
5
6
} + 12V dc
ELECTRICAL
12V dc output connector
6 way screw terminal
MATERIALS
Carrier moulding
Modified poly-phenylene oxide
Printed wiring board
Epoxy resin woven glass laminate
ENVIRONMENTAL
Ambient temp
Operating -40C to +70C
Storage -40C to +85C
Relative Humidity
5 to 95% RH (non-condensing)
Vibration and Shock
See System specification
www.ge-ip.com/process 13
GFA-1769A
8000 Module Carriers 2/2
DC POWER
External Power
12.0 V dc (5%)
A 6-pin connector is provided at the top/rear of the carrier
for the connection of the power supply
MODBUS APPLICATIONS
note: Pins with assignments shown in italics are normally not connected; they occur because
of the universal nature of the interface
RS485
terminated
16 13 10 7 4 1
RS485
terminated & biased
17 14 11 8 5 2 Note: Switch model may vary but switching directions remain the same
PROFIBUS-DP APPLICATIONS
18 15 12 9 6 3
OFF
1
RS485 OFF
None
2
Eight pairs of terminals are provided for the PSU Note: Any required termination should be implemented in the PROFIBUS D-type plug
AUX vx health signals
www.ge-ip.com/process 15
GFA-1769A
8000 Module Carriers 2/2
MATERIALS
HAZARDOUS AREA APPROVALS
Carrier body
Location of node Painted 1.6mm ZINTEC to BS EN 10152
Zone 2, IIC T6 hazardous area or Class 1, Div 2, Groups
A, B, C, D T6 hazardous location Printed wiring board
Epoxy resin woven glass laminate
External Power
A
B
Terminal External Power
+
1 No Connection
2 0V
3 + 12 V
4 + 12 V
5 0V
6 No Connection
Power supply pins are provided in pairs This enables one pin to be used for the supply
input and the second to loop to another connector, when required
Note: The controllers/EBIMs do not draw main power from this supply See previous page
This power health facility is operational only when a Power Supply Monitor module
SERIAL PORT CONNECTORSS (X2) (8410-NS-PS) is fitted on the carrier
Terminal pairs 1 6
These terminal pairs (+ and ) are provided for external 2/2 power supplies, e.g. 8913-
Pin # Function PS-AC or 8914-PS-AC For each pair:
+ Power health signal from PSU
1 0V negative (ve) connection from PSU
2 NC Note: On the 8913-PS-AC, it is the 12V output that provides the power health signal,
therefore connect the ve terminal from the 12V output to the ve terminal on the power
3 Tx/Rx (+) health connector
4 Tx/Rx (+) Each unused terminal pair must be fitted with a shorting link to prevent an alarm condition
being signalled to the controller
5 Tx/Rx (-) Terminal pairs 7 & 8
These terminal pairs are disconnected and should not be used
6 Tx/Rx (-)
Terminal pair 9
7 NC If a Railbus Isolator (8922-RB-IS) is not used in the node, this terminal pair must be fitted
with a shorting link to prevent an alarm condition being signalled to the controller/EBIM
8 NC
9 0V
www.ge-ip.com/process 17
GFA-1769A
8000 Module Carriers 2/2
www.ge-ip.com/process 19
GFA-1769A
8000 Module Carriers 2/1
ELECTRICAL
Railbus connectors
Male out , female out
Module address range
132
ELECTRICAL
Railbus connectors
Male out , female out
Module address range
164
* For use only with 8521-XX-XX controller/EBIM, and cannot be
mixed with 32-slot address carriers
www.ge-ip.com/process 21
GFA-1769A
8000 Module Carriers 2/1
8720-CA-04 MATERIALS
MODULE NUMBER
Carrier moulding
32-slot address bus* Modified poly-phenylene oxide 1 2 3 4
Accepts up to four 2/1 I/O modules and Printed wiring board
Epoxy resin woven glass laminate
field terminals
Printed wiring board ENVIRONMENTAL
Rugged polycarbonate moulding Ambient temp
DIN rail or panel mounting Operating -40C to +70C
Storage -40C to +85C
Carries control signals and data on Railbus
Relative Humidity
Distributes DC power to modules 5 to 95% RH (non-condensing)
Isolated earthing bar for cable Vibration and Shock
screens/shields See System specification sheet
MECHANICAL
CARRIER MOUNTING MODULES
See also System Specification Dimensions
178 (w) x 170 (d) x 22 (h) mm
ELECTRICAL
Railbus connectors
Male out , female out
Module address range
132
Earth leakage detection
4-pin connectors are provided at the top/rear of the
carrier for wiring the individual modules to earth
leakage detectors, e g MTL2220 (Refer to GE for earth
leakage within I/O modules)
* Must not be mixed with 64-slot address bus carriers
ELECTRICAL
Railbus connectors
Male out , female out
DC power
DC power for the Railbus Isolator is obtained from the
system through the multipin Railbus connectors
MATERIALS
Carrier moulding
Modified poly-phenylene oxide
Printed wiring board
Epoxy resin woven glass laminate
www.ge-ip.com/process 23
GFA-1769A
8000 Module Carriers 2/1
ELECTRICAL
Railbus connectors
Male in, female out
(Usable with 32-slot or 64-slot address nodes)
MATERIALS
Carrier moulding
Modified poly-phenylene oxide
Printed wiring board
Epoxy resin woven glass laminate
Location of node
Class 1, Div 2, Groups A, B, C, D T4 hazardous location
or Zone 2, IIC T4 hazardous area
ELECTRICAL
Railbus carrier connector
8030-CE-RH Male in
8031-CE-LH Female out
Usable with 32-slot or 64-slot address nodes
Extender cable connector
Sub-D, 50-pin female
DC power cable connector
6-pin
MATERIALS
Carrier moulding
Modified poly-phenylene oxide
Printed wiring board
Epoxy resin woven glass laminate
www.ge-ip.com/process 25
GFA-1769A
8000 Module Carriers 2/1
For IS field wiring installations Power extender cable connectors IS Carrier Extension Cable, 0 35m 8011-CC-35
6-pin
Three lengths 0.35, 0.85 and 1.2 m IS Carrier Extension Cable, 0 85m 8012-CC-85
Sub-D cable connectors ENVIRONMENTAL
IS Carrier Extension Cable, 1 2m 8013-CC-12
32- and 64-slot address capable Ambient temp
Operating -40C to +70C
Storage -40C to +85C
CARRIER SPECIFICATION Relative Humidity POWER CABLES
See also System Specification 5 to 95% RH (non-condensing)
IS Power Extension Cable, 0 35m 8016-CC-35
Vibration and Shock
HAZARDOUS AREA APPROVALS See System specification sheet IS Power Extension Cable, 0 85m 8017-CC-85
Location of node
IS Power Extension Cable, 1 2m 8018-CC-12
Class 1, Div 2, Groups A, B, C, D T4 hazardous location
or Zone 2, IIC T4 hazardous area
CABLE SETS
Field terminals
Screw clamp
General forward biased if a channel becomes open module with a different keycode cannot then
A field terminal is a replaceable unit for circuited - ensuring that other channels are accidentally be fitted on that field terminal
terminating the wiring from the field devices not affected by this situation Similarly, an
Each I/O module requires its own field terminal RTD can be removed from, or not fitted to, a Keyways
and the correct type is recommended on the channel without affecting the operation The The four types of field terminal: general
individual I/O module data sheet The field points where the energisation current enters purpose, non-incendive, non-arcing and intrin-
wiring is terminated on screw terminals that and leaves the field terminals are shown by sically safe, have a further pattern of keys that
can take up to 2 5mm2 wire By wiring virtually the symbols I+ and I, respectively, on the make each type unique; modules of a corre-
directly to the I/O module there is no need appropriate diagrams sponding type have a matching keyway It is
for additional patching or terminations The field therefore impossible to implement a poten-
terminal attaches to the module carrier first; IS field terminals tially hazardous combination of module and
the I/O module is then mounted on it A pair Particular field terminals are required for field terminal The four types of field terminal
of multipin connectors link the field terminal modules with built-in IS interfaces, and field can be identified from the diagram below
to the I/O module terminals are coloured blue to mark this
difference
Fusing & loop-disconnect
Field terminals are available that contain a Tagging strip
replaceable fuse or a loop-disconnect link A tagging strip is supplied with each terminal
for each channel Fuses have a 2A rating and, (with the exception of the mass termination
like the links, have a mechanical feature that assemblies) A card is provided for the user to
allows them to be partially withdrawn This mark the channel assignments for the field
provides a break in the field wiring loop which wiring and this is protected by a clear
assists servicing and fault finding in the field plastic panel
www.ge-ip.com/process 27
GFA-1769A
8000 Field Terminals
Field terminals
Mass Termination Assemblies
IDC connectors - save wiring time Mass Termination Assembly drive current above the 1A capability of the
Link to high-current output relays Mass Termination Assemblies (MTAs) offer 8115-DO-DC discrete output module, the
the user a number of different ways to termi- 8618-FT-MT can be used to connect to high
Quick-connect cable adapters
nate field wiring Two versions are available, current relays*
16-pin (8618-FT-MT) and 44-pin (8619-FT-MT),
both of which provide IDC multi-pin connec- Switch/Proximity Detector Wiring Panel
tors instead of screw terminals The 8650-FT-PX provides a simple method
to terminate up to 32 two-wire field devices
Some standard 1, 2 and 3 metre cables, are It is DIN-rail mountable and links to the
available from GEF to assist the user; others 8619-FT-MT field terminal using a pair of
can be made to order; or users can put ready terminated, IDC connector cables For
together their own custom cables to suit their maximum convenience, there is also provi-
specific wiring termination requirements sion for cable screens to be terminated and
grounded
The Mass Termination Assemblies are partic-
ularly useful when legacy systems are being Mechanical key coding
replaced and connections must be This feature is available on these terminals
made to existing field wiring, junction boxes See the previous page for details
and marshalling cabinets
Field terminals
Range of field terminals Weights (typical - including tagging strip)
Zone 1,0/Div 1 (IS) Field Wiring applications
Unfused type (except THC & RTD) 78g
Standard, fused, loop-disconnect & MTAs Fused type (including fuses) 86g Field Terminal Description Part number
Blue moulding for IS field wiring THC type 70g IS, standard 8621-FT-IS
RTD type 106g
THC and RTD versions available 8617-FT-NI and 8623-FT-IS (16-channel) 106g IS, loop-disconnect 8622-FT-IS
Tag strip on all screw-clamp field terminals See also datasheets for 8618-FT-MT and 8619-FT-MT IS, 16-channel DI 8623-FT-IS
Rated voltage
250V ac
Zone 2/Div 2 Field Wiring applications
Maximum current per I/O channel
Field Terminal Description Part number
3A
THC 8605-FT-TC
Fuse rating (where fitted)
2A RTD 8606-FT-RT
www.ge-ip.com/process 29
GFA-1769A
8000 Field Terminals
8601-FT-NI 1
8602-FT-ST 1
8603-FT-FU 1
8604-FT-FU 1
8605-FT-TC 2
8606-FT-RT (2-wire) 3
DIAGRAM 2 DIAGRAM 6
8606-FT-RT (3-wire) 4
8606-FT-RT (4-wire) 5
8610-FT-NA 1
8611-FT-FU 1
8615-FT-4W 1
8617-FT-NI 6 or 6
8618-FT-MT see datasheet
8619-FT-MT see data sheet
8621-FT-IS 1 or 7*
DIAGRAM 3
8622-FT-IS 1 or 7*
8623-FT-IS 6
8624-FT-IS 1
8625-FT-IS 8
8626-FT-IS (2 wire) 9
DIAGRAM 6a
626-FT-IS (3 wire) 10
626-FT-IS (4 wire) 11
8650-FT-PX see data sheet
DIAGRAM 7 DIAGRAM 10
DIAGRAM 8
DIAGRAM 11
DIAGRAM 9
www.ge-ip.com/process 31
GFA-1769A
8000 Field Terminals
ELECTRICAL 16-pin
output
Rated Voltage
50V AC When used with the following I/O module types:
8101-HI-TX, 8102-HO-IP, 8103-AI-TX, 8104-AO-IP,
Maximum current per I/O channel 8109-DI-DC, 8110-DI-DC, 8115-DO-DC, 8117-DO-DC,
50V AC 8119-VI-05
use the following pinout: + CABLE
MECHANICAL 16-pin
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
output
Material - + - + - + - + - + - + - + - +
Modified Poly-Phenylene Oxide Ch 1 Ch 2 Ch 3 Ch 4 Ch 5 Ch 6 Ch 7 Ch 8
Dimensions approx
42(w) x 95(d) x 42*(h) mm When used with I/O module type: + 16 TO 14-WaY CABLE
Weight 8123-PI-QU + HIGH-CURRENT RELAYS High-current
use the following pinout: output relays
44g 16-pin
output
* With protective cover fitted
For further details on choosing and using output relays see Technical
Support Note TSN112 Using the 8115-DO-DC with high-current loads
Field terminals
44-pin mass termination assembly
32 channel
outputs
SPECIFICATION
See also System Specification
www.ge-ip.com/process 33
GFA-1769A
8000 Field Terminals
Field terminals
Switch/proximity detector wiring panel
DIMENSIONS
8650-FT-PX CABLE OPTIONS
20- + 24-way cable sets to connect with the 8619-FT-MT
DIN-rail mounting
TERMINAL ASSIGNMENTS
SPECIFICATION
See also System Specification
Location
Zone 2, IIC, T4 hazardous area or Class 1, Div 2,
Groups AD, T4 hazardous location
ELECTRICAL
System connectors
20-pin & 24-pin
Field terminals
Rising cage-clamp screw terminals
Conductor size
0.142.5 mm2
Rated voltage
50V AC
Maximum current per I/O channel
0.75A
Ground terminals
2 x M4
MECHANICAL
DIN- rail mounting
T section to EN 50022
G section to EN 50035
Weight
390 g
New Block
Mass Termination Connectors Save wiring
For discrete field devices that require more Part number KV
time to High Current Relay Assemblies
than the maximum specified current , a
Quick Connect Cable Adapter for 6 Amp or standard mass termination field terminal is Maximum current
1 Amp per Channel ( 6 Amps per
Module ) 1 Amp per Cable ( 16 Pin )
10 Amp Relay Outputs available with a 16-pin connection to allow a
Easy Installation, Relay comes complete direct cable connection to an external panel Voltage Rating
30 VDC Between Non-Connected
and ready to snap on to DIN Rail Relay output options are available to provide signals
Each Relay includes replaceable Relay and up to 10A per channel This option greatly
the Din Rail Mounting Assembly simplifies field wiring High current output Max Cable Length 4 meters
capability beyond the discrete output modules
Adapter connects 8 relays together in a Set the Key to match the Discrete
specified 1 Amp per channel is provided with a
single package Key Position Output Module being Used, For
mass termination assembly and a direct cable Example : A1
interface to 6 or 10 Amp relays
FM Approved Class I, Div 2, Groups
Hazardous Area
A, B, C & D
Cable
The direct connect cable comes in standard Approvals
Atex 3 G IIC T4
UL US and Canada
lengths of 1m and 2m It converts the 16 pin
output of an 8115 Discrete Output module to
a 14 pin interface that connects directly to
the relays Additional lengths are available if
required
Adapters
There are two different size adapters, one
for 6 Amp Relays and a second, larger one
for 10 Amp relays These adapters provide a
direct connection to the relays from the mass
termination block, assuring a quick installa-
tion for higher output power
www.ge-ip.com/process 35
GFA-1769A
8000 Field Terminals
PLC Adapter for Eight 6-Amp Relays Cable REL-MR-24DC/21 All relay Assemblies meet the following Certifications
from the Mass termination unit plugs directly Hazardous Area FM Approved Class I, Div 2,
Relay for 6 amp Groups A, B, C & D
into the adapter which connects directly to Approvals Atex 3 G IIC T4 UL US and Canada
Input Data (Coil side)
the 8 relays, providing both a cost savings
Nominal Input Voltage 24 VDC
and space savings over conventional wiring Typical Input Current 7mA The relays are shipped complete in the DIN
approaches Typical response Time 5ms Rail mounting package and are ready to snap
Typical Release Time 2.5ms
onto the DIN Rail 8 relays are jumpered together
Adapters (pictured below) are available for Coil resistance at 20C 3390 Ohms +/-10%
with the adapter providing an integrated cable
both the 6 Amp and 10 Amp relays Choose Output Data assembly and an easy installation The relays
the right output for your needs based on Contact Type Single Contact, 1 PDT
are modules that can be replaced in the DIN
required current , available panel size and Contact Material AgSnO
Max Switching Voltage 250 V AC/DC Rail package The 10 Amp relays use a Plug-in
your budget Bridge to Jumper Field Power This jumper
Min Switching Voltage 12 V AC/DC
Continuous Current 6 A option allows the full 10 Amps per relay contin-
Max Inrush Current N/A uous output at 250 VAC when used with the 10
Min Switching Current 10 mA
Amp Mechanical Relay
Max Pwr Rating, Ohmic Load 250VAC, 1500 VA
Min Switching Power 120 mW
PLCV8L (10 Amp Relays) PLC-V8 (6 Amp Relays) PHOENIX MINIATURE SERIES RELAYS
Dimensions
2967620 PLC-RSC-24DC/21-HC 10 Amp Mechanical Relay 14mm(8 required)
PLC-V8L w/ 8 10A relays
112mm(w) x 80 3mm(H) x 91 25mm(D) 2967002 PLC-OSC-24DC/24DC/2 3 Amp Solid State Relay (8 required)
PLC-V8L w/ 8 10A relays
4 4 in (w) X 3 16 in (H) X 3 59 in (D) 2966171 PLC-RSC-24DC/21 6 Amp Mechanical Relay 6 2mm(8 Required)
PLC-V8 w/ 8 6A relays
49 6mm(w) X 80 3mm(H) X 91 25mm(D) 2299660 PLC-V8L/FLK 14/OUT Large 8 Relay Cable Adapter (10 Amp)
PLC-V8 w/ 8 6A relays
19 6 in (w) X 3 16 in (H) X 3 59 in (D) 2295554 PLC-V8/FLK 14/OUT 8 Relay Cable Adapter (6 Amp)
www.ge-ip.com/process 37
GFA-1769A
About Ge Intelligent Platforms
GE Intelligent Platforms, a General Electric Company (NYSE: GE), is an experienced high-performance
technology company and a global provider of hardware, software, services, and expertise in automation
and embedded computing We offer a unique foundation of agile, advanced and ultra-reliable technology
that provides customers a sustainable advantage in the industries they serve, including energy, water,
consumer packaged goods, government and defense, and telecommunications GE Intelligent Platforms
is a worldwide company headquartered in Charlottesville, VA and is part of GE Home and Business Solutions
For more information, visit www ge-ip com
A 1
F B6 2
Intrinsically Safe E C5 3
(2/1) D 4
Keys to match
keyways on
modules
EUROPE (EMEA) Tel: +44 (0)1582 723633 Fax: +44 (0)1582 422283
AMERICAS Tel: +1 603 926 0090 Fax: +1 603 926 1899
ASIA PACIFIC Tel: +65 487 7887 Fax: +65 487 7997
Jan 2007
E-mail: enquiry@mtl-inst.com Web site: www.mtl-inst.com
Field terminals - Mass Termination Assemblies
EUROPE (EMEA) Tel: +44 (0)1582 723633 Fax: +44 (0)1582 422283
AMERICAS Tel: +1 603 926 0090 Fax: +1 603 926 1899
ASIA PACIFIC Tel: +65 487 7887 Fax: +65 487 7997
Jan 2007
E-mail: enquiry@mtl-inst.com Web site: www.mtl-inst.com
Field terminals
Connection diagrams
Diagram 6 Diagram 9
CH CH CH CH CH CH CH CH 17 19 21 23 25 27 29 31
9 10 11 12 13 14 15 16
I+
17 19 21 23 25 27 29 31 18 20 22 24 26 28 30 32
1 3 5 7 9 11 13 15
18 20 22 24 26 28 30 32
1 3 5 7 9 11 13 15
2 4 6 8 10 12 14 16
I-
2 4 6 8 10 12 14 16
CH CH CH CH CH CH CH CH CH CH CH CH CH CH CH CH
1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8
Diagram 6a
Diagram 10
17 19 21 23 25 27 29 31 17 19 21 23 25 27 29 31
I+
CH CH CH CH CH CH CH 0V
24 25 26 27 28 29 30
CH CH CH CH CH CH CH CH
16 17 18 19 20 21 22 23 18 20 22 24 26 28 30 32
18 20 22 24 26 28 30 32
1 3 5 7 9 11 13 15
1 3 5 7 9 11 13 15
CH CH CH CH CH CH CH CH
8 9 10 11 12 13 14 15
CH CH CH CH CH CH CH
0V 1 2 3 4 5 6 7 2 4 6 8 10 12 14 16
I-
2 4 6 8 10 12 14 16
Diagram 7
CH1 CH2 CH3 CH4 CH CH CH CH CH CH CH CH
1 2 3 4 5 6 7 8
+ + + + Diagram 11
1 3 5 7 9 11 13 15
17 19 21 23 25 27 29 31
I+
2 4 6 8 10 12 14 16
18 20 22 24 26 28 30 32
Diagram 8
1 3 5 7 9 11 13 15
1 3 5 7 9 11 13 15
+
2 4 6 8 10 12 14 16
I-
2 4 6 8 10 12 14 16
CH CH CH CH CH CH CH CH CH CH CH CH CH CH CH CH
1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8
EUROPE (EMEA) Tel: +44 (0)1582 723633 Fax: +44 (0)1582 422283
AMERICAS Tel: +1 603 926 0090 Fax: +1 603 926 1899
ASIA PACIFIC Tel: +65 487 7887 Fax: +65 487 7997
Jan 2007
E-mail: enquiry@mtl-inst.com Web site: www.mtl-inst.com
Field terminals
8607-FT-TC and 8608-FT-NI Overview
The 8607-FT-TC and 8608-FT-NI field terminals are similar internally and can each be used
for a range of input sensors. Certain rules must be observed, especially when mixing sensors.
8608-FT-NI: Can be used for all types of sensor, including thermocouples; however, if cold
junction compensation is required, then cold junctions will have to be provided externally. Diagram 12C
Field terminals
SPECIFICATION
See also System Specification
MECHANICAL
Material ....................................Modified Poly-Phenylene Oxide When used with the following I/O module types:
Dimensions - approx....................42(w) x 95(d) x 42*(h) mm 8101-HI-TX 8102-HO-IP 8103-AI-TX 8104-AO-IP
Weight.............................................................................44g 8109-DI-DC 8110-DI-DC 8115-DO-DC 8117-DO-DC
* with protective cover fitted 8119-VI-05 use this pinout:
CABLE OPTIONS 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
16-way cables, terminated with 16-pin IDC connectors at each end, + + + + + + + +
are available for the 8618-FT-MT. Ch1 Ch2 Ch3 Ch4 Ch5 Ch6 Ch7 Ch8
Description Part number When used with I/O module type: 8123-PI-QU
1 metre cable..........................................................8081-FC-10
2 metre cable..........................................................8082-FC-20 Pin Function
3 metre cable..........................................................8083-FC-30 1 Voltage i/p - Ch 1
2 Current i/p - Ch 1
3 Common - Ch 1
See also Technical Support Note TSN112 for details of using this product
4 NAMUR i/p - Ch 1
with high-current relays.
