0% found this document useful (0 votes)

524 views

ControlLogix Redundancy Enhanced

Overview of the Rockwell PLC with Redundancy Enhanced features.

Uploaded by

pmmdavid

Available Formats

Download as PDF, TXT or read online on Scribd

0% found this document useful (0 votes)

524 views

ControlLogix Redundancy Enhanced

Overview of the Rockwell PLC with Redundancy Enhanced features.

Uploaded by

pmmdavid

Available Formats

Download as PDF, TXT or read online on Scribd

You are on page 1/ 296

User Manual

ControlLogix Enhanced Redundancy System

Catalog Numbers 1756-RM, 1756-RMXT, 1756-RM2, 1756-RM2XT

Important User Information

Solid-state equipment has operational characteristics differing from those of electromechanical equipment. Safety Guidelines for the Application, Installation and Maintenance of Solid State Controls (publication SGI-1.1 available from your local Rockwell Automation sales office or online at http://www.rockwellautomation.com/literature/) describes some important differences between solid-state equipment and hard-wired electromechanical devices. Because of this difference, and also because of the wide variety of uses for solid-state equipment, all persons responsible for applying this equipment must satisfy themselves that each intended application of this equipment is acceptable. In no event will Rockwell Automation, Inc. be responsible or liable for indirect or consequential damages resulting from the use or application of this equipment. The examples and diagrams in this manual are included solely for illustrative purposes. Because of the many variables and requirements associated with any particular installation, Rockwell Automation, Inc. cannot assume responsibility or liability for actual use based on the examples and diagrams. No patent liability is assumed by Rockwell Automation, Inc. with respect to use of information, circuits, equipment, or software described in this manual. Reproduction of the contents of this manual, in whole or in part, without written permission of Rockwell Automation, Inc., is prohibited. Throughout this manual, when necessary, we use notes to make you aware of safety considerations. WARNING: Identifies information about practices or circumstances that can cause an explosion in a hazardous environment, which may lead to personal injury or death, property damage, or economic loss. ATTENTION: Identifies information about practices or circumstances that can lead to personal injury or death, property damage, or economic loss. Attentions help you identify a hazard, avoid a hazard, and recognize the consequence. SHOCK HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that dangerous voltage may be present. BURN HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that surfaces may reach dangerous temperatures. IMPORTANT Identifies information that is critical for successful application and understanding of the product.

Allen-Bradley, ControlFLASH, ControlLogix, FactoryTalk, PanelView, PhaseManager, Rockwell Software, Rockwell Automation, RSLinx, RSLogix, RSNetWorx, VersaView, RSView32, Logix5000, ControlLogix-XT, Integrated Architecture, Stratix 8000, PowerFlex, POINT I/O are trademarks of Rockwell Automation, Inc. Trademarks not belonging to Rockwell Automation are property of their respective companies.

Summary of Changes
This publication contains new and updated information. Changes throughout this revision are marked by change bars, as shown to the right of this paragraph.

New and Updated Information

This table contains the changes made to this publication revision.

Table 1 - New and Updated Information
Topic This publication includes the addition of the 1756-RM2/A and 1756-RM2XT modules. 1756-RM2/A or 1756-RM2XT modules can only be used with other 1756-RM2/A or 1756-RM2XT modules. You cannot mix 1756-RM2/A and 1756-RM2XT modules with 1756-RM/A, 1756-RM/B or 1756-RMXT modules. References throughout the manual to specific redundancy module catalog numbers have been replaced with redundancy module. This manual includes SIL2 application information. Features of enhanced redundancy system using 1756-RM2/A module. Replace 1756-RM/B redundancy modules with 1756-RM2/A redundancy modules without initiating a switchover. Fiber channels will experience a delay during a switchover, but will remain synched. 1756-RM2/A restrictions. Added 1756-RM2/A and 1756-RM2XT information; important revision information changes for the 1756-RM2/A and 1756-RM2XT modules. The revision has been updated wherever the 1756-L7x controller appears in this manual to 19.053. Added new firmware bundles 20.054_kit1, 19.053_kit1, and 19.081_kit1. Use newest version of RMCT when using 1756-RM2/A redundancy module. Added the 1756-RM2/A and 1756-RM2XT modules and installation requirements. Added the statement: 1756-RM2/A or 1756-RM2XT modules can only be used with other 1756-RM2/A or 1756-RM2XT modules. You cannot mix 1756-RM2/A and 1756RM2XT modules with 1756-RM/A, 1756-RM/B or 1756-RMXT modules. Environment and Enclosure change. Small form-factor pluggable warning. Added new 1756-RM2/A and 1756-RM2XT module graphics. Added installation instructions. Added information about connecting fiber-optic cable to redundancy channels and using redundant fiber cabling. Updated fiber-optic cable information for new redundancy modules. Updated the graphics for the redundant fiber-optic cable. Updated the graphics for the redundant fiber-optic cable. Using dual fiber ports with the 1756-RM2 redundancy modules Crossload times when using a 1756-L7x and a 1756-RM2/A redundancy module. Using a 1756-L7x controller with a 1756-RM2/A redundancy module. Status indicators for 1756-RM2/A and 1756-RM2XT. 1756-RM2/A and 1756-RM2XT status indicators. CH1 status indicator. CH2 status indicator. 13 16 20 Page

22 24 27 49 54 57 57

58 59 61 62 64 67 68 69 138 151 152 200 227 229 229

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Summary of Changes

Table 1 - New and Updated Information

Topic SFP error message. Added missing Module Status Display descriptions for the 1756-RM/A and 1756-RM/B modules. Replace 1756-RM/B redundancy modules with 1756-RM2/A redundancy modules without initiating a switchover. Page 230 231 264

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Table of Contents
Preface About Enhanced Redundancy Systems
Additional Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

Chapter 1
Features of the ControlLogix Enhanced Redundancy System . . . . . . . . Enhanced Redundancy System Components . . . . . . . . . . . . . . . . . . . . . . . I/O Modules in Enhanced Redundancy Systems . . . . . . . . . . . . . . . . Enhanced Redundancy System Operations . . . . . . . . . . . . . . . . . . . . . . . . . System Qualification and Synchronization . . . . . . . . . . . . . . . . . . . . . Switchovers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Restrictions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 17 18 19 19 20 22

Chapter 2 Design an Enhanced Redundancy System

Components of an Enhanced Redundancy System . . . . . . . . . . . . . . . . . . Redundant Chassis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Controllers in Redundant Chassis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Redundancy Modules in Redundant Chassis. . . . . . . . . . . . . . . . . . . . Communication Modules in Redundant Chassis. . . . . . . . . . . . . . . . Power Supplies and Redundant Power Supplies in Enhanced Redundancy Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . EtherNet/IP Networks with Redundant Systems . . . . . . . . . . . . . . . . . . . EtherNet/IP Network Features in an Enhanced Redundancy System, Revision 19.052 or Later . . . . . . . . . . . . . . . . . . IP Address Swapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Unicast Functionality. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Possible Communication Delays on EtherNet/IP Networks . . . . . ControlNet Networks with Redundant Systems . . . . . . . . . . . . . . . . . . . . ControlNet Network Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . Redundant ControlNet Media . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Other Communication Networks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . I/O Placement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1715 Redundant I/O Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Using HMI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . HMI Connected via an EtherNet/IP Network. . . . . . . . . . . . . . . . . . HMI Connected via a ControlNet Network. . . . . . . . . . . . . . . . . . . . Firmware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Software Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Required Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Optional Software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 28 29 31 32 34 35 35 36 36 36 38 38 41 42 44 44 46 46 47 49 49 49 50

Chapter 3 Install the Enhanced Redundancy System

Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Enhanced Redundancy System Quick Start . . . . . . . . . . . . . . . . . . . . . Install an Enhanced Redundancy System . . . . . . . . . . . . . . . . . . . . . . . . . . . Step 1: Install the Software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

51 51 53 53
5

Table of Contents

Install the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Add the EDS Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Step 2: Install the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Install the First Chassis and its Components . . . . . . . . . . . . . . . . . . . . Install the Chassis and Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . Install the Communication Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . Install a Controller. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Install the Redundancy Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Environment and Enclosure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Prevent Electrostatic Discharge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Removal and Insertion Under Power (RIUP) . . . . . . . . . . . . . . . . . . . European Hazardous Location Approval . . . . . . . . . . . . . . . . . . . . . Safety-related Programmable Electronic Systems . . . . . . . . . . . . . . . . Optical Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Small Form-factor Pluggable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . North American Hazardous Location Approval . . . . . . . . . . . . . . . . . Laser Radiation Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Install the Second Chassis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Step 3: Connect the Redundancy Modules via a Fiber-optic Cable . . . . Connect the Fiber-optic Communication Cable to Redundant Channels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Connect the Fiber-optic Communication Cable to Single Channels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Fiber-optic Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Step 4: Update Redundant Chassis Firmware . . . . . . . . . . . . . . . . . . . . . . . Upgrade the Firmware in the First Chassis . . . . . . . . . . . . . . . . . . . . . . Upgrade the Firmware in the Second Chassis . . . . . . . . . . . . . . . . . . . Step 5: Designate the Primary and Secondary Chassis. . . . . . . . . . . . . . . . After Designation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Conversion from a Nonredundant to a Redundant System . . . . . . . Qualification Status via the RMCT . . . . . . . . . . . . . . . . . . . . . . . . . . . . Reset the Redundancy Module. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Remove or Replace the Redundancy Module . . . . . . . . . . . . . . . . . . . .

53 54 54 54 55 56 56 57 58 58 58 58 59 59 59 60 60 63 63 65 66 67 67 68 71 71 73 73 74 75 75

Chapter 4 Configure the EtherNet/IP Network

Requested Packet Interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CPU Usage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Use IP Address Swapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Static versus Dynamic IP Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . Reset the IP Address for an EtherNet/IP Communication Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Use CIP Sync . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Use Produce/Consume Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Configure EtherNet/IP Communication Modules in a Redundant System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 77 77 80 80 81 84 85 85

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Table of Contents

Options for Setting the IP Addresses of EtherNet/IP Communication Modules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Half/Full Duplex Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Use An Enhanced Redundancy System in a Device-level Ring Topology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87

Chapter 5 Configure the ControlNet Network

Produce/Consume Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93 Network Update Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 NUTs with Multiple ControlNet Networks. . . . . . . . . . . . . . . . . . . . 95 Use a Scheduled or Unscheduled Network . . . . . . . . . . . . . . . . . . . . . . . . . 97 Use a Scheduled Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 Use an Unscheduled Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 Add Remote ControlNet Modules While Online . . . . . . . . . . . . . . . 98 Schedule a New Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 Update an Existing Scheduled Network . . . . . . . . . . . . . . . . . . . . . . . . . . . 100 Check the Network Keeper States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101 Save the Project for Each Primary Controller . . . . . . . . . . . . . . . . . . 102 Automatic Keeper Crossloads . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102

Appendix A Status Indicators

Redundancy Module Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1756-RM2/A and 1756-RM2XT Status Indicators. . . . . . . . . . . . . 1756-RM/A and 1756-RM/B Status Indicators . . . . . . . . . . . . . . . . Redundancy Module Fault Codes and Display Messages . . . . . . . . Recovery Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 227 227 230 233 235

Appendix B Event Log Descriptions Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System
Event Log Descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237

Appendix C
Upgrade from a Standard Redundancy System . . . . . . . . . . . . . . . . . . . . . Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Upgrade System Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Upgrade the System Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Upgrade the Controllers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Replace Communication Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . Steps After System Components Upgrade . . . . . . . . . . . . . . . . . . . . . Upgrade Ethernet Modules When Rotary Switches Are Set between 2254. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Upgrade by Using Redundancy System Update . . . . . . . . . . . . . . . . . . . . Replace 1756-RM/A or 1756-RM/B Redundancy Modules with 1756-RM2/A Redundancy Modules . . . . . . . . . . . . . . . . . . . . . . . . . . 239 239 240 241 241 242 243 244 250 264

Appendix D Convert from a Nonredundant System

Update the Configuration in RSLogix 5000 Software . . . . . . . . . . . . . . Replace Local I/O Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Replace Aliases to Local I/O Tags. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Remove Other Modules from the Controller Chassis . . . . . . . . . . . . . . . Add an Identical Chassis . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Upgrade to Enhanced Redundancy Firmware . . . . . . . . . . . . . . . . . . . . . . Update the Controller Revision and Download the Project . . . . . . . . . 266 268 269 270 271 271 271

Appendix E Redundancy Object Attributes Enhanced Redundancy System Checklists

Redundancy Object Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273

Appendix F
Chassis Configuration Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Remote I/O Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Redundancy Module Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ControlLogix Controller Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . ControlNet Checklist. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . EtherNet/IP Module Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Project and Programming Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . .
Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

277 278 278 279 279 280 281

Table of Contents

Appendix G Enhanced Redundancy Revision History Index

Changes to This Manual. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Table of Contents

Notes:

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Preface
This publication provides this information specific to enhanced redundancy systems: Design and planning considerations Installation procedures Configuration procedures Maintenance and troubleshooting methods This publication is designed for use by anyone responsible for planning and implementing a ControlLogix enhanced redundancy system: Application engineers Control engineers Instrumentation technicians The contents of this publication are for those who already have an understanding of Logix5000 control systems, programming techniques, and communication networks.

IMPORTANT

The 1756-RM2/A and 1756-RM2XT modules are interference-free with regard to safety functions and can be used in ControlLogix SIL2 applications.

Additional Resources
Table 2 - Additional Documentation Resource

These documents contain additional information concerning related products from Rockwell Automation.
Description
Contains specifications on ControlLogix controllers and redundancy modules. Contains specifications on a Redundant I/O system. Contains information on how to install, configure, program, operate and troubleshoot a Redundant I/O system. Contains information on how to install, configure, program, and operate a ControlLogix system. Contains information on RSLogix 5000 programming instructions. Provides detailed information about how to use ControlLogix controllers. Contains information on how to upgrade module firmware. Provides general guidelines for installing a Rockwell Automation industrial system. Provides declarations of conformity, certificates, and other certification details.

1756 ControlLogix Controllers Specifications Technical Data, publication 1756-TD001 1715 Redundant I/O Specifications, publication 1715-TD001 1715 Redundant I/O System User Manual, publication 1715-UM001 ControlLogix Controllers User Manual, publication 1756-UM001 Logix5000 Controllers General Instructions Reference Manual, publication 1756-RM003 Logix5000 Controllers Quick Start, publication 1756-QS001. ControlFLASH Firmware Upgrade Kit Quick Start, publication 1756-QS105 Industrial Automation Wiring and Grounding Guidelines, publication 1770-4.1 Product Certifications website, http://www.ab.com

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Preface

The following publications provide specific information about communication module connections.
Table 3 - Additional Documentation
Resources 1756 Communication Modules Specifications Technical Data, publication 1756-TD003 ControlNet Modules in Logix5000 Control Systems User Manual, publication CNET-UM001 EtherNet/IP Modules in Logix5000 Control Systems, publication ENET-UM001 Ethernet Design Considerations for Control System Networks, publication ENET-SO001 Description Describes Ethernet communication module specifications. Describes ControlNet modules and how to use ControlNet modules with a Logix5000 controller. Describes how to use EtherNet/IP communication modules with your Logix5000 controller and communicate with various devices on the Ethernet network. Provides fundamental best-practice guidelines for designing the Ethernet infrastructure for your Supervisory Controls and Data Acquisition (SCADA) and MES (Manufacturing Execution Systems) systems with Rockwell Automation software and hardware products. Describes how to configure and implement a device-level ring topology. Describes the socket interface used to program MSG instructions to communicate between a Logix5000 controller via an EtherNet/IP module and Ethernet devices that do not support the EtherNet/IP application protocol, such as bar code scanners, RFID readers, or other standard Ethernet devices.

EtherNet/IP Embedded Switch Technology Application Guide, publication ENET-AP005 EtherNet/IP Socket Interface Application Technique, publication ENET-AT002

You can view or download publications at http:// www.rockwellautomation.com/literature/. To order paper copies of technical documentation, contact your local Allen-Bradley distributor or Rockwell Automation sales representative.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter

About Enhanced Redundancy Systems

Topic Features of the ControlLogix Enhanced Redundancy System Enhanced Redundancy System Components Enhanced Redundancy System Operations Restrictions

Page 16 17 19 22

The ControlLogix Enhanced Redundancy System is a system that provides greater availability because it uses a redundant chassis pair to maintain process operation when events, such as a fault on a controller, occur that stop process operation on nonredundant systems. The redundant chassis pair includes two synchronized ControlLogix chassis with identically specific components in each. For example, one redundancy module and at least one ControlNet or EtherNet/IP communication module are required. Controllers are typically used in enhanced redundancy systems, but are not required if your application only requires communication redundancy. Your application operates from a primary chassis, but can switch over to the secondary chassis and components if necessary.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 1

About Enhanced Redundancy Systems

Features of the ControlLogix Enhanced Redundancy System

The software and hardware components required to configure and use a ControlLogix enhanced redundancy system provide these features: Redundancy module speeds of up to 1000 Mbps when using a 1756RM2/A module with another 1756-RM2/A module. Redundancy module speeds up to 100 Mbps when using a 1756-RM/A with another 1756-RM/A module, and a 1756-RM/B module with another 1756-RM/ B module. Redundant fiber ports for crossloading; no single point of failure of a fiber cable. Plug-and-play-style commissioning and configuration that does not require extensive programming. ControlNet and EtherNet/IP network options for the redundant chassis pair. Easy-to-use, fiber-optic communication cable that connects redundant chassis pairs. Use the same cable for the 1756-RM2/A or 1756-RM/B modules. Simple redundant controller configuration by using a checkbox in the Controller Properties dialog box in RSLogix 5000 software. A redundancy system ready to accept commands and monitor the redundant system states after basic installation, connection, and powerup. Switchovers occur as fast as 20 ms. Support for these FactoryTalk applications for EtherNet communication modules: FactoryTalk Alarms and Events FactoryTalk Batch FactoryTalk PhaseManager Support for CIP Sync technology over an EtherNet/IP network to establish time coordination across the enhanced redundant system. Access to remote I/O modules over an EtherNet/IP network. Access to 1715 Redundant I/O systems over an EtherNet/IP network. 1756-EN2T socket support.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

About Enhanced Redundancy Systems

Chapter 1

Features Not Supported

Any motion feature Any SIL3 functional safety feature within the redundancy controllers Firmware Supervisor Event Tasks Firmware revision 19.052 for 1756-L7x controller
assurance that only validated firmware can be upgraded into a module.

IMPORTANT For Ethernet modules, signed and unsigned firmware are available. Signed modules provide the
Signed and unsigned firmware: Both signed and unsigned firmware are available. Product is shipped with unsigned firmware. To obtain signed firmware, you must upgrade your products firmware. To obtain signed and unsigned firmware, go to Get Support Now. Once signed firmware is installed, subsequent firmware upgrades must be signed also. There are no functional/feature differences between signed and unsigned communication modules.

Enhanced Redundancy System Components

Communication between a redundant chassis pair that includes matching components makes redundancy possible. Each chassis in the redundant chassis pair contains these ControlLogix components: One ControlLogix power supply - Required One ControlLogix redundancy module - Required Redundancy modules link the redundant chassis pair to monitor events in each of chassis and initiate system responses as required. At least one ControlLogix ControlNet or EtherNet/IP communication module - Required Up to two controllers - Optional In addition, redundant chassis are connected to other components outside the redundant chassis pair, for example, remote I/O chassis or human-machineinterfaces (HMIs). For more information about components you can use in an enhanced redundancy system, see Chapter 2, Design an Enhanced Redundancy System on page 23.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 1

About Enhanced Redundancy Systems

I/O Modules in Enhanced Redundancy Systems

In an enhanced redundancy system, you can use only I/O modules in a remote chassis. You cannot use I/O modules in the redundant chassis pair. This table describes differences in network use for I/O in enhanced redundancy systems.
Remote I/O Module Placement EtherNet/IP I/O network 1715 Redundant I/O System ControlNet network DeviceNet network(1) Data Highway Plus(1) Universal Remote I/O(1) Available with Enhanced System, Revision 19.052, 19.053, or 20.054 Available with Enhanced System, Revision 16.081 or Earlier

(1) In an enhanced redundancy system, you can access remote I/O modules on this network only via a ControlNet or EtherNet/IP network bridge.

For more information on using remote and 1715 redundant I/O over an EtherNet network, see I/O Placement on page 44 and the Redundant I/O System User Manual, publication 1715-UM001.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

About Enhanced Redundancy Systems

Chapter 1

Enhanced Redundancy System Operations

Once the redundancy modules in the redundant chassis pair are connected and powered, they determine which chassis is the primary chassis and which is the secondary chassis. The redundancy modules in both the primary and secondary chassis monitor events that occur in each of the redundant chassis. If certain faults occur in the primary chassis, the redundancy modules execute a switchover to the unfaulted, secondary chassis.

System Qualification and Synchronization

Chapter

Design an Enhanced Redundancy System

Topic Components of an Enhanced Redundancy System Redundant Chassis Controllers in Redundant Chassis Redundancy Modules in Redundant Chassis Communication Modules in Redundant Chassis Power Supplies and Redundant Power Supplies in Enhanced Redundancy Systems ControlNet Networks with Redundant Systems Other Communication Networks Other Communication Networks I/O Placement 1715 Redundant I/O Systems Using HMI Firmware Requirements Software Requirements Page 24 28 29 31 32 34 38 42 42 44 44 46 49 49

This chapter explains how to use the required and optional components to design an enhanced redundancy system.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 2

Design an Enhanced Redundancy System

Components of an Enhanced Redundancy System

The central components of a ControlLogix enhanced redundancy system are those in the redundant chassis pair. You can connect other system components to the redundant chassis pair. However, the redundant chassis pair, and the components within it, provide redundant communication and control features. This table lists the components available with enhanced redundancy systems. Please note that some component availability is revision-specific.
Table 4 - Components Available for Use in a Redundant Chassis Pair
Product Type Redundancy module Cat. No. 1756-RM2/A Description ControlLogix redundancy module This component is available with enhanced redundancy systems, revision 16.057, 16.081, 19.052 or later when using 1756-L6x controllers, and 19.053 or later when using 1756-L7x controllers. ControlLogix-XT redundancy module This component is available with enhanced redundancy systems, revision 16.057, 16.081, 19.052 or later when using 1756-L6x controllers, and 19.053 or later when using 1756-L7x controllers. ControlLogix redundancy module ControlLogix-XT redundancy module ControlLogix 4-slot chassis ControlLogix-XT 4-slot chassis, -2560 C (-13140 F) This component is available with enhanced redundancy systems, revision 19.052 or later. ControlLogix-XT 5-slot chassis ControlLogix 7-slot chassis ControlLogix-XT 7-slot chassis, -2570 C (-13158 F) ControlLogix-XT 7-slot chassis, -2560 C (-13140 F) ControlLogix 10-slot chassis ControlLogix 13-slot chassis ControlLogix 17-slot chassis ControlLogix ControlNet bridge module ControlLogix redundant media ControlNet bridge module ControlLogix-XT ControlNet bridge module ControlLogix EtherNet/IP bridge module ControlLogix EtherNet/IP fiber bridge module. This component is available with enhanced redundancy systems, revision 20.054 or later. ControlLogix EtherNet/IP 2-port module This component is available with enhanced redundancy systems, revision 19.052 or later. ControlLogix-XT EtherNet/IP bridge module 32 28 31 Page

1756-RM2XT

1756-RM 1756-RMXT Chassis 1756-A4 1756-A4LXT

1756-A5XT 1756-A7 1756-A7XT 1756-A7LXT 1756-A10 1756-A13 1756-A17 Communication modules 1756-CN2/B 1756-CN2R/B 1756-CN2RXT 1756-EN2T 1756-EN2F 1756-EN2TR

1756-EN2TXT

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

Table 4 - Components Available for Use in a Redundant Chassis Pair

Product Type Controllers Cat. No. 1756-L61, 1756L62, 1756-L63, 1756-L64 1756-L63XT 1756-L65 Description ControlLogix controllers ControlLogix-XT controller ControlLogix controller This component is available with enhanced redundancy systems, revision 19.052 or later. ControlLogix controllers This component is available with enhanced redundancy systems, revision 19.053 or later. ControlLogix controller This component is available with enhanced redundancy systems, revision 20.054 or later. ControlLogix-XT controller, revision 19.053 or later Page

1756-L72, 1756L73, 1756-L74, 1756-L75 1756-L71

1756-L73XT Power supplies

1756-PA72, 1756- ControlLogix AC power supplies PA75 1756-PB72, 1756- ControlLogix DC power supplies PB75, 1756-PC75, 1756-PH75 1756-PAXT, 1756- ControlLogix-XT AC power supply PBXT 1756-PA75R 1756-PB75R 1756-CPR 1756-PSCA2 ControlLogix AC redundant power supply ControlLogix DC redundant power supply ControlLogix redundant power supply cable ControlLogix chassis adapter module 34

IMPORTANT

There are module series level, firmware revision, and software version requirements for enhanced redundancy systems. For more information on these series level, firmware revision, and version requirements, see the current release notes at: http://rockwellautomation.com/literature.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 2

Design an Enhanced Redundancy System

This graphic shows an example ControlLogix enhanced redundancy system, revision 19.053 or later, that uses EtherNet/IP networks.
Figure 1 - Example ControlLogix Enhanced Redundancy System, Revision 19.053 or later, Using an EtherNet/IP Network

Workstation

EtherNet/IP Switch Redundant Chassis Pair

CH2 CH1 OK

1715 Redundant I/O

1756 ControlLogix I/O

1734 POINT I/O

2
PowerFlex Drive Connected via 1783-ETAP Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

This graphic shows an example ControlLogix enhanced redundancy system, revision 19.053 or later, that uses ControlNet networks.
Figure 2 - Example ControlLogix Enhanced Redundancy System, Revision 19.053 or later, Using a ControlNet Network

Workstation

EtherNet/IP Switch

Redundant Chassis Pair

CH2 CH1 OK

1756 ControlLogix I/O

1734 POINT I/O

PowerFlex 700S drive connected via 1788-CNCR card

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

Plan for Controller Connections

Consider these conditions when planning controller connection use: 1756-L6x controllers provide 250 total connections. 1756-L7x controllers provide 500 total connections. If you use the redundant controller at, or very near the connection limits, you can experience difficulty synchronizing your chassis.

Redundancy Modules in Redundant Chassis

Two redundancy modules, one in each chassis of the redundant chassis pair, jointly supervise the control system operating states and transitions, establishing the framework for system redundancy. This bridge between chassis facilitates the exchange of control data and synchronization of operations. The redundancy modules let you commission the redundant system in a plugand-play manner without any programming. You connect a redundancy module pair with the default configuration in the redundant chassis pair and set up the redundant system. You can establish redundancy between chassis in either of these manners: Inserting a redundancy module pair into two powered chassis that contain redundancy-compliant components and redundancy-enabled application programs, and then connecting the redundancy modules. Inserting and connecting the redundancy modules in two chassis and then inserting redundancy-compliant components into each chassis. IMPORTANT You are not required to develop any programming to migrate from a nonredundant to an enhanced redundancy system if your application meets these conditions: Your application meets the points listed in Restrictions on page 22. The controller properties in your RSLogix 5000 software project has Redundancy enabled.

Once the redundant chassis pair contains all desired components, including controllers configured for redundancy, and are powered, no further tasks are required in the redundancy modules to activate system redundancy. The redundancy modules automatically determine the operational state of each of the chassis pair and are ready to accept commands and provide system monitoring.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 2

Design an Enhanced Redundancy System

Communication Modules in Redundant Chassis

Remember these points when placing ControlLogix ControlNet and EtherNet/IP communication modules in the redundant chassis pair: You must use enhanced communication modules in enhanced redundancy systems. Enhanced communication modules contain a 2 in their catalog number. For example, the 1756-EN2T module. Standard ControlNet and EtherNet/IP communication modules are not supported. You can use the 1756-EN2TR module only with an enhanced redundancy system, revision 19.052 or later. You can use any combination of up to seven enhanced communication modules in each redundant chassis. If you use a ControlNet network in your redundant chassis pair, you must have two ControlNet communication modules outside the redundant chassis pair. When assigning node address numbers, assign the lowest node number address to a ControlNet communication module outside the redundant chassis pair. For more information, see Use at Least Four ControlNet Network Nodes on page 38 through Assign Lowest Node Numbers to Remote ControlNet Modules on page 39. You cannot use Series A ControlNet communication modules in a redundancy system. The Series for EtherNet/IP communication modules is not required to match in a partnered set. However, if your application requires a feature specific to a module series level, you must use the same series level for each module in a partnered set. For example, only the 1756-EN2T/C communication module only offers the double-data rate (DDR) feature. You must use 1756-EN2T/C modules in each chassis of the redundant chassis pair to use DDR. Do not use the USB ports of communication modules to access the redundant system network while the system is running, that is, online. Using the USB ports while online can result in a loss of communication after a switchover. For a list of the ControlLogix communication modules available for use in an enhanced redundancy system, see Table 4 on page 24.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

Plan for Communication Module Connections

A CIP connection is a point-to-point communication mechanism used to transfer data between a producer and a consumer. These are examples of CIP connections: Logix5000 controller message transfer to Logix5000 controller I/O or produced tag Program upload RSLinx DDE/OPC client PanelView polling of a Logix5000 controller ControlLogix ControlNet communication modules provide 131 total CIP connections. Consider these points when using CIP connections with ControlLogix ControlNet communication modules: Three of the 131 CIP connections are reserved for redundancy. The three redundant-system CIP connections always appear to be in use, even when no connections are open. You can use the remaining 128 CIP connections in any manner that your application requires, such as the examples listed above. ControlLogix EtherNet/IP communication modules provide 259 total CIP connections. Consider these points when using CIP connections with ControlLogix EtherNet/IP communication modules: Three of the 259 CIP connections are reserved for redundancy. You can use the remaining 256 connections in any manner that your application requires, such as the examples listed above.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 2

Design an Enhanced Redundancy System

Power Supplies and Redundant Power Supplies in Enhanced Redundancy Systems

You can use any of the standard or redundant power supplies listed in Components Available for Use in a Redundant Chassis Pair on page 24 in an enhanced redundancy system.

Redundant Power Supplies

Typically, enhanced redundancy systems use standard power supplies. You can choose to use redundant power supplies to maintain power to a ControlLogix chassis in the event that one of the supplies loses power. Use these hardware components to connect redundant power supplies: Two redundant power supplies for each chassis One 1756-PSCA chassis adapter module for each redundant chassis Two 1756-CPR cables for each redundant chassis to connect the power supplies to the 1756-PSCA adapter Optional, user-supplied annunciator wiring to connect the power supplies to remote input modules
Figure 4 - Redundant Power Supplies with Redundant Chassis
1756-PA75R or 1756-PB75R Power Supplies

1756-CPR Cables Primary Chassis

CH2 CH1 OK

1756-CPR Cables

Annunciator Wiring (optional) Secondary Chassis

CH2 CH1 OK

For more information about redundant power supplies, see the ControlLogix Selection Guide, publication 1756-SG001.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

EtherNet/IP Networks with Redundant Systems

The use of EtherNet/IP networks in an enhanced redundancy system is primarily dependent on your system revision. IMPORTANT A remote chassis can be accessed over an EtherNet/IP network using any EtherNet/IP module that works in a nonredundant chassis with no additional firmware requirement with the following exception. If the remote chassis contains a controller consuming a tag produced in the RCP, it can only consume the tag with the required firmware revisions listed in Table 7.

Table 7 - EtherNet/IP Communication Modules in Remote Chassis Minimum Firmware Requirements

EtherNet/IP Communication Module in Remote Chassis 1756-EN2F 1756-EN2T 1756-EN2TR 1756-EN3TR 1756-ENBT 1768-ENBT 1769-L2x 1769-L3xE 1788-ENBT 6.001 4.001 19.011 3.001 Minimum Firmware Revision 4.003 4.002

For more information on using an EtherNet/IP network in your enhanced redundancy system, see Chapter 5, Configure the ControlNet Network on page 93.

EtherNet/IP Network Features in an Enhanced Redundancy System, Revision 19.052 or Later

In an enhanced redundancy system, revision 19.052 or later, you can execute these tasks on an EtherNet/IP network: Use 1756-EN2TR modules Connect to remote I/O modules Connect to 1715 Redundant I/O systems Use produce/consume tags Connect to a Device-level Ring networks Use CIP Sync technology The rest of the topics in this section apply to all enhanced redundancy systems.
Rockwell Automation Publication 1756-UM535D-EN-P - November 2012 35

Chapter 2

Design an Enhanced Redundancy System

IP Address Swapping
EtherNet/IP communication modules can use IP address swapping to swap IP addresses during a switchover. You must use this feature to use Ethernet I/O connections. For more information on IP address swapping, see Chapter 5, Configure the ControlNet Network on page 93.

Unicast Functionality
Enhanced redundancy systems support unicast produced tags. Unicast consumed tags are not supported in enhanced redundancy systems. Unicast I/O is not supported in a redundancy system.

Possible Communication Delays on EtherNet/IP Networks

Brief communication delays can occur for certain connection types if the connection between a component and the redundant chassis pair uses a path exclusively over an EtherNet/IP network and a switchover occurs. After the switchover is complete, communication resumes automatically. These connection types can experience the communication delay when the switchover occurs: HMI to redundant chassis pair FactoryTalk Batch server to redundant chassis pair FactoryTalk Alarms and Events Service to redundant chassis pair Bridge from an EtherNet/IP network to a ControlNet network if you must maintain the connection between the component and a redundant chassis pair in the event of a switchover. See HMI Blind Time Reduction on Ethernet During a Switchover on page 21.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

This example graphic shows the recommended method to connect an HMI to a redundant chassis pair if connection drops are a concern in your application. In this graphic, the remote chassis contains I/O modules in addition to the EtherNet/IP and ControlNet communication modules. The I/O modules are not required and included here for example purposes only.
Figure 5 - Configuration Used to Eliminate Communication Delays on Switchover

HMI

EtherNet/IP

ControlNet

Redundant Chassis Pair

CH2 CH1 OK

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 2

Design an Enhanced Redundancy System

ControlNet Networks with Redundant Systems

ControlNet networks are used to connect redundant control chassis to remote I/O and to other devices in the system.

IMPORTANT

A remote chassis can be accessed over a ControlNet network using any ControlNet module that works in a nonredundant chassis with no additional firmware requirement.

ControlNet Network Requirements

If you use a ControlNet network in your enhanced redundancy system, you must take these considerations into account when using ControlNet networks in your enhanced redundancy system: Use at Least Four ControlNet Network Nodes Assign Lowest Node Numbers to Remote ControlNet Modules Set Partnered ControlNet Module Switches to the Same Address Reserve Consecutive Node Addresses for Partner Modules

Use at Least Four ControlNet Network Nodes

With redundant systems, at least four ControlNet network nodes are required. This is because two or more ControlNet nodes must be used in addition to the two ControlNet modules used in the redundant chassis. One of the two nodes outside of the redundant chassis must be at a lower node address than the ControlNet modules in the redundant chassis. If your ControlNet uses less than four nodes, in the event of a switchover, connections can be dropped and outputs connected to that node can change state during the switchover. You can include these ControlNet modules in addition to redundant ControlNet nodes: ControlNet bridge modules in remote chassis Any other ControlNet devices on the ControlNet network A workstation running RSLinx Classic communication software that is connected via a ControlNet network

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

Assign Lowest Node Numbers to Remote ControlNet Modules

Do not assign the lowest ControlNet node addresses to ControlNet modules in the redundant chassis pair. If you assign the lowest ControlNet node addresses to ControlNet modules in the redundant chassis pair, you can experience these system behaviors: Upon a switchover, you can lose communication with I/O modules, produced tags, and consumed tags. Removing a ControlNet module from the redundant chassis can result in lost communication with I/O modules, produced tags, and consumed tags. If the entire system loses power, you can be required to cycle power to the primary chassis to restore communication.

Set Partnered ControlNet Module Switches to the Same Address

Where ControlNet modules are used as partners in a redundant chassis pair, you must set the node address switches to the same node address. The primary ControlNet modules can be at even or odd node addresses. For example, if partnered ControlNet modules are assigned to nodes 12 and 13 of the ControlNet network, set the node address switches of the modules to the same address of 12.
Figure 6 - Example of Switch Address for Partnered ControlNet Modules

ControlNet Module Switches

CH2 CH1 OK

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 2

Design an Enhanced Redundancy System

Reserve Consecutive Node Addresses for Partner Modules

Where ControlNet modules are used as partners in redundant chassis, plan consecutive node numbers for those partnered modules. Plan for consecutive node addresses because the redundant system automatically assigns the consecutive node address to the secondary ControlNet module. For example, partnered ControlNet modules with address switches set at 12 are assigned ControlNet node numbers 12 and 13 by the system. TIP The primary chassis always assumes the lower of the two node addresses.

Figure 7 - Example of Redundant ControlNet Modules at Consecutive Addresses

ControlNet Module Switches Primary Chassis Secondary Chassis

CH2 CH1 OK

Node 12

Node 13

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

Redundant ControlNet Media

The use of redundant ControlNet media helps to prevent a loss of communication if a trunkline or tap is severed or disconnected. A system that uses redundant ControlNet media uses these components: 1756-CN2R/B communication modules in each redundant chassis ControlNet modules designed for redundant media at each ControlNet node on the network Redundant trunk cabling Redundant tap connections for each ControlNet module connected
Figure 8 - Redundant ControlNet Media with Redundant ControlLogix Chassis
Redundant ControlLogix Chassis with 1756-CN2R Modules Workstation with ControlNet Interface Card

Redundant Trunk Lines

1785-L80C15

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 2

Design an Enhanced Redundancy System

Other Communication Networks

You can use only EtherNet/IP and ControlNet networks, and corresponding modules, in enhanced redundancy systems. IMPORTANT Do not use the redundant chassis to bridge between networks. Bridging through the redundant chassis to the same or different networks, or routing messages through redundant chassis is not supported.

You can bridge to other communication networks outside of the redundant chassis. For example, you can bridge to a Universal Remote I/O network via a remote chassis.
Figure 9 - Example of Bridging to Remote I/O on Various Networks

Workstation

HMI

Ethernet Switch

Primary Chassis
CH2 CH1 OK

Secondary Chassis
CH2 CH1 OK

Chassis Bridge from ControlNet to Remote I/ O Networks

To Universal I/O Network To EtherNet/IP Network IMPORTANT: Cannot bridge to I/O modules. To DeviceNet Network

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

You can bridge these networks via a remote chassis: ControlNet DeviceNet EtherNet/IP Universal Remote I/O Data Highway Plus This table indicates what system components can be used with each network connected to a redundant system.
Table 8 - Communication Networks Available For Use with Enhanced Redundancy Systems
Network ControlNet DeviceNet EtherNet/IP Connection to Redundant System Directly to redundant chassis Via a bridge Via a bridge Directly to redundant chassis Component I/O Yes No Yes Yes - Enhanced Redundancy System, Revision 19.052 or later No Yes Yes HMI Yes Yes Yes Yes(1)

Via a bridge Universal Remote I/O Data Highway Plus Via a bridge Via a bridge

Yes Yes Yes

(1) To avoid a brief loss of communication with the redundant chassis pair in the event of a switchover, we recommend that you connect the HMI to the redundant chassis pair via a bridge from an EtherNet/IP network to a ControlNet network. For more information see Possible Communication Delays on EtherNet/IP Networks on page 36.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 2

Design an Enhanced Redundancy System

I/O Placement

In an enhanced redundancy system, you can place I/O modules in these locations: Same ControlNet network as redundant controllers and communication modules Same EtherNet/IP network as redundant controllers and communication modules DeviceNet network connected via a bridge Universal Remote I/O network connected via a bridge IMPORTANT You cannot install I/O modules in the redundant chassis pair. You can only install I/O modules in remote locations accessed over the networks in this list. You can connect to remote I/O modules over an EtherNet/IP network in an enhanced redundancy system, revision 19.052 or later.

1715 Redundant I/O Systems

Beginning with the enhanced redundancy system, revision 19.052 or later, you can connect to 1715 Redundant I/O systems over an EtherNet/IP network. The 1715 Redundant I/O system lets a controller communicate to a remote, redundant I/O chassis over an EtherNet/IP network. The 1715 Redundant I/O system provides high availability and redundancy for critical processes by using a redundant adapter pair and multiple I/O modules that have diagnostics and are easily replaceable. The 1715 Redundant I/O system consists of a single, two-slot, adapter base unit that houses a redundant adapter module pair. The adapter base unit is connected to up to 8, three-slot, I/O base units, that can hold up to 24 fully-configurable digital and analog I/O modules. You can configure a 1715 Redundant I/O system in a Ring or Star topology. Each 1715 Redundant I/O system uses a single IP address as the primary IP address for all communication. The redundant adapter module pair consists of two active modules, a primary adapter module and its partner, a secondary module.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

Figure 10 - Example of I/O Placement Options

Workstation

EtherNet/IP

EtherNet/IP Switch

Primary Chassis

Secondary Chassis

CH2 CH1 OK

EtherNet/IP Bridging Chassis

1734 POINT I/O 1715 Redundant I/O ControlNet DeviceNet Device Control Tower 1771 Chassis with 1771-ASB

DeviceNet

Universal Remote I/O

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 2

Design an Enhanced Redundancy System

Using HMI

Depending on the network used to connect the redundant system to HMIs, plan for certain placement and configuration requirements. You can connect an HMI to a primary chassis over either of these networks: EtherNet/IP ControlNet

HMI Connected via an EtherNet/IP Network

This table describes redundant system considerations specific to the HMI being used on the EtherNet/IP network.
Type of HMI Used PanelView Standard terminal PanelView Plus terminal VersaView industrial computer running a Windows CE operating system Considerations Same as a nonredundant system. Use RSLinx Enterprise software, version 5.0 or later. Set aside connections for each PanelView Plus or VersaView CE terminal as indicated in this table. In this module Controller 1756-EN2T FactoryTalk View Supervisory Edition software with RSLinx Enterprise software FactoryTalk View Supervisory Edition software with RSLinx Classic software, version 2.52 or later RSView32 software Any other HMI client software that uses RSLinx Classic software, version 2.52 or later Reserve 5 connections 5 connections

Use RSLinx Enterprise communication software, version 5.0 or later. Keep the HMI and both redundant chassis on the same subnet. Configure the network to use IP swapping. Limit the number of RSLinx servers that a controller uses to 13 servers, where the use of 1 server is ideal.