5 Power supply +ve - Ch 2
6 Power supply +ve - Ch 1
Notes
7 Voltage i/p - Ch 2
1. This field terminal cannot be used with the following I/O module types:
8 Current i/p - Ch 2
8105-TI-TC, 8106-TI-RT Special functionality required e.g. CJC 9 Common - Ch 2
8121-DI-DC, 8122-DI-DC 10 NAMUR i/p - Ch 2
8125-DI-DC, 8127-DI-SE
} Insufficient terminals - use 8619-FT-MT
11 Common - Ch 1
2. AC modules cannot be used with this field terminal because of the 50V AC 12 NAMUR gate control - Ch 1
voltage rating. 13 o/p ve - Ch 1
14 o/p +ve - Ch 1
15 o/p ve - Ch 2
16 o/p +ve - Ch 2
EUROPE (EMEA) Tel: +44 (0)1582 723633 Fax: +44 (0)1582 422283
AMERICAS Tel: +1 603 926 0090 Fax: +1 603 926 1899
ASIA PACIFIC Tel: +65 487 7887 Fax: +65 487 7997
Nov 2006
E-mail: enquiry@mtl-inst.com Web site: www.mtl-inst.com
Field terminals
USAGE OPTIONS
PIN OUT
16-pin
output
+ CABLE
16-pin
output
EUROPE (EMEA) Tel: +44 (0)1582 723633 Fax: +44 (0)1582 422283
AMERICAS Tel: +1 603 926 0090 Fax: +1 603 926 1899
ASIA PACIFIC Tel: +65 487 7887 Fax: +65 487 7997
Nov 2006
E-mail: enquiry@mtl-inst.com Web site: www.mtl-inst.com
Field terminals
32 channel connection
use with 8121/8122 and 8125/8127
use with 8650-FT-PX field terminal
provides a choice of field wiring terminations
clip-on protective cover
SPECIFICATION
See also System Specification
CABLE OPTIONS
20- + 24-way cable sets, terminated with IDC connectors at each
end, are available for the 8619-FT-MT. These could be used, for
example, to connect the 8619-FT-MT to the 8650-FT-PX wiring panel. J1 8125/ 8121/ J2 8125/ 8121/
Pin 8127 8122 Pin 8127 8122
Description Part number 1 Ch 1 Ch 2 1 Ch 8 Ch 1+
1 metre length set ....................................................8085-FC-10 2 0V Ch 1 2 Ch 9 Ch 2+
2 metre length set ....................................................8086-FC-20 3 Ch 3 Ch 4 3 Ch 10 Ch 3+
3 metre length set ....................................................8087-FC-30 4 Ch 2 Ch 3 4 Ch 11 Ch 4+
5 Ch 5 Ch 6 5 Ch 12 Ch 5+
6 Ch 4 Ch 5 6 Ch 13 Ch 6+
7 Ch 7 Ch 8 7 Ch 14 Ch 7+
8 Ch 6 Ch 7 8 Ch 15 Ch 8+
9 Ch 17 Ch 10 9 0V n/c
10 Ch 16 Ch 9 10 Ch 26 Ch 9+
11 Ch 19 Ch 12 11 Ch 24 Ch 10+
12 Ch 18 Ch 11 12 Ch 25 Ch 11+
13 Ch 21 Ch 14 13 Ch 27 Ch 12+
14 Ch 20 Ch 13 14 Ch 28 Ch 13+
15 Ch 23 Ch 16 15 Ch 29 Ch 14+
16 Ch 22 Ch 15 16 Ch 30 Ch 15+
17 0V n/c 17 Ch 31 n/c
18 Ch 27 n/c 18 Ch 32 n/c
19 Ch 28 n/c 19 0V n/c
20 Ch 32 n/c 20 0V n/c
21 0V n/c
Notes:
22 0V Ch 16+
1. 0V pins are all linked only when
23 0V n/c
the module is fitted.
2. Channels 27, 28 and 32 are
24 n/c n/c
common to both J1 and J2
n/c = no connection
EUROPE (EMEA) Tel: +44 (0)1582 723633 Fax: +44 (0)1582 422283
AMERICAS Tel: +1 603 926 0090 Fax: +1 603 926 1899
ASIA PACIFIC Tel: +65 487 7887 Fax: +65 487 7997
Jan 2007
E-mail: enquiry@mtl-inst.com Web site: www.mtl-inst.com
Field terminals
USAGE OPTIONS
PIN OUT
32
channel
ouputs
+ CABLE
32
channel
ouputs
EUROPE (EMEA) Tel: +44 (0)1582 723633 Fax: +44 (0)1582 422283
AMERICAS Tel: +1 603 926 0090 Fax: +1 603 926 1899
ASIA PACIFIC Tel: +65 487 7887 Fax: +65 487 7997
Jan 2007
E-mail: enquiry@mtl-inst.com Web site: www.mtl-inst.com
Field terminals
SPECIFICATION
See also System Specification
ELECTRICAL
System connectors ........................................20--pin & 24-pin
Field terminals ......................rising cage-clamp screw terminals
Conductor size .................................................0.142.5 mm2
Rated voltage ...........................................................50V AC
Maximum current per I/O channel...........................0.75A
Ground terminals ......................................................2 x M4 DIMENSIONS
in mm
MECHANICAL
DIN rail mounting..............................T section to EN 50022
...........................................................G section to EN 50035
Weight...........................................................................390g
CABLE OPTIONS
20- + 24-way cable sets to connect with the 8619-FT-MT
1 metre length set ....................................................8085-FC-10
2 metre length set ....................................................8086-FC-20
3 metre length set ....................................................8087-FC-30
182
TERMINAL ASSIGNMENTS
CH CH CH CH CH CH CH CH
1 2 3 4 29 30 31 32
1 4 7 10 82 85 88 91 94
+ +
2 5 8 11 11 86 89 92 95
3 6 9 12 87 90 93 96
GND GND
126
72
EUROPE (EMEA) Tel: +44 (0)1582 723633 Fax: +44 (0)1582 422283
AMERICAS Tel: +1 603 926 0090 Fax: +1 603 926 1899
ASIA PACIFIC Tel: +65 487 7887 Fax: +65 487 7997
Jan 2007
E-mail: enquiry@mtl-inst.com Web site: www.mtl-inst.com
Mass Termination Field Terminal and RELAY
High Current Relay Output OUTPUTS
8618-FT-MT
High Current Output Capability Cable: The direct connect cable comes in
standard lengths of 1m and 2m. It converts
New: For discrete field devices that require the 16 pin output of an 8115 Discrete
more than the maximum specified current, a Output module to a 14 pin interface that
standard mass termination field terminal is connects directly to the relays. Additional
available with a 16-pin connection to allow a lengths are available if required.
direct cable connection to an external panel.
Relay output options are available to provide Adapters: There are two different size
up to 10A per channel. This option greatly adapters, one for 6 Amp Relays and a
simplifies field wiring. second, larger one for 10 Amp relays. These
adapters provide a direct connection to the
High current output capability beyond the relays from the mass termination block,
discrete output modules specified 1 Amp assuring a quick installation for higher output
per channel is provided with a mass power.
termination assembly and a direct cable
interface to 6 or 10 Amp relays.
PLC Adapter for Eight 6-Amp Relays - Relay for 6 Amp REL-MR-24DC/21
Input Data (Coil side)
Cable from the Mass termination unit plugs Nominal Input Voltage 24 VDC
directly into the adapter which connects Typical Input Current 7mA
Typical response Time 5ms
directly to the 8 relays, providing both a cost Typical Release Time 2.5ms
savings and space savings over conventional Coil resistance at 20C 3390 Ohms +/-10%
Output Data
wiring approaches. Contact Type Single Contact, 1 PDT
Contact Material AgSnO
Adapters (pictured below) are available for Max Switching Voltage 250 V AC/DC
Min Switching Voltage 12 V AC/DC
both the 6 Amp and 10 Amp relays. Choose
Continuous Current 6A
the right output for your needs based on Max Inrush Current N/A
required current, available panel size and Min Switching Current 10 mA
your budget. Max Pwr Rating, Ohmic Load 250VAC, 1500 VA
Min Switching Pwr. 120 mW
ii
Related documents
The following documents contain additional information relating to the specification and
installation of the PAC8000 equipment.
Instruction Manuals
INM8100 Installing I/O modules (General purpose and 2/2 applications)
INM8200 Installing I/O modules (2/1 applications)
INM8900 Power Supplies Configuration and Installation
IMPORTANT NOTE
Use of equipment in hazardous areas
In common with all other electrical apparatus installed in hazardous areas, this apparatus must
only be installed, operated and maintained by competent personnel. Such personnel shall have
undergone training, which included instruction on the various types of protection and installation
practices, the relevant rules and regulations, and on the general principles of area classification.
Appropriate refresher training shall be given on a regular basis. [See clause 4.2 of EN 60079-17].
This instruction manual supplements the requirements of nationally accepted codes of practice,
for example, IEC/EN 60079-14 in Europe and the National Electrical Code, combined with
ANSI/ISA-RP 12.6 in the USA. All installations should comply with the relevant sections of
these codes.
In addition, particular industries or end users may have specific requirements relating to the safety
of their installations, and these requirements should also be met.
iii
Overview
PAC8000 has a comprehensive family of open system components to serve the process
automation market. Users can connect many of these open components to provide a
comprehensive control solution, or they can use a single component and connect it to the other
products already in the plant.
This offers a new approach to process control; providing a fully integrated solution for continuous
control strategy development and process visualisation with commercially available open systems
components. It is a full life cycle approach that provides a process engineer with the tools to
design, implement, document and maintain a process control system using advanced control
strategies typically associated with closed, proprietary distributed control systems (DCS).
It consists of a number of open system components:
an Open Control Platform consisting of a rugged controller with embedded control software
a Workbench that is the process engineers configuration and commissioning workstation
a rugged I/O platform that is suitable for direct mounting in process plants.
This manual is principally concerned with the first of these elements, the Open Control Platform
(OCP) while the other control components are discussed in other publications and software help
files.
Physical Model
At a physical level, some of the individual elements can be understood better by reference to
Figure 1. This diagram highlights some of the key elements and how they relate to each other.
Engineering HMI
Office
Bridge
Switch Switch
Fibre optic
converters
Switch Switch Remote
plant
Optical fibre object
links
Process
plant
Redundant OCP
OCP controller OCP
controller controller
1
and any computer interfacing to the plant network through an OPC server. These operator stations
are linked to a pair of Ethernet switches that consolidate the traffic onto the main cross-site links.
In the diagram, these redundant networks are shown as fibre optic cable to imply probable
distances of over 100 meters. For greater distances, i.e. greater than 400 meters, repeaters would
be necessary somewhere along the fibre optic path.
Logical model
To avoid complication, not all of the system is portrayed in Figure 1. A broader impression of
system components can be gained from Figure 2
Control
HM I
Ba tch w ork sta tion
Historia n
OPC
Server Asset
ma na gement
N etw ork
M TL8 0 0 0 I/ O
H1 devices
Control
The PAC8000 Controller has the ability to accept control software applications and use them to
manage one or more processes in the field. The application is developed in the PAC8000
2
Workbench, then sent across the network to the controller located out in the field. The type of
control application can be chosen to suit the application.
Distributed Control Systems (DCS) are typically used to control large scale, process operations.
The DCS is a tightly integrated solution and easy to use but it is not easily scaled to address
varied system applications, nor is it open to other third party devices. The Process Controller
offers the benefits of an integrated DCS-like solution that is also easy to maintain since it is
created from components that conform to open standards.
Programmable controllers (PLCs) are viewed as scalable but not so easy to configure. They are
targeted normally at smaller, higher speed, discrete manufacturing applications. The PAC8000
Logic Controller provides the scalability of the PLC but its Logic Workbench provides a suite of
tools to dramatically simply configuration and make the task more graphical and intuitive.
The PAC8000 Hybrid Controller provides the benefits of both these techniques; a process
control solution that has the characteristics of DCS, and also a PLC, via an IEC 1131-1
compatible programming language for discrete control applications. This enables the user to tailor
a unique solution for their application. If you need to control a process plant and also require
sequential discrete control, the PAC8000 Hybrid Controller can be configured to address both
requirements simultaneously with a single control solution.
In addition to the Controller solutions, an Ethernet Bus Interface Module (EBIM) is also
available in the same mechanical/electrical package. This unit is a Modbus Interface, with
Ethernet connectivity, for the 8000 I/O field-located products shown in Figure 2 above. It acts as
a Modbus slave interface between a Modbus master and the individual I/O modules. The master
can be an adjacent Controller, i.e the next node on the LAN, or one located more remotely on the
plant. For details of the Modbus command library see page 15 and for its memory address
mapping see page 24. The software for configuring an EBIM is provided with all of the
Workbench packages. The EBIM also supports the same level of redundancy as the other
controllers.
Integration
HMI
The PAC8000 Workbench contains a built-in, system configuration export facility. This enables
the user to extract the system configuration database, which can be used to set up the control
systems HMI.
The user first creates the system within the appropriate Workbench package using the tools
provided there. On completion, the configuration data is exported to a standard .CSV (comma
separated value) data file that contains a representation of the system. This file can then be used to
configure the users HMI to provide an on-screen model of the system.
FOUNDATION Fieldbus H1
The PAC8000 System can support H1 fieldbus devices through Ethernet gateways, known as
linking devices. Within a single package, these linking devices provide a hub for up to four
networks of H1 field components and a gateway to the Ethernet LAN.
Linking
device
H1 fieldbus
3
The H1 devices have publisher/subscriber rights so that data can be passed from a device on
linking device x, via the LAN, to another H1 device on linking device y, say. PAC8000 uses
the same LAN protocol, so it has access to these H1 devices for use within its control strategies.
Peer to peer
In addition to the application data being made available to the OPC server, and the clients
attached to it, individual controllers can obtain data from each other via a peer-to-peer facility.
This enables individual controllers to share data that is important to the overall control of the
process. The data sharing process is discussed in a later section.
Open systems
The benefits of using an open controller based solution, as opposed to traditional distributed
control systems, are numerous. By taking advantage of Windows NT-based object-based
technology, graphical user interfaces, and easy-to-learn software solutions, the PAC8000 System
reduces process control system life cycle expenditure by around 30-40%.
Modbus TCP
Modbus protocol can be used over Ethernet by embedding a Modbus frame in a TCP frame to
deliver point-to-point explicit messaging. This uses the same register method as the familiar
remote terminal unit (RTU) protocol.
OPC
OLE for Process Control (OPC) defines the standard interface between an I/O system and other
HMI products. This interface connects the I/O to any HMI. The OPC Server conforms with the
OPC standard, assuring a reliable interface to any HMI.
Redundancy
Redundancy is available at many levels throughout the system. All of the key systems and
functions can be given a level of redundancy that the user thinks is necessary. While it has been
easy in the past to provide redundancy on power supplies, cabling and workstations, etc.
redundancy on networks and controllers has proved more complex.
Network redundancy has become more available with the development of Fault Tolerant
Ethernet. The PAC8000 System has adopted this technology, which enables a rapid changeover
between networks if faults are detected on the network currently in use.
Controller redundancy is even more difficult to achieve because of the changeover period during
which the standby assumes the role of master. Unless the standby is kept in step with the master it
cannot take over the role of master without a period of acclimatisation. This difficulty has been
overcome with the controller, which can maintain close synchronism with a second controller like
itself. In the event of a controller failure the standby can immediately take over the role of master.
This is because it is populated with up-to-date information and the same control strategy as the
previous master. The standby can therefore be viewed as identical to the master and suitable as an
immediate replacement.
4
For those users interested in hazardous area application, two important aspects have to be taken
into consideration when dealing with them:
where the field I/O equipment is mounted and
where the field wiring goes.
Mounting
All 8000 I/O equipment can be mounted in a Class I, Division 2 or a Zone 2 hazardous location
with no additional protection considerations other than weather conditions and electrical safety.
This means that the equipment does not need to be housed in flameproof enclosures, inert-gas-
purged cabinets or the like.
8000 I/O equipment can be mounted in conventional field enclosures with, typically, an IP55
(NEMA 12) level of protection. Details on the installation of this equipment and the
recommended codes of practice are available on request.
Field Wiring
The field wiring is the wiring from the I/O equipment to the field devices. The field devices may
be mounted in the same type of hazardous area as the I/O equipment, or they may be mounted in a
safer one or a more hazardous one. This clearly will have an impact on the type of area that the
field wiring enters.
The 8000 I/O equipment can be chosen to suit the field wiring conditions and can accommodate
field wiring that goes into hazardous locations classified as:
Class I, Division 1 (N. American classification)
Zone 1 (European classification)
Zone 0 (European classification)
5
Redundancy
Redundancy is the concept whereby one part of a system takes over from another in the event of
the failure of the first. This allows the user to provide backups for essential parts of the system
and significantly reduce its downtime. The PAC8000 System embodies a number of ways to
provide redundancy and these are discussed below.
Network redundancy
Network redundancy is about providing a secondary path for the data in the event of a failure in
the current path. A machine running the application, has to be able to recognise a network failure
and switch the data transmission to an alternative network path. Previously, this had to be
achieved at the application level or the hardware level.
Application-level redundancy is not very satisfactory because it means that the application has to
maintain two TCP stacks, and event timing proves to be something of a headache. Only those
applications that have been designed or written to support redundancy can be used.
On the other hand, hardware-level redundancy is, not suprisingly, very hardware dependent and
changing a network card type can mean changing the setup to accommodate the new hardware.
Neither of the above methods provides a satisfactory solution to the implementation of network
redundancy. The PAC8000 System solves the problem with a middleware implementation. This
employs the LAN Redundancy Entity (LRE) and its associated Network Status Table.
Application Application
TCP/ IP TCP/ IP
Stack Stack
N DIS
Hooks
LRE
LRE
6
Only one link is required and it can be made between any two switches that serve the two LANs.
The link shown in the diagram is between a pair of switches at the control room end.
Switch #1 Switch #2
Intra-LAN link
(using crossover cable)
LAN A LAN B
Controller redundancy
An extra controller can be added to a node to provide a standby. This is maintained in step with
the master while it remains in standby mode.
If system checks fail to return a satisfactory result, control of the node is transferred to the
standby. By keeping master and standby in constant step with each other the transfer of control
from master to standby is made in a rapid and bumpless fashion. The process is not affected by
this transfer.
Workstation redundancy
Redundancy can be applied to workstations as well as the inter-linking network hardware. Two
situations need to be recognised when discussing redundant workstations.
(a) Totally independent workstations where failure of one means that the other is used
(b) One workstation with two process network connections
Technically, the first situation is trivial and can be implemented by duplicating all the hardware
(and software) and connecting the second workstation onto the network. The second situation is
what is being considered here.
The workstation requires two Network Interface Cards (NICs) for the process LAN and possibly a
third if it will be connected to the Office LAN. The Win 2000/Win XP option illustrated in Figure
4 is implemented in the workstation so that the two LAN connections are recognised as only one
IP address by the top-level system application.
7
Controller & EBIM hardware
The PAC8000 controller is the hardware platform located out in the field. This platform carries
the control software application that manages the process(es). The EBIM looks almost identical to
these controllers and, with the exception of the process control software, behaves much like them.
In this section, unless otherwise stated, the controllers and the EBIM can be treated as the same.
The controller, or EBIM, is mounted on a carrier in a field enclosure to protect it from the weather
as well as unauthorised tampering. It requires DC power and one or more network communication
links for it to operate.
The controller carrier connects to the I/O module carrier so that I/O data and instructions can be
passed along a shared communication bus (Railbus) between them. The controller and its I/O
modules together form a node.
To a maximum of
64 I/ O module slots
Railbus signals
Configuration options
Depending on the level of redundancy required, a node can be configured in the following ways:
Single LAN
8
Single controller I/ O modules
Dual LAN
Dual LAN s
Redundancy
As previously mentioned, the system can support various levels of redundancy. At the controller
level, this is achieved by mounting an additional controller in the node to mirror the operation of
the master. This standby controller is maintained in step with the master via a connecting link
on the mounting carrier.
Automatic changeover
Each controller carries out diagnostic checks on itself in order to maintain an awareness of its
current status. In addition to hardware checks, the controller keeps a careful check on the
checksums of the software and firmware in its memory. It also checks that all allotted tasks have
had their chance to run.
If any of the diagnostic checks, carried out by the master on itself, fail to return a satisfactory
result, control of the node is immediately transferred to the standby. By keeping master and
standby in constant step with each other the transfer of control from master to standby is made in
a rapid and bumpless fashion.
An alarm is sent to the Control Room that the changeover has occurred. Diagnostic information
can then be checked to identify the cause of the fault. In the event of a software failure, the
9
repair is carried out remotely; if it is a hardware problem, a replacement controller must be
fitted.
Manual changeover
Each controller is provided with a manual changeover button located on the carrier. This is used
to change the state of the controller.
PFM
Change state A B
buttons
CHANGE CHANGE
A STATE STATE B
SERIAL SERIAL
PORT PORT
1 1
Hot swapping
Controllers can be added and removed from their carrier positions while they are still under
power.
IMPORTANT NOTE: In a Division 2 or Zone 2 hazardous area, it is important that the
connection from the LAN is isolated before the RJ45 connectors are removed or inserted.
When the replacement is fitted, configuration of the unit commences automatically. Configuration
data is transferred from the operational master to the new controller. When the new one has been
populated with the latest information and all of its system diagnostics checked out, it is elevated
to the operational status of Standby.
10
When the download is complete, and all the checksums validated, the Standby is taken through
the Cold Start process and then synchronised with the Master before being brought up to Standby
mode. If there is no controller redundancy, the control application must be stopped before the
firmware change can take place.
A configuration can be changed while the controller is on-line and in full control of the process.
The configuration is downloaded to a separate area of memory to avoid conflict with the current
configuration. When the download is complete, and checksums validated, the new configuration
can be used to take-over control.
Controller Synchronisation
A pair of PAC8000 Controllers will synchronise with each other so that the one designated as
Standby can take control as Master if necessary. This ensures a bumpless changeover should the
need arise.
The process uses lockstep to ensure that the Standby controller is at the same stage of the
process as the Master. Although some communications are naturally asynchronous and can cause
the two to get fractionally out of step, the leading controller will pause momentarily to ensure
that synchronism is restored.