HMI connected to a redundant chassis pair exclusively over an EtherNet/IP network can briefly drop the connection when a switchover occurs. The connection is re-established, however, after the switchover is complete.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

HMI Connected via a ControlNet Network

This table describes redundant system considerations specific to the HMI being used on the ControlNet network.
Type of HMI Used PanelView Standard terminal PanelView 1000e or PanelView 1400e terminal Considerations If your HMI communicates via unscheduled communication, use four terminals per controller. If your HMI does not communicate via unscheduled communication, use the number of terminals required for your application. Set aside connections for each PanelView Plus or VersaView CE terminal. In this module Controller 1756-CN2/B, 1756-CN2R/B FactoryTalk View Supervisory Edition software with RSLinx Classic software, version 2.52 or later RSView32 software Any other HMI client software that uses RSLinx Classic software, version 2.52 or later Reserve 5 connections 5 connections

PanelView Plus terminal VersaView industrial computer running a Windows CE operating system

Limit the number of RSLinx servers that a controller uses to 1 (ideal) to 3 (maximum).

HMI connected to a primary chassis exclusively over a ControlNet network or bridge from an EtherNet/IP network to a ControlNet network maintains its connections during a switchover.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 2

Design an Enhanced Redundancy System

Connection from HMI Over a ControlNet Network shows an example of connecting an HMI to a primary controller over a ControlNet network.
Figure 11 - Connection from HMI Over a ControlNet Network

HMI

ControlNet

Redundant Chassis Pair

CH2 CH1 OK CH2 CH1 OK

ControlNet
CH2 CH1 OK CH2 CH1 OK

For an example of how to connect an HMI to a redundant chassis pair over a path that bridges from an EtherNet/IP network to a ControlNet network, see Configuration Used to Eliminate Communication Delays on Switchover on page 37.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Design an Enhanced Redundancy System

Chapter 2

Firmware Requirements

If you are using an enhanced redundancy system, use only enhanced redundancy system firmware. These are the enhanced redundancy system firmware-revision bundles: 16.054Enh 16.080Enh 16.081Enh 16.081_kit1 19.052Enh 19.053Enh 19.053_kit1 20.054 20.054_kit1 To download the most recent enhanced redundancy system firmware bundle, go to http://www.rockwellautomation/support.com.

Software Requirements

These sections describe required and optional software for use with your enhanced redundancy system.

Required Software
This software is required to use all enhanced redundancy system revisions: RSLogix 5000 software. RSLinx Classic communication software. Redundancy Module Configuration Tool (RMCT) - This utility is installed when you install RSLinx Classic communication software. For the most current software versions, go to http://www.rockwellautomation/ support.com.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 2

Design an Enhanced Redundancy System

Optional Software
Software in addition to that listed as required software can be needed depending on your enhanced redundancy system program, configuration, and components. Optional software you might need is listed in this table.
If using ControlNet network EtherNet/IP network Alarms Batches or recipes HMI(1) Then use this software RSNetWorx for ControlNet RSNetWorx for EtherNet/IP FactoryTalk Alarms and Events FactoryTalk Batch FactoryTalk View Site Edition RSLinx Enterprise software RSView32 FactoryTalk Services Platform

Various FactoryTalk services

(1) See Using HMI on page 46 for additional information.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter

Install the Enhanced Redundancy System

Topic Before You Begin Install an Enhanced Redundancy System Step 1: Install the Software Step 2: Install the Hardware Step 3: Connect the Redundancy Modules via a Fiber-optic Cable Step 4: Update Redundant Chassis Firmware Step 5: Designate the Primary and Secondary Chassis Page 51 53 53 54 63 67 71

Before You Begin

When using the 1756-RM2/A or 1756-RM2XT module, you must use version 8.01.05 or later of the RMCT. When the redundancy module firmware is upgraded, the RMCT is updated. The RMCT automatically uses the version that is compatible with the redundancy module firmware revision installed.

TIP

Add the EDS Files

Some modules have the EDS files already installed. However, if needed, obtain EDS files for modules in your system from the Rockwell Automation Support website at: http://www.rockwellautomation.com/resources/eds/. Once you have downloaded the required EDS file, launch the EDS Hardware Configuration Tool by choosing Start > Programs > Rockwell Software > RSLinx Tools > EDS Hardware Installation Tool. The tool then prompts you to Add or Remove EDS files.

Step 2: Install the Hardware

Follow these steps to set up and install your systems hardware components.

Install the First Chassis and its Components

When you install an enhanced redundancy system, install one chassis, and its necessary components, at a time.

Module Placement and Partnering

Each pair of controllers and communication modules must be comprised of compatible partner modules. Two modules in the same slot are considered as compatible partners only if they contain compatible hardware and firmware and other rules that can be enforced by the module itself. The compatibility status (Compatible or Incompatible) is determined by either the module in the primary chassis or its partner in the secondary chassis. The redundancy module pair must occupy the same slots in their respective chassis. The redundancy module pair does not consider the chassis pair to be partnered if the redundancy modules are placed in different slots, even if the partners of other modules are present in the same slot.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Install the Enhanced Redundancy System

Chapter 3

The redundancy module prevents certain redundancy operations, such as Qualification, if incompatible modules reside in the redundant-control chassis pair. IMPORTANT For best performance, place the redundancy module in the chassis as close as possible to the controller.

Complete these tasks to install the first chassis in the redundant chassis pair: Install the Chassis and Power Supply Install the Communication Modules Install a Controller Install the Redundancy Module

TIP

Do not apply power to the system until both chassis and their components are installed. Then follow the steps described in Step 4: Update Redundant Chassis Firmware on page 67 to determine when to power each chassis.

Install the Chassis and Power Supply

Use the installation information provided with the chassis and power supply, or redundant power supplies, to install them in an enhanced redundancy system.
Table 9 - Installation Information for ControlLogix Chassis and Power Supplies
Product Type Chassis and power supplies Cat. No. 1756-A4, 1756-A7, 1756-A10, 1756-A13, 1756-A17, 1756-A4LXT, 1756A5XT, 1756-A7LXT, 1756-A7XT, 1756-PA72, 1756-PB72, 1756-PA75, 1756PB75, 1756-PC75, 1756-PH75, 1756-PAXT, 1756-PBXT, 1756-PA75R, 1756PB75R, 1756-PSCA2 Publication ControlLogix Chassis and Power Supplies Installation Instructions, publication 1756-IN005

For more information on using chassis and power supplies in an enhanced redundancy system, see Components of an Enhanced Redundancy System on page 24.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 3

Install the Enhanced Redundancy System

Install the Communication Modules

Use the installation information provided with the communication modules to install them in an enhanced redundancy system.
Table 10 - Communication Module Installation
Product Type ControlNet communication modules EtherNet/IP communication modules Cat. No. 1756-CN2/B 1756-CN2R/B 1756-CN2RXT 1756-EN2T 1756-EN2TR 1756-EN2F 1756-EN2TXT EtherNet/IP Modules Installation Instructions, publication ENET-IN002 ControlNet Modules Installation Instructions, publication CNET-IN005 Publication

For more information on using communication modules in an enhanced redundancy system, see Communication Modules in Redundant Chassis on page 32.

Install a Controller
Use the installation information in the ControlLogix System User Manual, publication 1756-UM001, to complete the following for your controller: Installation in an enhanced redundancy system Determination of compatibility for planned primary and secondary controllers in the redundant chassis, see Table 6 on page 30 IMPORTANT The ControlLogix-XT controllers function in the same way as the traditional controllers. The ControlLogix-XT products include control and communication system components that are conformally coated for extended protection in harsh, corrosive environments: When used with FLEX I/O-XT products, the ControlLogix-XT system can withstand temperature ranges from -2070 C (-4158 F). When used independently, the ControlLogix-XT system can withstand temperature ranges from -2570 C (-13158 F).

For more information on using controllers in an enhanced redundancy system, see Controllers in Redundant Chassis on page 29.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Install the Enhanced Redundancy System

Chapter 3

Install the Redundancy Module

You must install one redundancy module in each chassis planned for your system. Available modules are as follows: 1756-RM2/A 1756-RM2XT 1756-RM/A 1756-RM/B 1756-RMXT IMPORTANT Do not connect the primary redundancy module to the secondary redundancy module until all other components used in the redundant chassis pair are installed. Keep the redundancy module as close as possible to the controller module. 1756-RM2/A or 1756-RM2XT modules can only be used with other 1756-RM2/A or 1756-RM2XT modules. You cannot mix 1756-RM2/A and 1756-RM2XT modules with 1756-RM/A, 1756-RM/B, or 1756-RMXT modules.

IMPORTANT IMPORTANT

Installation Requirements
Before you install the module, be sure to note the following: Understand redundant systems and redundant media Verify that the planned modules for each redundant chassis of the pair are identical - including firmware revisions Verify that your enhanced redundancy firmware revision is compatible with your planned redundant chassis modules The 1756-RM/B module offers a higher level of performance than a 1756RM/A module. Both modules can coexist in a redundant system, but the highest system performance is achieved when the 1756-RM/B modules are used together when used in conjunction with a 1756-L7x controller. The 1756-RM2/A module, when used in conjunction with a 1756-L7x controller, offers higher crossload speeds than the 1756-RM/B module.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 3

Install the Enhanced Redundancy System

Environment and Enclosure

ATTENTION: This equipment is intended for use in a Pollution Degree 2 industrial environment, in overvoltage Category II applications (as defined in IEC 60664-1), at altitudes up to 2000 m (6562 ft) without derating. This equipment is not intended for use in residential environments and may not provide adequate protection to radio communication services in such environments. This equipment is supplied as open-type equipment. It must be mounted within an enclosure that is suitably designed for those specific environmental conditions that will be present and appropriately designed to prevent personal injury resulting from accessibility to live parts. The enclosure must have suitable flame-retardant properties to prevent or minimize the spread of flame, complying with a flame spread rating of 5VA or be approved for the application if nonmetallic. The interior of the enclosure must be accessible only by the use of a tool. Subsequent sections of this publication may contain additional information regarding specific enclosure type ratings that are required to comply with certain product safety certifications. In addition to this publication, see the following: Industrial Automation Wiring and Grounding Guidelines, Rockwell Automation publication 1770-4.1, for additional installation requirements NEMA Standard 250 and IEC 60529, as applicable, for explanations of the degrees of protection provided by enclosure

Prevent Electrostatic Discharge

ATTENTION: This equipment is sensitive to electrostatic discharge, which can cause internal damage and affect normal operation. Follow these guidelines when you handle this equipment: Touch a grounded object to discharge potential static. Wear an approved grounding wrist strap. Do not touch connectors or pins on component boards. Do not touch circuit components inside the equipment. Use a static-safe workstation, if available. Store the equipment in appropriate static-safe packaging when not in use.

Removal and Insertion Under Power (RIUP)

WARNING: When you insert or remove the module while backplane power is on, an electrical arc can occur. This could cause an explosion in hazardous location installations. Be sure that power is removed or the area is nonhazardous before proceeding. Repeated electrical arcing causes excessive wear to contacts on both the module and its mating connector. Worn contacts may create electrical resistance that can affect module operation.

European Hazardous Location Approval

The following applies when the product bears the Ex Marking.

This equipment is intended for use in potentially explosive atmospheres as defined by European Union Directive 94/9/EC and has been found to comply with the Essential Health and Safety Requirements relating to the design and construction of Category 3 equipment intended for use in Zone 2 potentially explosive atmospheres, given in Annex II to this Directive. Compliance with the Essential Health and Safety Requirements has been assured by compliance with EN 60079-15 and EN 60079-0.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Install the Enhanced Redundancy System

Chapter 3

ATTENTION: This equipment is not resistant to sunlight or other sources of UV radiation. WARNING: This equipment must be installed in an enclosure providing at least IP54 protection when applied in Zone 2 environments. This equipment shall be used within its specified ratings defined by Rockwell Automation. This equipment must be used only with ATEX certified Rockwell Automation backplanes. Do not disconnect equipment unless power has been removed or the area is known to be nonhazardous.

Safety-related Programmable Electronic Systems

ATTENTION: Personnel responsible for the application of safety-related programmable electronic systems (PES) shall be aware of the safety requirements in the application of the system and shall be trained in using the system.

Optical Ports
ATTENTION: Under certain conditions, viewing the optical port may expose the eye to hazard. When viewed under some conditions, the optical port may expose the eye beyond the maximum permissible-exposure recommendations.

Small Form-factor Pluggable

WARNING: When you insert or remove the small form-factor pluggable (SFP) optical transceiver while power is on, an electrical arc can occur. This could cause an explosion in hazardous location installations. Be sure that power is removed or the area is nonhazardous before proceeding.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 3

Install the Enhanced Redundancy System

North American Hazardous Location Approval

The following information applies when operating this equipment in hazardous locations. Informations sur l'utilisation de cet quipement en environnements dangereux.

Products marked "CL I, DIV 2, GP A, B, C, D" are suitable for use in Class I Division 2 Groups A, B, C, D, Hazardous Locations and nonhazardous locations only. Each product is supplied with markings on the rating nameplate indicating the hazardous location temperature code. When combining products within a system, the most adverse temperature code (lowest "T" number) may be used to help determine the overall temperature code of the system. Combinations of equipment in your system are subject to investigation by the local Authority Having Jurisdiction at the time of installation. AVERTISSEMENT: EXPLOSION HAZARD Do not disconnect equipment unless power has been removed or the area is known to be nonhazardous. Do not disconnect connections to this equipment unless power has been removed or the area is known to be nonhazardous. Secure any external connections that mate to this equipment by using screws, sliding latches, threaded connectors, or other means provided with this product. Substitution of components may impair suitability for Class I, Division 2. If this product contains batteries, they must only be changed in an area known to be nonhazardous.

Les produits marqus "CL I, DIV 2, GP A, B, C, D" ne conviennent qu' une utilisation en environnements de Classe I Division 2 Groupes A, B, C, D dangereux et non dangereux. Chaque produit est livr avec des marquages sur sa plaque d'identification qui indiquent le code de temprature pour les environnements dangereux. Lorsque plusieurs produits sont combins dans un systme, le code de temprature le plus dfavorable (code de temprature le plus faible) peut tre utilis pour dterminer le code de temprature global du systme. Les combinaisons d'quipements dans le systme sont sujettes inspection par les autorits locales qualifies au moment de l'installation. AVERTISSEMENT: RISQUE DEXPLOSION Couper le courant ou s'assurer que l'environnement est class non dangereux avant de dbrancher l'quipement. Couper le courant ou s'assurer que l'environnement est class non dangereux avant de dbrancher les connecteurs. Fixer tous les connecteurs externes relis cet quipement l'aide de vis, loquets coulissants, connecteurs filets ou autres moyens fournis avec ce produit. La substitution de composants peut rendre cet quipement inadapt une utilisation en environnement de Classe I, Division 2. S'assurer que l'environnement est class non dangereux avant de changer les piles.

Laser Radiation Ports

ATTENTION: Class 1 laser product. Laser radiation is present when the system is open and interlocks bypassed. Only trained and qualified personnel are allowed to install, replace, or service this equipment.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Install the Enhanced Redundancy System

Chapter 3

A redundant system is comprised of two ControlLogix redundancy modules working together that supervise the operating states and state transitions that establish the basic framework for redundancy operations. The redundant pairs provide a bridge between chassis pairs that let other modules exchange control data and synchronize their operations. This illustration identifies the external features of the module.
Figure 12 - 1756-RM2/A or 1756-RM2XT Modules
1756-RM2/A Module Front View Status Indicators Top View Front View Status Indicators 1756-RM2XT Module Top View

Side View

CH2 CH1 Backplane Connector

CH2 CH1

Backplane Connector Bottom View

46057

Bottom View
32269-M

NOTE: SFP transceivers are pre-installed in the redundant fiber ports

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 3

Install the Enhanced Redundancy System

1756-RM/A or 1756-RM/B Module

Figure 13 - 1756-RM/A or RM/B and 1756-RMXT Modules

Top View

1756-RMXT Module Top View

Front View Status Indicators

Redundancy Module

Front View Status Indicators

PRI COM OK

Side View

LC Singlemode Connector Bottom View

44487

Backplane Connector

LC Singlemode Connector Bottom View

31941-M

Backplane Connector

To install the redundancy module, follow these steps. 1. Align the circuit board with top and bottom guides in the chassis. 2. Slide the module into the chassis, making sure the module backplane connector properly connects to the chassis backplane. The module is properly installed when it is flush with other installed modules. IMPORTANT To remove the module, push on the locking clips at the top and bottom of each module and slide the module out of the chassis. If you are adding redundancy to an already operational ControlLogix system, shut off your process to install the redundancy module. The first chassis you install the redundancy module into and turn on, becomes the primary chassis. You can also have to do the following: Use RSNetWorx software to configure keeper information in the secondary ControlNet communication module if the master keeper for ControlNet communication is in the primary chassis Enable redundancy in RSLogix 5000 software and remove any I/O modules from the chassis

IMPORTANT

This completes the installation of the first chassis and its components. Chassis power must remain off.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Install the Enhanced Redundancy System

Chapter 3

Install the Second Chassis

Once the first chassis and its components are installed, you can install the second chassis of the redundant chassis pair. Complete these tasks as described in the Install the First Chassis and its Components section to install the second chassis: Install the Redundancy Module Install the Communication Modules Install a Controller Install the Redundancy Module IMPORTANT The components used in the first and second chassis must match exactly for the system to synchronize.

Step 3: Connect the Redundancy Modules via a Fiber-optic Cable

Once the first and second chassis and their components are installed, you connect the redundancy modules via the 1756-RMCx fiber-optic communication cable. The cable is not included with the redundancy module. Before installation, order this fiber-optic communication cable separately. Redundancy cables available from Rockwell Automation include the following.
Table 11 - Fiber-optic Cable Length
Fiber Cable Cat. No. 1756-RMC1 1756-RMC3 1756-RMC10 Length 1 m (3.28 ft) 3 m (9.84 ft) 10 m (32.81 ft)

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 3

Install the Enhanced Redundancy System

The cable connection is made at the bottom of the module in a downward orientation. There is enough space between the transmit and receive connectors so you can use the LC connector coupler. Using this coupler keeps the fiber-optic cable from bending so you can connect and disconnect the cable without removing the module from the chassis.

ATTENTION: Consider these points when connecting the fiber-optic cable: The redundancy module communication cable contains optical fibers. Avoid making sharp bends in the cable. Install the cable in a location where it will not be cut, run over, abraded, or otherwise damaged. The redundancy module contains a single-mode transmitter. Connecting this module to a multi-mode port will damage any multi-mode devices. Under certain conditions, viewing the optical port can expose the eye to hazard. When viewed under some conditions, the optical port can expose the eye beyond the maximum permissible-exposure recommendations. Media redundancy is achieved by installing modules with redundant ports and installing a redundant fiber cable system. If a cable failure occurs, or cable is degraded, the system uses the redundant network. When using a redundant system, route the two trunk cables (A and B) so that damage to one cable will not damage the other cable. This reduces both cables being damaged at the same time. Redundant cabling can tolerate one or more faults on a single channel. If a fault were to occur on both channels, the network operation would be unpredictable.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Install the Enhanced Redundancy System

Chapter 3

Connect the Fiber-optic Communication Cable to Redundant Channels

Follow this procedure to install the communication cable to redundant channels for the 1756-RM2/A module. IMPORTANT The redundancy module communication cable contains optical fibers. Avoid making sharp bends in the cable. Install the cable in a location where it will not be cut, run over, abraded, or otherwise damaged.

1. Remove the black protective plug on the first redundancy module in the redundant chassis pair. 2. Remove the protective caps from the cable. 3. Plug the cable connectors into the first redundancy module. The ends must be inserted opposite each other. 4. If redundant fiber crossload cable is required, install the second fiber cable into the remaining port. 5. The first end of the fiber cable should plug into the CH1 port on the first chassis and the matching end should plug into the matching CH1 port on the second chassis.