Each controller constantly checks its own health and signals this to the other via a local link. If a
health check should fail this is registered as a synchronization fault and an alarm is raised. If it
occurs to the Master then, as long as the Standby is healthy, control is passed to the Standby.
In any startup/restart situation, an controller will carry out its health checks, obtain the
configuration and then assume control as the Master, or it will attempt to synchronise itself with
the Master.
Synchronisation does not apply to the EBIM product.
11
Real Time Clock
A real time clock, containing the time and date, is maintained to an accuracy of 10 milliseconds
within each controller.
The controller with the lowest node number is used as the time reference for all other controllers
and clients on the plant network. Every 50 seconds approximately, a signal is broadcast by this
controller to resynchronise the clocks.
If that controller is removed, the next (configured) controller with the lowest node number will
take over the role automatically.
Note: Although the clock is battery backed, it is not intended to maintain itself for long periods. It
is required to record the duration of any brownouts and will survive as long as the working
RAM holding the process variables. After that data has decayed the clock is unnecessary because
the controller will need to carry out a restart.
A B C D
12
10,12,22,23,29,37
10,29
A B C D
Soft failures
A soft failure would not cause a controller to shutdown but it could cause a failover, unless the
Standby is experiencing the same or a greater fault. An example of such a fault is a LAN
communication failure.
Every execution cycle, redundant controllers exchange information on their health. The master
then makes a decision on which of them is healthier. If it decides that the Standby is healthier,
then it will drop its health flag and force a failover.
When the failover is complete, the new Standby will raise its health flag again in case the new
Master suffers a complete failure.
Failsafe
Failsafe is a mode that the controller can adopt if communications are lost for a user defined
length of time. If a healthy Standby is not available to take over control, the I/O modules will be
placed into a failsafe mode also. This means that they adopt predefined states and will become
Read-only, i.e. they will not accept any Write commands.
If all LAN communications to a redundant Master controller fail, it is still regarded as a soft
failure but the controller will adopt a failsafe mode and failover to the Standby. If LAN
communications are re-established the controller can recover itself and adopt an effective Standby
13
mode. The serial ports of the controller can also force the controller into failsafe mode if
communications timeouts are exceeded.
Node Health
A controller maintains an array of 'node health' flags. There are 256 input states for serial port
COM1 and another 256 for COM2 (since these can have separate networks of remote devices).
Where both links are used to address the same nodes then COM1 contains the node health flags.
Note that another set of 256 node health flags exists for Modbus Master on Ethernet.
The controller sets the node as healthy when all read and write commands have been completed
successfully since the last recovery. The controller sets the node as not healthy when one or
more read or write commands fail after retries. Thus the health flag is a 'quality' flag, to be
applied to all data retrieved from that node.
The node health flags are maintained such that the Master and Standby contain identical
information.
Diagnostic commands
Diagnostic commands are used to confirm the presence and integrity of one or more nodes on a
link that is 'quiet'. For example, this could be the link connected to the standby, or it could be the
'reserve' link - in cases where both links are used.
All commands (read or write) act as diagnostic commands. If no command has been sent to a
node for the timeout period then a special diagnostic command is sent. The timeout period is
configured in the port parameters (this is the field used for Comms Lost Timeout on slave
protocols). Thus diagnostic commands could also be sent to a node that has a scan rate slower
than the port timeout parameter.
The controller constructs the diagnostic command. Note this is not the Modbus diagnostic
(function 8) command.
It chooses a read command based upon the first one available of the following:
the first configured input register
the first configured holding register
the first input state
the first coil.
If no read commands are configured then a read of the first register or coil configured for writing
is used.
A diagnostic command is unsuccessful if it receives no response or an exception response. The
latter is included as a failure because the command is derived from a command that is expected to
work.
Diagnostic flags
In addition to the node health flags the controller maintains a set of flags that indicate the current
'diagnostic health' of each node on each link. The node health flag is set when all read's and
writes are successful to a node. The diagnostic status is deemed healthy on its first success. On
the failure of a diagnostic check, the node health is cleared down.
Error Action
The following action is taken should any Modbus command fail, irrespective of whether it is a
write, read or a diagnostic.
If the current diagnostic state for this processor and link is failed then no retry is performed. If
a link is deemed failed then it is not used for reads or writes, only diagnostic commands are
sent. A single success is required in order to set the diagnostic health flag for that node, on that
link and processor.
If the current diagnostic state for the processor and link is healthy then two more tries are
performed (making 3 in all). The command that failed is resent until either it works or it fails 3
times. If it works then the command and the diagnostic message is rescheduled according to the
respective scan rates. If all writes and reads are now successful then the node health is set on both
processors.
14
If the command fails 3 times in a row then this node is deemed failed on this link. The node
health is cleared down (such that all writes and reads must be successful to set it again) and the
diagnostic fault flag is set.
Network ports
Each controller is equipped with two RJ45 (8-pin) LAN connections to provide redundancy on
the Fault Tolerant Ethernet (FTE).
The LAN ports support four basic types of interface. These are largely transparent to the user.
HMI Modbus slave The HMI can read data from the controller or write data
to it. See the Serial Port Modbus information that follows
for details of the Modbus commands supported.
Engineering interface These interfaces handle the downloading of configuration
data for the controller and the I/O modules. The
Technician interface Technician interface enables a single controller to be
targeted to permit firmware updates.
Peer to peer This handles the communication that can take place
between individual controllers across the network.
In all cases, where the client initiates the connection the controller is considered to be the server.
In peer to peer applications a controller can also be a client of the controller providing the data.
Serial interfaces
The controller is provided with two serial ports that can support a range of protocols. A port can
run the same protocol as the other or a different one. The protocol used by a serial port is
specified with the Workbench software and downloaded to the controller. In addition to the
protocols provided, users can also define their own protocol and download it to the controller.
Typical applications for the serial interfaces are communication with Technician /Engineering
workstations, exchange of data with remote devices, serial interface testing, HART maintenance,
use of Modscan, Configurator and Technician Utility programs.
Serial ports can be locked and unlocked on demand.
Modbus
Modbus operates in a half-duplex mode. That is, the master sends a request and expects to receive
a response before the next message can be sent to the same, or a different slave. The user can also
15
preset the amount of time that a master will wait for a reply from a failed slave, i.e. the timeout
period.
As Slave or Master the controller will respond to, or issue, respectively, the following Modbus
commands.
Command 1: Read Coil Status
Command 2: Read Input Status
Command 3: Read Holding Registers
Command 4: Read Input Registers
Command 5: Force Single Coil
Command 6: Preset Single Register
Command 8: Read Diagnostics
Sub function 0: Return Request Data
Sub function 2: Return Diagnostic Register
Command 15: Force Multiple Coils
Command 16: Preset Multiple Registers
Command 17: Report Slave ID
Modbus Slave
The controller can receive Modbus commands via the serial link and operate as a Modbus slave,
providing information on the contents of its data registers and accepting write commands to
modify register values.
As slaves, both controllers of a redundant pair can be part of a multi-drop serial link and are
allocated individual node addresses. Addresses lie between 2 and 255 (since 0 is always used for
broadcast) and before configuration a controller will have the default address of 126. A
redundant pair Master and Standby would have consecutive node addresses and each
recognises the address of the other.
Modbus Master
The controller can also act as a Modbus master to control and obtain information from equipment
that is capable of operating as a Modbus slave. As master there are specific controller and link
configurations that may (and may not) be used.
Permitted Configurations
a) Simplex controller - Single link
COM1 or COM2 can be multi-dropped to connect to one or more remote Modbus devices.
The remaining serial link can be used for a different network of remote Modbus devices.
b) Duplex controller - dual link
This is effectively case a) for each processor. If COM1 is used then controller A is connected
to the remote devices via its COM1 and controller B is connected to the same devices using
its COM1. The remote devices must support the use of dual links.
c) Simplex controller - both links
COM1 is connected to the remote devices and COM2 is connected to the same remote
devices. The remote devices must support the use of dual links.
Non-permitted Configurations
The following two configurations are NOT permitted as they would require the use of two
Modbus masters on the same link. The Modbus protocol does not support multi-masters.
d) Duplex controller - Single link.
Where the A and B controllers are multi-dropped on the same cable used to connect the
remote Modbus devices.
e) Duplex controller - both links.
Where controllers A and B are multi-dropped on both COM1 and COM2 with the remote
devices. The remote devices are connected to both COM1 and COM2 networks.
16
Dual link action
Where both COM1 and COM2 are used to connect to the same remote nodes, the Controller
selects which link to use for read and write commands. The links are treated independently of
each other. When a read or write is about to be sent on either link, a test is made to determine
whether this is the active link for this node. If it is not the active link then the command is not
sent. Diagnostic messages are sent regardless of active link or not.
The algorithm that determines the active link involves examination of the diagnostic flags for that
node. If the node is healthy on one link and not the other then the healthy one is active. If neither
is healthy then read and write commands are not sent, only diagnostic commands are sent. If both
links are healthy then COM1 is preferred over COM2. This is so that remote devices that have
preferred links can be wired with COM1 connected to the preferred port. For instance a BIM uses
DMA transfers on LAN A but character interrupts on LAN B. This COM1 should be connected
to LAN A. This also tallies with the controller use of serial ports. DMA is available on COM1
but not COM2.
Note that each node is treated independently of all others. There is no concept of active link just
active link per node. Thus the controller might use COM1 to access node 2 but COM2 to access
node 3.
Excluded from this design is the idea on non-automatic failback. For instance, if COM1 fails then
recovers then the controller is happy to automatically resume its usage. It does not need a manual
command to re-enable that link.
Remember that dual links cannot be used in duplex mode.
Duplex action
Case b) is the only duplex scenario supported. Here each processor polls the link independently
of each other. The master sends writes and reads and the standby diagnostic messages. Each
makes the status of each node on each link available in the Input States. However, be aware that
if the standby is unhealthy then its diagnostic status data are not available since they cannot be
communicated to the master.
The Failover criteria are similar to the rules used for Railbus modules. That is, if one controller
can see some nodes that the other cannot see, and this is not true the other way around, then the
one that sees the nodes will be master (subject to other failure conditions).
As for modules the comparison is not based on a straight inspection of the diagnostic flags. When
a node changes status from healthy to failed or vice versa then this change triggers the other
processor to access that node 'immediately' using the diagnostic message. When the other
processor has completed then the processor that first detected the change repeats the access to the
node. Only if the other processor has a different result is this node marked as failed or recovered
for failover purposes.
Because of the co-ordination required between the processors inter-controller link transfers are
required. This could delay the retries of the failed node so it could take up to a second for the
failover to occur.
SLIP
The serial ports can also support the SLIP protocol for point-to-point communications.
Multidrop HART
This is a variant of the HART protocol enabling it to support multi-drop requirements. This can
be used on a single serial link that connects multiple controllers.
User written
The controller is also able to accept any other serial protocol that a user wishes to support. The
user can write a software driver that interfaces to the controller and embed it in the controller
firmware.
HART maintenance
HART plays a significant role in modern process control and any system has to provide the
facilities for the gathering of HART data and the management and maintenance of HART field
devices.
17
Cornerstone
This popular HART maintenance software is supported by the PAC8000 System. It is
implemented via either of the serial ports using a multi-drop configuration.
AMS
Support for the AMS software is currently in development. The server being designed will
provide an Ethernet interface for the HART maintenance software.
18
Installation and Configuration
Health And Safety
Before commencing installation of the equipment:
Ensure that all installation work is carried out in accordance with all relevant local standards,
codes of practice and site regulations and any special requirements stated in this manual.
Check that the module functions are correct for the applications.
Take care to avoid damaging the pins at all connector interfaces.
Ensure that all relevant power supplies have been made SAFE.
Enclosures
In many cases the PAC8000 System equipment will be located out in the process plant and will
therefore require some form of protection from the weather and the danger of physical damage.
Enclosures for this purpose are readily available, but any enclosure that is designed to provide an
adequate level of ingress protection and is capable of withstanding physical damage appropriate
to the environment will be satisfactory.
Planning
Before beginning installation consider the following points:
Additional carriers may be required at a later stage. When positioning the trunking, the
PAC8000 System controller carrier and any 8000 I/O carriers, consider making provision for
such extensions or modifications.
Where possible, when routing the wiring and associated trunking, make generous space
allowances for the carriers, carrier extenders and extension cables.
Make adequate allowance for the working space to trim and insert cable-ends.
Try to ensure that you have all the required parts to hand before starting.
Ensure that you have a 3.5 mm flat-bladed screwdriver, a 2 mm flat-bladed screwdriver, and
all the necessary tools for mounting the enclosure, DIN rails (if used) and cable trunking.
Tools will also be required for preparing cable-ends.
Summary
Installing a PAC8000 System node is straightforward. Depending on circumstances and work
procedures, a node may be constructed in a wiring shop and then taken on site for installation or
fully constructed and installed in-situ.
Referring to manuals listed in "Related documents", a typical installation could proceed as
follows:
1. Install trunking, making allowance for carriers and required clearance for trimming and
fitting cable-ends.
2. Install the DIN rails (or if DIN rail mounting is not used, drill mounting holes in the
mounting surface).
3. Fit the carriers (and any carrier extenders) to the DIN rails (or fit carriers to the mounting
surface).
4. Fit the field terminals.
5. Switch off all power supplies to the node and make safe.
6. Trim field wiring cable-ends and connect into the field terminals (this could also be done
after the modules are fitted). Cable-ends should be tagged to identify the associated
instrument/actuator.
7. Trim cable ends of power supplies and connect to the relevant terminals.
8. Fit carrier extender cables.
9. Fit the Power Supply Unit(s), I/O modules and the PAC8000 Controller.
10. Connect the power supply and LAN cables to the PAC8000 Controller.
19
Carrier installation
Mounting the Controller/EBIM carrier
The PAC8000 Controller/EBIM mounts on a purpose built module carrier that connects via a
multi-pin plug to an I/O module carrier. The carrier must be mounted firmly to a suitable vertical
panel.
Important note: Any panel orientation other than vertical may affect the air circulation around
the controller and will reduce the operating temperature range. Contact the equipment supplier or
manufacturer for advice on alternative mounting orientations.
The four fixing point locations for the carrier are shown below in Figure 13.
125
55
7 - 2 places
PO W ER FAIL IN PUTS
2/ 2 NC 2/ 1
+ 1 2 3 4 5 6 7 8 9
PFM
L
C
178
A B
103
CHANGE CHANGE
A STATE STATE B
SERIAL SERIAL
PORT PORT
1 1
6.2 - 2 places
40
188
Carrier grounding
The circuit board should be grounded to the panel on which the carrier is mounted using the screw
terminal located in the upper left corner of the carrier (see Figure 13).
20
Power health connections
The carrier has provision for the connection of health signals from local power supplies that
supply the carrier, controller and the I/O modules. The input connector for these signals is located
on the upper left side of the carrier and has connections described below.
+
123456789
Terminal pairs 1 to 6 are used to receive power health signals from power supply types 8913 and
8914, where
+ = Power health signal from power supply
= ve return from power supply output
Note: In the case of the 8913-PS-AC power supply, the connection must come from the ve
return of the 12V output.
Terminal pairs 7 and 8 are not connected and should not be used.
Terminal pair 9 (i.e. + and ) should be left unconnected if a Railbus Isolator (8922-RB-IS) is
being used. Connect them with a wire link if there is no Railbus Isolator present.
The screens/shields from any of the incoming cables may be connected to the screw terminal
beside the power health connector.
Controller installation
Mounting the controller
A controller mounts on a purpose built carrier - see above. As mentioned above, the carrier must
be mounted in a vertical plane in order to provide the correct air circulation. The controller is
mounted on the carrier with the power connector facing upwards and the LAN connections facing
down. Locate the controller on the multi-pin circuit board connector provided and push home.
Apply sufficient hand pressure to keep the controller in place until the two securing screws are
tightened.
1&7 + 12 V DC
2&8 0V 7 1
Note: The power connector may be removed or replaced without isolating the incoming power.
LAN connections
There are two Ethernet ports on the controller, one for the LAN in use and one for the
redundant LAN (see Figure 14).
21
Serial port 2
LAN A
LAN B
Serial ports
The two serial ports for a controller are located in different places. Port 1 is part of the carrier on
which the controllers are mounted (see Figure 15), and Port 2 is on the controller, adjacent to the
RJ45 Ethernet ports (see Figure 14).
PFM
A B
CHANGE CHANGE
A STATE STATE B
SERIAL SERIAL
PORT PORT
1 1
Serial ports
on carrier
6 1
22
The pin allocations for this connector are as follows:
Note: The body of the connector on the carrier is connected to the ground plane of the carrier
circuit board.
Addressing
Although there are redundancy and automatic failovers to consider, addressing the various
elements of the system is very straightforward, and largely transparent to most users of the
system.
LAN addresses
Although there are two ports on a controller, there is only one IP address allocated to it. The fault
tolerant Ethernet (FTE) interface automatically links the IP address of the controller to the
hardware address of the port in use.
If one LAN develops a fault, the controllers IP address gets linked to the hardware address of the
other port. This port switching is transparent, and bumpless, to higher layers of the network
model, where the controller is always regarded as a single entity.
Node addresses
As mentioned above, each controller has an IP address. However, in a system with redundant
controllers, where either one could be the master, it means that there are two potential IP
addresses for the node!
It is important that each has an independent IP address because, occasionally, instructions need to
be directed at a specific controller, as in the event of a software update.
The dual address situation is resolved by the fault tolerant Ethernet (FTE) interface, which
ensures that the IP address of the node is mapped to the appropriate controller.
Configuration tools
Configuration of the PAC8000 Controller, and it component parts, is carried out from the
PAC8000 Workbench. This application runs under the Windows operating system and resides
on a PC normally located in a Control Room type area.
The Workbench software is an integrated development environment that is used to launch various
tools under its control, each of which is dedicated to a specific task. The tools are described here,
in brief, but the user is advised to consult the help files and other documentation that relates to
each specific tool.
23
and instrument engineering system offering configuration tools, modelling, simulation,
troubleshooting utilities, project drawing management and self-documentation. It is a robust
solution that provides the flexibility to configure control systems ranging from a few loops to
thousands of points. A flexible, scalable design allows cost effective sy stem expansion. In
addition, the systems extensive use of industry standards simplifies integration with other
applications.
Discrete Control
Discrete Control is a powerful, robust embedded software technology that is designed to build
distributed discrete control applications. The Discrete Control Workbench is your complete tool
kit for creating IEC 61131-3 programs. The Discrete Control Workbench fully supports the six
IEC 61131-3 automation languages (Ladder Diagram (LD), Sequential Function Chart (SFC),
Function Block Diagram (FBD), Structured Text (ST), Instruction List (IL) plus Flow Chart) and
is used to develop, download, simulate, debug, monitor, and edit application programs. The
Discrete Control Workbench permits the user to mix programming languages in the same project.
Its true Windows interface guides the user through development of the project. PLCopen has
certified this software to the IEC 61131-3 standard to ensure portability of programs. The
Workbench Simulator will test programs before startup. The Workbench can then be used
dynamically to view programs as they run in real-time and to make changes on-the-fly.
I/O Configurator
The I/O Configurator software is used to provide the detailed configuration information that the
I/O hardware requires. Unlike the higher level, strategy building software, which describes what
is done with the collected data, this application might be said to define how the data is collected.
It is used to configure the hardware interfaces in the system.
For example, the I/O Configurator is used to specify the type of input sensor, whether HART
variables and status reporting is enabled, whether pulse counting is used, etc. It can also be used
to view a log of I/O events.
For full details on the use of the Configurator, see the instruction manual INM8455.
24
Downloading / Uploading
The PAC8000 Controller has the ability to receive strategies and configurations via the network.
The Control Centre software can download the executable software to the Controller where it is
checked for any transmission errors then stored in non-volatile memory for use.
New strategies and configurations can also be downloaded while it is still running an existing one.
The new strategy is stored in a different section of memory to the existing one. When it has been
checked and confirmed as a clean download the operator can switch the Controller to the new
strategy without interruption.
I/O module configurations can also be changed via the network. In a similar manner to strategies,
a configuration can be downloaded to the Controller for transmission within the node to the I/O
modules. This enables maintenance staff to change hardware on the plant and then have a new
configuration downloaded from the Control Centre.
Uploading of configurations and strategies from the node is also possible. This enables operators
in the Control Centre to obtain and check the configuration or strategy that is currently loaded
into the Controller.
Updating firmware
If a new release of operating software is available, this may also be downloaded to the Controller
for embedding in its firmware memory. The Controller has to be in Standby mode in order to
accept the new revision of software so it cannot continue to run a process while the update takes
place. However, if a second (redundant) Controller is available at the node, the firmware can be
downloaded to it while it is in Standby mode. On completion of the download and verification, it
can become the new Master while the other obtains its update.
Maintenance
Power Supply Monitor
The Power Supply Monitor module (8410-NS-PS) monitors the health of all power supplies in a
PAC8000 System node and signals to the Controller in the event of a failure. The module receives
power supply status information for all supply rails including 12V system power, 24V field power
for general-purpose I/O modules and field power for intrinsically safe I/O modules.
LED indicators
A set of indicators is provided on the front face of a controller. These provide indication of both
healthy and fault conditions. The following table gives an interpretation of the status of the
Controller based on the indicator states.
25
Table 6 - LED indicator states
LED name Colour On Off Flashing
Power green Power OK No power
Master yellow Master Standby
Healthy yellow Healthy Not healthy Refreshing
Fault red Failed OK Starting
Failsafe red In failsafe mode OK No control
LAN A yellow OK Not in use Fault
LAN B yellow OK Not in use Fault
COM 1 yellow OK Not in use Fault
COM 2 yellow OK Not in use Fault
A-B Link yellow OK Not in use Fault
Railbus yellow OK Not in use Fault
26
I/O modules
The PAC8000 Controller is supported by a broad range of input and output (I/O) modules from
the 8000 I/O range. These are mounted on carriers, similar to the controller(s). The carriers
connect to each other through multi-pin connectors, which carry the data and power supplies on a
simple bus.
2/1
Location of Field wiring
node location
e.g. Zone 2 or e.g. Zone 1 or
Division 2 Division 1
The first figure represents the most hazardous type of area in which the equipment can be
mounted (without additional hazard protection)
The second figure represents the most hazardous type of area from which the field wiring
can originate.
27
2/2 (& general purpose) applications
This equipment represents a base level for all applications. It is used for all general purpose work
but it has been designed to be mounted in Zone 2 or Division 2 hazard areas and will accept field
wiring that originates in the same, or non-hazardous (i.e. safe), areas. All general purpose
applications should use 2/2 products.
28
2/1 applications
While still designed for mounting in Division 2 or Zone 2 hazardous areas, 2/1 equipment can
accept field wiring from Division 1 or Zone 1 hazardous areas. All Div 1/Zone 1 field wiring is
protected by built-in intrinsic safety (IS) interfaces (see Glossary on page ); as a result, the field
wiring can even originate in a Div 1 /Zone 0 area with total safety.