Logix5563

Redundancy Module

46059

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 3

Install the Enhanced Redundancy System

Connect the Fiber-optic Communication Cable to Single Channels

Follow this procedure to install the communication cable. IMPORTANT The redundancy module communication cable contains optical fibers. Avoid making sharp bends in the cable. Install the cable in a location where it will not be cut, run over, abraded, or otherwise damaged.

1. Remove the black protective plug on the first redundancy module in the redundant chassis pair. 2. Remove the protective caps from the cable. 3. Plug the cable connector into the first redundancy module. 4. Plug the remaining cable-connector end to the second redundancy module.

Logix5563

Redundancy Module

44493

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Install the Enhanced Redundancy System

Chapter 3

Fiber-optic Cable
If you choose to make your own fiber-optic cables, consider the following: Fiber-optic Communication Cable Specifications
Attribute Temperature, operating Connector type Cable type Channels Length, max Transmission Wavelength SFP transceiver 1756-RM2/A 060 C (32140 F) LC-type (fiber-optic) 8.5/125 micron single-mode fiber-optic cable 1 (transmit and receive fiber) 10 km (10,000 m, 10936.13 yd 1000 Mbps 1310 nm Transceiver Rockwell PN-91972 Connector/cable: LC duplex connector, 1000BASE-LX-compliant 4 km (4000 m, 4,374.45 yd)(1) Less than or equal to 100 Mbps 1300 nm 1756-RM2XT -2570 C (-13158 F) 1756-RM/A or 1756-RM/B 060 C (32140 F) 1756-RMXT -2570 C (-13158 F)

(1) Longer distances are supported based on the systems optical power budget. See the Optical Power Budget Ranges on page 67.

Determine Optical Power Budget You can determine the maximum optical-power budget in decibels (dB) for a fiber-optic link by computing the difference between the minimum transmitter-output optical power (dBm avg) and the lowest receiver sensitivity (dBm avg). The optical-power budget provides the necessary optical-signal range to establish a working fiber-optic link. You must account for the cable lengths and the corresponding link penalties. All penalties that affect the link performance must be accounted for within the link optical power budget.
Table 12 - Optical Power Budget Ranges
Transmitter Output optical power Wavelength Receiver Receiver sensitivity Receiver overload Input operating wavelength Min -15 1261 Min -8 1261 Typical Typical -38 Max -8 1360 Max -3 1580 Unit dBm nm Unit dBm avg dbm avg nm

Step 4: Update Redundant Chassis Firmware

Use ControlFLASH software to upgrade the firmware of each module in each chassis. IMPORTANT Apply power ONLY to the chassis containing modules on which you are upgrading firmware. Upgrade firmware on only one module at a time.
Rockwell Automation Publication 1756-UM535D-EN-P - November 2012 67

Chapter 3

Install the Enhanced Redundancy System

IMPORTANT

Redundancy module firmware contained in the enhanced redundancy system firmware bundle is designed for use with the 1756-RM, 1756-RM2/A, 1756RMXT, and 1756-RM2XT redundancy modules.

Upgrade the Firmware in the First Chassis

Complete these steps to upgrade the firmware in the first chassis. 1. Apply power to the chassis.

Logix5563

Redundancy Module

44490

2. Set the mode switch on the controller to REM.

Logix 55xx

RUN FORCE SD

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Install the Enhanced Redundancy System

Chapter 3

3. Wait for the redundancy module to complete its start-up scroll messages. Check Module and status indicators. Wait 45 seconds before you begin updating the 1756-RM firmware. During this time, the redundancy module conducts internal operations to prepare for an update.

Power Supply indicator is green.

Alphanumeric Display

Redundancy Module

CH2 CH1 OK
Logix5563 Redundancy Module

OK indicator is red during selftest, and turns green if firmware is already downloaded.

TIP

If it is a new module, wait until APPLICATION UPDATE REQUIRED is displayed. The status indicator flashes red.

4. Launch ControlFLASH software and click Next to begin the update process.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 3

Install the Enhanced Redundancy System

5. Select the modules catalog number (upgrade the redundancy module first) and click Next. IMPORTANT The 1756-RM2/A module uses different firmware than the 1756-RM and 1756RMXT modules.

1756-RM/B 1756-RM2/A

6. Expand the network driver to locate the redundancy module or module you are upgrading.

7. Select the module and click OK. 8. Select the firmware revision you want to update to and click Next. 9. Click Finish. A confirmation dialog box appears. 10. Click Yes.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Install the Enhanced Redundancy System

Chapter 3

IMPORTANT

This can take a few minutes. The system can look like it is not doing anything, but it is. When the update is complete, the Update Status dialog box appears and indicates that the update has successfully completed.

11. Click OK. 12. Verify that the redundancy module status displays PRIM, indicating a successful upgrade. 13. Complete steps 412 for each module in the chassis. IMPORTANT Power off the first chassis after you have verified a successful update of each module.

Upgrade the Firmware in the Second Chassis

Complete these steps to update the firmware for the modules in the second chassis. 1. Apply power to the second chassis. 2. Complete steps 312 in section Upgrade the Firmware in the First Chassis beginning on page 68 for the modules in the second chassis. 3. Power off the second chassis after you have verified the successful upgrade of each module.

Step 5: Designate the Primary and Secondary Chassis

Power on the chassis you want to designate as the primary chassis first. After you have applied power, qualify the system so that all module pairs are at compatible firmware-revision levels.

IMPORTANT

Do not apply power to the chassis until you have read the instructions for designating the primary chassis. Applying power to the chassis is crucial to designating the primary and secondary chassis. Do not attempt to designate a primary chassis before loading in an application image. Before you designate the primary chassis and qualify the system, make sure you have the latest firmware installed. See Step 4: Update Redundant Chassis Firmware on page 67.
71

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 3

Install the Enhanced Redundancy System

Complete these steps to designate the primary and secondary chassis of a redundant pair. 1. Verify that power is removed from both chassis. 2. Apply power to the chassis you want to designate as the primary chassis and wait for the modules status indicators to display PRIM. 3. Apply power to the chassis you want to designate as the secondary chassis. 4. Verify primary and secondary chassis designations by viewing the module status display and the PRI indicator. See Status Indicators on page 227 for specific redundancy module display information.

IMPORTANT

If both modules have power applied to them simultaneously, the module with the lowest IP address is designated as the primary chassis and displays PRIM on the modules four-character display. In addition, the PRI status indicator on the primary redundancy module is green. The secondary chassis displays either DISQ or SYNC, depending on the state of the secondary chassis. In addition, the PRI status light on the secondary redundancy module is not illuminated.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Install the Enhanced Redundancy System

Chapter 3

After Designation
When you first apply power to the designated primary and secondary chassis, compatibility checks are carried-out between the redundant chassis. Then, because the default Auto-Synchronization parameter is set at Always, qualification begins. TIP While the qualification occurs, the module status display transitions from DISQ (disqualified) to QFNG (qualifying) to SYNC (synchronized). The qualification s completes in 13 minutes and then module status display indicates the qualification status.

Use this table as a reference when interpreting the qualification status of the modules displayed on the module status display. .
Table 13 - Qualification Status Interpretation
Module Status Display QFNG SYNC Interpretation Qualification processes are in progress. SYNC displays after qualification processes are complete. This indicates that chassis configuration and the firmware revision levels are compatible and that the secondary chassis is ready to assume control in the event of a major fault in the primary chassis. If DISQ continues to display after about three minutes, one of these anomalies exists: Incorrect chassis configuration. That is, incompatible hardware is used. Incompatible firmware revisions are used between the primary and secondary modules. Keeper parameters between ControlNet module partners are not the same. The partnered ControlNet modules are not set to the same node address. The Auto-Sychronization parameter within the Redundancy Module Configuration Tool is set to Never.

DISQQFNGDISQ

Conversion from a Nonredundant to a Redundant System

You can upgrade the standalone chassis to a redundant chassis pair, by inserting a redundancy module in the standalone chassis and setting up an identical chassis with compatible modules (including the redundancy module) in the same slot as the standalone chassis. If the partnered chassis, containing nonredundant modules or nonredundancy compliant firmware, is designated as the secondary chassis, it will stop functioning. For detail information, see Convert from a Nonredundant System on page 265.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 3

Install the Enhanced Redundancy System

Qualification Status via the RMCT

To view the qualification attempt, access the Synchronization or Synchronization Status tabs of the RMCT. These tabs provide information about qualification attempts and redundant chassis compatibility. For more information about using the RMCT, see Chapter 6, Configure the Redundancy Modules on page 105.
Figure 14 - RMCT Synchronization Status Tab

Figure 15 - Synchronization Status Tab for Chassis Compatibility

In addition, you can view events specific to qualification in the Event Log of the RMCT.
Figure 16 - Event Log with Qualification Events

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Install the Enhanced Redundancy System

Chapter 3

Reset the Redundancy Module

There are two ways to reset the module. Cycle power to the chassis Remove the module from the chassis and reinsert the module IMPORTANT Only choose to cycle power to the chassis if you will not lose control of your process.

Remove or Replace the Redundancy Module

To remove or replace the redundancy module, follow these steps. 1. Push on upper and lower module tabs to disengage them. 2. Slide the module out of the chassis. IMPORTANT If you want to resume system operation with an identical module, you must install the new module in the same slot.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 3

Install the Enhanced Redundancy System

Notes:

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter

Configure the EtherNet/IP Network

Topic Requested Packet Interval Use IP Address Swapping Use CIP Sync Use Produce/Consume Connections Configure EtherNet/IP Communication Modules in a Redundant System Use An Enhanced Redundancy System in a Device-level Ring Topology

Page 77 77 81 84 85 87

Requested Packet Interval

When using revisions earlier than 20.054, the RPI for I/O connections in a redundancy-enabled controller tree must be less than or equal to 375 ms. When using revision 20.054 or later, the RPI can be the same as a non-redundant chassis.

CPU Usage
The System Resource Utilization table describes CPU usage for EtherNet/IP communication modules.
Table 14 - System Resource Utilization Table
If the CPU utilization rate is 0...80% Greater than 80% Then No action is required. Important: This is the optimal rate. Take steps to reduce your CPU utilization. See the EtherNet/IP Network Configuration user manual, publication ENET-UM001. Adjust your connections requested packet interval (RPI). Reduce the number of devices connected to your module. Important: Your EtherNet/IP communication module can function at 100% CPU capacity, but at or near this rate, you run the risk of CPU saturation and performance problems.

Use IP Address Swapping

IP address swapping is a feature available to EtherNet/IP communication modules in an enhanced redundancy system where a partnered set of EtherNet/IP communication modules swap IP addresses during a switchover. IMPORTANT You must use IP address swapping to use remote I/O and produce/consume connections of an EtherNet/IP network.
77

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 4

Configure the EtherNet/IP Network

Determine Use of IP Address Swapping

Depending on your EtherNet/IP network configuration, you can choose to use IP address swapping between your partnered EtherNet/IP communication modules in the event of a switchover.
If your partnered EtherNet/IP communication modules are on the Same subnet Different subnets Then use IP address swapping do not use IP address swapping

If you are using different subnets, you are responsible for programming your system to use the address and subnet of the new primary chassis in the event of a switchover.

Use IP Address Swapping

If you use IP address swapping, assign the same values for these configuration parameters on both EtherNet/IP communication modules in the partnered set: IP address Subnet mask Gateway address This graphic shows a partnered set of EtherNet/IP communication modules during initial configuration.
Figure 17 - EtherNet/IP Communication Modules IP Addresses During System Configuration Assigned IP Address: 192.168.1.3

Primary chassis

Secondary Chassis

CH2 CH1 OK

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the EtherNet/IP Network

Chapter 4

When an enhanced redundancy system begins operating, the primary EtherNet/IP communication module uses the IP address assigned during initial configuration. The secondary EtherNet/IP communication module automatically changes its IP address to thenext highest value. When a switchover occurs, the EtherNet/IP communication modules swap IP addresses. For example, if you assign IP address 192.168.1.3 to both EtherNet/IP communication modules in a partnered set, on initial system operation, the secondary EtherNet/IP communication module automatically changes its IP address to 192.168.1.4. This graphic shows a partnered set of EtherNet/IP communication modules after system operation begins.
Figure 18 - EtherNet/IP Communication Modules IP Addresses After System Operation Begins IP Address: 192.168.1.3
Primary Chassis Secondary Chassis

IP Address: 192.168.1.4

CH2 CH1 OK

TIP

Do not assign IP addresses to EtherNet/IP communication modules outside the partnered set to values that conflict with those used in the partnered set. In the previous example, the partnered set uses 192.168.1.3 and 192.168.1.4. Use 192.168.1.5 or higher for all EtherNet/IP communication modules outside the partnered set.

This graphic shows the partnered set of EtherNet/IP communicationmodules in RSLinx Classic software after system operation begins.
Figure 19 - IP Addresses in RSLinx Classic Software

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 4

Configure the EtherNet/IP Network

Static versus Dynamic IP Addresses

We recommend that you use static IP addresses on EtherNet/IP communication modules in enhanced redundancy system. ATTENTION: If you use dynamic IP addresses and a power outage, or other network failure occurs, modules using dynamic IP addresses can be assigned new addresses when the failure is resolved. If the IP addresses change, your application could experience a loss of control or other serious complications with your system. You cannot use dynamic IP addresses with IP address swapping.

Reset the IP Address for an EtherNet/IP Communication Module

If necessary, you can reset a 1756-EN2x communication modules IP address to the factory default value. To return to the factory default, set the modules rotary switches to 888 and cycle power. After cycling power to the EtherNet/IP communication module, you can either set the module's switches to the desired address or set the switches to 999 and use one of these methods to set the IP address: BOOTP-DHCP server RSLinx Classic communication software RSLogix 5000 programming software

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the EtherNet/IP Network

Chapter 4

Use CIP Sync

Beginning with enhanced redundancy system revision 19.052 or later, you can use CIP Sync technology. CIP Sync technology provides a mechanism to synchronize clocks between controllers, I/O devices, and other automation products in your architecture with minimal user intervention. CIP Sync technology uses Precision Time Protocol (PTP) to establish a Master/ Slave relationship among the clocks for each CIP Sync-enabled component in the system. A single master clock, known as the Grandmaster, sets the clock to which all other devices on the network synchronize their clocks. IMPORTANT Before you use this enhancement in an enhanced redundancy system, revision 19.050 or later, see these publications for a full understanding of CIP Sync technology in any system: Integrated Architecture and CIP Sync Configuration Application Technique, publication IA-AT003 ControlLogix System User Manual, publication 1756-UM001

Consider these points when you use CIP Sync technology in an enhanced redundancy system, revision 19.052 or later: If you enable CIP Sync Time Synchronization in the controllers in a redundant chassis pair, you must also enable Time Synchronization in the EtherNet/IP communication modules in the redundant chassis pair so all devices have a single path to the Grandmaster. If time synchronization is enabled in any controller in the primary chassis of a disqualified redundant chassis pair, and no other devices in the primary chassis have time synchronization enabled, the redundant chassis pair attempts to qualify. However, in these application conditions, the attempt to qualify fails. While CIP Sync technology can handle multiple paths between master and slave clocks, it resolves mastership most effectively if you configure the redundant paths so that Time Synchronization is enabled in only the minimum required number of EtherNet/IP communication modules. For example, if your redundant chassis pair has three 1756-EN2T communication modules and all are connected to the same network, enable Time Synchronization in only one of the modules.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 4

Configure the EtherNet/IP Network

If the primary controller is the Grandmaster, the enhanced redundancy system automatically manages the CIP Sync clock attributes so that the controller in the primary chassis is always set to be the Grandmaster instead of the secondary controller. This clock management ensures a change to a new Grandmaster when the redundancy system switches over. When a switchover occurs, these events take place: The Grandmaster status transfers from the original primary controller to the new primary controller. This transfer can take longer to complete than if Grandmaster status was transferred between devices in a nonredundant system. After the switchover is complete, system synchronization can take longer in an enhanced redundancy system, revision 19.052 or later, that uses CIP technology than one that does not. If you attempt to use the Redundant System Update (RSU) feature to update an enhanced redundancy system, revision 16.081 or earlier, that uses Coordinated System Time (CST), the enhanced redundancy system, revision 19.052 or later, does not permit a locked switchover and the update fails to complete. To work around this restriction, first disable CST Mastership in the original redundancy system and then use RSU to update to enhanced redundancy system, revision 19.052 or later.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the EtherNet/IP Network

Chapter 4

This figure shows an example enhanced redundancy system, revision 19.052 or later, using CIP Sync technology. Use of ControlNet is not required when using CIP Sync technology in an enhanced redundancy system. It is included in this figure for example purposes.
Figure 20 - Enhanced Redundancy System, Revision 19.052 or later, Using CIP Sync Technology

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 4

Configure the EtherNet/IP Network

Use Produce/Consume Connections

Beginning with enhanced redundancy system, revision 19.053 or later, you can use produce/consume connections over an EtherNet/IP network. Controllers let you produce (broadcast) and consume (receive) system-shared tags. TIP When using 1756-L7x controllers in your system, you must use revision 19.053 or later.

Figure 21 - Example System Using Produced and Consumed Tags

Primary Chassis Secondary Chassis

CH2 CH1 OK

Controller 1 Produced Tag

Controller 2 Consumed Tag

These requirements exist when you use produced and consumed connections over an EtherNet/IP network in an enhanced redundancy system, revision 19.052 or later: You cannot bridge produced and consumed tags over two networks. For two controllers to share produced or consumed tags, both must be attached to the same network. Produced and consumed tags use connections in both the controllers and the communication modules being used. Because the use of produced and consumed tags uses connections, the number of connections available for other tasks, such as the exchange of I/O data, is reduced. The number of connections available in a system depends on controller type and network communication modules used. Closely track the number of produced and consumed connections to leave as many as necessary for other system tasks. You must configure both connections, that is, the connection between the primary controller and the remote controller, and the connection between the remote controller and the primary controller, for Multicast. However, if the redundancy system is the producer, it can be Unicast, because that is configured in the remote controller, which is allowed.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the EtherNet/IP Network

Chapter 4

IMPORTANT

If controllers in the redundant chassis pair produce tags over an EtherNet/IP network that controllers in remote chassis consume, the connection from the remote controller to the redundant controller can briefly drop during a switchover. This anomaly occurs if the EtherNet/IP communication modules in the remote chassis do not use specific firmware revisions. For the latest firmware revisions by product, go to GET SUPPORT NOW. For more information on produced and consumed connections, see Logix5000 Controllers Produced and Consumed Tags user manual, publication 1756-PM011. Sockets are supported in the 1756-EN2T, 1756-EN2TR and 1756-EN2F modules, firmware revision 5.008 or later. For additional information, see ENET-AT002. Unicast functionality in enhanced redundancy systems supports produced tags. Unicast consumed tags are not supported.

IMPORTANT

Configure EtherNet/IP Communication Modules in a Redundant System

Use these procedures to configure EtherNet/IP communication modules used in redundant chassis.