All IS field wiring applications must use 2/1 I/O modules.
No. of
Model I/O module function channels
ANALOG INPUT
8201-HI-IS 4/20 mA with HART 8
8205-TI-IS Thermocouple and mV 8
8206-TI-IS RTD and 8
ANALOG OUTPUT
8202-HO-IS 4/20 mA with HART 8
8204-AO-IS 4/20 mA for I/P converters 8
DISCRETE INPUT
8220-DI-IS Switch / proximity detector 16
DISCRETE OUTPUT
8215-DO-IS Solenoid driver / IIC gas groups 4
PULSE INPUT
8223-PI-IS Pulse/frequency input 2
HART support
Some modules within the 8000 range are designed to provide support for HART field devices.
Input modules are available that can read the HART variables and output modules that can
transmit them to the field devices.
Failsafe modes
Every module has a failsafe mode that it can adopt automatically in the event of a loss of
communication with the controller. The mode can be defined by the user to be a specific failsafe
state, e.g. go to maximum value or go to minimum value, or it can hold the last valid value
that it had before the communications breakdown.
Failsafe values are defined during configuration and downloaded to the controller. The Controller
then passes the individual configurations to the I/O modules.
NAMUR compliance
LED indication styles are compliant with the current NAMUR standards.
29
Module installation
Details for the installation of 8000 series modules are provided in the following publications:
INM8100 Installation Guide - 2/2 I/O modules
INM8200 Installation Guide - 2/1 I/O modules
Module configuration
The I/O modules are configured through the PAC8000 Workbench software. Consult the
Workbench help files for details.
30
Fieldbus support
The PAC8000 System is designed to support the bus networks in your plant, simplifying
automation tasks. The system supports FOUNDATION Fieldbus, HART, and serial protocols such
as Modbus and Profibus, in addition to traditional analog and discrete I/O interfaces.
Foundation Fieldbus
The PAC8000 System fully supports FOUNDATION Fieldbus devices. A fully integrated H1
Linking Device implements up to four Fieldbus H1 ports and connects to the PAC8000 controller
over the high speed Ethernet Plant Network. Function blocks are available in the PAC800
Workbench to integrate H1 data into the control system and the Operator Displays and can be
used to communicate between H1 devices.
Modbus
The PAC8000 Controller can adopt a master role enabling it to communicate with existing
fieldbus subsystems. This enables it to use data from existing I/O components and share the
information throughout the network. It will also perform as a Modbus slave when requested for
data from I/O components that it is managing. It performs full validation of all requests then
supplies the data. If it is configured with a redundant Controller then only the Master is authorised
to respond to Modbus requests.
H1 Linking device
The PAC8000 system supports H1 linking devices, which are single integrated units that function
as a:
linking device
bridge
controller
gateway
Fieldbus power supply
distributed I/O subsystem
The use of FOUNDATION Fieldbus and OPC enables it to tightly integrate with the PAC8000
Controller and other intelligent devices and software from multiple manufacturers. It also has
serial ports that enable it to play the role of Modbus master to conventional fieldbus equipment or
slave in a Modbus to H1 role. It also incorporates full redundancy to compliment the PAC8000
system.
Fully integrated
The device is a complete integrated and self-contained unit including power supplies, impedance
terminator or even safety barriers, making it simpler to deploy, maintain and expand. A single
module implements four H1 ports, Ethernet and serial Modbus port directly on the controller.
This enables the user to implement a simpler and leaner control system.
H1 flexibility
The linking device creates a pathway for communication between local and remote H1 devices
enabling each H1 device to be addressed from any point on the network. It has a built-in Fieldbus
31
power supply subsystem that includes a range of power supplies, impedance terminators and
isolating safety barriers.
HART maintenance
The PAC8000 System is designed to operate with conventional HART maintenance software.
This enables HART instruments in the field to be managed from a central point. The software
provides a supervisory program that allows remote configuration and diagnosis of the HART
devices. A serial link is established between the Controller and a control room PC running the
maintenance software and a network of stations can be formed via a LAN.
Typical examples of HART maintenance software are Cornerstone from Applied System
Technologies and Asset Management Solutions (AMS) from Fisher-Rosemount.
32
Communications network
Cabling
Category 5 twisted pair cable
Network cable runs of up to 100 meters (approx. 300 ft) should use standard Category 5 (Cat 5)
cable. This type of cable is recommended because of its relative immunity to moderate levels of
electrical interference. The eight conductors within the cable are arranged in four pairs. Each pair
is twisted together to reduce the effect of stray electromagnetic fields. A foil screen is then
wrapped around the eight conductors to increase the electromagnetic protection. This foil, or
shield, should be grounded at one end of the cable run to prevent it from building up a static
electrical charge and reduce the effects of electro-magnetically induced signals.
Category 5 cable is a recognised standard and cable of inferior quality will not perform as well
over the distances specified above.
Optical Fibre
When network cables are required to cover distances of greater than 100 meters, twisted pair
cable is not suitable; the signal losses become too great. To travel distances greater than 100
meters the system designer generally turns to optical fibre.
Different types of fibre are available to suit the distance travelled. Multimode is the commonest
grade and is suitable for distances up to approximately 1 kilometre, after that, it too is prone to
excessive signal loss. Single mode fibre is the best, and most expensive. This is capable of
covering distances up to 7 kilometres in a single run.
Optical fibre cabling requires electrical to optical interfaces at each end of its run. Network
components like switches and hubs can be purchased with these interfaces built in. If the
component does not have an optical interface, then additional interface components will have to
be purchased to make the conversion.
Optical fibre is not only a means to cover greater distances but is also an option when network
cabling has to travel through areas that are particularly prone to large amounts of electrical noise
caused, for example, by the switching of heavy currents. The data in optical fibre is carried by
means of light pulses and this makes it insensitive to electrical interference.
It is also an excellent medium for crossing areas that carry risks of inflammable vapours being
present. Because it carries no electrical signal, there is no danger of a broken or severed cable
causing ignition of this type of atmosphere.
Terminations/connectors
Cat 5 cable
The PAC8000 Controller is fitted with shielded connectors to reduce electrical noise and to
ground the cable. If cable terminations will be fitted by the user then shielded terminations should
be used to maintain the same level of screening. Shorter patch cables can be purchased ready
fitted with this type of connector and are usually designated with an S in the cable type number.
Optical fibre
The fitting of the terminations at each end of optical fibre requires specialised skills. The fibre has
to be fitted with end terminations that will transmit the light signals with the minimum loss.
Incorrect fitting of these terminations will either damage the cable or render it ineffective because
of the signal loss. Always have fibre terminated by suitably trained and experienced
personnel.
33
Workstation
Recommended specification
While the PAC8000 Workbench software will probably work successfully with a wide range of
hardware, PAC8000 has tested the software on equipment supplied by Dell Computers and
found their operation to be satisfactory.
IP addressing
IP addresses for PAC8000 Controllers are assigned by a BOOTP server that resides in the
PAC8000 Workbench workstation.
There is no intrinsic incompatibility with DHCP (Dynamic Host Configuration Protocol), which
is often used to assign IP addresses, and BOOTP and DHCP will co-exist without any conflicts.
The Process Network will be set up as a different entity from, say, the Office Network and so the
user will probably assign the workstation IP address manually, as a matter of course.
The PAC8000 Workbench workstation must be the first node on the network and PAC8000
Controllers can only be attached to the network when the PAC8000 Workbench workstation has
been installed. Unless this happens, the Controllers will not be assigned addresses and will
therefore be unavailable on the network.
34
PAC8000 Workbench
The PAC8000 Hybrid Controller contains two embedded software environments that will run
executable files downloaded to it from the Workbench. These environments allow the controller
to perform the functions of either process automation or discrete automation as the user requires.
The Hybrid Controller is in fact capable of performing these functions in parallel with each other,
so that two completely separate and unrelated processes can be controlled at the same time.
The PAC8000 Process Controller and the PAC8000 Logic Controller contain a single embedded
application that provides the functionality of a DCS or a PLC, respectively. The basic properties
of each of these control environments are described here.
The PAC8000 EBIM can be used as a remote slave to a host controller or to one of the above
PAC8000 controllers. Any of the Workbenches described below can be used to configure the
EBIM.
PAC8000 Workbench
The PAC8000 Workbench consists of modular software building blocks that are integrated into a
process control solution. The system comprises two integrated components; the Instrument Index
and the Strategy Builder.
Instrument Index
The Instrument Index is used to model the process systems input/output by assigning controller,
module and point destinations. Using a predetermined template, this task is accomplished as a
simple "fill in the blanks" procedure. The Instrument Index uses this information to build the I/O
configuration data file. This data file will subsequently be used to cross-link the point attributes to
the algorithms on the process control diagrams.
Strategy Builder
Process control logic diagrams are developed using the Strategy Builder. The control strategy is
built by selecting the appropriate blocks, assigning symbolic tags, and then connecting the blocks
with analog or digital lines, using standard drawing forms and commands. SAMA style drawings
define all the functions and parameters that form a process loop. Function block choices include;
manual/auto station, function generators, pulse controllers, sequencers, bumpless transfers, PID
and other standard function blocks. To further reduce development time template diagrams can be
created and reused within the current project or another future project. For example, a cascade
loop can be created and saved for repetitive use to generate additional control loops. When the
drawing model is completed, the project diagrams are cross-linked with the I/O database to create:
Comprehensive control system engineering documentation.
Advanced control strategies.
Operator interface database, alarms and faceplates.
System maintenance tools.
There is no need to review function block codes, re-enter tags, generate spare parts listings, or
match control logic to the operator interface. This allows the user to concentrate on designing
control strategies and eliminate the repetitive tasks.
35
Project Components
In addition to these key design features, PAC8000 Process Control has a wealth of tools and
features that simplify the management of the project and provide easy to use interfaces for the
user.
Comprehensive Self-Documentation
PAC8000 Process automatically generates as-built system documentation including I/O
configuration reports, cross reference analysis, bill of materials, instrument index, system start-up,
maintenance information, and wiring diagrams. The instrument index provides instrument details
such as manufacturer, model number, group number, shift and day log, panel wiring information
including panel in/out terminal block and panel in/out position, and field wiring information
including cable colour, size and type.
The Workbench
Discrete Control is designed to build distributed automation applications. The workbench
contains a powerful project management tool that graphically represents and organises programs,
resources, configurations, and networks within a project.
The Workbench provides powerful and intuitive graphical and textual editors. Docking toolbars
and resizable split windows, drag-and- drop and cut-and-paste are all implemented to enhance
ease-of-use.
The Ladder Diagram (LD) is one of the most familiar methods of representing logical equations
and simple actions. Contacts represent input arguments and coils represent output results. Each
block in the selection list has a description text.
The Structured Text (ST), is a high level structured language with a syntax similar to Pascal but
more intuitive to the automation engineer. This language is mainly used to implement complex
36
procedures that cannot be easily expressed with graphical languages. Discrete Control's ST text
editor guides the user to the correct syntax and punctuation and provides the best validation and
programmer assistance facilities.
The Instruction List (IL) is a low-level language, similar to the simple textual PLC languages.
IL is a register-level programming language. Discrete Control has a set of more than 60 IEC
functions and function blocks. Users can enlarge this set by writing functions and function blocks
in the LD, FBD, ST, and IL languages.
The Sequential Function Chart (SFC) language divides the process cycle into a number of well-
defined steps, separated by transitions. Discrete Control fully supports graphical Flow Chart
programming, which is familiar to many engineers.
Function Block Diagram (FBD) is a graphical language which allows the user to build complex
procedures by taking existing function blocks from the Discrete Control library, and wiring them
together on screen. The FBD editor allows manual input of variables. The diagrams can be
zoomed to view the whole diagram or specific areas in more detail. User can mix LD and FBD
programming in the same chart.
The Flow Chart is an easy to read decision diagram where actions are organised in a graphic
flow. The Discrete Control Flow Chart Editor has full support for connectors and sub-programs.
The Build
To validate the project, the project code must be built. This step is also very useful for syntax
checking; all detected errors can be easily located with a simple mouse-click. The generated code
is fully publicly documented and supported. The code generator produces the code for each
resource plus all tables required for data exchanges.
Simulation
Simulation enables the validation of the project without any hardware. Each resource can be
executed cycle-by-cycle, and various system variables, such as the cycle time, can be monitored.
Data exchanges are also simulated. Any variable can be monitored or forced.
For debugging with real platforms, or to perform maintenance operations on 'live' systems,
changes can be downloaded on-line with-out stopping the running resources. During the testing
phase I/O devices can be set as virtual, if the PAC8000 Controller is not completely ready or is
unavailable to the programmer. Note also that now Function block's instances can be directly
debugged from editors. The workbench is intuitive and user-friendly, but to further assist the user,
Discrete Control provides HTML-based cross-referenced on-line help system that includes a
complete language reference. The Discrete Control workbench also offers a document generator.
Project items are shown as a tree, the table of contents of the project documentation can be
customised by a simple click on each item.
To allow re-use of code, libraries of IEC functions and function blocks can now be developed.
Functions and function blocks are designed and tested as in any other projects, but other projects
can be linked to these "library project" to allow the use of their functions and function blocks.
Once a "library project" has been selected, its blocks can be selected as standard blocks. As
libraries, import/export functionality allows the sharing of POUs between projects. It is also a
comfortable way to integrate the work of several programmers to constitute the final project.
For safety purpose, the "upload" feature allows you to download the source code of your
resources onto the target system. For maintenance purpose or at any time, these sources can be
uploaded to re-constitute the project.
The Target
The word Target refers to a PAC8000 Controller.
37
Power supplies
All of the PAC8000 System hardware is designed to operate from DC power. Power supplies are
available with the system to provide the required regulated DC voltages from AC or DC sources.
PAC8000 Controller
A PAC8000 Controller requires a nominal 12 V DC supply to operate. The power requirement of
any of the 8521-xx-MT Controllers is 5W, e.g. 12V DC @ 400 mA (typ.). This can be supplied
by a local bulk power supply see below.
The controller is supplied with cabling (Part No. 015-428 - see Figure 18) that enables it to be
connected to two independent power supplies, i.e. a main and a redundant supply.
+ Red PSU 1
(main)
Black
+ Red
Controller PSU 2
Power (redundant)
Connector
Black
I/O modules
The I/O modules require a 12 V DC source which is distributed between modules via a combined
data and power bus called Railbus. The power (i.e. current) requirements of the modules
depends upon the type of modules used. As a rule-of-thumb, Digital Input modules take the
least current and Analog Output modules require the most. These factors must be taken into
account when designing the power regime. Full details of the requirements of each module are
provided on their data sheets.
38
AC/DC and DC/DC supplies
A range of recommended DC output power supplies that incorporate "power-fail signalling" is
available to suit all the applications required by the equipment. For full details of these items
consult the data sheets and the INM8900 instruction manual (see Related Documents).
39
Appendix A - ATEX information
The Essential Health and Safety Requirements (Annex II) of the EU Directive 94/9/EC [the ATEX Directive - safety of apparatus]
requires that the installation manual of all equipment used in hazardous areas shall contain certain information. This annex is included to
ensure that this requirement is met. It compliments the information presented in this document and does not conflict with that information.
It is only relevant to those locations where the ATEX Directives are applicable.
1 General
a) In common with all other electrical apparatus installed in hazardous areas, this apparatus must only be installed,
operated and maintained by competent personnel. Such personnel shall have undergone training, which included
instruction on the various types of protection and installation practices, the relevant rules and regulations, and on the
general principles of area classification. Appropriate refresher training shall be given on a regular basis. [See clause
4.2 of EN 60079-17].
b) This apparatus meets the requirements of protection 'n' in accordance with EN 50021.
c) This apparatus has been designed and manufactured so as to provide protection against all the relevant additional
hazards referred to in Annex II of the directive, such as those in clause 1.2.7.
2 Installation
a) The installation should comply with the appropriate European, national and local regulations, which may include
reference to the IEC code of practice IEC 60079-14. In addition particular industries or end users may have specific
requirements relating to the safety of their installations and these requirements should also be met. For the majority of
installations the Directive 1999/92/EC [the ATEX Directive - safety of installations] is also applicable.
b) This apparatus is normally mounted in a non-hazardous [safe] area, however, it also meets the requirements of
Category 3 apparatus and may be installed in a Zone2 location providing that the relevant installation conditions are
met.
c) This apparatus must not be subjected to mechanical and thermal stresses in excess of those permitted in the
certification documentation, this manual and the product specification. If necessary the product must be protected by
an enclosure to prevent mechanical damage.
d) The apparatus must not be installed in a position where it may be attacked by aggressive substances and must be
protected from excessive dust, moisture and other contaminants by an enclosure.
4 Repair
a) The product cannot be repaired by the user and must be replaced with an equivalent certified product. Repairs should
only be carried out by the manufacturer or his authorised agent.
5 Marking
a) The Controllers are labelled in a manner that is reproduced below. In addition the serial number and/or date of
manufacture are marked on the individual apparatus.
This manual applies to products manufactured and date marked during or after the year 2002.
The following common information is provided on each component:
Company Logo:
Company Name and Address: GE Fanuc Intelligent Platforms, Inc. Charlottesville, VA
European compliance mark: 1725
40
PAC8000 SafetyNet
The PAC8000 SafetyNet System is a new addition to the Designed for SIL 2, the SafetyNet System has been
GEs product family. Sharing the same fundamental specifically developed for safety applications, with features
platform as the PAC8000 controllers, a new SafetyNet that ensure safety designed in to the product, with a simple
Controller, a new Earth Line Fault Detect (ELFD) Controller and straightforward Safety Manual. The net result is a
Carrier and two new SafetyNet IO Modules have been product that is easy to program, configure and use.
developed and certified. The SafetyNet System uses the
same field terminals, I/O Module Carriers and Power The modular approach provides cost effective solutions to
Supplies as the Process Control products. Configuration safety applications with limited I/O counts per node. And
and application design is carried out using software tools since each SafetyNet node can accommodate up to 64 I/O
specifically safety applications -but within a common modules, (each of 8 channels), the requirements of safety
programming environment. systems with high I/O counts are also met.
Certified according to IEC 61508 as a "Programmable Using a 1 out of 1 with diagnostics structure(1oo1D), a
Electronic Safety System", PAC8000 SafetyNet is suitable single controller, input module and output module (together
for use in safety-related applications up to Safety Integrity with the necessary field terminals, carriers and power
Level (SIL) 2. As part of the family of open system supplies and a suitable sensor and final element) meet all
components designed for the process automation market, it the requirements of a SIL 2 safety function.
can be closely integrated with the Proficy Process Control
System or used as a standalone safety system working
alongside any Process Control solution. The system will Redundant controllers can be used to improve availability
also operate "openly" with your choice of HMI - whatever for the SIL 2 safety function - with entirely bumpless transfer.
package you use. Further availability enhancements can be made by the use
of redundant, fault tolerant Ethernet communications and
redundant power supplies.
Emergency Shutdown, Fire & Gas and Burner
Management application requirements are all met, with
certification to IEC 61511 for process industries and NFPA
85 for burner management systems.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:1
PAC8000 SafetyNet
New additions to the family Control Products. In addition to
The PAC8000 SafetyNet System uses providing the options of programming
the same basic structure as the the required safety function in one of
PAC8000 controllers, but in addition three IEC 61131-3 languages (Ladder
incorporates specifically developed Diagram, Function Block Diagram
components. These are: and Structured Text) the package
SafetyNet Controllers (8851-LC-MT) also provides many useful tools to
assist in testing and commissioning.
Dedicated Controller Carriers for
Earth Leakage Fault Detection (8751- Restricted access
CA-NS) Access to modify safety-related
General parameters within the configuration
The PAC8000 SafetyNet System is a SafetyNet IO Modules -Analog Input
with HART (8810-HI-TX) and Discrete and application program must be
"Programmable Electronic Safety
IO (8811-IO-DC) restricted to authorized personnel.
System", certified according to IEC
The SafetyNet system provides a
61508 as suitable for use in safety Workbench software tools for use
number of layers and methods of
related applications up to Safety with the SafetyNet System (8841-LC-
providing this protection. Only users
Integrity Level 2. The system is suitable MT)
with "Safety Responsibility" can
for use in emergency shutdown, fire & Open communications access the safety-related aspects of
gas and burner management PAC8000 products are open. SafetyNet the Workbench. Only computers that
applications. nodes communicate with one another, the SafetyNet Controller identifies as
with standard PAC8000 nodes, historian "trusted hosts" can download new
and asset management packages and parameters. A download can only
with HMI packages over a fault tolerant take place when an "over-ride key-
Ethernet LAN, running at up to 100 switch" is set to the required position.
Mbit/s. And, if required, each SafetyNet
Peer to peer communication Controller can be protected by its own
SafetyNet Controllers can communicate password - without which access to
with one another via Ethernet using the safety parameters is denied.
SafetyNet P2P - which has been Maintaining field
certified as suitable for use in SIL 2
instruments
applications. Robust checks and
Maintenance over-rides can be
controls on access and data corruption
implemented from operator
ensure the safety of communication and
workstations in full compliance with
allow safety functions for which the
the guidelines from TUV. Users
inputs and outputs are widely separated
define - as part of the safety
to be easily implemented - both in terms
application - the actions to be taken to
of the software programming and in the
maintain a particular instrument and
hardware design.
the SafetyNet System then
Mixing safe and standard implements these pre-defined
Standard IO Modules can be mounted actions.
on SafetyNet Nodes - together with
HART capability
SafetyNet IO Modules - without affecting
The SafetyNet System allows full
the node's functional safety
access to HART field devices for
performance. Only standard applications
Emerson's AMS maintenance
can read data from standard Modules,
software. (The first release of
but both standard and SafetyNet
SafetyNet will not have full HART
applications are allowed to write to
capability, contact GE for further
standard modules. This flexibility can
information).
simplify hardware design, where the
physical constraints of the particular Earth leakage detection
locality demand such an approach. Earth leakage fault detection may be
implemented using the 8751-CA-NS
Serial interfaces Controller Carrier in conjunction with
The Open approach extends to Modbus
an input channel from an 8811-IO-
serial interface products - which can be
DC Discrete I/O Module. If ELFD is
connected to any node (SafetyNet or
not required, SafetyNet Controllers
standard) by an RS485 connection. As
can be mounted on 8750-CA-NS
with data from standard IO Modules, this
Controller Carriers.
data can be read by standard
Controllers, but not by SafetyNet On-line changes
Controllers. Both standard and Where allowed by local practices
SafetyNet Controllers can write to such and following adequate testing and
devices. approval - new safety programs and
configuration can be downloaded on-
Comprehensive programming line and in real time. In some
tools situations, this may be possible
The SafetyNet System is programmed without interrupting the operation of
using the Workbench software package the safety function.
in common with the PAC8000 Process
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:2
PAC8000 SafetyNet
Harsh and Hazardous Event Logging and Sequence Reduced cabling and
Environments of Events Recording termination costs
The SafetyNet System is as rugged as The SafetyNet System has the same In common with the PAC8000
the other PAC8000 Controller and 8000 Event Logging and Sequence of Events Controllers, the SafetyNet System
Process I/O Components: -40C to (SOE) recording capability as the offers users the opportunity to
+70C operating ambient temperature; PAC8000 Controllers. Data received significantly reduce their spending on
Zone 2 or Class 1 Division 2 hazardous from SafetyNet Modules is time- wiring and termination costs. Moving
area mounting; G3 corrosion resistance; stamped by the SafetyNet Controller control and safety hardware out of the
and enhanced shock and vibration with a resolution of better than 200ms control room and on to the plant gives
capability. The system will operate in the (this is dependent on the execution significant savings. The Field Terminal
PAC8000 extreme environments found cycle - small nodes will deliver better design allows users to avoid
in process industries, allowing remote resolution). Data from dedicated (non- unnecessary spend on marshalling
mounting and a truly distributed SIL) SOE modules is time-stamped with cabinets, cross wiring and marshalling
architecture in even the most a resolution of less than 0.25ms terminals. Integral tagging and fusing
demanding situations. between different channels of the same further simplifies cabinet design and
SOE module and less than 1ms installation.
between channels from different SOE
modules. The SafetyNet Controller can
record up to 8000 events before its
event data buffer begins to be
overwritten by new data.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:3
PAC8000 SafetyNet
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:4
PAC8000 SafetyNet
Fault Tolerant Redundant LAN
The availability of Ethernet connections -
between SafetyNet and standard
Controllers, historian and asset
management packages and HMI stations -
has a significant impact on the
effectiveness and availability of both safety
and control functions. To maximise
availability of the Ethernet LAN, PAC8000
SafetyNet Systems feature Fault Tolerant
Ethernet ports that monitor the integrity of
their local network and automatically
switch to an alternate path if the existing
path becomes unavailable. If suitable
Ethernet switches are used - such as
Moxa Industrial Ethernet Switches - they
too will monitor their local network and
switch to an alternative path when this is
required. Monitoring the local network
paths even when they are not being
used - allows the system to report the loss
of any failed paths so that appropriate
maintenance can be carried out.
Moxa Industrial Ethernet Figure 1 - redundant Ethernet LAN with intra-LAN link
Switches
The Moxa Ethernet Switch range is
specifically designed for use in Industrial
applications that require high availability in
harsh environments, with a broad
operating temperature range (-40C to
+75C, except EDS-205: -10C to +60C)
and hazardous area mounting capability
(Class 1, Div 2 or Zone 2). Two alternative
topologies are shown in figures 1 and 2.
Which topology is preferred will depend on
the physical layout of the entities on the
LAN and local preferences. Figure 1
shows a redundant Ethernet LAN, with
intra-LAN link while figure 2 shows a single
"Turbo Ring" that provides an alternate
means of ensuring Ethernet availability -
implemented in the Moxa EDS405 5-port
switch. If any part of the Turbo Ring fails,
communication is re-routed automatically
within 300ms. Further improvements to
availability can be achieved by putting in
place a second identical, "Turbo Ring"
which should be connected to the first ring
by a single intra-LAN link. This link would
normally be mounted in the control room.
The Moxa switches are available with
either all copper or a combination of
copper and fibre ports. For media
conversion between fibre and copper the Figure 2 - Turbo Ring Ethernet LAN
MOXA IMC-101 can be used. All the Moxa
products (except the EDS-205) have dual
power supply inputs and a relay output for
user configurable fault reporting.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:5
PAC8000 SafetyNet
interfere with, the safety application. (The first
Certification release of SafetyNet will not have full HART
The SafetyNet Controller is certified for capability, contact GE for further information).
use in safety-related applications up to Live maintenance
and including SIL 2. The SafetyNet Once the Ethernet LANs are isolated,
Controller achieves this Safety Integrity SafetyNet Controllers can be removed and
Level with a 1oo1D architecture (i.e. it replaced - with the local power supplies still
operates in "simplex" mode, with correct connected - even in Division 1, Class 2 or Zone
operation ensured by comprehensive 2 hazardous areas.
General internal diagnostics). In such applications Redundant Controllers
The 8851-LC-MT SafetyNet the SafetyNet Controller is used in SafetyNet Controllers can be used in a master -
Controller stores and runs the conjunction with the 8811-IO-DC standby redundant configuration to improve the
SafetyNet application program which SafetyNet Digital Input/Output Module availability of the safety function, but this is not
is downloaded from the Workbench. and the 8810-HI-TX SafetyNet Analog required for safety. Redundancy is
It manages a number of Input Module with HART*. The SafetyNet implemented by simply inserting the new
communication paths: with the IO Controller is mounted on its dedicated Controller in to the free slot on the Controller
Modules mounted on the local node Carrier 8751-CA-NS. *First release of Carrier. The SafetyNet system will
via the internal Railbus; with other SafetyNet will not have full HART automatically upload the required SafetyNet
entities on the Ethernet LAN (other capability. application to the new Controller and initiate the
PAC8000 nodes, PCs running the Safe by design redundancy algorithms. Switching between
Workbench programming tools, HMI, The SafetyNet Controller has been redundant Controllers on detection of a fault is
historian packages and asset designed specifically for safety-related automatic and bumpless. The standby
management tools) and with remote applications and is certified on the basis Controller continually performs the same
mounted serial devices. The of the excellence of its design. It does not processing, on the same data and at the same
SafetyNet Controller also manages depend for its certification on "proven in time as the Master and the results are routinely
the implementation of the use" data. cross-checked. This ensures that the Standby
redundancy strategy either as Diagnostics is always ready to take over control from the
master or standby. If the SafetyNet Controller's internal Master. The redundancy strategy employed is
diagnostics detect a fault that would known as "rendezvous redundancy". The
prevent the SafetyNet System from "Change State" button on the Controller Carrier
carrying out its safety function, then it will is used to switch a master to being the standby
initiate a controlled shutdown. A in a redundant pair, to switch a standby offline
controlled shutdown has two objectives - and to instruct an offline standby Controller to
firstly, to ensure that the SafetyNet synchronise itself with the Controller and to
System enters its failsafe mode; and enter standby. If a SafetyNet Controller has
secondly, to record sufficient data to entered the Failsafe state, it can be brought
allow the reason for the shutdown to be out of this state by use of the Change State
determined. button.
If a SafetyNet Controller enters a Serial communications
controlled shutdown, then all Each SafetyNet Controller provides two serial
communication with IO Modules is ports - one of which is physically connected via
stopped and - when the programmed the Controller Carrier, the other directly on the
time delay for each IO module has Controller itself. The two ports can be
elapsed - they will enter their safe states. configured to be entirely independent, or can
System size be made to work redundantly, either as
The SafetyNet Controller can interface redundant connections to the same serial link
with up to 64 locally mounted, 8-channel or as redundant connections to redundant links.
IO Modules - giving a total capacity of When redundant ports of a single Controller are
over 500 channels per node. The configured as Modbus masters, redundancy
Ethernet LAN is capable of supporting issues are handled automatically by the
over 200 nodes, giving a maximum SafetyNet Controller deciding when to switch to
theoretical capacity of over 100 000 the standby port, alarming failures in the
channels! standby). When redundant ports of a single
Controller are configured as Modbus slaves
HART pass-through and multi-dropped on a single serial link, the
SafetyNet Controllers can be configured
SafetyNet Controller will again manage the
to allow transparent access to the
redundancy (deciding which port respond to the
process variables and status information
Modbus master and alarming a fault in the
provided by HART field instruments.
standby port). When redundant Controllers are
HART data cannot be used within the
used, this adds additional availability to the
SafetyNet application (as - for example -
arrangements above. It is not possible to use
it does not employ sufficiently rigorous
the ports on the standby Controller as
data error detection algorithms), but
additional serial connections.
communication with such devices can be
achieved by using a "passthrough"
command which does not involve, nor
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:6
PAC8000 SafetyNet
SafetyNet Controller 8851-LC-MT
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:7
PAC8000 SafetyNet
LED's
The SafetyNet Controller has a number of LEDs that indicate the status and mode of operation of the Controller. The table below
explains what they refer to and describes their operation:
Note: the information here given here is simplified. Additional combinations of LED states are used to provide further indication of
the status of the SafetyNet Controllers. Full details are found in the relevant instruction manuals.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:8
PAC8000 SafetyNet
Workbench for SafetyNet Overview
PAC8000 Workbench SafetyNet Workbench enter Configuration Mode without the
The PAC8000 Workbench is The SafetyNet Workbench (8841-LC-MT) Controller Password.
the engineering and has all the features of the standard On-line download
documentation tool for the Workbench, but additionally includes the Users with safety responsibility can download
PAC8000 Controllers and special tools required for safety new parameters to a SafetyNet Controller, from
SafetyNet Systems. The applications. a Trusted Host, to a Controller whose Key
Workbench is used to perform Safety programming Switch is set to permit new downloads and
the following tasks: where the particular SafetyNet Controllers
languages Password is known. New parameter download
Configure IO Channel The Workbench provides three IEC61131
and Module parameters is carried out as a background task over a
programming languages that can be used
number of cycles to ensure that the fault
Configure Controller and to write safety-related application
reaction and response times are not
network parameters programs:
compromised. Once download is complete and
Input and manage the IO Ladder logic (LD) the new parameters have passed the checking
Function Block Diagram (FBD) and security tests, the new parameters will be
tag database
Structured Text (ST) automatically adopted. Where redundant
Engineer and document
Configuration Mode and SafetyNet Controllers are used, the stand-by
the control or safety Controller will also be automatically updated.
application Safety Responsibility
Changes to safety-related parameters are Note: on-line download should only be used
Generate wizards to where there are adequate procedures for
carried out with the SafetyNet Controller in
simplify HMI design Configuration Mode. Access to this mode approving the changes that have been made
Simulate and test control is restricted to personnel with Safety and testing them prior to download.
and safety applications Responsibility and its use is constrained Static Analysis Tool
Generate reports to by a number of further layers of protection Any safety-related application program must be
for downloading parameters to SafetyNet developed by suitably qualified personnel and
assist in Factory and Site must be subject to careful scrutiny to ensure
Controllers. The SafetyNet system defines
Acceptance Testing 6 password protected levels of access safety, but the Workbench provides an additional
authority with only the 3 highest levels safety test. The Static Analysis Tool checks for
being granted Safety Responsibility. illegal constructs within the safety program prior to
Trusted Hosts download.
To prevent access to SafetyNet Controllers Differences Utility
by non-approved instances of the Once a new SafetyNet application is successfully
Workbench, remote Modbus devices, asset compiled, it can be downloaded to a SafetyNet
management packages and HMI, only Controller. On download, two text reports are
those that the SafetyNet Controller generated: a Download Report and a Master Tag
identifies as Trusted Hosts can download Xref. These can be used for comparison with other
new parameters. Each Trusted Host is downloads using the Differences Utility.
recognised by its IP and MAC addresses Download backup
(remote Modbus devices are recognised by A time stamped backup of each safety application
the serial port to which they are is automatically created following a successful
connected). For each Trusted Host a download. Changes between versions can be
number of other restrictions can be defined: viewed and backups can be used either as a start
Modbus write not allowed point for developing new safety applications or to
Workbench write not allowed restore an earlier version.
HART pass-through not allowed Change Control Log
Key Switch Protection The Workbench maintains a Change Control Log
When a SafetyNet Controller is added to that records - for example - when:
the Workbench the user is given the option IO Modules are added, deleted or moved
of selecting a tag to act as a Key Switch. Tags are added to, removed from, or moved
This can be used by an Operator to lock within an IO Module
the SafetyNet System so that Configuration IO Configuration parameters are saved
Mode cannot be entered without their Controller IP addresses or node numbers are
awareness or permission. The Key Switch entered or modified
can be a physical switch, driven from an External node numbers are entered or modified
HMI screen or it can be an output from the Serial communications parameters are entered
SafetyNet application. or modified
A successful download is made
Controller Passwords A Strategy is removed
When a SafetyNet Controller is added to the
The Controller password is changed
Workbench the user is given the option to
use a Controller Password. If this option is
selected, it is subsequently impossible to
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:9
PAC8000 SafetyNet
SafetyNet IO Modules Overview
Line fault monitoring
In addition to the comprehensive internal
diagnostics the SafetyNet IO Modules
Certification can monitor field wiring for line faults.
The SafetyNet IO Modules are certified
for use in safety-related applications up Event logging
to and including SIL 2. The SafetyNet Data from SafetyNet IO Modules can be
System achieves this certification with time stamped and stored by the
a 1oo1D architecture. The SafetyNet SafetyNet Controller before being
IO Modules have been designed downloaded to the PAC8000 SOE Data
rd
specifically for safety-related Retrieval Client or a 3 party historian
applications and are certified on the package. SafetyNet IO Module data is
basis of the excellence of their design. time stamped with a resolution of better
The certification does not depend on than 200ms.
General
SafetyNet IO Modules interface proven in use data. Failsafe Mode
to safety system field wiring via Diagnostics IO Modules will enter Failsafe Mode from
Field Terminals. The IO Modules The IO Modules perform the Running State either due to loss of
and the Field Terminals mount on comprehensive internal diagnostic tests communications with the Controller or
Carriers that provide mechanical as an essential part of ensuring that the because the module has received an
support, but also connect the IO can carry out the required safety instruction from the Controller to enter
internal communication bus and function. If the SafetyNet IO Modules the Failsafe State. In this state:
power supply connections to the internal diagnostics detect a fault that The Red Fault LED is lit
Modules. The IO Modules are would prevent the SafetyNet System The IO Module is flagged as
certified as suitable for use in SIL from carrying out its safety function, unhealthy to the Controller
2 safety-related applications. then it will initiate a controlled All Railbus Write requests are
shutdown. A controlled shutdown has rejected, except instructions to Reset or
two objectives firstly, to ensure that to exit the Failsafe State
the IO Module enters its failsafe mode; Inputs and HART data are read
and secondly, to record sufficient data Outputs are de-energised
to allow the reason for the shutdown to
Background diagnostics continue and
be determined. If a SafetyNet Module
if a failure is detected, the module will
enters a controlled shutdown, then all
enter Controlled Shutdown
IO channels are deactivated: input
channels are not scanned; and output Controlled Shutdown
channels are de-energised. A Controlled Shutdown is carried out if a
Bussed Field Power fault is detected in the Module. In this
state it can communicate the reason for
The Bussed Field Power (BFP)
shutdown.
connectors on the rear of IO Module
Carriers provide the power connections LEDs
for field instruments wired to the IO A number of LEDs are provided on each
Modules. For the SafetyNet System, IO Module to provide visual indication of
BFP must be 24V dc and supplied by the status of the Module, its channels
MTLs 8914-PS-AC units. These and its power supply.
power supplies may be used in Module Fault LED (red)
redundant pairs, if required. On - Failsafe
Live maintenance Off - Normal operation
SafetyNet IO Modules can be removed Flashing (equal:mark space ratio) Cold
and replaced in a Class 1, Division 2 or start in process, will flash until
Zone 2 hazardous area - once the communication is established with
relevant Bussed Field Power (BFP) SafetyNet Controller.
connection has been isolated using an Blinking (On for a short period, then On
appropriate hazardous area switch for a longer period morse code a)
(such as the MTL951). Removing and Fault state after controlled shutdown
replacing the Modules does not Module Power LED (green)
interrupt the operation of the other On - Power OK
parts of the node. If a Module is Off - BFP or Railbus Power Failure
replaced by another Module of Module Channel LEDs
identically the same type, then no
intervention is required for the System
(yellow)
See Individual Module Specifications.
to begin operating normally once the
Bussed Field Power is restored.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:10
PAC8000 SafetyNet
SafetyNet Analog IO Module Overview
Diagnostics secondary variables which can be used
The SafetyNet Analogue Input Module by a standard (but not SafetyNet)
carries out a number of diagnostic application program. The Module also
checks to confirm the accuracy of the allows Emersons AMS package to
measurement reported and the correct communicate with any HART field device
operation of the module. In addition to transparently, using HART pass-through.
the primary measurement, a second (The first release of SafetyNet will not
diagnostic measurement is made using have full HART capability, contact GE for
different internal circuitry. The two values further information).
are then compared. The primary LEDs
measurement is reported as faulty if it For the operation of the Power and
differs from the diagnostic measurement Fault LEDs see IO Module Overview.
value by more than 2%. Further tests Module Channel LEDs
General are carried out on internal supply and
The SafetyNet Analog Input Module references voltages. If a particular
(yellow)
with HART provides the interface to On Channel in range (4-20mA)
channel fails a test, then that channel is
8 channels of 4-20 mA input signals. Off Channel inactive
made inactive. If the failed test indicates
The SafetyNet Analogue Input Flashing (equal:mark space ratio) Any
that the Module is not working correctly,
Module is certified for use in safety- of the following, with an active channel:
it will enter Controlled Shutdown.
related applications up to SIL 2. In line fault (indicated by the input
Live maintenance measurement being outside the 4-20mA
such applications the module is used The field wiring connections to the
with the 8851-LC-MT SafetyNet range), loss of HART signal, Hi-Hi or Lo-
SafetyNet Analogue Input Module are Lo alarm.
Controller and 8811-IO-DC classified as non-incendive and can
SafetyNet Discrete Input/Output therefore be live worked in a Class 1,
Alarms, Deadband, Dead Zone
Module. The Analogue Input Module has a
Division 2 or Zone 2 hazardous area.
number of configurable parameters for
(Note the Bussed Field Power
managing setting and clearing alarms
connection must be isolated before the
and triggering the reporting of a new input
module is removed or replaced).
value. Hi, Hi-Hi, Lo and Lo-Lo alarms
Input sampling and filtering can be configured together with a
Each input channel is sampled once Deadband through which the input must
every 25ms and is filtered by 1st order move before the alarm is cleared. The
hardware and software filters. The relationship between these parameters is
software filter can be disabled or set to a shown in the diagram below. A Dead
number of different values according to Zone can also be configured, which is the
the filtering requirements of each value by which an input measurement
channel. must change before it is reported as a
HART capability new value.
The HART capabilities of the Analogue
Input Module allow acquisition of
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:11
PAC8000 SafetyNet
SafetyNet Analogue Input Module
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:12
PAC8000 SafetyNet
8-channel combination 8811-IO-DC
Input filtering
Combined inputs and A change in the input state is recorded
outputs only if the states observed at the start
Each of the 8 channels of the SafetyNet and end of the filter time interval are the
Discrete Input/Output Module may be same. If they are different the previous
configured, on a channel-by-channel basis, state is maintained. (This reduces the
as either an input or an output. When chance of noise being incorrectly
configured as an input, the channel is interpreted as a change of input value).
suitable for use with dry contacts with The filter time interval can be configured
power supplied from the Module. When between 0 and 8s, in 1ms intervals.
configured as an output, the channel is Input transition counting
capable of switching up to 2.0A (maximum A counter can record the number of
of 6.0A continuous per module). Output filtered transitions of a particular type.
channels are used with solenoids, valves Depending on the polarity setting, the
General and alarms counter will either count transitions from 0
The SafetyNet Discrete Input/Output Diagnostics to 1, or from 1 to 0. The counter wraps
Module provides the interface to 8 Comprehensive diagnostic tests are around from 65 535 to zero without
channels that may be configured in performed on the module and each of its indication. Transitions are counted even if
any combination of discrete inputs channels, including tests for stuck ON and the channel is configured to latching.
and outputs. The SafetyNet Discrete stuck OFF output switches. Earth leakage detection
Input/Output Module is certified for Where earth leakage fault detection is
use in safety related applications up Live maintenance
The field wiring connections to the required, a single channel of an 8811-
to SIL 2. In such applications the IODC module must be configured to
module is used with the 8851-LC-MT SafetyNet Discrete I/O Module are
classified as nonsparking and can only be monitor earth leakage and wired to the
SafetyNet Controller and 8810-HI-TX appropriate terminals of an 8751-CA-NS
SafetyNet Analogue Input Module worked on in a Class 1, Division 2 or Zone
2 hazardous area once the Bussed Field Controller Carrier.
with HART.
Power connection has been isolated. Note: Input latching
the Bussed Field Power connection must Inputs can be configured to latch a
also be isolated before removing or particular (filtered) input transition and
replacing the module. maintain the output in the latched state
Input configuration until the latch is cleared. Normal
Input channels are used to interface to volt Polarity will latch a transition from 0 to 1
free contacts. Line fault detection can be as 1, Inverse Polarity will latch a
turned OFF or can detect open circuits or transition 1 to 0 as 0. The operation is
both open and short. described in the figure below.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:13
PAC8000 SafetyNet
Normally energized and Output channels can be configured Line fault detection (LFD) for open
to give a pulsed output of either and short circuit line faults will
normally de-energized single static, single dynamic, normally be enabled for safety
outputs continuous or continuous dynamic related input channels. Series
Individual output channels can be form. The single static pulse is ON resistors are required for short circuit
either normally energized or de- for a predetermined time. It then detection and end of line resistors for
energized. Each output channel remains OFF until a new pulse open circuit detection, as shown in
comprises 2 switches that operate in instruction is received. The single figure 3.
series with the load one on the dynamic pulse is ON for a period that
supply line, the other on the return may be changed by the application,
For normally energized outputs, if a then remains OFF until a new
single switch fails short circuit, the instruction to write is received. In
other switch can still de-energies the continuous pulse mode a series of
load. If either fails open circuit, the pulses of defined ON period are
load will be immediately reenergized sent, with a defined OFF period
by the fault. For normally de- between. Continuous dynamic pulse
energized outputs, if a single switch mode allows the application to
fails short circuit, the other switch continually vary the ON and OFF The nominal resistance thresholds
can energize the load. If either fails times of the pulse train. For all types employed are shown in the table
open circuit, the load cannot be of Pulsed Output, the ON time of the below.
energized. Switches are tested by pulse may be between 0 and 60s in
pulsing them ON or OFF for a 1ms intervals. For the continuous
maximum of 5 ms the load must pulse mode, the OFF period can be
not respond to this length of pulse. set between 0 and 60s, in 1ms
This test can be disabled if required. intervals.