Before You Begin

Before you begin configuring the EtherNet/IP communication modules in the redundant chassis, verify that these tasks have been completed: The redundancy modules are installed and connected in the redundant chassis. A plan for IP address use has been executed: If you are using IP address swapping, plan for the use of two consecutive IP addresses in the partnered set. If you are not using IP address swapping, plan for the use of two IP addresses. Know the subnet mask and gateway address for the Ethernet network the redundant modules are to operate on.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 4

Configure the EtherNet/IP Network

Options for Setting the IP Addresses of EtherNet/IP Communication Modules

By default, ControlLogix EtherNet/IP communication modules ship with the IP address set to 999 and with Bootstrap Protocol (BOOTP)/Dynamic Host Configuration Protocol (DHCP)-enabled. Use one of these tools to set the IP addresses for your EtherNet/IP communication modules: Rotary switches on the module RSLinx Classic communication software RSLogix 5000 software BOOTP/DHCP utility - Provided with RSLogix 5000 software

Half/Full Duplex Settings

The enhanced redundancy system uses the duplex settings of the EtherNet/IP communication module that is currently the primary. After a switchover, the duplex settings of the new primary EtherNet/IP communication module are used. By default, the duplex setting is automatic. We recommend that you use this setting whenever possible. To avoid communication errors, configure both the primary and secondary EtherNet/IP communication modules with the same duplex settings. Using different duplex settings on partnered EtherNet/IP communication modules can result in messaging errors after a switchover.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the EtherNet/IP Network

Chapter 4

Use An Enhanced Redundancy System in a Device-level Ring Topology

A DLR network is a single-fault tolerant ring network intended for the interconnection of automation devices. This topology is implemented at the device level because the use of EtherNet/IP embedded switch technology embeds switches into the end devices themselves. No additional switches are required. This graphic shows an example DLR network that includes an enhanced redundancy system, revision 19.052 or later, connected to the network.
Figure 22 - Example DLR Network

Products with embedded switch technology have these features in common: Support for the management of network traffic to be sure of timely delivery of critical data Designed according to the ODVA specification for EtherNet/IP networks Ring recovery time less than 3 ms for DLR networks of 50 or fewer nodes Support for CIP Sync technology Two ports to connect to DLR networks in a single subnet Devices on a DLR network can function on the network in these required roles: Supervisor Nodes - There are two types of supervisor nodes: 1. Active Supervisor Node - The network requires one active supervisor node per DLR network that executes these tasks: Verifies ring integrity Reconfigures the ring to recover from a single fault Collects ring diagnostic information

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 4

Configure the EtherNet/IP Network

2. Back-up Supervisor Node - An optional node that behaves like a ring node unless the active supervisor node cannot execute required tasks. At that point, the back-up node becomes the active supervisor node. Ring Node - A node that processes data transmitted over the network or passes the data to the next node on the network. When a fault occurs on the DLR network, these nodes reconfigure themselves, relearn the network topology, and can report fault locations to the active ring supervisor. We recommend that you configure at least one back-up supervisor node on the DLR network. During normal network operation, an active ring supervisor uses beacon, and other DLR protocol frames to monitor network health. Back-up supervisor and ring nodes monitor beacon frames to track ring transitions between Normal and Faulted states. You can configure two beacon-related parameters: Beacon interval - Frequency at which the active ring supervisor transmits a beacon frame through both of its ring ports. Beacon timeout - Amount of time that supervisor or ring nodes wait before timing out the reception of beacon frames and taking appropriate action. IMPORTANT Although these two parameters are configurable, the default values accommodate most applications. We strongly recommend that you use the default values.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the EtherNet/IP Network

Chapter 4

During normal operation, one of the active supervisor nodes network ports is blocked for DLR protocol frames. However, the active supervisor node continues to send beacon frames out of both network ports to monitor network health. The graphic below shows the use of beacon frames sent from the active ring supervisor.
Figure 23 - Normal DLR Network Operation
Active Ring Supervisor Blocked Port Beacon Frame Beacon Frame

Control Traffic

Ring Node 1

Ring Node 2

Ring Node 3

Ring Node 4

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 4

Configure the EtherNet/IP Network

This graphic shows an example of an operating DLR network that includes an enhanced redundancy system.
Figure 24 - Enhanced Redundancy System in a DLR Network

FactoryTalk Application

Cisco Switch Stratix 8000 Switches

Redundant Chassis Pair

HMI Connected via 1783-ETAP Taps

Remote ControlLogix Chassis with Redundant Power Supplies and I/O Modules

1715 Redundant I/O System

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the EtherNet/IP Network

Chapter 4

Complete these steps to construct and configure the example DLR network. 1. Install and connect devices on the DLR network but leave at least one connection open. IMPORTANT When you initially install and connect devices on the DLR network, leave at least one connection open, that is, temporarily omit the physical connection between two nodes on the DLR network. You must configure an active supervisor node for the network before network operation begins when the final connection is made. If you fully connect your DLR network without a supervisor configured, a network storm can result, rendering the network unusable until one link is disconnected and at least one supervisor is enabled. This graphic shows the DLR network with one connection left open.
Figure 25 - DLR Topology with One Connection Unmade
FactoryTalk Application

Cisco Switch Stratix 8000 Switches

Redundant Chassis Pair

HMI Connected via 1783-ETAP Taps

Physical connection is not made yet.

Remote ControlLogix Chassis with Redundant Power Supplies and I/O Modules

1715 Redundant I/O System

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 4

Configure the EtherNet/IP Network

2. Configure and enable one active supervisor and any back-up nodes on the network. Use either of these tools to configure and enable supervisor nodes on a DLR network: RSLogix 5000 programming software RSLinx Classic communication software 3. Complete the physical connections on the network to establish a complete and fully functioning DLR network. This figure shows the example DLR network on page 91 with all physical connections complete.
Figure 26 - Fully Connected DLR Network
FactoryTalk Application

Cisco Switch Stratix 8000 Switches

Redundant Chassis Pair

HMI Connected via 1783-ETAP Taps

Physical connection is made.

Remote ControlLogix Chassis with Redundant Power Supplies and I/O Modules

1715 Redundant I/O System

4. Verify supervisor configuration and overall DLR network status with either of these tools: RSLogix 5000 software RSLinx Classic communication software

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter

Configure the ControlNet Network

Topic Produce/Consume Connections Network Update Time Use a Scheduled or Unscheduled Network Schedule a New Network Update an Existing Scheduled Network Check the Network Keeper States

Page 93 95 97 98 100 101

Produce/Consume Connections
Primary chassis

You can use produce/consume connections over a ControlNet network. Controllers let you produce (broadcast) and consume (receive) system-shared tags.
Figure 27 - Example System Using Produced and Consumed Tags
Secondary Chassis

CH2 CH1 OK

Controller 1 Produced Tag

Controller 2 Consumed Tag

Use a Scheduled or Unscheduled Network

It is up to the user to decided between using a scheduled or unscheduled network.

Use a Scheduled Network

Schedule or reschedule your ControlNet network when you are executing these tasks: Commissioning a new redundant system. Adding a new chassis of remote ControlLogix I/O that is set to use the Rack Optimized communication format. Adding any remote I/O besides ControlLogix I/O. For example, if adding FLEX I/O modules, you must schedule the network. Using produced/consumed data. Any time you add a produced/consumed data tag, you must reschedule the ControlNet network. To schedule or reschedule your ControlNet network, you put your redundant system in Program mode.

Use an Unscheduled Network

You can use an unscheduled network when you are doing the following: Adding a new remote I/O chassis of ControlLogix I/O that does not use the Rack Optimized communication format. That is, direct connections to the I/O are used. Adding a ControlLogix I/O module to a chassis that has already been scheduled and uses the Rack Optimized communication format. Adding some drives that support adding I/O while online. Using ControlNet to monitor HMI or the controller program. You can add those components to the unscheduled network while your redundant system is online and in Run mode. We recommend that you do not use an unscheduled network for all of your I/O connections. The use of 1756-CN2/B, 1756-CN2R/B, and 1756-CN2RXT modules provides increased capacity for adding I/O while online compared to 1756-CNB or 1756-CNBR modules. With this increased capacity, you can easily add I/O and increase ControlNet connections used without affecting your redundant system performance.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 5

Configure the ControlNet Network

Add Remote ControlNet Modules While Online

If you are adding a remote I/O chassis comprised of a ControlLogix ControlNet module and ControlLogix I/O while your redundant system is running (online), make these considerations: Do not use Rack Optimized communication formats. The ControlNet module and I/O must be configured for direct connections. For each remote I/O module used, plan for one direct connection to be used.

Schedule a New Network

Complete these steps to schedule a new ControlNet network for an enhanced redundancy system. IMPORTANT Before you schedule a ControlNet network, turn on the power to both redundant chassis. If you schedule a ControlNet network while the secondary chassis is off, the keeper signature of a 1756-CN2/B or 1756-CN2R/B module may not match its partner, and the secondary chassis will fail to synchronize.

1. Turn on the power to each chassis. 2. Start RSNetWorx for ControlNet software. 3. From the File menu, choose New. 4. From the Network menu, choose Online. 5. Select your ControlNet network and click OK. 6. Check Edits Enabled.

7. From the Network menu, choose Properties.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the ControlNet Network

Chapter 5

8. In the Network Parameters tab, enter the parameters that are appropriate for your system.

Parameter Network Update Time (ms) Max Scheduled Address Max Unscheduled Address Media Redundancy Network Name

Specify The minimum repetitive interval when data is sent over the ControlNet network. The highest node number that uses scheduled communication on the network. The highest node number that you use on the network. The ControlNet channels you are using. A name for identifying the ControlNet network.

9. Click OK. 10. From the Network menu, choose Single Pass Browse. 11. From the File menu, choose Save. 12. Type a name for the file that stores the network configuration, then click Save. 13. Click Optimize and re-write Schedule for all Connections (default) and click OK.

You have finished scheduling your new ControlNet network.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter 5

Configure the ControlNet Network

Update an Existing Scheduled Network

If you are adding the redundant chassis to an existing ControlLogix system that uses a ControlNet network, complete these steps to update the existing ControlNet network. 1. Turn on the power to each chassis. 2. Start RSNetWorx for ControlNet software. 3. From the File menu, choose Open. 4. Select the file for the network and click Open. 5. From the Network menu, choose Online. 6. Click Edits Enabled.

7. From the Network menu, choose Properties. 8. In the Network Parameters tab, update the parameters specific to your system.

9. Click OK. 10. From the Network menu, choose Single Pass Browse. 11. From the File menu, choose Save. 12. Click Optimize and re-write schedule for all connections and click OK.

13. Click OK. You have completed updating your scheduled ControlNet network.

100

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the ControlNet Network

Chapter 5

Check the Network Keeper States

After you schedule your ControlNet network, check the states of keeper-capable nodes. Checking the status of keeper-capable nodes is important because if a major network disruption occurs, the keepers provide network configuration parameters required to recover. For more information about keepers and their function in a ControlNet network, see the ControlNet Modules in Logix5000 Control Systems User Manual, publication CNET-UM001. To check the status of keepers on the ControlNet network, complete these steps. 1. In RSNetWorx for ControlNet software, from the Network menu choose Keeper Status.

2. Verify that one keeper-capable device outside the redundant chassis is indicated as active and valid. 3. Verify that all of the keeper-capable devices on the network are valid.

Active and valid keeper device.

Keeper-capable devices are valid.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

101

Chapter 5

Configure the ControlNet Network

4. Verify that all of the nodes on the network have the same keeper signature.

Keeper signatures are all the same.

TIP

If the keeper signatures of partnered ControlNet modules are different, your redundant chassis may not synchronize. If the keeper signatures of your partnered ControlNet modules are different, update the keepers of the redundant ControlNet modules.

Save the Project for Each Primary Controller

After you have scheduled your ControlNet networks, go online with each controller in your primary chassis and save the project. This makes downloading a project easier in the future because you wont be required to reschedule the network after completing the download.

Automatic Keeper Crossloads

The 1756-CN2/B, 1756-CN2R/B, and 1756-CN2RXT ControlNet modules have an Automatic Keeper Crossload feature that makes replacing a ControlNet module in a redundant chassis easier. The Automatic Keeper Crossload feature also reduces the need to use RSNetWorx for ControlNet software once the system is running. With the Automatic Keeper Crossload feature, ControlNet modules can automatically upload the keeper signature and network parameters from the active keeper of a ControlNet network.

102

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the ControlNet Network

Chapter 5

To replace a ControlNet module that has been configured and scheduled on the ControlNet network, remove the existing module and insert a 1756-CN2/B, 1756-CN2R/B, or 1756-CN2RXT module. The module you are inserting must be unconfigured or have a keeper signature of all zeros. TIP To clear the keeper signature of a 1756-CN2, 1756-CN2R, or 1756-CN2RXT module, complete these steps.
1.Disconnect the module from the ControlNet network and remove it from the chassis. 2.Set the node address switches to 00. 3.Insert the module back into the chassis and wait for the status display to indicate Reset Complete. 4.Remove the module and set the node address switches to the intended node address. 5.Insert the module into the chassis.

After being inserted and connected to the ControlNet network, the unconfigured 1756-CN2, 1756-CN2R, and 1756-CN2RXT modules crossload the appropriate configuration from the active keeper on the ControlNet network and become configured with the appropriate keeper signature.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

103

Chapter 5

Configure the ControlNet Network

Notes:

104

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter

Configure the Redundancy Modules

Topic About the Redundancy Module Configuration Tool (RMCT) Determine if Further Configuration is Required Use the RMCT Module Info Tab Configuration Tab Synchronization Tab Synchronization Status Tab Event Log Tab System Update Tab System Event History Using Dual Fiber Ports with the 1756-RM2/A Redundancy Module Page 105 106 107 111 113 116 119 120 130 136 138

About the Redundancy Module Configuration Tool (RMCT)

The Redundancy Module Configuration Tool (RMCT) is used to configure the redundancy modules and to determine the status of the redundancy system. Use the RMCT to complete these configuration-related tasks: Set Auto-Synchronization parameters. Set the time and date of redundancy modules. View and set module information. View and set Chassis ID parameters (Chassis A, Chassis B). Lock the redundant system for an update. Conduct a test switchover. You can also use this functionality available with the RMCT to determine the redundant systems status: View error diagnostics specific to redundant chassis. View partnered modules qualification and compatibility status. Identify noncompliant modules for removal. View redundant system event history.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

105

Chapter 6

Configure the Redundancy Modules

The chassis platform configuration identifies the common operating platform of the modules in the redundant chassis and applies to all redundancy modules. It may be one of the following values depending on the redundancy release installed in the system and the type of communication modules running in the redundant chassis.

Table 16 - Chassis Platform Configuration

Type Standard Description The redundant chassis is operating on a Standard platform. Modules supported in redundancy release revisions 16.057, 16.056, 16.053, and 16.050 and releases earlier than revision 16 comprise the standard platform. The redundant chassis is operating on an Enhanced platform. Modules supported in redundancy release revision 16.054 and all releases of revision 16.080 and later comprise the enhanced platform. The redundant chassis contains a mix of modules belonging to standard and enhanced platforms. All Hybrid platforms are an unsupported redundant system configuration.

Enhanced

Hybrid

Determine if Further Configuration is Required

The default configuration of the redundancy modules lets you synchronize your redundant chassis without additional configuration if you are using a basic redundant chassis pair. However, some applications and uses of the redundancy system can require additional configuration. For example, you must use the RMCT for additional configuration if you need to complete any of these tasks: Set the redundancy modules to a different time or date (recommended). Program your controller to control the redundant system. Change the redundancy synchronization options of the redundant system. Change the synchronization states of your redundant chassis. Conduct a test switchover. Complete a firmware update of a module in the redundant chassis while the system is online. If you need to complete any of these tasks, reference the sections that follow.

106

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Use the RMCT

To access and begin using the RMCT, launch RSLinx Classic software and browse to your redundancy module. Right-click the redundancy module and choose Module Configuration.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

107

Chapter 6

Configure the Redundancy Modules

When you access the RMCT, the dialog box always indicates the status of the redundancy chassis in the bottom-left corner.

108

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Identify the RMCT Version

You must use a version of the RMCT that is compatible with your redundancy module firmware. Beginning with version 20.054, the redundancy module firmware reports back to the Redundancy Module Configuration Tool (RMCT) as to which version of the RMCT is compatible. In the case of an incompatibility, the RMCT will show only the Module Info tab and indicate the version that the firmware is compatible with. If using a version earlier than 20.054, go to the Tech Support website at http:// www.rockwellautomation/support.com.to determine which RMCT version is required for use with your redundancy module firmware revision. To find the latest firmware bundle on the website, follow these steps. 1. Once on the site, choose Control Hardware. 2. On the Firmware Updates page, choose the latest firmware bundle. 3. Download if different from your current modules firmware. Complete these steps to check or verify the version of the Redundancy Module Configuration Tool (RMCT) that you have installed. TIP The RMCT launches at the version that is compatible with the 1756 redundancy module firmware that is currently installed. If you have not updated your 1756 redundancy module firmware after upgrading your RMCT version, the RMCT version that is indicated may not reflect the version you updated to. You can also check the RMCT version that you have installed by using Add or Remove Programs in the Control Panel.

1. Launch RSLinx Classic software. 2. Click the RSWho icon.

3. Right-click your redundancy module and choose Module Configuration.

Configure the Redundancy Modules

These parameters are indicated in the Module Info tab.

Table 17 - Module Info Tab - Parameters Indicated
Parameter Vendor Product Type Product Code Revision Redundancy Module Serial Number Product Name General Status Major Fault Minor Fault Error Code Error Message Recovery Message Total Description Name of the redundancy modules vendor. General product type of the redundancy module. CIP product code for the redundancy module. Major and minor revision information for the redundancy module. Serial number of the redundancy module. Predefined catalog name of the redundancy module. General state of the redundancy module. Possible values include Startup, Load, Fault, and OK. Redundancy modules major fault status. When a major fault is detected, the system does not provide redundancy support. Redundancy modules minor fault status. When a minor fault is detected the system continues to provide redundancy support. Error code related to the fault if one exists. Text-based message describing the error if a fault exists. Text-based message that indicates the recovery from a fault. Indicates the number of channel switchovers that have occurred from CH1 to CH2 and vice versa on the module since its last powerup. It is reset to 0 automatically by firmware on a power cycle. Indicates the number of switchovers that have occurred between CH1 and CH2 over the last 10-second interval. The counter is constantly updated to reflect the value recorded at every 10-second interval. The counter is automatically reset to 0 on a power cycle. The maximum number recorded in the Periodic counter. The time of the update is recorded every time the counter is updated. The counter is automatically reset to 0 on a power cycle and may also be reset by clicking the Reset button.(1) Fiber Channel 1 status. The status shows the operating condition of the respective fiber channels in terms of one of the following values: Unknown - Operating state is not yet determined Active - Channel is operating normally as the ACTIVE channel Redundant - Channel is operating normally as the REDUNDANT channel Link Down - Channel is disconnected. Causes can be: the cable is disconnected/broken/damaged; signal is attenuated, connector is loose, the partner 1756-RM2 module is power down or in a major fault state No SFP - No transceiver was detected, it has failed, it is loosely connected, it is not installed SFP !Cpt - Transceiver is not a Rockwell Automation supported unit SFP Fail - Transceiver is in a failed state Fiber Channel 2 status. Refer to CH1 Status on page 112.

Periodic

Max Periodic Switchovers

CH1 Status

CH2 Status

Chassis Platform Configuration Indicates whether configuration is enhanced or standard (version 19.05x and above always displays enhanced).
(1) The Periodic counters can be used to identify a burst of switchovers that may take place due to intermittent channel failures within a few seconds. The recorded time may be helpful to correlate the switchover occurrences with any external failures that may have occurred on the fiber cables.

In addition, you can click Change to edit the User-Defined Identity parameters to meet your application needs.

112

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Configuration Tab

Use the Configuration tab to set redundancy options and the modules internal clock. After you modify a parameter, the Apply Workstation Time button becomes active.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

113

Chapter 6

Configure the Redundancy Modules

Auto-Synchronization
The first parameter in the Configuration tab is the Auto-Synchronization parameter. The value you set this parameter to determines a significant part of your redundant system behavior. TIP Verify that your Auto-Synchronization parameter is at the proper value before you make any changes to your redundant system. This helps prevent system errors. For example, if you are upgrading your redundant system firmware, verify that this parameter is set to Never or Conditional before disqualifying your secondary chassis. If this parameter is Always, you cannot properly disqualify your chassis and conduct the update.

Use this table to determine the Auto-Synchronization setting that best suits your application.
If you use this parameter Never Then this synchronization behavior results The system remains in the same state, that is, either synchronized or disqualified, until one of these events takes place: A command is issued from the RMCT to either synchronize or disqualify. The controller commands synchronization or disqualification through the use of a MSG instruction. For this to occur, Enable User Program Control must be checked. A fault on the primary causes a switchover. The system automatically synchronizes on a regular basis. If you attempt to disqualify the system by using the Disqualify Secondary command in the RMCT, the resulting disqualification is temporary as the system automatically qualifies and synchronizes again. If the controller program disqualifies the system, the resulting disqualification is also temporary. The system behavior with this setting is dependent on the AutoSynchronization state of your system, found in the lower left portion of the RMCT window after setting the Auto-Synchronization parameter to Conditional: If your Auto-Synchronization parameter is set to Conditional and your Auto-Synchronization state is 'Conditional, Enabled', then the system continually attempts to synchronize. If your Auto-Synchronization parameter is set to Conditional and your Auto-Synchronization state is 'Conditional, Disabled', then the system does not automatically attempt to synchronize. To change from 'Conditional, Enabled' to 'Conditional, Disabled', click Disqualify Secondary on the Synchronization tab. To change from 'Conditional, Disabled' to 'Conditional, Enabled', click Synchronize Secondary on the Synchronization tab.

Always

Conditional

114

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Chassis ID
The chassis ID parameter is used to assign a generic label to the chassis that house the redundancy modules. The available chassis labels are Chassis A and Chassis B. If you change the chassis label in the RMCT of the primary redundancy module, the secondary module and chassis are automatically assigned the other chassis label. The chassis label assigned to the module remains associated with the same physical chassis, regardless of its primary or secondary control designation.

Enable User Program Control

If you plan to use MSG instructions in your controller program to initiate a switchover, change the redundancy module time, or conduct synchronization, then you must check Enable User Program Control in the Configuration tab. If you leave Enable User Program Control unchecked, the redundancy modules do not accept any commands from the controller.