Short circuit protection Pre-configured output
Channels that are configured as
outputs and which are short-circuited
patterns
A number of different, pre-defined Output channel line fault
are protected by over-temperature
output patterns are available, which detection
thermal detection. If an output
can be used to indicate the
channel is short-circuited it will briefly Line fault detection (LFD) for open
occurrence of different events, using
conduct an over specification and/or short circuit line faults can
the same alarm hardware. The
current, but this will be identified by optionally be enabled for normally
patterns comply with the
the thermal detection and the de-energized outputs. (Normally
requirements of NFPA 72 and are
relevant channel made inactive. energized loads would be de-
shown in figure 2.
energized by either open or short
circuit line faults, of these only short
circuit faults will be detected and
reported by the IO Module). An
open circuit fault will be reported for
line resistances above 30k. Short
circuit line fault detection can be
enabled with forward or reverse
biased test currents. With forward
biased test currents, the threshold at
which a short circuit fault is reported
is configurable up to 1k. With
reverse biased test currents, the
threshold is fixed at 1.95k.
LEDs
For the operation of the Power
and
Fault LEDs see IO Module
Overview.
Module Channel LEDs
(yellow)
On Input or output ON
Off Input or output OFF
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:14
PAC8000 SafetyNet
SafetyNet Discrete Input/Output Module
24Vdc, non-isolated, module powered inputs and outputs 8811-IO-DC
8 inputs - any combination of inputs and outputs Input Signal change to availability on Railbus .....5ms (max.)
Railbus command to output change .......................1ms (max.)
Certified for use in SIL 2 safety applications
Non-arcing inputs and outputs
Output channels rated up to 2A continuous
Inputs for dry contact switches
24Vdc Bussed Field Power required from 8914-PS-AC
MODULE SPECIFICATION
See also System Specification
Number of channels ..............................................................8
(independently configured as inputs or outputs)
INPUTS
ON/OFF threshold current ....................................0.9mA (typ.)
O/C Voltage ...................24V dc (typ.) - depends on BFP Supply
Wetting current ......................................................1.2mA (typ.)
Minimum pulse width detected..........................................5ms
Max input frequency in pulse counting mode (no debounce)
30Hz
Isolation (any channel to Railbus)...................................250V ac
OUTPUTS
Maximum Output Current per Channel ................................2A
Maximum Output Current per Module
Continuous ................................................................................6A
Non-continuous (<10 seconds)
..........................................................8A
INPUT CONFIGURABLE PARAMETERS
Filter time interval ....................................0 to 8s (in 1ms steps)
Earth Leakage Detection Channel ............................ON/OFF
Latch inputs ........................................................enable /disable
Latch polarity ....................................latch on high/latch on low
Pulse counting ....................up transition/down transition/disable
Line fault detection.......... none/open circuit/open & short circuit
RESPONSE TIME
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:15
PAC8000 SafetyNet
Carriers - overview
Power and communication an 8811-IO-DC module must be
Carriers distribute system power to allocated to earth leakage detection
IO Modules and provide the to implement this function.
communications route between SafetyNet applications that do not
Controllers and IO Modules. require ELFD can use the standard
(Controller power is supplied by Controller Carrier (8750-CA-NS).
direct connections to the Controllers Change State buttons
themselves). IO Module Carriers Two change state buttons are
provide connectors through which mounted on the SafetyNet Controller
General field power can be supplied (see Carrier one for each Controller.
Bussed Field Power). Note: field The button is used to switch a
Carriers are the backplanes on to
power to Intrinsically Safe IO is master to being the standby in a
which the PAC8000 SafetyNet and
managed differently, see the relevant redundant pair, to switch a standby
PAC8000 Controllers are mounted.
2/1 data sheets. Multi-pin offline and to instruct an offline
A Controller Carrier is required for
connectors at the end of each carrier standby Controller to synchronise
each node, then IO Module Carriers,
allow further Carriers to be added itself with the Controller and to enter
Carrier Extenders and Cables can be
and the system power supply and standby.
added as required depending on
Railbus connections to be made. Terminations for power fail
the number of IO Modules needed
and their physical distribution within Earthing screens and inputs
the cabinet or junction box. shields The 8913-PS-AC and 8914-PS-AC
All I/O Module Carriers have their power supplies each have an output
own independent earthing/grounding that indicates the health of the
strip to terminate the screens/shields supply. These outputs can be
of field wiring cables. connected to the termination block
SafetyNet Controller on the SafetyNet Controller Carrier
and are used by the Power Supply
Carrier Monitor Module to detect failures in
The SafetyNet Controller Carrier
any of up to 7 of these external
(8751-CANS) is the dedicated
power supplies.
Carrier for the SafetyNet System. It
can support simplex or redundant Module Carrier
SafetyNet Controllers and the Power SafetyNet Systems use the 8-
Supply Monitor (8410-NS-PS). module Carrier with 64-slot
addressing (8709-CA-08) for
Serial communications SafetyNet and standard modules.
Two D-type connectors are provided
Up to 8 of these may be used
on the SafetyNet Controller Carrier
together to provide slots for up to 64
for connecting to serial devices.
IO Modules. The 4-module Carrier
These link to Serial Port 1 of
(8710-CA-04) can be used where the
Controller A and Controller B. A
application requires four IO Modules
second pair of D-type connectors is
or less. This will modify the
found on the Controllers themselves,
addressing system and users should
to provide connections to Serial Port
contact GE Faniuc when considering
2 where redundant serial
this option.
communication is required. Further
details of the serial port connections Carrier Extenders and
are given in the data sheet for the Cables
SafetyNet Controllers and Carriers. To allow for flexibility in cabinet
Controller Carriers layout, Carrier Extenders are
Two Controller Carriers are available provided which together with the
the standard Controller Carrier and Extender Cables are used to
the ELFD Controller Carrier. To connect Carriers mounted on
comply with the earth leakage fault different sections of the cabinet
detection (ELFD) requirements of backplane or DIN rail. Carrier
Fire & Gas application standards, the Extenders are used in left- and right-
ELFD Controller Carrier (8751-CA- hand pairs.
NS) can be used. A single channel of
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:16
PAC8000 SafetyNet
Controller Carrier
ELFD Controller Carrier 8751-CA-NS
CARRIER SPECIFICATION
See also System Specification
ELECTRICAL CONNECTIONS
Railbus connector ........................................................male out
Serial port connectors......................9-pin, D-type (female) (x2) CONTROLLER CARRIER LAYOUT
Power Fail connections ....................screw terminals (x7 pairs)
Ground connection ................................M4 screw terminal (x1)
BFP0V connection .................................M4 screw terminal (x1)
Earth leakage fault detection connections
.................................................................screw terminals (1 pair)
System Power connections....................................6-Pin (male)
(Note: this does not provide power to the SafetyNet Controllers)
MECHANICAL
Dimensions ...............................200 (w) x 253 (d) mm (footprint)
Height ..............................................28 mm (top of circuit board)
.............................................................................55 mm (overall)
Weight ..............................................................1.43 kg (approx.)
Mounting methods ......................................flat panel (4 fixings)
USER CONTROLS
Two change state buttons, one for each SafetyNet Controller,
are provided on the carrier. The state change depends upon the
controller state before the button is pressed. See table below for
effects.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:17
PAC8000 SafetyNet
Controller Carrier
8751-CA-NS (continued)
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:18
PAC8000 SafetyNet
Controller Carrier
8751-CA-NS (continued)
Terminal pair 3
The upper terminal of this pair should be connected to the
24V dc supply of the 8914-PS-AC supply monitored by
terminal pairs 1 and 2. The lower should be connected to the
24Vdc supply of the 8914- PS-AC monitored by terminal
pairs 4 and 5. If a single pair of 8914-PS-AC power supplies
is being monitored, then it is only necessary to make single
connection to appropriate terminal of pair 3.
Terminal pair 6
This terminal pair is unconnected and should not be used.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:19
PAC8000 SafetyNet
Module Carrier
8-module Carrier - extended addressing 8709-CA-08
CARRIER SPECIFICATION
See also System Specification
MECHANICAL
Dimensions .................................342 (w) x 170 (d) x 22
(h)mm
Weight
..............................................................................680g
Mounting methods..................................Flat panel or DIN
rail
DIN-rail types
CONNECTOR AND TABLE
..........Top hat 35 x 7.5mm rail or 35 x 15mm rail to EN
50022
........................................................G-section rail to EN The table above gives the connection details for modules 1
50035 to 4. The second connector provides identical connections
for modules 5 to 8.
Note: For applications with up to 4 IO Modules, it is possible
to use the 4-module Carrier (8710-CA-04). For further
information, contact MTL.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:20
PAC8000 SafetyNet
Carrier Extender
Left-hand/right-hand 802x-CE-Xh
CARRIER SPECIFICATION
See also System Specification
ELECTRICAL CONNECTIONS
Railbus carrier connector
8020-CE-RH
..................................................................female in
8021-CE-LH....................................................................male
out
Extender cable connector ........................Sub-D, 37-pin
female
System Power cable connections* ..............screw terminal
(x6)
System Power cable conductor size..................2.5mm2
(max.)
* The six terminals for the System Power connections must
be made
in addition to connecting the Extender cable. The Terminals
on the
left- and right- hand extenders indicate which connections
need to be
made for System Power (HVCC + and HVCC -) and an
internal
ground connection (SGND).
MECHANICAL
Dimensions (overall) .................42 (w) x 168 (d) x 37 (h)mm
Weight. ..........................................................................135g
Mounting method .............................integral DIN-rail fixings
DIN rail types
..................Top hat, 35 x 7.5mm or 35 x 15mm to EN 50022
...........................................................G-section, to EN 50035
PART NUMBERS
Carrier Extender, Right-hand 8020-CE-RH
Carrier Extender, Left-hand 8021-CE-LH
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:21
PAC8000 SafetyNet
Carrier Extender Cable
0.35m, 0.85m 1.2m 800x-CC-xx
Railbus data extender cables
three lengths - 0.35, 0.85 and 1.2 m
Sub-D cable connectors
SPECIFICATION
See also System Specification
ELECTRICAL CONNECTIONS
Extender cable connectors....................Sub-D, 37-pin male
(X2)
Carrier Extension Cable, 0.35m 8001-CC-35
Carrier Extension Cable, 0.85m 8002-CC-85
Carrier Extension Cable, 1.2m 8003-CC-12
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:22
PAC8000 SafetyNet
Field Terminals overview
Keying
8-channel Field Terminals Rotary keys in the Field Terminal are
SafetyNet IO Modules use standard adjustable to allow insertion of
8000 Process I/O 8-channel Field certain modules. Modules that would
Terminals. Depending on the cause field wiring to be unsafe (in
application, the Field Terminals may respect of hazardous areas) cannot
be for general purpose, non-arcing be inserted. The four types of Field
or non-incendive field wiring, may Terminal can be identified from the
incorporate fused disconnects and diagram below
may be for 2-, 3- or 4-wire
transmitters.
General Fused disconnect
Field terminals are removable units The fused disconnect Field
for terminating wiring from field Terminals incorporate a 2A fuse that
instruments. Each IO Module can be partially withdrawn from the
combines with a Field Terminal to Field Terminal to act as a loop
which the wiring from field disconnect.
instrumentation is connected. Tag strip
Recommended and compatible Field Each Field Terminal is supplied with
Terminal types are given in the Field an integral tag strip, which is hinged
Terminal Specification and Selection to provide access to the wiring
Guide. They can be selected to terminals and the fuse disconnects.
optionally include loop disconnection Field Terminal clicks
and fusing eliminating the need for
additional terminals and wiring on to Carrier
between the Field Terminal and the The Field Terminal is easily removed
instrumentation. By wiring directly to from the Carrier it is held in place
the Field Terminal, there is no need by a sprung latch that can be
for additional terminals or wiring. released without the need for tools.
This simplifies connection of the field
wiring. The Field Terminal is secured
in place by the insertion of the IO
Module.
Wiring to Field Terminals
SafetyNet IO Modules all use 8-
channel Field Terminals, to which
wiring with a cross section of up to
2.5mm2 can be connected. Each
termination point is clearly numbered
to simplify recognition of each
terminal. The two rows of terminals
are offset to allow access to the
lower row when wiring is in place.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:23
PAC8000 SafetyNet
Field Terminal - Specification and Selection Guide
Field Terminals 86xx-FT-xx
a range of Field Terminals
standard, fused and loop-disconnect
tag strip fitted to all Field Terminals
ELECTRICAL
Rated voltage ................................................................250V
ac
Maximum current per I/O channel.................................3A
Fuse rating (where fitted) ..............................................2A
Conductor size ...............................................0.142.5mm2
MECHANICAL
Dimensions - approx (including tagging strip)
.................................................42 (w) x 88 (d) x 39.5 (h)mm
Weights (typical - including tagging strip)
Unfused type ................................................................78g
Fused type ....................................................................86g
PART NUMBERS
CONNECTION DIAGRAM
The connection diagram below applies to all Field Terminals
usedwith SafetyNet IO Modules.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:24
PAC8000 SafetyNet
Power Supplies overview
Redundancy
Redundancy is implemented by pairing each power supply
with a second power supply. If the optional Nodes Services
Power Supply Monitor (8410-NS-PS) is used, then this can
detect if there has been a failure in any one of up to six
8913-PS-AC/ 8914-PSAC power supplies and the 2/1 power
supplies for nodes including Intrinsically Safe IO and will
then report that such a failure has occurred.
Operating ambienttemperature
When mounted with the optimum orientation for cooling, the
power supplies will provide their full rated output in operating
ambient temperatures of +70C (provided the input range is in
General excess of 125V ac).
In order to meet the relevant safety requirements, the power
supplies are specifically designed for use with PAC8000
SafetyNet and are used to power the SafetyNet Controller
and IO Modules. The 8913-PS-AC power supply must be
used to supply the 12V dc for the SafetyNet Controller and
System Power, and the 8914-PS-AC power supply must be
used for the 24V dc Bussed Field Power supply to the
SafetyNet IO Modules.
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:25
PAC8000 SafetyNet
Power Supply
System Power 8913-PS-AC
used to supply 24Vdc Bussed Field Power.voltage dependent resistor
12V dc @ 5A System and Controller power
24V dc @ 5A for powering local instrumentation
85 264V ac input voltage
Zone 2/Div 2 hazardous area mounting
12V output supports load sharing for
redundancy
ELECTRICAL CONNECTIONS
AC Input connections.........................screw terminals (x3)
DC Output connections .....................screw terminals (x8)
Power fail signal connection ...............screw terminal (x1)
INPUT SPECIFICATION
Input voltage.....................................................85264V ac
Input frequency ....................................................4765Hz POWER-FAIL SIGNALLING - DC12V output only
Power efficiency ...............................................Up to 87 % Threshold to trigger "power-fail" signal ............11.33V (max.)
Input protection ..internal (6.3A) slow-blow fuse and VDR* ................................................................................10.30V (min.)
Power-fail signal output (open collector)
OUTPUT SPECIFICATION Power supply "OK"..............Low impedance to ve of DC12V output
DC24V output voltage ...............................24.7V dc 10% Power supply "failure" ......High impedance to ve of DC12V output
DC12V output voltage ...............................11.95V dc 5%
DC24V output current...............5A (nominal - see Figure1) HAZARDOUS AREA SPECIFICATION
DC12V output current .............5A (nominal - see Figure 1) Protection Technique..............................................EEx nA II T4
Input-output isolation .........................................2800V dc Location (FM) ..........................Class 1, Div.2, Grps A,B,C,D T4
Hold-up time (at full rated load) ......................15ms (typ.) Location (CSA) ......................Class 1, Div.2, Grps A,B,C,D T3C
Thermal protection. .........................reduced output power
Supply health indicator. .............................................LED MECHANICAL
Dimensions ........103 (w) x 138 (h) x 113.6 (d)mm (see Figure 4)
Mounting methods ..............35 mm x 7.5 mm T-section DIN rail
(see also Accessories overleaf)
Weight ................................................................................750g
APPROVALS
EN 61204: 1995 Low-voltage power supply devices, d.c. output -
Performance characteristics and safety requirements
EN 60950-1: 2002 Safety of information technology equipment
EN 61326: 1997 + A1: 1998 + A2: 2001 Electrical equipment for
measurement, control and laboratory use - EMC requirements (Class A
equipment)
EN50021: 1999 Electrical apparatus for potentially explosive atmospheres -
Type of protection n
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:26
PAC8000 SafetyNet
Power Supply
System Power 8913-PS-AC continued
TERMINAL ASSIGNMENTS
Input connector screw terminals
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:27
PAC8000 SafetyNet
Power Supply
Bussed Field Power 8914-PS-AC
ELECTRICAL CONNECTIONS
AC Input connections..........................screw terminals (x3)
DC Output connections ......................screw terminals (x8)
Power fail signal connection ....................rew terminal (x1)
INPUT SPECIFICATIONS
Input voltage .....................................................85264V ac
Input frequency......................................................4765Hz
Power efficiency ..................................................up to 87 %
Input protection ....internal (6.3A) slow-blow fuse and VDR*
POWER-FAIL SIGNALING
OUTPUT SPECIFICATIONS Threshold to trigger "power-fail" signal.........23.3V (max.)
Output ............................................................24V dc 10% ............................................................................22.0V (min.)
Output current .........................10A (nominal - see Figure 1) Power-fail signal output (open collector)
Input-output isolation .........................................2800V DC Power supply "OK" .....................low impedance to ground
Hold-up time (at full rated load) ...........................15ms (typ.) Power supply "failure" ...............high impedance to ground
Thermal protection ............................reduced output power
Supply health indicator .................................................LED HAZARDOUS AREA SPECIFICATION
Protection Technique........................................EEx nA II T4
Location (FM) .....................Class 1, Div.2, Grps A,B,C,D T4
Location (CSA) ................Class 1, Div.2, Grps A,B,C,D T3C
MECHANICAL
Dimensions ........103 (w) x 138 (h) x 113.6 (d)mm (see
Figure 4)
Mounting methods ........35 mm x 7.5 mm T-section DIN rail
(see also Accessories overleaf)
Weight ...........................................................................750g
APPROVALS
EN 61204: 1995 Low-voltage power supply devices, d.c.
output - Performance characteristics and safety
requirements
EN 60950-1: 2002 Safety of information technology
equipment
EN 61326: 1997 + A1: 1998 + A2: 2001 Electrical
equipment for measurement, control and laboratory use -
EMC requirements (Class A equipment)
EN50021: 1999 Electrical apparatus for potentially explosive
atmospheres - Type of protection n
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:28
PAC8000 SafetyNet
Power Supply
Field Power 8914-PS-AC continued
TERMINAL ASSIGNMENTS
Input connector screw terminals
ACCESSORIES
Heavy duty DIN rail mounting kit* ......................8413-FK-
DN
Surface panel mounting kit..................................8414-FK-
SU
For high vibration environments
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:29
PAC8000 SafetyNet
Node Services Power Supply Monitor
8410-NS-PS
MODULE SPECIFICATION
See also System Specification
LED INDICATOR
PWR (i.e. System power supply present)
HAZARDOUS AREA SPECIFICATION
Protection Technique.....................................EEx nL IIC T4
Location (FM and CSA) .....Class 1, Div.2, Grps A,B,C,D T4
POWER SUPPLIES
System Power Supply....................5mA (typ.), 10mA (max.)
MECHANICAL
Mounting method ...........................(captive x2) screw fixing
Weight (approx.) ............................................................75g
DIMENSIONS
Dimensions in mm
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:30
PAC8000 SafetyNet
System Specification
System Specification
GE Intelligent Platforms
Americas: 1 800 433 2682 or 1 434 978 5100
Global Regional phone numbers are available on our
website www.ge-ip.com/contacts
Page:31
GE
Intelligent Platforms
8000-2/x Series
Modular I/O
8000-2/x Series Modular I/O Overview
Overview
I/O Modules
I/O Modules Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
2/2 Modules
Analog Input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Analog Ouput . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Discrete Input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Discrete Output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Pulse Input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48
2/1 Modules
Analog Input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54
Analog Ouput . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Discrete Input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60
Discrete Output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .61
Pulse Input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62
1
3
4
www.ge-ip.com/process 3
8000-2/x Series Modular I/O Overview
Redundancy options
8000 has been designed to increase avail-
ability and minimise downtime. Redundant
LAN channels and power supplies can be
specified as options to increase system
availability. Possible downtime is further
reduced by ensuring that the system compo-
nents using active circuitry can be removed
and replaced quickly and easily. Even the
field terminals can be replaced without
interrupting the operation of adjacent I/O
modules. Carriers have no active circuitry and
are unlikely to need replacement. Figure 2 illustrates the connection of field devices for these various options.
System power supplies Bus Interface Module (BIM) - 5 Hazardous area applications
The system power supply at an 8000 node The BIM provides a serial data connection to a The 8000 is a truly field mountable system
converts the local DC supply to power the host controller, which could be a distributed control even in areas where flammable gases are
node and can also provide field power for system (DCS), a programmable logic controller present. It is available in versions to suit
I/O modules with low-level field circuits. (PLC), or a PC running a soft control package. different area classification schemes:
Where heavy-current or AC mains circuits A choice of BIMs allows you to accommodate a) Reduced commissioning time and cost
are handled by the I/O modules, 8000s the most popular fieldbus protocols. The BIM b) Reduced process downtime throughstatus
innovative Bussed Field Power scheme for also uses a fast internal bus to pass data to, monitoring
distributing field power avoids complex and obtain data from, the I/O modules. Only c) Lower loop maintenance costs by using
wiring at the field terminal and minimizes the one BIM is required at each node to control up field device diagnostics
backplane/carrier wiring. to 32 I/O modules.