Redundancy Module Date and Time

The Redundancy Module Date and Time parameters can be applied separate from the Redundancy Module Options parameters. The time specified with these parameters is the time referenced by the event logs when a redundant system event occurs. To make changes to the redundancy module time settings, use the pull-down menu or type your changes then click Set to implement time changes. Or, to set the redundancy modules time to match that of the workstation, click Apply Workstation Time.

IMPORTANT

We recommend that you set the redundancy module date and time when you commission a system. We also recommend that you periodically check the date and time settings to make sure they match those of the controller. If a power failure occurs on the redundant chassis, you must reset the date and time information of the redundancy modules. The modules do not retain those parameters when power is lost.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

115

Chapter 6

Configure the Redundancy Modules

Synchronization Tab

The Synchronization Tab provides commands for these options: Changing the synchronization state of the system (synchronize or disqualify) Initiating a switchover Forcing the disqualified secondary to become the primary The commands available are described in the Commands in the Synchronization Tab section on page 117. This tab also provides information about the last four synchronization attempts in the Recent Synchronization Attempts log. Attempts are identified by N or NX . If the redundant chassis fail to synchronize, a cause is identified in the Recent Synchronization Attempts log. The causes and their interpretations are described in the Recent Synchronization Attempts Log section on page 118.

116

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Commands in the Synchronization Tab

These sections explain each redundancy command and the system conditions that are required for the command to be available.
Command Synchronize Secondary Description This command forces the primary redundancy module to attempt synchronization with its partner. This command is available in specific conditions: Available only when the chassis redundancy state is as follows: Primary with Disqualified Secondary Disqualified Secondary Unavailable (dimmed) in all other chassis states Synchronization is asynchronous with the execution of this command. Successful execution of this command begins with synchronization, which can take several minutes. Monitor the chassis status displayed at the bottom of the RMCT to determine when synchronization has completed. This command forces the primary redundancy module to disqualify its partner.

Disqualify Secondary

ATTENTION:
Disqualifying the secondary chassis makes it unable to assume control functions, that is, redundancy is lost. If you disqualify the secondary and a major fault occurs on the remaining primary, a switchover does not occur.

This command is available in specific conditions: Available only when the chassis redundancy state is as follows: Primary with Synchronized Secondary Synchronized Secondary Unavailable (dimmed) in all other chassis states If you use the Disqualify Secondary command when the Auto-Synchronization parameter is set to Always, a synchronization attempt occurs immediately after the secondary chassis becomes disqualified. To keep the secondary disqualified after issuing a Disqualify Secondary command, set the Auto-Synchronization parameter to Conditional or Never before disqualifying the secondary. Initiate Switchover This command forces the system to initiate an immediate switchover from the primary chassis to the secondary chassis. This command can be used when upgrading redundancy system firmware or when completing maintenance on one chassis of the redundant pair. This command can also be used to perform a realistic test of your redundant system behavior by simulating a failure detected in the primary control chassis. This command is available in specific conditions: Available only when the chassis redundancy state is as follows: Primary with Synchronized Secondary Synchronized Secondary Unavailable (dimmed) in all other chassis states This command forces a disqualified secondary system to become a primary system and is available in specific conditions: Available only when the chassis redundancy state is Secondary with No Primary. Unavailable (dimmed) in all other chassis states

Become Primary

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

117

Chapter 6

Configure the Redundancy Modules

Recent Synchronization Attempts Log

This table describes the possible result and causes of synchronization states.
Table 18 - Recent Synchronization Attempts Log - Result Interpretations
Result Undefined No attempt since last powerup Success Abort Result Interpretation The result of the synchronization is unknown. Synchronization has not been attempted since power was applied to the module. Full synchronization was successfully completed. The synchronization attempt failed. See the table Recent Synchronization Attempts Log - Result Interpretations for further information.

If the Synchronization Attempts log indicates that the Synchronization attempt was aborted, use this table to further interpret the cause.
Table 19 - Synchronization Interpretation
Cause Undefined Module Pair Incompatible Module Configuration Error Edit Session In Progress Crossloading Failure Comm Disconnected Module Insertion Module Removal Secondary Module Failed Incorrect Chassis State Comm Does Not Exist Nonredundant Compliant Module Exists Sec Failed Module Exists Local Major Unrecoverable Fault Partner Has Major Fault Sec SYS_FAIL_L Subsystem Failed Sec RM Device Status = Comm Error Sec RM Device Status = Major Recoverable Fault Sec RM Device Status = Major Unrecoverable Fault Incorrect Device State Primary Module Failed Primary Failed Module Exists Auto-Sync Option Cause Interpretation The cause of synchronization failure is unknown. Synchronization aborted because one or more module pairs are incompatible. Synchronization aborted because one of the modules is improperly configured. Synchronization aborted because an edit or session is in progress. An undetermined failure occurred during synchronization between redundancy modules. The cable between the redundancy modules was disconnected. Synchronization aborted because a module was inserted into a chassis. Synchronization aborted because a module was removed from a chassis. Synchronization aborted because of a failure in the secondary module. Synchronization aborted due to an incorrect chassis state. Synchronization could not be performed because the communication link between redundancy modules does not exist. Synchronization could not be performed because one or more nonredundancy modules are present in one of the chassis. A module in the secondary chassis has asserted the SYS_FAIL line, indicating that it has faulted or failed. Synchronization was aborted because of a local major unrecoverable fault. Synchronization was aborted because the partner module has a major fault. The test of the SYS_FAIL line in the secondary chassis failed. Synchronization was aborted because the secondary redundancy modules status indicates a communication error. Synchronization was aborted because the secondary redundancy modules status indicates a major recoverable fault. Synchronization was aborted because the secondary redundancy modules status indicates a major unrecoverable fault. Synchronization was aborted because the device is in the wrong state. Synchronization was aborted because of a failure in the primary module. A module in the primary chassis has asserted the SYS_FAIL line, indicating that it has faulted or failed. Synchronization was aborted because the Auto-Synchronization parameter of one of the redundancy modules was changed during synchronization.

118

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Table 19 - Synchronization Interpretation

Cause Module Qual Request SYS_FAIL_L Deasserted Disqualify Command Disqualify Request Platform Configuration Identity Mismatch Detected Application Requires Enhanced Platform ICPT Asserted Unicast Not Supported PTP Configuration Error Secured Module Mismatch Cause Interpretation Synchronization was aborted because another synchronization request was received. The current synchronization has stopped so that the new synchronization request can be serviced. Synchronization was aborted because one of the modules came out of a faulted or failed state. Synchronization was aborted because the redundancy module received a disqualify command from another device. The originating device sends this command when it is no longer capable of performing in the qualified state. Synchronization was aborted because the redundancy module received a disqualify command from another device. The originating device sends this command when it is no longer capable of performing in the qualified state. There are modules in the primary or secondary chassis that do not belong to the enhanced platform. A redundant controller is running an application that contains a feature qualified to run only on an enhanced redundant platform, for example, Alarms. A test line on the backplane is asserted. A unicast connection is configured in the redundant controller, and enhanced redundancy systems do not support Unicast. A redundant controller's PTP clock is not synchronized or the partner controller pair is synchronized to a different grandmaster. A mismatch was detected between a primary and secondary secured module.

Synchronization Status Tab

The Synchronization Status tab provides a module-level view of these items: Synchronization state (for example, Synchronized or Disqualified) Chassis designation (Primary or Secondary) Module compatibility with its partner (for example, Full or Undefined) Each module installed in the chassis is identified and information regarding its partner and compatibility are provided.
Synchronization State Chassis Designation Module-partner Compatibility

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

119

Chapter 6

Configure the Redundancy Modules

Event Log Tab

The Event Log tab provides a history of events that have occurred on the redundant chassis. These system events are indicated in the event logs: Qualification stages entered and completed Module insertion/removal Firmware errors Communication events and errors Configuration changes Other system events that affect qualification and synchronization IMPORTANT The events logged in this tab are not always indicative of an error. Many of the events logged are informational only. To determine if additional action or troubleshooting is required in response to an event, see the Event Classifications table on page 121.

The Event Log tab can be customized to view the log specific to only one chassis or the event logs of both redundant chassis. You can alter your view of the event logs by changing the Auto-Update and Partner Log parameters.
Table 20 - Settings for Event Log Views
Use this setting Auto-Update Partner Log To Keep the log from updating while youre viewing it. View only the event log for the module you are accessing.

Figure 29 - Settings for Event Log Views

Check On to keep the log updating automatically. Check Close to view only the log of one redundancy module.

120

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Event Classifications
Each event identified and logged is classified. You can use these classifications to identify the severity of the event and determine if additional action is required.
Figure 30 - Event Classifications in the Event Log Tab

Event Classifications

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

121

Chapter 6

Configure the Redundancy Modules

Use this table to determine what an event classification indicates and if corrective action is required.
Table 21 - Classification Types
Classification Type Configuration Description A redundancy module configuration parameter has been changed. For example, if you change the Auto-Synchronization parameter from Always to Never, an event classified as Configuration is logged. An event related to commands issued to the redundant system has occurred. For example, if you change the Redundancy Module Date and Time parameters, a WCT time change event of the Command classification is logged. A failure on the redundancy module has occurred. For example, an internal Firmware error event classified as a Failure can be indicated in the event log. Action Required No corrective action is required. This event is provided for informational purposes and does not indicate serious anomaly with the redundancy system. No corrective action is required. This event is provided for informational purposes and does not indicate serious anomaly with the redundancy system.

Command

Failure

Action can be required to determine the cause of the failure. If the failure is not followed by a Switchover or Major Fault event, then the module could have corrected the error internally and additional action is not required. To determine if corrective action is required, double-click the event to see Extended Event Information and the suggested recovery method, if applicable. Action can be required to determine the action needed to correct the fault. Double-click the event to see Extended Event Information and the suggested recovery method, if applicable. No corrective action is required. This event is provided for informational purposes and does not indicates serious anomaly with the redundancy system. No corrective action is required. However, if an event that is classified as a Failure, State Change, or Major Fault occurs after the Starts/Stops event, view the Extended Event Information of both events to determine if the events are related. No corrective action is required. However, if an event that is classified as a Failure, or Major Fault occurs after the State Changes event, view the Extended Event Information of both events to determine if the events are related. Action can be required to determine the cause of the switchover and potential correction methods. Double-click the event to see Extended Event Information and the suggested recovery method, if applicable. No corrective action is required. This event is provided for informational purposes and does not indicates serious anomaly with the redundancy system.

Major Fault

A major fault has occurred on one of the redundancy modules.

Minor Fault

A minor fault has occurred on one of the redundancy modules.

Starts/Stops

Various internal chassis and module processes have started or stopped.

State Changes

A chassis or module state change has occurred. For example, if the chassis designation changes from being a disqualified secondary to a qualified secondary, a State Change event is logged. An event related to a chassis switchover has occurred. For example, if an Initiate Switchover command is issued, an event classified as Switchover is logged. An event related to chassis synchronization has occurred. For example, if the Synchronization command has been issued, a Network Transitioned to Attached event is logged and classified as Synchronization.

Switchover

Synchronization

122

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Access Extended Information About an Event

Events logged in the Event Log tab can have additional information available. To access additional information about an event, double-click an event listed in the log.

Double-click to open extended information.

Scroll to view details of other events.

View the Description and Extended Data Definitions.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

123

Chapter 6

Configure the Redundancy Modules

Interpret an Events Extended Information

The information listed in this table can be provided (depending on the type of event) after you have accessed the Extended Information Definition dialog box.
Information Type Event Information Description The enhanced redundancy system assigns this event information: Event number Date and time the event occurred Event classification This information reflects information specific to the module that reported the event. Information provided in this section includes the: Name of the module that originated the event Slot number of the module that originated the event Serial number of the module that originated the event This section provides these additional details about the event: Description of the event Examine the Extended Data Definition, which provides an explanation of the event and bytes, for errors Extended Data Bytes (in Hexadecimal) that provides further details the event

Submitter Information

Event Details

Export Event Log Data

After you have viewed extended information about an event, you could need to export event data. You can export data with either of these features: Export Selection Export All - Available with enhanced redundancy system, Revision 19.052 or later

Export Selection
Use this feature to export event log data for a single or multiple event that occurs on a primary or secondary redundancy module. Complete these steps to export event data for a single event. TIP If the redundancy modules are not available in RSLinx Classic software after a fault, you must apply the recovery method indicated by the module before attempting to export the Event Log data.

1. Launch RSLinx Classic communication software and browse to the redundancy modules. 2. Right-click the primary redundancy module and choose Module Configuration.

124

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

3. In the Auto-Update area, click Off to keep the log from updating.

4. In the Partner Log area, click Close. This closes the event log of the partner module.

5. Select a single event or multiple events for which you want to export data. To select multiple events, select a start event, press SHIFT, and select an end event.

6. Click Export Selection.

The Export Event Log dialog box opens. 7. Complete these steps on the Export Event Log dialog box. a. Specify a file name and location or use the default name and location. b. Check CSV (Comma-Separated Value). TIP If you are sending the exported Event Log files to Rockwell Automation Technical Support, you must use the CSV file type.

c. Check Include Extended Information. TIP If you are sending the exported Event Log files to Rockwell Automation Technical Support, include the diagnostic data and extended information. If you include this data, Rockwell Automation Technical Support can analyze module and system failures more effectively.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

125

Chapter 6

Configure the Redundancy Modules

8. Click Export.

The event log is exported. The log can take a few minutes to export.

9. If you want to export the secondary redundancy module log for a complete system view complete step 1step 8. IMPORTANT If you are exporting event data to provide to Rockwell Automation Technical Support to troubleshoot an anomaly, you must obtain the event logs for both the primary and secondary redundancy modules. Rockwell Automation Technical Support needs before logs to effectively troubleshoot the anomaly. If you cannot access the secondary redundancy modules event log, export it from the partner event log via the primary redundancy module. Keep in mind, though, that the primary redundancy modules view of the secondary redundancy modules event log is typically limited. To troubleshoot an anomaly with Rockwell Automation Technical Support, you must obtain the secondary redundancy modules event log from the modules view itself.

126

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Export All
Use this feature to automatically export all the available event log data for events in both of the redundancy modules of the redundant chassis pair. We recommend that you use this feature when troubleshooting system related anomalies, where the location of a fault could have occurred a lengthy period of time before the current event. Complete these steps to export event log data for a single event. TIP If the redundancy modules are not available in RSLinx Classic software after a fault, you must apply the recovery method indicated by the module before attempting to export the Event Log data.

1. Launch RSLinx Classic communication software and browse to the redundancy modules. 2. Right-click the primary redundancy module and choose Module Configuration. 3. On the Event Log tab, click Export All.

4. Click OK. 5. Select the redundancy module in the partner redundant chassis. 6. Complete these steps on the Export Event Log dialog box. a. Specify a file name and location or use the default name and location. b. Check CSV (Comma-Separated Value). TIP If you are sending the exported Event Log files to Rockwell Automation Technical Support, you must use the CSV file type.

c. Check Export Diagnostic Data. d. Check Include Extended Information. TIP If you are sending the exported Event Log files to Rockwell Automation Technical Support, include the diagnostic data and extended information. If you include this data, Rockwell Automation Technical Support can analyze module and system failures more effectively.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

127

Chapter 6

Configure the Redundancy Modules

7. Click Export.

The event log is exported. The log can take a few minutes to export.

Wait for this dialog box to appear.

A .csv and a .dbg file is in the folder location specified. Make sure to provide both these files to Rockwell Automation Technical Support when troubleshooting an anomaly.

128

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Clear a Fault
You can use the Clear Fault feature on the Event Log tab to clear major faults that occur on a redundancy module.

2 2 2 2 2 2 2 2 2 2 2 2 2 2

With this feature, you can remotely restart the redundancy module without physically removing and reinserting it from the chassis. The module restart clears the fault. IMPORTANT Export all event and diagnostic data from the module before you clear major faults from the module. Clear Fault is active only when the redundancy module is in a major faulted state.

Module faults are displayed on the Module Info tab. This example graphic shows information for a module that has experienced a major fault.
MAJOR FAULT

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

129

Chapter 6

Configure the Redundancy Modules

System Update Tab

Use of the commands in the System Update tab lets you perform firmware updates in the secondary chassis while the primary chassis remains in control. Reference the lock and switchover logs in this tab for update information when completing a firmware update. ATTENTION: When performing firmware updates by using commands in the System Update tab, redundancy is lost. In the event of a fault on the operating primary chassis, the system cannot switch control to the secondary chassis.

130

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

System Update Commands

The three system update commands are available only when accessing a primary redundancy module. These commands are not available when accessing the secondary redundancy module. TIP While you are completing tasks to update the system by using the system update commands, you cannot access these tabs in the RMCT: Configuration Synchronization Synchronization Status Attempting to access any of these tabs while the system is locked or is completing a locked switchover results in a error dialog box.

Lock For Update

The Lock for Update command lets you to synchronize a redundant chassis pair in these conditions: The secondary redundancy module uses updated firmware and an updated RSLogix 5000 software application program version. The running primary redundancy module uses a previous firmware revision and previous RSLogix 5000 software application program version. The Lock for Update command is available only when all the modules in the primary chassis have no compatibility anomalies. Before issuing the lock command, verify that you have completed these tasks: Set the Auto-Synchronization option in the Configuration tab to Never. Disqualify the secondary chassis by using the Disqualify Secondary command in the Synchronization tab of the secondary redundancy modules RMCT. Updated the primary and secondary redundancy modules to compatible firmware revisions. Updated all other modules in the secondary chassis to their intended firmware revisions. Made changes to the controller project that are required to accommodate the update and replacement of modules if needed. For details about completing those tasks, see Step 4: Update Redundant Chassis Firmware on page 67.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

131

Chapter 6

Configure the Redundancy Modules

Clicking the Lock for Update command initiates the locking process. The lock can take several minutes to finish. Monitor the System Update Lock Attempts log to determine when the lock is complete. In addition, the chassis status shown at the bottom-left of the dialog box changes from Primary with Disqualified Secondary to Primary Locked for Update.
Figure 31 - Lock for Update Status Updates
Lock initiated.

Lock complete.

Abort System Lock

The Abort System Lock command can be used to stop the system lock. It is available as soon as a lock for update is initiated. Clicking Abort System Lock returns the redundant chassis status to Primary with Disqualified Secondary. Clicking Abort System Lock also results in the system update stopping and the program in the secondary controller being cleared. If you click Abort System Lock, you need to download the program to the secondary controller before re-attempting a Lock for Update.

132

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Initiate Locked Switchover

The Initiate Locked Switchover command is available only when the chassis redundancy state is Primary with Locked Secondary. That is, the Initiate Locked Switchover is available only after the lock for update is complete. Clicking Initiate Locked Switchover results in your secondary chassis assuming control and becoming the new primary. The old primary is now the new secondary chassis and you can update the firmware of the modules in the new secondary chassis.
Figure 32 - Illustration of Switchover
Chassis A
CH2 CH1 OK

Chassis B
CH2 CH1 OK

Secondary
Chassis A
CH2 CH1 OK

Primary

The difference between a locked switchover and a normal switchover is that the locked switchover can be initiated only by the user. The normal switchover can be initiated by a user or by a fault in the primary chassis.

Secondary

Primary

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

133

Configure the Redundancy Modules

System Event History

The System Event History tab provides a log of the last 10 major system events. The events logged here provide information specific to qualification, disqualification, switchovers, and redundancy module faults. For each event logged, this information is provided: Time and date of the event Event class (for example, Qualification or Disqualification) Basic info about the origin of the event (for example, Commanded or Auto Qualification) Extended information about the event An editable user comment.

136

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Edit a User Comment for a System Event

To edit the User Comment associated with a system event, select the event and then click Edit. Then type your event description and click Accept Edit.

Save System Event History

If you want to save the system event log to the nonvolatile memory of the redundancy module, click Save System History at the bottom of the System Event tab. Saving this history can assist with troubleshooting the system at a later time.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

137

Chapter 6

Configure the Redundancy Modules

Using Dual Fiber Ports with the 1756-RM2/A Redundancy Module

The dual fiber ports of the 1756-RM2/A module constitute a redundant pair of communication channels between the partner 1756-RM2s in a redundant chassis pair. One of the channels is termed as 'ACTIVE', while the other channel is termed as 'REDUNDANT'. All data communication between the partner redundancy modules is conducted exclusively over the ACTIVE channel. If or when the ACTIVE channel fails, a 'Fiber Channel Switchover' is initiated automatically and all data communication shifts to the REDUNDANT channel, which then becomes the new ACTIVE channel.

Fiber Channel Switchover

Due to the fiber channel switchover, the redundant chassis pair continues to remain synchronized even in the event of a failure of the ACTIVE channel. Any of the following failures of the ACTIVE channel triggers an automatic fiber channel switchover to the REDUNDANT channel, provided the REDUNDANT channel is still operating in a normal condition: Signal attenuation along the fiber cable path routed between the partner redundancy modules A broken or damaged fiber cable routed between the partner redundancy modules Improper or loosely fit cable connector SFP transceiver fault Removal or loose connection of the SFP transceiver Data communication error (signalled by a failed CRC check) Chassis synchronization is lost only when both of the channels have failed or are disconnected. The fiber channel switchover may occasionally extend the completion of data communication packets between the partner redundancy modules. Therefore, the controller's scan time may occasionally experience a delay of 10 ms or less.

Configuration
The use of dual fiber ports is entirely plug & play. There is no user configuration needed for any of the operations of the active and redundant channels. The firmware automatically manages the selection of active and redundant channels. The dual fiber cables between the partner redundancy modules can be crossed over between CH1 and CH2 without any restriction.

138

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Configure the Redundancy Modules

Chapter 6

Monitoring and Repair

Synchronization is preserved if the REDUNDANT channel has failed or is being repaired. The repair of the REDUNDANT channel can be performed online while the redundant chassis pair is running synchronized. To aid online repairs, the fiber cable connections and SFP transceiver can be removed and inserted under power. It is not mandatory to have the REDUNDANT channel connected between the two redundancy modules. The redundant chassis pair can be synchronized with just one of the channels connected. The REDUNDANT channel can be installed later while the chassis is running synchronized. The status indicators on the front panel and the indicators and counters displayed in the RMCT provide monitoring of the channel status.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

139

Chapter 6

Configure the Redundancy Modules

Notes:

140

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter

Program the Redundant Controller

Topic Configure the Redundant Controller Crossloads, Synchronization, and Switchovers Crossloads and Scan Time Program to Minimize Scan Times Program to Maintain Data Integrity Program to Optimize Task Execution Program to Obtain System Status Program Logic to Run After a Switchover Use Messages for Redundancy Commands Set the Task Watchdog Download the Project Store a Redundancy Project to Nonvolatile Memory Online Edits

Page 141 144 149 152 159 163 168 170 171 175 177 178 182

Configure the Redundant Controller

Both controllers in the ControlLogix enhanced redundancy system operate by using the same program. You do not need to create a project for each controller in the redundant system. To configure your controllers to operate in a redundant system, complete these steps 1. Open or create a RSLogix 5000 project for your redundant controller. 2. Access the Controller Properties dialog box for the controller.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

141

Chapter 7

Program the Redundant Controller

3. Click the redundancy tab and check Redundancy Enabled.

4. If you are going to complete edits to your redundant controller while online, see these sections for information about the parameters available in the Advanced settings: Plan for Test Edits on page 183 Reserve Memory for Tags and Logic on page 187 5. Click the Advanced tab.

6. Verify that Match Project to Controller is unchecked. IMPORTANT Do not use Match Project to Controller property with redundant controllers. If you use the Match Project to Controller property available in the Advanced tab of the Controller Properties dialog box, you cannot go online with, download to, or upload from the new primary controller after a switchover. This is because the serial number of the new primary controller is not the same as the serial number of the old primary controller and the project cannot be matched to the newly-switched-to controller.

142

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Verify this is not checked.

You have completed the minimum configuration required for your redundant controllers.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

143

Chapter 7

Program the Redundant Controller

Crossloads, Synchronization, and Switchovers

Crossloading and synchronization points are points where the primary controller transfers data to the secondary controller. Crossload and synchronization points keep the secondary controller ready to assume control in the event of a fault on the primary. Before you begin programming your redundant controller, be aware of the impact of crossloads and synchronization on the execution of a program after a switchover. Understanding these concepts helps you to create programming that best meets the needs for your redundant application. Continue reading the sections that follow for explanations of crossloads and synchronization and their relationship to switchovers and program execution.

Changing Crossload and Synchronization Settings

In the enhanced redundancy system, crossload and synchronization points for programs within the RSLogix 5000 project are configurable. You can limit which programs are followed by data crossloading and synchronization. In many applications, changing this setting can reduce the overall impact to the task scan time by reducing the number of times data is crossloaded. If you reduce the number of crossload and synchronization points, the switchover time becomes longer. This increase in switchover time is because more programs may be rescanned after the switchover. Synchronization is performed at the end of the last program in the task's program list, regardless of the programs Synchronize Data after Execution setting. To change the synchronization setting of a program, open the programs Program Properties dialog box and check or uncheck Synchronize Data after Execution.

Use this setting to change crossload and synchronization points.

144

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Default Crossload and Synchronization Settings

The default setting for a program in a redundant project is for a crossload to occur at the end of each program execution. However, for an equipment phase, the default is that the crossload not execute at the end of the phase. Before you change the default crossload and synchronization settings, read the sections that follow so you have a complete understanding of the implications. For information about how to change the point in a task where a crossload occurs, see Changing Crossload and Synchronization Settings on page 144.

Recommended Task Types

To avoid anomalies after a switchover occurs, we recommend that you use only one of these task configurations when programming your redundant controllers. Use either of the following: One continuous task Multiple periodic tasks with one task at the highest priority The sections that follow explain the impact of crossloads and synchronization after a switchover based on the task structure you use.

Continuous Task After Switchover

After a switchover occurs within a controller project that contains only a continuous task, the new primary begins executing at the last crossload and synchronization point. Depending on your crossload and synchronization setting, the program that the new primary controller begins with may be the following: The program that was interrupted by the switchover The program that immediately follows the last crossload and synchronization point

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

145

Chapter 7

Program the Redundant Controller

Continuous Task with Crossloads at Each Program End

This diagram demonstrates how programs set to crossload and synchronize at each program-end are executed after a switchover. As is shown, the new primary controller begins executing at the beginning of the program that was interrupted by the switchover. This is the switchover execution that occurs if you use the default crossload and synchronization setting for a program.
Figure 33 - Program Execution After a Switchover (crossload after each program)
New Primary Controller
Program 2 Program 3 Program 1

Primary Controller
Program 1

Switchover

Program 2

Program 3

Crossload

Continuous Task with Varying Crossloads at Program End

This diagram demonstrates how programs set to crossload and synchronize at varying intervals are executed after a switchover. As is shown, the new primary controller begins executing the program that follows the last crossload and synchronization point.
Figure 34 - Program Execution After a Switchover (no crossload after each program)
New Primary Controller
Program 2 Program 3 Program 1

Primary Controller
Program 1 Program 2

Switchover

Program 3

Crossload

For information about how to change the point in a task where a crossload occurs, see Changing Crossload and Synchronization Settings on page 144.

146

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Multiple Periodic Tasks

ATTENTION: If you use multiple periodic tasks, program all crucial outputs within the highest-priority task. Failure to program outputs in the highest-priority task can result in outputs changing state if a switchover occurs. In a project where multiple periodic tasks are used, the point where program execution begins after a switchover depends on the following: Crossload and synchronization settings Task priority settings As with the continuous task, the controller begins executing at the program that follows the last crossload and synchronization point. In addition, a higher priority task may interrupt a lower priority task. If a switchover occurs during or just after the higher priority task executes and the lower priority task has not been completed, then the lower priority task and programs are executed from the point at which the last crossload occurred. This diagram demonstrates how tasks at different priorities execute if a switchover occurs while a lower priority task is executing. Note that the crossload and synchronization points in this example are set to occur only at the end of the last program within the tasks and not at each programs end.
Figure 35 - Normal Periodic Task Execution (no switchover)

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

147

Chapter 7

Program the Redundant Controller

The diagram below shows a lower priority task that has not been completed and a switchover occurs. The lower priority task and programs are executed from the beginning of the program where the switchover occurred. This is because the program uses the default configuration and crossloads and synchronization points occur at the end of each program.
Figure 36 - Periodic Task Execution After Switchover When Configured to Crossload After Programs

Primary

New Primary

The diagram below shows a lower priority task that has not been completed and a switchover occurs. The lower priority task and programs are executed from the beginning and not at the program where the switchover occurred. This is because the crossloads and synchronization points were not configured to occur at the end of each program.
Figure 37 - Periodic Task Execution After Switchover When Configured Not to Crossload After Programs

Primary

New Primary

For more information about programs and tasks with controllers, see the Logix5000 Controllers Tasks, Programs, and Routines Programming Manual, publication 1756-PM005.

148

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Crossloads and Scan Time

It is important to plan for controller crossloads because the length of the crossloads affects the scan time of your program. A crossload is a transfer of data from the primary controller to the secondary controller and may occur at the end of each program or at the end of the last program in a task. The scan time of your program or phase is a total of the program execution time and the crossload time. The diagram below demonstrates this concept.
Figure 38 - Crossload and Scan Time

Execution of Program
Program Scan Time

Crossload

Estimate the Crossload Time

The amount of time required for a crossload is primarily dependent upon the amount of data being crossloaded. During a crossload, any tag that has been written to during the program execution is crossloaded. Even if a tag has not changed, but has been rewritten during the program execution, it will be crossloaded. In addition to the time required to transfer tag value changes, the crossload also requires a small amount of overhead time to communicate information about the program being executed.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

149

Chapter 7

Program the Redundant Controller

Redundancy Object Attributes for Crossload Times

Before you complete calculations to estimate the crossload time, you need to use a Get System Value (GSV) instruction to read certain attributes of the redundancy object. These attributes are data transfer sizes measured in DINTs (4-byte words) and are used to calculate the estimated crossload time. TIP To get these attributes, you do not need to have the secondary chassis installed or operating. If you do not have the secondary chassis operating, the attribute values read indicate what data sizes would be transferred if the secondary chassis was in use.

This table indicates the two attributes you may choose to get specific to the crossload data transfer size. Get the attribute value that meets your application requirements.
If you need the Data size of the last data transferred during the last crossload Data size of the largest crossload of data Then get this attribute value LastDataTransferSize MaxDataTransferSize

Remember that the LastDataTransferSize attribute refers to the transfer size of the previous crossload and synchronization point, which occurred prior to the program containing the GSV instruction. If you need to measure the crossloaded data from the last program in the task's program list, you may need to add an additional program at the end of the task that acquires the LastDataTransferSize value from the program that was formerly at the end of the task.

150

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Equation for Estimating Crossload Times

After you have either the size of the last data transfer or the maximum size of data transferred, use this equation to estimate your controllers crossload time for each program.

1756-L6x Controllers
Crossload time per sync point (ms) = (DINTs 0.00091) + 0.6 ms

1756-L7x Controllers
The following equations apply when a 1756-L7x controller is paired with a redundancy module in both chassis in a redundancy system.
Table 24 - Crossload Times for 1756-L7x Controllers
Controller 1756-L7x Paired with Redundancy Module 1756-RM2/A 1756-RM/B 1756-RM/A Crossload Time Crossload time per sync point (ms) = (DINTs * 0.000275) + 0.54 ms Crossload time per sync point (ms) = (DINTs 0.00043) + 0.3 ms Crossload time per sync point (ms) = (DINTs 0.00091) + 0.6 ms Where DINTs is the size of the data transferred measured in 4-byte words.

TIP

A sync point is a mechanism that the primary controller uses to keep the secondary controller in sync. By default, at the end of each program scan, the primary controller sends the secondary controller the sync point and the secondary controller responds by moving its execution pointer to match the primary controller. The default for phases is not to send a sync point. Beginning in revision 16.05x, the option exists to manipulate the sync points for faster program execution.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

151

Chapter 7

Program the Redundant Controller

Program to Minimize Scan Times

Because your system switchover time is impacted by your total program scan time, there are several aspects of your program that must be as efficient as possible to facilitate the fastest possible switchover. The sections that follow indicate methods of making your program more efficient to minimize your program scan time. These methods make your program more efficient and minimize program scan times: Use a 1756-L7x Controller with a 1756-RM2/A Redundancy Module Use Multiple Controllers Minimize the Number of Programs Manage Tags for Efficient Crossloads Use Concise Programming

Use a 1756-L7x Controller with a 1756-RM2/A Redundancy Module

Beginning with enhanced redundancy system revision 19.053, you can use 1756-L7x controllers in your application. Relative to the redundancy module being used, the 1756-L7x controllers scan the controller program faster than 1756-L6x controllers. The 1756-L7x controllers also scan the controller program fastest if the enhanced redundancy system uses the 1756-RM2/A redundancy module. IMPORTANT Only the 1756-L72, 1756-L73, 1756-L74, and 1756-L75 controllers can be used in conjunction with the 1756-RM2/A redundancy modules and revision 19.053. See Components Available for Use in a Redundant Chassis Pair on page 24.

If your application needs better controller performance, we recommend that you update from 1756-L6x controllers to 1756-L7x controllers and use 1756-RM2/ A redundancy modules.

Use Multiple Controllers

When possible, use multiple controllers in your redundant system. If you use multiple controllers, you can strategically program between the controllers so the program execution and scan times are faster. For more information about controllers that can be paired in redundant chassis, see Components of an Enhanced Redundancy System on page 24.

152

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Minimize the Number of Programs

When programming a redundant controller, use the fewest programs possible. Using the fewest programs possible is especially important if you plan to crossload data and synchronize the controllers after the execution of each program. If you need to crossload data at the end of each program, make these programming considerations to minimize the crossload impact on the program scan time: Use only one or a few programs. Divide each program into the number of routines that is appropriate for your application. A routine does not cause a crossload or increase the scan time. Use the main routine of each program to call the other routines of the program. If you want to use more than one task for different scan periods, use only one program in each task.
Figure 39 - Use of Multiple Routines (preferred) Figure 39 - Use of Multiple Programs (not preferred)

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

153

Chapter 7

Program the Redundant Controller

Manage Tags for Efficient Crossloads

To program for more efficient crossloads of data and to reduce the amount of time required for a crossload to execute, manage your data tags as recommended in these sections.

Delete Unused Tags

Deleting unused tags reduces the size of the tag database. A smaller database takes less time to crossload.

Use Arrays and User-Defined Data Types

If you use arrays and User-Defined Data Types, the tags use smaller 4-byte (32bit) words for all of the data in the type or array. If you create an individual tag, the controller reserves 4 bytes (32 bits) of memory even if the tag uses only 1 bit. Arrays and User-Defined Data Types help conserve the most memory with BOOL tags. However, we also recommend you use them for your SINT, INT, DINT, REAL, COUNTER, and TIMER tags.
Figure 40 - Example Savings with the Use of an Array 12 bytes of data to crossload (4 bytes for each tag).

4 bytes of data to crossload.

TIP

If you have already created individual tags and programming that uses those tags, consider changing the individual tags to alias tags that reference the elements in an array. If you choose to do this, your programming can still reference the individual tag names, but the crossload transfers the base array.

For more information about working with arrays, User-Defined Data Types, and alias tags, see the Logix5000 Controllers I/O and Tag Data Programming Manual, publication 1756-PM004.

154

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Group Data Types Together in User-Defined Data Types

When you create a User-Defined Data Type for use in your redundancy program, group like data types together. Grouping like data types compresses the data size and helps reduce the amount of data transferred during a crossload.
Figure 41 - Example of Bytes Saved by Grouping Like Data Figure 42 - Data Types

Figure 42 - Data Types Grouped

Group Data into Arrays of User-Defined Data Types by Frequency of Use

To update the secondary controller, the primary controller divides its memory into blocks of 256 bytes. Anytime an instruction writes a value, the primary controller crossloads the entire block that contains the value. For example, if your logic writes only 1 BOOL value to a block, the controller crossloads the entire block (256 bytes). To minimize crossload time, group your data by how frequently your program uses it.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

155

Chapter 7

Program the Redundant Controller

For example, if your application uses DINTs that you use only as constants to initialize your logic, BOOLs that you update every scan, and REALs that you update every second, you can create a separate User-Defined Data Type for each type of tag that is used at different points in the application. Using separate UserDefined Data Types for each group, rather than grouping all of the tags together in one User-Defined Data Type, helps to minimize the amount of data transferred during the crossload.
Figure 43 - Tags Grouped into User-Defined Data Types by Frequency of Use Figure 43 - Tags in One User-Defined Data Type

Use DINT Tags Instead of SINT or INT Tags when Possible

We recommend that you use the DINT data type instead of the SINT or INT data types because the controller usually works with 32-bit values (DINTs or REALs). When processing, the controller converts SINT or INT tag values to DINT or REAL values. When processing is complete, the controller converts the value back to a SINT or INT value. The controller automatically converts these data types while executing and processing a program. No additional programming is required. However, while this conversion process is transparent to you, it does require additional processing time that impacts your program scan time and your switchover time.

156

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Use Concise Programming

Use these recommendations to create concise programming. Using concise programming makes your program execute faster and reduces your program scan time.

Execute an Instruction Only when Needed

We recommend that you execute instructions only when needed because each time an instruction writes a value to a tag, the tag is crossloaded to the secondary controller. Even if the tag values is the same, it is rewritten and is therefore crossloaded. Because many instructions write tag values whenever executed, strategic and economical use of instructions is needed. Strategic programming techniques include the following: Using preconditions to limit the execution of instructions Combining preconditions when possible Dividing programming into subroutines that are called only when required Running noncritical code every 2 or 3 scans instead of during every scan For example, precondition an ADD instruction to run only when the controller gets new data. As a result, the Dest_Tag is crossloaded only when the ADD instruction produces a new value.
Figure 44 - Precondition Used with ADD Instruction

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

157

Chapter 7

Program the Redundant Controller

In addition to using preconditions, try to group instructions that can be preconditioned by the same instructions together. In this example, the four preconditions used in the two branches can be combined to precede the two branches. Doing so reduces the number of precondition instructions from four to two.
Figure 45 - Efficient Precondition Use

158

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Program to Maintain Data Integrity

When programming your redundant controllers, there are some instructions and techniques that may cause data loss or corruption when used. These instructions and techniques include the following: Array (File)/Shift Instructions Scan-dependent Logic

Array (File)/Shift Instructions

Interruptions to Array (File)/Shift Instructions by an a higher priority task and then switchover can result in an incomplete data shift and corrupted data. These Array (File)/Shift instructions may result in corrupt data in the event of a switchover: Bit Shift Left (BSL) Bit Shift Right (BSR) FIFO Unload (FFU) If Array (File)/Shift Instructions are used, these system behaviors may result: 1. If a higher priority task interrupts one of the Array (File)/Shift instructions, the partially-shifted array values are crossloaded to the secondary controller. 2. If a switchover occurs before the instruction completes its execution, data remains only partially shifted. 3. After a switchover, the secondary controller starts its executing at the beginning of the program. When it reaches the partially-executed instruction, it shifts the data again.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

159

Chapter 7

Program the Redundant Controller

Buffering Critical Data

If you cannot place Array (File)/Shift instructions in the highest-priority task, consider using a buffer with Copy File (COP) and Synchronous Copy File (CPS) instructions to maintain the integrity of the array of data. The programming example shown here shows the use of a COP instruction to move data into a buffer array. The BSL instruction uses the data in that buffer array. The CPS instruction updates the array tag and maintains data integrity because it cannot be interrupted by a higher priority task. If a switchover occurs, the source data (that is, the array tag) remains unaffected.
Figure 46 - Using a Buffer to Maintain Data During Shift

For more information about BSL, BSR, FFU, COP, and CPS instructions see the Logix5000 Controllers General Instructions Reference Manual, publication 1756-RM003.

Scan-dependent Logic
If you program a lower priority task so that one instruction is dependent on another instruction that occurs elsewhere in your program, your programming may be disrupted by a task interrupt and switchover. The disruption can occur because the lower priority task may be interrupted by the higher priority task and then a switchover may occur before the lower priority task is completed. When the lower priority task is executed from the beginning by the new primary controller after the switchover, the dependent instruction may not execute at the most recent value or state.

160

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

For example, if a higher priority task interrupts the logic shown in this example, the value of scan_count.ACC is sent to the secondary controller at the end of the program in the higher priority task. If a switchover occurs before the primary controller completes the EQU instruction, the new primary controller starts its execution at the beginning of the program and the EQU instruction misses the last value of scan_count.ACC. As a result, any programming that uses the Scan_Count_Light tag may also execute by using incorrect data.
Table 25 - Scan-dependent Logic
Interrupt by higher priority task. Switchover

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

161

Chapter 7

Program the Redundant Controller

Bind Dependent Instructions with UID and UIE Instructions

If you cannot place scan-dependent instructions in the highest priority task, consider using the User Interrupt Disable (UID) and User Interrupt Enable (UIE) to prevent a higher priority task from interrupting the scan-dependent logic. For example, if you bind the scan-dependent logic previously shown, a higher priority task would not interrupt the dependent instructions and a switchover would not result in inconsistent data.
Figure 47 - Scan-dependent Instructions Bound with UID and UIE Instructions

If you use periodic tasks, communication is serviced any time a task is not running. For example, if you configure your task period at 80 ms and the task executes in 50 ms, the controller has 30 ms out of every 80 ms to service communication.
Figure 50 - Periodic Task Execution and Service Communication
50 ms Task Execution 30 ms Service Communication 30 ms Periodic Task Periodic Task 30 ms 50 ms 50 ms

Periodic Task

If you use multiple periodic tasks, verify the following: The execution time of a highest priority task is significantly smaller than its period. The total execution time of all your tasks is significantly less than the period of the lowest priority tasks. Verifying those settings generally leaves enough time for service communication. The example configuration of tasks shown here demonstrates those configuration settings.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

167

Chapter 7

Program the Redundant Controller

Example of Periodic Task Configurations

Task 1 2 Priority Higher Lower Execution Time 20 ms 30 ms 50 ms Period Specified 80 ms 100 ms

Total execution time:

In this example, the execution time of the highest priority task (Task 1) is significantly smaller than its period, that is, 20 ms is less than 80 ms, and the total execution time of all the tasks is significantly smaller than the specified period of the lowest priority task, that is, 50 ms is less than 180 ms.