8000 with general purpose field wiring In nodes populated only with IS I/O modules,
Many industry applications do not present a separate system power supply module
an explosion risk from gas or dust hazards. In provides power for the Bus Interface Module
others, the environment may be classified as and node services. Redundancy of this
a Zone 2 or Division 2 hazardous area, where supply is also supported.
flammable material is expected to occur only
in abnormal conditions. For both of these
the 2/2 system provides effective distributed
I/O for process control. 8000 supports a full
range of I/O module types covering inputs
and outputs for both analog and discrete
circuits. The node can be mounted out on
the plant in a suitable enclosure providing
protection against the environment. Figure 3
shows a node containing all the key compo-
nents: a Bus Interface Module, PSU modules
(including a redundant one), I/O modules on
carriers and a pair of carrier-extenders linked
with an extension cable.
www.ge-ip.com/process 5
8000-2/x Series Modular I/O Overview
proprietary bus system called Railbus and sections that follow. On A/D error on AI
BFP failure on 2/2 AI
one BIM can control up to 32 modules. The
Input fail values
module carrier provides the transmission Off Normal
In the event of failure of an input module, the
medium for the Railbus and, by plugging BIM forces the reported value to a predefined Flashing Initialisation error
a module onto a carrier, connections are state low, high or hold last value. This
made between the module and the bus. The ensures that the host adopts a state consis- BFP = Bussed Field Power of 2/2 modules
connectors on the carrier also provide the tent with safe operation of the plant.
power supply links to the module and, when Module Power LED (green)
required, power for the field wiring. Power-up/initialisation state
When powering-up a node it is essential for On Power OK
Addressing of I/O modules plant safety that the state of each of the
Off Power failure
Modules are addressed by the BIM in terms outputs is known. While the BIM is initialising,
of their position, or slot, in the total chain of the I/O modules are held in the power-
32 modules not by individual module types. up state (see following pages). After BIM
As a result, a module can be removed and initialisation and before establishing commu- Module Status LED (yellow)
replaced by another of its own type without nication with the host, the outputs are set to The channel Status indicators have
the need to tell the BIM of the change. predefined initialisation states. This safe- different meanings according to the module
During configuration, the BIM is told the char- state can be defined by the user for each type and are described in the individual
acteristics of each necessary module position output channel. module sections.
whether or not the module is present at the
time. Consequently, if a module is removed Non-volatile configuration memory Important note
for service replacement, the properties of the The configuration information for all I/O If, when using the 8502 Profibus BIM, the
slot are still retained by the BIM. modules in a node is stored in the BIM in node is configured over Profibus, a reduced
non-volatile memory (NVM). When a module set of configuration parameters is avail-
Important modes is replaced, when the node is powered up or able. In this case, the module specifications
following a reset, the BIM will download the should be read in conjunction with the
Output failsafe mode stored configuration information to the rele- Profibus BIM instruction manual INM8502
Output modules have the ability to assume a vant I/O modules. Visual indicators LEDs are which explains the configuration options.
failsafe state. This can happen for two reasons. provided on each module to indicate Power,
Fault and channel Status information. These Alternatively, if the 8455 Configurator Soft-
1) The BIM can force a module into a failsafe are based on the NAMUR NE44 specification ware is used to configure a Profibus node, a
state by issuing a specific command to it. for LED indicators. The Power and Fault indi- fully detailed range of module configuration
2) Modules have a configurable timeout cators are common to all I/O modules and parameters is available.
parameter. This defines the maximum time their states are shown in the following tables.
period of communication inactivity with the
GSD files are available for either of the
BIM. If this period is exceeded the module
above options.
adopts a failsafe state.
www.ge-ip.com/process 7
8000-2/x Series Modular I/O Overview
General HART capability always set on the inner side of the alarm limit
The 420 mA AI modules provide digitized AI modules with HART can obtain infor- to be, typically, greater than the system noise
data and status information from 420 mA mation from HART instruments of protocol in the plant. If an alarm is activated, it will
current loop sensors. revision 5.0 or later. Each channel can remain until the input moves the full extent of
communicate with a single HART instrument. the deadband towards a safer value.
HART universal command 3 is used to gather
up to 4 dynamic variables and status from The Hi-Hi and Lo-Lo alarms support the
each HART instrument. This provides more NAMUR recommendations, i.e. if the alarm
process information to the control system limit is set less than 3.6 mA (Lo-Lo), or greater
from each device. Greater accuracy can than 21.0 mA (Hi-Hi), the alarms must be
also be achieved by eliminating A/D and D/A active for 4 seconds before the alarm is set.
errors. In addition, HART pass-through may The Deadband does not apply to NAMUR
be used for device configuration, calibration alarms. If the alarm limits are set at values
and advanced diagnostics. between the NAMUR limits, the alarms func-
tion normally.
Important modes
Dead zone
Output failsafe mode Each channel has a definable dead zone.
The AI modules have eight user-channels that This is to reduce the need for the module to
are sampled every 27 ms (2/2) or 33 ms (2/1). report to the BIM every minor change in input
value. If the input value differs by the amount
Data format defined by the Dead Zone, or more, then the
The input signal is stored as a 16-bit new value is reported, otherwise it is not.
unsigned value. In this range 0 is equivalent This reduces traffic on the internal bus which
to 0mA and 65,535 is equivalent to 25mA. improves the system response time. If the
Any digital HART data is stored in its original Dead Zone value is set to zero (the default),
IEEE754 floating point format. then every input value read will set a New
Data flag, and be reported.
Filtering
The Analog Input modules use a first- Module operating states
order software filter that provides 12 dB
attenuation at the Nyquist frequency of the Normal/Failsafe mode
algorithm. The filter supports a set of options The AI modules support failsafe mode as
that can be matched with control algorithm defined in the earlier I/O module introduc-
execution rates. tory section. When not in failsafe the module
adopts Normal mode.
Input alarms
Four configurable alarm levels are provided Channel Active/Inactive
for each channeltwo high and two low (see A channel can be made active or inactive
figure below). When an input value exceeds individually. When a channel is made inactive
an alarm limit a flag is set and the BIM gets inputs will not be processed.
a new alarm status.
Alarm deadband
The Alarm Deadband prevents the alarm from
tripping on and off because of system noise.
It can be configured for each channel and is
Passthrough
Passthrough messages to HART instruments
Lo Lo Alarm limit
are always allowed. Lo Lo Alarm set
Lo Lo NAMUR Alarm set (4s delay) Lo Lo NAMUR Alarm cleared
On Sensor loop OK
www.ge-ip.com/process 9
8000-2/x Series Modular I/O Overview
Alarm deadband
The alarm deadband (not shown on the
diagram) is fixed at 1%.
Power-up conditions
The module uses the following values when it Input
powers up. Value
Alarms
All alarms are made inactive by having their
values set to high or low extremes, as appro-
priate.
Dead zone
0 (i.e. all changes of A/D data are reported for Monitored
an active channel) Channel Value
Software filtering
Disabled
Lo Alarm limit
Channel type Lo Alarm set Lo Alarm cleared
Type K thermocouple or 3-wire RTD - Pt100
Visual indicators
On Sensor loop OK
www.ge-ip.com/process 11
8000-2/x Series Modular I/O Overview
Channel Active/Inactive
Each channel can be made active or inactive
individually. When a channel is made inactive
the output is disabled, i.e. deenergised.
www.ge-ip.com/process 13
8000-2/x Series Modular I/O Overview
Notes:
1. This action is only available in Static mode.
2. AC modules will react differently to the on-time length and trigger time. The module can only be triggered ON during a zero crossing of the AC waveform; similarly, the module can only
switch OFF at a zero crossing point. The minimum on-time is therefore restricted to half the total period of a regular waveform.
3. Continuous pulse operation is supported only by Version 2 models of BIMs 8502 and 8505.
4. On 2/2 modules, this action is only available in Static mode.
www.ge-ip.com/process 15
8000-2/x Series Modular I/O Overview
General Pulse inputs control gate input and both channel counters
These modules are designed to meet Pulse inputs can come from a range of can be started, stopped and reset by BIM
the requirements of a very wide range of sensors having different amplitudes, trigger commands. Counters can be configured to
mechanical positioning and flow applications. levels and input impedance requirements. count up (the default) or down. If the quadra-
ture calculation is enabled (see below) then
When used separately, the two input channels
Inputs types accepted are: the configured counter direction is ignored;
will accept pulse inputs to measure:
instead counter direction is determined by
Proximity detectors (NAMUR/DIN19234)
Frequency the quadrature value (up for forward, down
Current inputs
Acceleration / rate for reverse).
Voltage inputs
Number of pulses (i.e. counter) Switch / electro-mechanical inputs
A counter preset value can be configured
by a BIM command which also resets the
When combined, they provide: Theshold levels for the current and voltage
counter. On reaching the preset count value
input can be set to suit the application.
Rotational position and direction data from an event is triggered which can also be
quadrature encoding devices. In addition, passed to the channels digital output. This
Dynamic data
the module has two digital outputs and one state is cleared by resetting the counter or
Several values are calculated, for each
digital input to gate (start/stop) the channel assigning a new preset value.
channel, from the signal pulses received.
1 internal counter.
Quadrature (rotation direction)
Frequency
This is calculated by measuring the time
interval between pulses. An average is calcu- Rotor in
Ch 1
lated over a period (20 ms to 200 s) defined by Fig 1a) 0 position
the user. The time interval is measured from
the edge of one pulse to the same edge of the Ch 2
next pulse. The polarity (rising or falling edge)
can be configured.
Ch 1
as out-of-range.
Ch 2
Acceleration
This is calculated from the difference in Ch 1
frequency from the start to the end of the Rotation
sample period. A positive value indicates an Ch 2
increase in the rate of frequency and a nega-
0 360
tive value is a decrease in the rate.
Counting
Each channel has a 32-bit counter that
The second channel can be used to determine
indicates the total number of input pulses
direction of rotation by comparing the phase
since the counter was reset. The counter on
of its input p ulse with that of the first channel.
Channel 1 can be started and stopped by the
If the Ch 2 input is in a low state on the rising Alarm deadband Control data
edge of the Ch 1 pulse then the rotation is A deadband can be specified for the high, low The host can write data to control each
forward (Fig 1a). If the Ch 2 input is high on the and acceleration alarms. This provides hyster- channel counter. The available parameters
rising edge of the Ch 1 pulse then the rotation esis to avoid repetitive alarms in noisy signal are: start, stop, set, reset and preset value.
is backward (Fig 1b). environments.
Digital outputs
Filtering Missing pulse alarm Both digital output channels can reflect the
The module has a hardware filter which can Both channels can be configured to detect a status of the inputs by indicating:
be used to minimise the effects of contact missing pulse. If no input pulse is detected Frequency or acceleration alarm
bounce. The available settings are 1, 5, 20 kHz for a defined time period an alarm is signalled Counter preset value reached while the
and Off. in the same way as the high/low alarms. The main channel can also output:
alarm is cleared on receipt of a pulse or on Quadrature forward or reverse signal
Alarms reconfiguration of the alarm. The time period Scaled retransmission (a divided by N
High / Low alarms is restarted after each sample period in which version of the input)
High and low alarms can be configured for at least one pulse occurs.
each channel. When the input value goes
beyond an alarm limit, channel and module Line Fault Detect
flags are set, the channel LED flashes and, if Each channel can be configured to sense an
configured, the channels digital output state open or a short circuit condition on inputs. On
will change. detection, the actions are those for the high/
low alarms. On fault, the BIM can: report the
Acceleration alarms frequency value as being at the top or the
An acceleration alarm limit can also be set. bottom of the range, freeze the counter, set
If the limit is exceeded the actions taken are the acceleration to zero; depending on how
identical to those for the high/low alarms. the BIM is configured.
www.ge-ip.com/process 17
8000-2/x Series Modular I/O Overview
Sequence of Events
32-Channel Sequence Of Events, non-isolated, module powered 8127-DI-SE
www.ge-ip.com/process 19
2/2 I/O Modules
RESPONSE TIME
INPUTS Other
MUX
Number of channels
A/D
27 ms (max.) Channel 1 of 8
8, single-ended
P
www.ge-ip.com/process 21
2/2 I/O Modules
15 V inputs
Channels
(each channel)
Open circuit and short circuit detection Channel 1 of 8
POWER SUPPLIES
24 Vdc
CONFIGURABLE PARAMETERS
Alarms
High, high-high, low and low-low
Alarm deadband (hysteresis)
User defined value
Input filter time constant
User defined value
Input dead zone
User defined value
Drive on failsafe
Disabled / upscale / downscale
Channel status
Active / Inactive
Isolation
MODULE SPECIFICATION Channel 1 of 4
Any channel to Railbus 250 V ac rms P
See also System Specification
Open circuit bleed current mV
Railbus
0.5 A (nom.) CJ
INPUTS
Number of channels CONFIGURABLE PARAMETERS
4
Sensor type
THCs types User selectable Field Terminals
B,E,J,K,N,R,S, or T to EN 60584-2, IEC584-2,
Input dead zone (hysteresis)
BS4937; W3 and W5 Recommended Compatible
User defined value Field Wiring
Field Terminal Field Terminal
Input Type Range Overall accuracy Selectable input filtering
Off / 2 reading average / running average 8605-FT-TC
0.1% of span (+10 to +40C) General purpose
mV 0 to +120mV Drive on open circuit fault THC
0.2% of span (40 to +70C)
Disabled / upscale / downscale
< 600C 1.5C + BTA Class 1, Div 2
THC: B 0 to +1820C
600C 0.45C + BTA
Alarms or Zone 2
8605-FT-TC
High and low THC
hazardous area
E 270 to +1000C 0.3C + BTA Channel status
Active / Inactive
J 210 to +1200C 0.3C + BTA
www.ge-ip.com/process 23
2/2 I/O Modules
Input deadzone
accommodated MUX A/D
8132-AI-UN
Input sensors
8 isolated, universal, input channels
2-wire RTD, 3-wire RTD, 2-wire 4-wire Channel 1 of 8
Configurable on a channel by channel Current resistance resistance Tx Tx THC V, mV
www.ge-ip.com/process 25
2/2 I/O Modules
8607-FT-TC
8608-FT-NI
General purpose (See Note)
(No internal CJ)
(Internal CJ)
8608-FT-NI
8607-FT-TC
THC (See Note)
(Internal CJ)
(No internal CJ)
Note: For further advice on field terminals for this module and for
operation with more than one type of sensor, see Technical Support
Note: TSN113 - Getting the most from 8607 and 8608 field terminals.
0 to 25 mA 0 to 25 mA
C error for Tamb = 10C to 40C C error for Tamb = -40C to 70C
Type Range Bottom of range 0C Middle of range Top of range Bottom of range 0C Middle of range Top of range
Pt100 -200C to +850C 0.5 0.9 1.2 2.1 0.6 1.4 2.2 4.3
jPt100 -200C to +650C 0.5 0.9 1.2 1.7 0.6 1.4 2.2 3.5
Pt200 -200C to +850C 0.5 0.8 1.2 2.0 0.6 1.2 2.2 4.2
Pt500 -200C to +850C 0.5 0.8 1.4 2.4 0.6 1.3 2.5 4.8
Ni120 -60C to +250C 0.8 0.6 0.6 0.6 1.1 0.8 1.0 1.0
Cu10 -30C to +220C 3.7 3.9 3.9 4.1 3.8 4.6 4.3 4.5
Ohms Ranges
C error for Tamb = 10C to 40C C error for Tamb = -40C to 70C (for reference)
Full scale
Type Normal operating range Bottom of range Middle of range Top of range Bottom of range Middle of range Top of range
range
B 500 to 1810 6.1 2.9 2.8 10.2 5.0 5.0 0 to +1820
E -200 to 1000 1.3 0.5 0.6 2.3 0.9 1.4 -270 to 1000
J -190 to +1200 1.1 0.6 0.8 2.1 1.2 1.8 -210 to +1200
K -200 to +1372 2.0 0.8 1.3 3.4 1.5 2.6 -270 to +1372
N -190 to +1300 2.7 0.9 1.2 4.4 1.7 2.3 -270 to +1300
T -200 to +400 2.0 0.7 0.6 3.4 1.2 1.1 -270 to +400
Russian K -200 to +1300 2.0 0.8 1.3 3.4 1.2 2.6 -200 to +1300
Russian L -200 to +800 1.0 0.5 1.0 2.1 0.8 2.1 -200 to +800
www.ge-ip.com/process 27
2/2 I/O Modules
SAFETY
Channels
Channel 1 of 8
HART variable and status reporting FM non-incendive field wiring parameters
(each channel) P
Valve positioners and remote Voc = 28.7 V; Isc = 33 mA; Ca = 0.17 F; La = 11.0 mH
P
I
4-20mA
Railbus
indicators, etc.
POWER SUPPLIES 24 Vdc
MECHANICAL
OUTPUTS 8602-FT-ST 8604-FT-FU
General purpose
Module Key Code Standard Fused
Number of channels
A4
8, single-ended
Class 1, Div 2 8603-FT-FU
Module width or Zone 2
8601-FT-NI
Non-incendive
Nominal signal range (span) Non-incendive
42 mm hazardous area Fused
4 to 20 mA
Weight
Full signal range
200 g
1 to 23 mA
Open loop detection threshold
0.7 0.25 mA
Output compliance
20 mA at 21.6V DC supply (into 700 load)
Accuracy (over temp range)
0.25% of span
Output ripple
< 0.02% of span
Resolution
12 bits
Isolation
Any channel to Railbus 100 V ac
CONFIGURABLE PARAMETERS
Initialisation state
Predefined value
Drive on fail-safe
Predefined value/last value
Channel status
Active / Inactive
HART variable and status reporting
Enable / Disable
420 mA Other
Channels
Channel 1 of 8
indicators, etc Railbus (12V) current
P
100 mA (typ.)
Open circuit detection is provided on 150 mA (max.)
P
4-20mA
Railbus
I
each channel Bussed Field Power
24 Vdc
24 V dc bussed field power required 300 mA (max.) at 24 Vdc 10% Bussed Field Power
Quiescent current
60 mA
MODULE SPECIFICATION Field Terminals
See also System Specification
MECHANICAL
Recommended Compatible
Field Wiring
Module Key Code Field Terminal Field Terminal
INPUTS
A4
Number of channels Module width General purpose
8602-FT-ST 8604-FT-FU
8, single-ended Standard Fused
42 mm
Nominal signal range (span) Weight Class 1, Div 2 8603-FT-FU
4 to 20 mA 200 g or Zone 2
8601-FT-NI
Non-incendive
Non-incendive
Full signal range hazardous area Fused
1 to 23 mA
Open loop detection threshold
0.7 0.25 mA
Output compliance
20 mA at 21.6 V dc supply (into 700 load)
Accuracy (over temp range)
0.25% of span
Resolution
12 bits
Isolation
Any channel to Railbus 100 V ac
Between channels None
CONFIGURABLE PARAMETERS
Initialization state
Predefined value
Drive on fail-safe
Predefined value / last value
Channel status
Active / Inactive
RESPONSE TIME
Response Time
From Railbus command to output change
25 ms (max.)
www.ge-ip.com/process 29
2/2 I/O Modules
8109-DI-DC SAFETY
Safe area or Zone 2/
FM non-incendive field wiring parameters Div2 hazardous area
(each channel)
8 discrete isolated inputs Vmax = 30 V; Imax = 100 mA; Ci = 0 F; Li = 0 mH
24 V dc field voltage sources
User definable input threshold POWER SUPPLIES
Railbus (12V) current
Pulse counting option
P
Channel 1 of 8
35 mA (typ.)
55 mA (max.) 24V Railbus
DC
MODULE SPECIFICATION Bussed Field Power
See also System Specification Not required
INPUTS MECHANICAL
Module Key Code Field Terminals
Number of channels
8 B2
Recommended Compatible
Module width Field Wiring
OFF voltage Field Terminal Field Terminal
< 3.2 V dc 42 mm
CONFIGURABLE PARAMETERS
Selectable input filter
Fast, slow or user defined
(User defined permits 0 to 512 ms values in 2ms steps)
Latch inputs
Enable / Disable
Latch polarity
Latch on high / Latch on low
Pulse counting
Enable / Disable
RESPONSE TIME
I/O response time
Field event to new data available on Railbus
3 ms (max.)
POWER SUPPLIES
MODULE SPECIFICATION
See also System Specification Railbus (12V) current
90 mA (typ.)
135 mA (max.) Field Terminals
INPUTS
Bussed Field Power
Number of channels Required Recommended Compatible
Field Wiring
Field Terminal Field Terminal
16
OFF voltage MECHANICAL
8617-FT-NI
< 3.4 V dc General purpose
Module Key Code 16 Channel DI
ON voltage E2
> 11 V dc Class 1, Div 2
Module width 8617-FT-NI
or Zone 2
Wetting current 42 mm hazardous area
16 Channel DI
2.8 mA (nom.) @ 24 V dc
Weight
Minimum pulse width detected 210 g External fusing of the Field Power supply is recommended in order
to protect the field wiring.
5 ms
Max input freq in pulse counting mode (no-debounce)
100 Hz
Maximum voltage
Input 30 V dc
Reverse input -25 V dc
Isolation
Any Channel to railbus 250 V ac
Channel to channel 150 V peak
CONFIGURABLE PARAMETERS
Selectable input filter
Fast, slow or user defined (User defined permits
0 to 512 ms values in 2ms steps)
Latch inputs
Enable / Disable
Latch polarity
Latch on high / latch on low
Pulse counting
Enable / Disable
www.ge-ip.com/process 31
2/2 I/O Modules
8110-DI-DC SAFETY
Safe area or Zone 2/
FM non-incendive field wiring parameters Div2 hazardous area
(each channel)
8 discrete inputs Voc = 30 V; Isc = 15.2 mA; Ca = 0.12 F; La = 151 mH
For dry contact switches
24 V dc provided on input high side POWER SUPPLIES
P
CONFIGURABLE PARAMETERS
Selectable input filter
Fast, slow or user defined
(User defined permits 0 to 512 ms values in 2ms steps)
Latch inputs
Enable / Disable
Latch polarity
Latch on high / latch on low
Pulse counting
Enable / Disable
RESPONSE TIME
I/O response time
Field event to new data available on Railbus
3 ms (max.)
8121-DI-DC SAFETY
Safe area or Zone 2/
FM non-incendive field wiring parameters Div2 hazardous area
(each channel)
16 input channels Voc = 30 V; Isc = 3.5 mA; Ca = 0.12 F; La = 1000 mH
For dry contact switches
24 V dc provided on input high side POWER SUPPLIES
P
Railbus (12V) current
Returns commoned internally Channel 1 of 16
90 mA (typ.)
Pulse counting option 135 mA (max.) Railbus
CONFIGURABLE PARAMETERS
Selectable input filter
Fast, slow or user defined
(User defined permits 0 to 512 ms values in 2ms steps)
Latch inputs
Enable / Disable
Latch polarity
Latch on high / latch on low
Pulse counting
Enable / Disable
RESPONSE TIME
I/O response time
Field event to new data available on Railbus
5 ms (max.)
www.ge-ip.com/process 33
2/2 I/O Modules
Pulse width
1ms to 60s
MODULE SPECIFICATION Safe area or Zone 2/
Line fault detection* Div2 hazardous area
See also System Specification
Open line & short circuit detect /disable
Other
Number of channels Channels
8 (independently configured as inputs or outputs) RESISTANCE MEASUREMENT ACCURACY Channel configured
MUX
as output A/D
(For normally de-energised output open and short-circuit detection)
INPUTS With forward biased test current
P
Channel 1 of 8 Latch
ON/OFF threshold current (3.4%+5.3) for line resistance 220
0.9mA (typ.) Greater of: 7% or (3.1%+27) for line resistance
>220, <1k Railbus
O/C Voltage
24V dc (typ.) - depends on BFP Supply With reverse biased test current
Greater of: 7% or (3.1%+430) 24V dc
Wetting current Bussed Field Power
1.2mA (typ.)
RESPONSE TIME
Minimum pulse width detected
5ms I/P Signal change to availability on Railbus Field Terminals
5ms (max.)
Max input frequency in pulse counting mode
(no debounce) Railbus command to O/P change Recommended Compatible
Field Wiring
Field Terminal Field Terminal
30Hz 1ms (max.)
Isolation (any channel to Railbus) 8604-FT-FU
POWER SUPPLIES 8610-FT-NA
250V ac General purpose Standard
Non-arcing
Fused
Railbus (12V) current
OUTPUTS 50mA (typ.), 70mA (max.) 8611-FT-FU
Non-arching
Maximum Output Current per Channel Bussed Field Power Fused
2A All channels configured as inputs 50mA (max)
Any channels configured as output 50mA + o/p
Maximum Output Current per Module
load currents
Continuous 6A
Non-continuous (<10 seconds) 8A
MECHANICAL
INPUT CONFIGURABLE PARAMETERS Module key code B6
Module width 42mm
Filter time interval Weight 210g
0 to 8s (in 1ms steps)
Earth Leakage Detection Channel
ON / OFF
* Normally de-energised channels only
General The counter wraps around from 65 535 to For normally de-energised outputs, if a single
The 8129-IO-DC Discrete Input/ Output zero without indication. switch fails short circuit, the other switch can
Module provides the interface to 8 channels, energise the load. If either fails open circuit,
which may be configured in any combination Transitions are counted even if the channel is the load cannot be energised.
of discrete inputs and outputs. configured to latching.
Switches are tested by pulsing them ON or
Combined inputs and outputs Earth leakage detection OFF for a maximum of 5 ms the load must
Each of the 8 channels of the 8129-IO-DC Where earth leakage fault detection is not respond to this length of pulse. This test
Discrete Input/Output Module may be config- required, a single channel of an 8129-IO-DC can be disabled if required.
ured, on a channel-by-channel basis, as module must be configured to monitor earth
either an input or an output. leakage and wired to the appropriate termi- Short circuit protection
nals of an 8751-CA-NS Controller Carrier. Channels that are configured as outputs and
When configured as an input, the channel which are short-circuited are protected by
is suitable for use with dry contacts with Input latching over-temperature thermal detection. If an
power supplied from the Module. Inputs can be configured to latch a partic- output channel is short-circuited it will briefly
ular (filtered) input transition and maintain conduct an over specification current, but
When configured as an output, the channel is the output in the latched state until the latch this will be identified by the thermal detection
capable of switching up to 2.0A (maximum of is cleared. Normal Polarity will latch a tran- and the relevant channel made inactive.
6.0A continuous per module). Output channels sition from 0 to 1 as 1, Inverse Polarity will
are used with solenoids, valves and alarms. latch a transition 1 to 0 as 0. The operation is Pulsed output
described in figure 1. Output channels can be configured to give
Diagnostics a pulsed output of either single static,
Comprehensive diagnostic tests are Normally energised and normally single dynamic, continuous or continuous
performed on the module and each of its de-energised outputs dynamic form.
channels, including tests for stuck ON and Individual output channels can be either
stuck OFF output switches. normally energised or de-energised. Each The single static pulse is ON for a predeter-
output channel comprises 2 switches that mined time. It then remains OFF until a new
Live maintenance operate in series with the load one on the pulse instruction is received.
The field wiring connections to the 8129-IO-DC supply line, the other on the return
Discrete I/O Module are classified as non- The single dynamic pulse is ON for a period
sparking and can only be worked on in a For normally energised outputs, if a single that may be changed by the application, then
Class 1, Division 2 or Zone 2 hazardous area switch fails short circuit, the other switch can remains OFF until a new instruction to write
once the Bussed Field Power connection has still de-energise the load. If either fails open is received.
been isolated. circuit, the load will be immediately de-ener-
gised by the fault.
Note: the Bussed Field Power connection
must also be isolated before removing or
replacing the module. Time
Input configuration 1
Input channels are used to interface to volt
Filtered Input State
free contacts. Line fault detection can be
turned OFF or can detect open circuits or 0
both open and short.
Input filtering 1
A change in the input state is recorded only Recorded State
if the states observed at the start and end of (normal polarity)
the filter time interval are the same. If they 0
are different the previous state is maintained.
(This reduces the chance of noise being incor-
rectly interpreted as a change of input value).
1
The filter time interval can be configured
Recorded State
between 0 and 8s, in 1ms intervals. (inverse polarity)
0
Input transition counting
A counter can record the number of filtered
transitions of a particular type. Depending Latch Enable Reset Latch Reset Latch
on the polarity setting, the counter will either
count transitions from 0 to 1, or from 1 to 0.
Figure 1 Recording of input states
www.ge-ip.com/process 35
2/2 I/O Modules
In continuous pulse mode a series of pulses Short circuit line fault detection can be
of defined ON period are sent, with a defined enabled with forward or reverse biased test
OFF period between. Series currents. With forward biased test currents,
3.3k End of line
10k
the threshold at which a short circuit fault
Continuous dynamic pulse mode allows the is reported is configurable up to 1k. With
application to continually vary the ON and reverse biased test currents, the threshold is
OFF times of the pulse train. fixed at 1.95k.
Figure 3 LFD resistor values
For all types of Pulsed Output, the ON time Module operating states
of the pulse may be between 0 and 60s in The nominal resistance thresholds employed Input Failsafe mode
1ms intervals. are shown in the table below. The module supports failsafe mode as defined
in the earlier I/O module introductory section.
For the continuous pulse mode, the OFF Resistance Value
period can be set between 0 and 60s, in Open circuit > 30k Output Failsafe mode
1ms intervals. Open circuit > 6.5k The module supports failsafe mode as
Closed circuit < 6.5k defined in the earlier I/O module introductory
Pre-configured output patterns Short circuit < 1.95k section, with the following two additions:
A number of different, pre-defined output 1) Channel using Configured failsafe values
patterns are available, which can be used to Output channel line fault detection In this mode, the module will force the
indicate the occurrence of different events, Line fault detection (LFD) for open and/or outputs to predefined levels defined on a
using the same alarm hardware. The patterns short circuit line faults can optionally be per channel basis.
comply with the requirements of NFPA 72 enabled for normally de-energised outputs.
and are shown in Figure 2. (Normally energised loads would be deen- On entering failsafe:
ergised by either open or short circuit line
Input channel line fault detection faults, of these only short circuit faults will be a) If channel is in Static mode of operation:
Line fault detection (LFD) for open and short detected and reported by the IO Module). Pulse mode is disabled and the channel
circuit line faults will normally be enabled for is configured as a latched output and is
safety related input channels. Series resistors An open circuit fault will be reported for line driven to its failsafe value.
are required for short circuit detection and resistances above 30k. b) If channel is in Dynamic mode of operation:
end of line resistors for open circuit detection, If in single pulse (momentary) mode, the
as shown in figure 3. configuration is not cleared, but the output
is driven to its failsafe value.
On leaving failsafe:
(a) Fire Alarm Channel will adopt the mode defined
below for a channel going from inactive
to active state
0.5 0.5
sec sec
1.5
sec 2) Channel using Hold last value
If the module goes into failsafe during a
(b) Supervisory single pulse, it is allowed to complete the
pulse before adopting the failsafe state. A
latched (discrete) output will remain at its
current value.
0.5 0.5 2.0
sec sec sec
Visual indicators
(c) Trouble For the operation of the Power and Fault
LEDs see IO Module Overview.
42 mm Channel 1 of 8
Weight 115V
L
Railbus
INPUTS
Field Terminals
Number of channels
8 Recommended Compatible
Field Wiring
OFF voltage Field Terminal Field Terminal
< 34 V ac
ON voltage 8602-FT-ST 8604-FT-FU
General purpose
Standard Fused
> 84 V ac
Wetting current Class 1, Div 2 8611-FT-FU
8601-FT-NA
2 mA (nom.) @ 115 V ac or Zone 2 Non-arching
Non-arching
hazardous area Fused
Maximum input voltage
130 V ac
External fusing of the Field Power supply is recommended in order
Frequency to protect the field wiring.
50 / 60 Hz
CONFIGURABLE PARAMETERS
Selectable input filter
Fast, slow or user defined
(User defined permits 0 to 512 ms values in 2ms steps)
Latch inputs
Enable / Disable
Latch polarity
Latch on high / latch on low
Pulse counting
Enable / Disable
RESPONSE TIME
I/O response time
Field event to new data available on Railbus
33 ms (max.)
POWER SUPPLIES
Railbus (12V) current
40 mA (typ.)
60 mA (max.)
www.ge-ip.com/process 37
2/2 I/O Modules
8112-DI-AC Frequency
50 / 60 Hz Safe area or Zone 2/
Div2 hazardous area
8 discrete inputs MECHANICAL
For dry contact switches. Module Key Code
E1
115 V ac provided on input high side P
MODULE SPECIFICATION
See also System Specification
Field Terminals
CONFIGURABLE PARAMETERS
Selectable input filter
Fast, slow or user defined
(User defined permits 0 to 512 ms values in 2ms steps)
Latch inputs
Enable / Disable
Latch polarity
Latch on high / latch on low
Pulse counting
Enable / Disable
RESPONSE TIME
I/O response time
Field event to new data available on Railbus
33 ms (max.)
POWER SUPPLIES
Railbus (12V) current
40 mA (typ.)
60 mA (max.)
Bussed Field Power
115 V ac 10%
42 mm Channel 1 of 8
Weight 230V
L
Railbus
AC
MODULE SPECIFICATION 170 g N
INPUTS
Field Terminals
Number of channels
8 Recommended Compatible
Field Wiring
OFF voltage Field Terminal Field Terminal
< 68 V ac
ON voltage 8602-FT-ST 8604-FT-FU
General purpose
Standard Fused
> 168 V ac
Wetting current Class 1, Div 2 8611-FT-FU
8610-FT-NI
1 mA (nom.) @ 230 V ac or Zone 2 Non-arching
Non-arching
hazardous area Fused
Maximum input voltage
265 V ac
External fusing of the Field Power supply is recommended in order
Frequency to protect the field wiring.
50 / 60 Hz
CONFIGURABLE PARAMETERS
Selectable input filter
Fast, slow or user defined
(User defined permits 0 to 512 ms values in 2ms steps)
Latch inputs
Enable / Disable
Latch polarity
Latch on high / latch on low
Pulse counting
Enable / Disable
RESPONSE TIME
I/O response time
Field event to new data available on Railbus
33 ms (max.)
POWER SUPPLIES
Railbus (12V) current
40 mA (typ.)
60 mA (max.)
www.ge-ip.com/process 39
2/2 I/O Modules
8114-DI-AC Frequency
50 / 60 Hz Safe area or Zone 2/
Div2 hazardous area
8 discrete inputs MECHANICAL
For dry contact switches. Module Key Code
E2
230 V ac provided on input high side P
MODULE SPECIFICATION
See also System Specification
Field Terminals
CONFIGURABLE PARAMETERS
Selectable input filter
Fast, slow or user defined
(User defined permits 0 to 512 ms values in 2ms steps)
Latch inputs
Enable / Disable
Latch polarity
Latch on high / latch on low
Pulse counting
Enable / Disable
RESPONSE TIME
I/O response time
Field event to new data available on Railbus
33 ms (max.)
POWER SUPPLIES
Railbus (12V) current
40 mA (typ.)
60 mA (max.)
Bussed Field Power
207 to 265 V ac
Not required N
MODULE SPECIFICATION
See also System Specification MECHANICAL
Module Key Code
INPUTS E3, non-arcing Field Terminals
CONFIGURABLE PARAMETERS
Latch inputs
Enable / disable
Latch polarity
Latch on high / latch on low
Pulse counting
Enable / disable
ELECTRICAL ISOLATION
Channel to railbus
275V ac (max)
Between blocks (1-4, 5-8, 9-12, 13-16)
275V ac (max)
Channel to Channel and Ch+ to Ch- within one block
Ch. 1-4, 5-8, 9-12, 13-16
130V ac (max)
www.ge-ip.com/process 41
2/2 I/O Modules
Channel 1 of 8
Discrete or pulsed outputs MECHANICAL +
Railbus
42 mm
MODULE SPECIFICATION
Weight
See also System Specification
200 g Field Terminals
Continuous* 1 A
For < 100 ms 4 A
For < 20 ms 6 A
CONFIGURABLE PARAMETERS
Output initialisation state
Predefined value
Fail-safe
Predefined value / last value
Output
Discrete, momentary or continuous pulse
Pulse width
2 ms to 130 s
RESPONSE TIME
Response time
From Railbus command to output change
1 ms (max.)
The total instantaneous switched current should not exceed the
following:
10 A for < 100 ms
18 A for < 20 ms
* Limited to 6 A per module
Consult GE for availability
www.ge-ip.com/process 43
2/2 I/O Modules
Channel 1 of 8
Railbus (12V) current
Discrete or pulsed outputs
75 mA (typ.) L
MECHANICAL
MODULE SPECIFICATION Module Key Code Field Terminals
See also System Specification F1
Recommended Compatible
Module width Field Wiring
Field Terminal Field Terminal
Outputs 42 mm
Number of channels Weight 8604-FT-FU 8602-FS-ST
General purpose
8 220 g Fused Standard
CONFIGURABLE PARAMETERS
Output initialisation state
Predefined value
Fail-safe
Predefined value / last value
Output
Discrete, momentary or continuous pulse
Pulse width
2 ms to 130 s Stated figures are for operation with unfused field terminal. When
operating with 2 A fused field terminal part no. 8604-FT-FU,
maximum switched current is 5 A inrush for <10 ms pulse width at
0.1% duty cycle and <108 operations
* Limited to 3 A per module.
Consult GE for availability
Load
Module width
42 mm
MODULE SPECIFICATION
See also System Specification Weight
200 g Field Terminals
CONFIGURABLE PARAMETERS
Output initialisation state
Predefined value
Fail-safe
Predefined value / last value
Output
Discrete, momentary or continuous pulse
Pulse width
2 ms to 130 s
RESPONSE TIME
Response time
From Railbus command to output change
3 ms (max.)
www.ge-ip.com/process 45
2/2 I/O Modules
75 mA (typ.)
Discrete or pulsed outputs 125 mA (max.) 20 to
L
265V Railbus
1A per channel switched Bussed Field Power
AC
N
Load
Not required
CONFIGURABLE PARAMETERS
Output initialisation state
Predefined value
Fail-safe
Predefined value / last value
Output
Discrete, momentary or continuous pulse
Pulse width
2 ms to 130 s
CONFIGURABLE PARAMETERS
Channel Status*
Active / Inactive
Output initialization state
Predefined value
Fail-safe
Predefined value / last value
Output
Discrete, momentary or continuous pulse
Pulse width
500ms to 60s
www.ge-ip.com/process 47
2/2 I/O Modules
pulse detection 4 10
MODULE SPECIFICATION
See also System Specification
Terminal Description
DYNAMIC DATA (READ ONLY) POWER - Green LED
1 Current input OFF ON FLASHING
PROCESS VALUES
2 Voltage input
Frequency Power failure Power OK Not Applicable
3 NAMUR input Channel #1
16 bit unsigned
4 Common
Count FAULT - Red LED
5 Power supply +ve
32 bit signed OFF ON FLASHING
6 Power supply + ve
Acceleration In running state Fault
Awaiting module
7 Current input training
16 bit signed
8 Voltage input Channel #2
STATUS VALUES 9 NAMUR input PULSE INPUT CHANNEL - Yellow LED
Frequency/acceleration alarms 10 Common OFF ON FLASHING
High / Low Channel active and Channel active but in
11 NAMUR gate/control input Channel inactive
Missing pulse detect operating normally alarm condition
12 Common
Line fault detect Channel #1
13 Output +ve DIGITAL OUTPUT CHANNEL - Yellow LED
Open / Short circuit
14 Output -ve OFF ON FLASHING
Quadrature direction 15 Output +ve Channel active and
1 =clockwise, 2 =anti-clockwise Channel #2 Channel inactive
operating normally
Not applicable
16 Output -ve
www.ge-ip.com/process 49
2/2 I/O Modules
250 V ac 9k
Channel
1 of 32
8 kHz Railbus
www.ge-ip.com/process 51
2/2 I/O Modules
www.ge-ip.com/process 53
2/1 I/O Modules
HART variable and status reporting Analog signal change to availability on Railbus Railbus
CONFIGURABLE PARAMETERS
Alarms
High, high-high, low, low-low
Alarm deadband (hysteresis)
User defined value
Input filter time constant
User defined value
Input dead zone
User defined value
www.ge-ip.com/process 55
2/1 I/O Modules
CONFIGURABLE PARAMETERS
MODULE SPECIFICATION Sensor type
See also System Specification User selectable Field Terminals
Alarms
INPUTS High and low Field Wiring Type Recommended Field Terminal
Number of channels Input dead zone
8 User defined value Intrinsically safe
8626-FT-IS
RTD inputs Selectable input filtering standard
(2-, 3- or 4-wire) Off / 2 reading average / running average
Pt100, Pt500 to BS EN60751: 1996 Drive on open circuit fault
Ni120 to DIN 43 760: 1985 Disabled / upscale / downscale MECHANICAL
jPt100 to JIS C1604: 1981
Channel status Module Key Code
User definable linearisation table, note 1
Active / Inactive C3
Offset (2-wire RTD mode) Module width
RTD input
User defined value 42 mm
Input type Range Weight
Pt100, Pt500 -200 to +850 C RESPONSE TIME 245 g
jPt100 -200 to +650 C Signal change to availability on Railbus
Ni120 -60 to +250 C 600 ms (max.)
www.ge-ip.com/process 57
2/1 I/O Modules
1 s per channel P
4-20mA
SAFETY
MODULE SPECIFICATION Location of module
See also System Specification Field wiring protection Field Terminals
[EEx ia] IIC
OUTPUTS Safety description (each channel) Field Wiring Type Recommended Field Terminal
Vo = 24.6 V, Io = 93 mA, Po = 0.57 W
Number of channels
8 FM entity parameters
Intrinsically safe
Voc 24.6 V dc, Isc 93 mA 8621-FT-IS
Nominal signal range (span) standard
Ca 0.42 F, La 4.2 mH
4 to 20 mA
Full signal range Intrinsically safe
POWER SUPPLIES loop disconnect
8622-FT-IS
1 to 22 mA
IS Railbus (12V) current
Voltage to load
All channels @ 22 mA into 650 load) 630 mA
13 V min. @ 20 mA
Power dissipation within module
Load resistance
4.1 W (max.)
0 to 650 max.
Accuracy (@ 25 C) MECHANICAL
20 A
Module Key Code
Temperature stability
A4
(-40C to + 70 C) 0.006% of span per C
Module width
Resolution
42 mm
12 bits
Weight
Open circuit detection threshold
265 g
> 685 (typ.)
(also detects loads greater than driveable range)
Isolation
Any channel to Railbus 60 V ac
Between channels) None
CONFIGURABLE PARAMETERS
Output initialisation state
Predefined value
Drive on fail-safe
Upscale / downscale / last value
Channel status
Active / Inactive
* Time to reach 90% level for 4-20 mA step into 650 load
8204-HO-IS SAFETY
hazardous area Safe area or Zone 2/
Field wiring protection Zone 0/DIV1 Div2 hazardous area
[EEx ia] IIC
8 single-ended ouput channels
Safety description
Intrinsically safe Vo = 24.6 V, Io = 93 mA, Po = 0.57 W
Conventional 420 mA #
POWER SUPPLIES
Open-circuit field wiring detection Channel 1 of 8
OUTPUTS MECHANICAL
Field Terminals
Number of channels Module Key Code
8 A4
Field Wiring Type Recommended Field Terminal
Nominal signal range (span) Module width
-4 to 20 mA 42 mm
Full signal range Weight Intrinsically safe
8621-FT-IS
standard
1 to 22 mA 245 g
Voltage to load
Intrinsically safe
13 V min. @ 20 mA 8622-FT-IS
loop disconnect
Load resistance
450 max.
Accuracy (@ 25 C)
20 A
Temperature stability
(-40C to +70 C) 0.006% of span per C
Resolution
12 bits
Open circuit detection threshold
0.7 mA 0.2 mA
Isolation
Any channel to Railbus 60 V ac
Between channels None
CONFIGURABLE PARAMETERS
Output initialisation state
Predefined value
Drive on fail-safe
Upscale / downscale / last value
Channel status
Active / Inactive
www.ge-ip.com/process 59
2/1 I/O Modules
SAFETY
MODULE SPECIFICATION
See also System Specification Field wiring protection
[EEx ia] IIC Field Terminals
INPUTS Safety Description (each channel)
Uo = 10.5 V, Io = 14 mA, Po = 0.04 W Field Wiring Type Recommended Field Terminal
Number of channels
FM Entity parameters
16
VOC 10.5 V dc, ISC 14 mA Intrinsically safe,
OFF current Ca 2.67 F, La 176 mH 16-channel
8623-FT-IS
<1.2 mA
Isolation
ON current Any channel to Railbus) 60 V ac Intrinsically safe,
>2.1 mA (channels arranged in two groups of eight, with returns commoned 8-channel loop 8624-FT-IS
within each group) disconnect
Switching hysteresis
200 A (nom.)
POWER SUPPLIES
Applicable specifications
NAMUR, DIN19234 IS Railbus (12V) current
(16-channel mode) 350 mA (max.)
Voltage applied to sensor
(8-channel mode) 285 mA (max.)
7.0 to 9.0 V from 1 k 10%
Output (wetting) current MECHANICAL
@ 100 line impedance
>6 mA Module Key Code
B1
Line fault detection
Short circuit Module width
<100 42 mm
Open circuit Weight
>90 k 170 g
Maximum input frequency in pulse counting mode
20 Hz
Minimum pulse width detected
45 ms
CONFIGURABLE PARAMETERS
Selectable input filter
Fast, slow or user defined
(User defined permits 0 to 512 ms values in 3ms steps)
Latch inputs
Enable / Disable
25 V MECHANICAL
Current limit per channel 10 20 30 40 50
Module Key Code
45 mA (min.) Output current (mA)
B5
Output supply ripple
Module width
<0.5% of output (pk. to pk.)
42 mm Field Terminals
Line fault detection
Weight
Short circuit <15
220 g Field Wiring Type Recommended Field Terminal
Open circuit >13 k
Isolation
Any channel to Railbus 60 V ac Intrinsically safe
8621-FT-IS
standard
Between channels None
www.ge-ip.com/process 61
2/1 I/O Modules
output channels
Input Sensors
2- and 3-wire pulse transmitter format 5 6
4-20mA 4-20mA 4-20mA
MODULE SPECIFICATION
See also System Specification
www.ge-ip.com/process 63
2/1 I/O Modules
LED INDICATORS
www.ge-ip.com/process 65
About GE Intelligent Platforms
GE Intelligent Platforms, a General Electric Company (NYSE: GE), is an experienced high-performance
technology company and a global provider of hardware, software, services, and expertise in automation
and embedded computing. We offer a unique foundation of agile, advanced and ultra-reliable technology
that provides customers a sustainable advantage in the industries they serve, including energy, water,
consumer packaged goods, government and defense, and telecommunications. GE Intelligent Platforms
is a worldwide company headquartered in Charlottesville, VA and is part of GE Home and Business Solutions.
For more information, visit www.ge-ip.com.
www.ge-ip.com