Tuning the Period Specified

You may need to tune the period you specify for your periodic tasks to balance program execution and service communication. TIP The crossloading of data during synchronization points extends task scan times in enhanced redundancy systems. We recommend that you balance program execution and service communication when the system is synchronized.

To check for overlaps, go online with the controller and access the Task Properties dialog box. In the Monitor tab, note the maximum scan time. Verify that the maximum scan time is smaller than the period you specified for the periodic task.

Program to Obtain System Status

For most redundant applications, you need to program to obtain the status of the system. Program to obtain system status when you do the following: Program HMI to display the system status Precondition logic to execute based on the system status Use the diagnostic information to troubleshoot the system To obtain the status of your redundant system, use a Get System Value (GSV) instruction in your program and plan for the tags you are writing the values to.

168

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

In the example below, the GSV instruction is used to obtain the chassis ID (that is, the chassis A or B designation) of the chassis that is functioning as the primary. The PhysicalChassisID value is stored in the PRIM_Chassis_ID_Now tag. The PhysicalChassisID value retrieved matches the Chassis ID indicated in the Controller Properties dialog box.
If the Physical Chassis ID value is 0 1 2 Then the chassis ID is Unknown Chassis A Chassis B

Figure 51 - GSV Instruction to Get Chassis ID

Ladder Logic

Structured Text Chassis ID in Controller

For more information about the REDUNDANCY object attributes, see Appendix E, Redundancy Object Attributes on page 273.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

169

Chapter 7

Program the Redundant Controller

Program Logic to Run After a Switchover

If your application requires certain logic or instructions to be executed after a switchover, then use programming and tags similar to that shown in this example.
Figure 52 - Precondition Used to Run Logic After Switchover - Ladder Logic

Add your switchover-dependent instructions here.

170

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Use Messages for Redundancy Commands

For some applications, you may want to program the controller to issue redundancy system commands via the redundancy modules. The sections that follow explain how to configure a MSG instruction to issue a redundancy command.

Verify User Program Control

For a MSG instruction to issue a command via the redundancy modules, the redundancy modules must be configured for user program control. To verify that the modules are enabled for user program control, access the Configuration tab of the RMCT and verify that Enable User Program Control is checked.
Figure 53 - Enable User Program Control in the RMCT

Use an Unconnected Message

When you add your MSG instruction that is to be used for issuing the command through the redundancy modules, configure it as an unconnected message.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

171

Chapter 7

Program the Redundant Controller

Configure the MSG Instruction

Use the MSG configuration settings that correspond to the command you intend to issue to the redundancy modules.
If you need to Initiate a Switchover Disqualify the Secondary Chassis Synchronize the Secondary Chassis Set the Redundancy Module Date and Time See page 172 174 174 175

Initiate a Switchover
To initiate a switchover, use the MSG instruction parameters listed in this table.
Table 29 - MSG Instruction to Initiate a Switchover
In this tab Configuration Edit this element Message Type Service Type Service Code Class Instance Attribute Source Element Source Length Destination Element Communication Path Connected box To use this value CIP Generic Custom 4e bf 1 None - no value needed INT tag with a value of 1 2 None - no value needed. Browse for the path to the 1756-RM or 1756-RMXT redundancy module. Leave the Connected checkbox unchecked.

172

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Use this table to when using MSG instructions during a switchover.

Table 30 - MSG Instruction Behavior During a Switchover
If the MSG instruction is From a redundant controller To a redundant controller Then In a redundant controller, any MSG instruction that is in progress during a switchover experiences an error. (The ER bit of the instruction turns on.) After the switchover, normal communication resumes. For any MSG instruction from a controller in another chassis to a redundant controller, cache the connection: Properties of the Message to the Redundant Controller Configured Message Instructions If the MSG instruction originates from a redundant controller During a switchover Then

The message instructions status bits are updated asynchronously to the program scan. Consequently, you cannot crossload your message instructions status bits to a secondary controller. During a switchover, any active message instructions become inactive. When this occurs, you will need to reinitialize the execution of your message instructions in the new primary controller. The scrolling display changes from CMPT for compatible to Qfng for qualifying. If a configured message is cached, the primary controller automatically establishes a connection with no errors. If a configured message is uncached or unconnected, the primary controller receives Error 1 Extended Error 301, No Buffer Memory. Then All backplane communication ceases. This stoppage allows the redundant controller to receive the message instruction required to perform a switchover or any diagnostics. Important: If any of your messages are active during a switchover, you can expect one of these things to happen: Cached and connected messages cause the message instruction to pause for 7.5 seconds because the initiating controller has not received a response from the targeted controller. For cached messages, the message instruction tries to execute three more times, each attempt followed by a pause of 7.5 seconds. If, after 30 seconds pass, the targeted controller does not respond to the initiating controller, then the switchover errors out with connected time out Error 1 Extended Error 203. An example of a connected message would be CIP data table read-and-write messages after a connection has been established. Uncached messages error out after 30 seconds if you have just initiated them because the initiating controller never received a reply to the forward-open request. The error is Error 1F Extended Error 204, an unconnected time out. Examples of uncached messages would include CIP generic messages and messages captured during the connection process.

During qualification

If the message is targeted to a redundant controller During the erroring out of a message

During qualification

Cached messages run with no errors. A connection has been established. Connected, but uncached, messages or unconnected messages error out with Error 1 Extended Error 301, No Buffer Memory.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

173

Chapter 7

Program the Redundant Controller

Disqualify the Secondary Chassis

To disqualify the secondary chassis, use the MSG instruction parameters listed in this table.
Table 31 - Disqualify the Secondary Chassis
In this tab Configuration Edit this element Message Type Service Type Service Code Class Instance Attribute Source Element Source Length Destination Element Communication Path Connected box To use this value CIP Generic Custom 4d bf 1 None - no value needed INT tag with a value of 1 2 None - no value needed. Browse for the path to the 1756-RM or 1756-RMXT redundancy module. Leave the Connected checkbox unchecked.

Synchronize the Secondary Chassis

To disqualify the secondary controller, use the MSG instruction parameters listed in this table.
Table 32 - Synchronize the Secondary Chassis
In this tab Configuration Edit this element Message Type Service Type Service Code Class Instance Attribute Source Element Source Length Destination Element Communication Path Connected box To use this value CIP Generic Custom 4c bf 1 None - no value needed INT tag with a value of 1 2 None - no value needed. Browse for the path to the 1756-RM or 1756-RMXT redundancy module. Leave the Connected checkbox unchecked.

174

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Set the Redundancy Module Date and Time

To set the wallclock time of the 1756-RM module, use the MSG instruction parameters listed in this table.
Table 33 - Set Wallclock Time
In this tab Configuration Edit this element Message Type Service Type Service Code Class Instance Attribute Source Element To use this value CIP Generic Custom 10 8b 1 b WallClockTime[0] WallClockTime is a DINT[2] array that stores the CurrentValue of the WALLCLOCKTIME object 8 None - no value needed. Browse for the path to the 1756-RM or 1756-RMXT redundancy module. Leave the Connected checkbox unchecked.

Source Length Destination Element Communication Path Connected box

Set the Task Watchdog

Program the Redundant Controller

Store a Redundancy Project to Nonvolatile Memory

Use this procedure to store an updated project and firmware to the nonvolatile memory card of the controller. IMPORTANT The controllers use these nonvolatile memory cards.
Cat. No. 1756-L6x 1756-L7x Nonvolatile Memory Card 1784-CF64 or 1784-CF128 CompactFlash cards 1784-SD1 or 1784-SD2 Secure Digital cards

This section describes how to store a project to nonvolatile memory in either of these conditions: Store a Project While the Controller is in Program or Remote Program Mode Store a Project While a System is Running IMPORTANT We recommend that you store the same project on both controllers nonvolatile memory cards. By doing so, you can be assured that if a controller, primary or secondary, loses the project from its internal memory, you can load the most recent project back onto that controller. If you store the same project on both controllers nonvolatile memory cards, while the process is running, you must save the project on the controllers while they are in the secondary controller state. To do so, you save the project on the secondary controller, conduct a switchover and save the project on the new secondary controller. For more information, see the steps below.

178

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Store a Project While the Controller is in Program or Remote Program Mode

If you want to store your controller project in nonvolatile memory while your redundant system is not running, complete these steps. Before you begin, verify that a controller communication path has been specified and that you are able to go online with the primary controller. 1. Verify that the redundant chassis are synchronized. If they are not synchronized, synchronize them. 2. Use RSLogix 5000 software or the mode switch to put the primary controller into Program or Remote Program mode. 3. In RSLinx Classic communication software, right-click the 1756-RM module and choose Module Configuration to open the RMCT.

4. In the Configuration tab, set the Auto-Synchronization parameter to Conditional.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

179

Chapter 7

Program the Redundant Controller

5. On the Synchronization tab, click Disqualify Secondary.

6. In RSLogix 5000 software, access the Controller Properties dialog box and click the Nonvolatile Memory tab. 7. Click Load/Store. 8. Click <-- Store and then click Yes. When the store is complete, we go online with the secondary controller. 9. Complete steps 68 to store the project in nonvolatile memory of the secondary controller. 10. In RSLinx Classic software, open the RMCT for one of the redundancy modules in the redundant pair. 11. In the Synchronization tab, click Synchronize Secondary.

12. In the Configuration tab, set the Auto-Synchronization option to your desired setting.

180

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Store a Project While a System is Running

If you want to store your controller project in nonvolatile memory while your redundant system is running, complete these steps. 1. Verify that the redundant chassis are synchronized.

2. In the RMCT, access the Configuration tab and set the AutoConfiguration parameter to Never. 3. In the Synchronization tab, click Disqualify Secondary. 4. Go online with the secondary controller.

IMPORTANT

Do not go back online with the primary controller until you have completed this procedure.

5. Open the Controller Properties dialog box and click the Nonvolatile Memory tab. 6. Click Load/Store then <-- Store to store the project in nonvolatile memory. 7. In the RMCT, click the Synchronization tab. 8. Click Synchronize Secondary and wait for the system to synchronize. 9. Click Initiate Switchover.

10. Go online with the new secondary controller. 11. Complete steps 5 and 6 to store the project. 12. In the RMCT, click the Configuration tab and set the AutoConfiguration to your desired setting. 13. In the Synchronization tab, click Synchronize Secondary. You have completed the steps required to store your project while online.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

181

Chapter 7

Program the Redundant Controller

Load a Project
If you need to load a project from nonvolatile memory, you must first disqualify your redundancy system. You then load the project from the primary controller and resynchronize the redundant chassis once the load is complete. For details about loading a project from nonvolatile memory, see the Logix5000 Controllers Memory Card Programming Manual, publication 1756-PM017.

Online Edits

You can edit the redundant controller program while the system is online and running. However, in addition to considerations described in the Logix5000 Controllers Quick Start, publication 1756-QS001, considerations specific to redundancy must be made.

Support for Partial Import Online

Beginning with enhanced redundancy system revision 19.052 or later, you can use the Partial Import Online (PIO) feature available in RSLogix 5000 software. Consider these points when using PIO with enhanced redundancy systems at revision 19.052 or later: If you select Import Logix Edits as Pending or Accept Program Edits when executing a PIO, the primary controller treats the PIO feature as a set of multiple test edits where, after the import is complete, you can switch between testing the edits or not. We recommend that you do not use Finalize All Edits in Program when importing edits. If you use this option, any failure due to the import causes a failure on the new primary controller after a switchover. If edits exist in the primary controller due to a PIO, they are treated the same as normal test edits with respect to the Retain Test Edits at Switchover selection and Redundancy System Update. The primary controller rejects any attempt to qualify if a PIO is in progress. If you attempt to initiate a PIO on a primary controller in the process of qualifying the system, that PIO is rejected.

182

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

When using a 1756-L7x redundancy controller using version 19 software, and the Memory Usage slider is set all the way to Tags, the first synchronization attempt will be successful, but after switchover or disqualification, the next qualification attempt will fail, and one or more entries will appear in the secondary redundancy module event log with the following description: (14) Error Setting Up Data Tracking. To recover from this issue, move the slider slightly to the right. This must be done offline or in Program mode. Additionally, you must download the updated application to the disqualified secondary to update its configuration. The next qualification attempt is successful.

Memory Usage Slider

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

185

Chapter 7

Program the Redundant Controller

Finalize Edits with Caution

When you finalize edits to your program while online, the original program that existed before the changes were made is deleted. As a result, if the edits you finalize cause a fault on the primary controller, the new primary controller will also fault after the switchover. Before you finalize any edits to your program, test the edits to verify that faults do not occur.
Figure 57 - Test Edits Before Finalizing
Test Pending Edits Finalize All Edits

TIP

Even if you have not enabled the Retain Test Edits on Switchover property, faults can still occur on the primary and secondary controllers if the edits are finalized. The Retain Test Edits on Switchover property affects only edits that are being tested. The Retain Test Edits on Switchover does not affect the redundant controllers that are running finalized edits.

186

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Program the Redundant Controller

Chapter 7

Reserve Memory for Tags and Logic

Depending on your redundant application, you may need to change the memory usage property for your redundant controller. The setting you specify impacts how the controller divides memory for tags and logic to be stored to the buffer during a crossload to the secondary controller. IMPORTANT For most applications, we recommend that the Memory Usage slider remain at its default position (center).

This table indicates when you might need to change the memory usage setting.
Table 34 - Possible Memory Usage Setting Change
If your online edits are primarily changes to Tags with little or no changes to logic Logic with little or no new tags created Then move the Memory Usage slider towards Tags Logic

IMPORTANT

Do not set the Memory Usage slider all the way to Tags or Logic: If you move the slider all the way to Tags, you may not be able to perform edits while online and OPC communication may fail. If you move the slider all the way to Logic, you cannot create or edit any tags while online.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

187

Chapter 7

Program the Redundant Controller

Notes:

188

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter

Monitor and Maintain an Enhanced Redundancy System

Topic Tasks to Monitor the System Controller Logging Use Programming to Monitor System Status Verify Date and Time Settings Verify System Qualification Check the ControlNet Module Status

Page 189 189 190 191 192 197

Tasks to Monitor the System

This chapter describes some of the key tasks to complete to monitor and maintain your enhanced redundancy system.

Controller Logging

Beginning with enhanced redundancy system revision 19.052, you can use the controller logging feature. This feature provides a way to detect and log changes, that is, RSLogix 5000 software and controller mode switch interactions, made to ControlLogix 1756-L6x and 1756-L7x controllers without adding any auditing software.

With controller logging, the controller can perform these tasks: Detect changes and create logs entries containing information about the changes. Store the log entries to a Compact FLASH (CF) card or Secure Digital (SD) card for later review. Provide programmatic access to log entry counters to provide change detection information remotely

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

189

Chapter 8

Monitor and Maintain an Enhanced Redundancy System

Controller Log
A controller log is the record of changes. The log is stored on the controllers NVS memory automatically. You can store the log to a CF card or SD card on an as needed basis or automatically at predefined times. The controllers NVS memory and each external memory card type have a maximum number entries they can store. Specific events are stored in the controllers log. For more information on controller logging, see Logix5000 Controllers Information and Status Programming Manual, publication 1756-PM015.

Controller Logging in Enhanced Redundancy Systems

Because enhanced redundancy systems operate with partnered controllers, there are considerations you must consider with regard to controller logging: The primary and secondary controllers maintain separate logs. You do not need to synchronize the logs. On the primary controller, controller logging occurs exactly as it does on a controller in a nonredundant system, regardless of whether the system is qualified and synchronized or disqualified. A secondary controller logs the removal or insertion of removable storage components, that is, a CF or SD card, in any operating state. Otherwise, the secondary controller only logs events that occur when the controller is in a disqualified state.

Use Programming to Monitor System Status

IMPORTANT

When programming your enhanced redundancy system, program so your redundancy system status is continually monitored and displayed on your HMI device. If your redundancy system becomes disqualified or a switchover occurs, the change in status is not automatically annunciated. You must program the system to communicate the change in status via your HMI or other statusmonitoring device. For more information and programming techniques, see Program to Obtain System Status on page 168.

190

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Monitor and Maintain an Enhanced Redundancy System

Chapter 8

Verify Date and Time Settings

After you have completed programming your redundant system and have downloaded your program to the primary controller, check the Redundancy Module Date and Time information and verify it matches the date and time of your system. TIP Consider checking the Redundancy Module Date and Time as a part of your regular maintenance procedures. Verifying the date and time information on a regular basis keeps the event logs of the redundancy modules accurate.

If the date and time are not correct, the redundant system event logs will not match the date and time information for the rest of the system. Incorrect date and time information complicates troubleshooting if an event or error occurs on your redundant system.

Verify Date and Time Settings

IMPORTANT

If power to one of the redundancy modules is cycled, the redundancy module will power up with the time set to when the power was lost. If the partner redundancy module has remained active during this time, the time set in that module will be automatically transferred to the powering-up module. If a power failure event happens so that both modules are shut off, reset the time and date in the RMCT. Setting and verifying the date and time settings after a power loss will help with troubleshooting if an error or event occurs.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

191

Chapter 8

Monitor and Maintain an Enhanced Redundancy System

Verify System Qualification

After you have completed programming your redundant system and have downloaded your program to the primary controller, check the system status to verify that the system is qualified and synchronized. TIP The system qualification process can take several minutes. After a qualification command or a switchover, allow time for qualification to complete before taking action based on the qualification status.

Check Qualification Status via Module Status Displays

You can view qualification status by using the status displays and indicators of the secondary redundancy module and the primary and secondary ControlNet and EtherNet/IP communication modules.
Table 35 - Synchronized System
Primary Chassis Display Redundancy Module PRIM PwQS Secondary Chassis Display Communication Module Redundancy Module SYNC Communication Module QS

Table 36 - Qualifying System

Primary Chassis Display Redundancy Module PRIM and QFNG PQgS Secondary Chassis Display Communication Module Redundancy Module QFNG Communication Module QgS

Table 37 - System with a Primary and Disqualified Secondary

Primary Chassis Display Redundancy Module PRIM PwDS Secondary Chassis Display Communication Module Redundancy Module DISQ Communication Module Either: CMPT (modules are compatible) DSNP (no partner is present)

192

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Monitor and Maintain an Enhanced Redundancy System

Chapter 8

Example of Qualified and Disqualified Status Indicators

This example shows status display messages and status indicators that may appear differently depending on the qualification status of the redundant chassis. Note that these are only two examples of many possible status display message and indicator combinations for both the qualified and disqualified states.
Disqualified Redundant Chassis Primary Chassis

Qualified Redundant Chassis Primary Chassis

CH2 CH1 OK

Secondary Chassis

CH2 CH1 OK

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

193

Chapter 8

Monitor and Maintain an Enhanced Redundancy System

Check Qualification Status via the RMCT

To determine the qualification status of your system by using the RMCT, open the RMCT and view the qualification status in the bottom-left corner of the tool.2

194

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Monitor and Maintain an Enhanced Redundancy System

Chapter 8

Conduct a Test Switchover

Complete these steps to verify that your redundant system switches over as expected. Your system must be fully-qualified before you begin. 1. In RSLinx Classic software, access the RMCT for the primary redundancy module.

2. Click the Synchronization tab.

3. Click Initiate Switchover. The Redundancy Configuration Tool dialog box opens.

4. Click Yes. The switchover begins. 5. View your HMI or other status-monitoring device to verify that the switchover was successful.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

195

Chapter 8

Monitor and Maintain an Enhanced Redundancy System

Synchronization After a Switchover

TIP If your Auto-Synchronization parameter is set to Always, your system begins synchronizing immediately after the switchover.

To monitor the synchronization of your system after you initiate the test switchover, you can monitor the synchronization process by using these methods: Click the Synchronization Status tab and monitor the Secondary Readiness column. The states No Partner, Disqualified, Synchronizing, and Synchronized indicate the stages of synchronization. View the module status display of a primary communication module. The states PwNS, PsDS, PwQg and PwQS indicate the stages of synchronization. View the module status display of the secondary redundancy module. The states DISQ, QFNG, and SYNC indicate the stages of synchronization.

196

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Monitor and Maintain an Enhanced Redundancy System

Chapter 8

Check the ControlNet Module Status

After you have programmed your redundant system and configured your ControlNet network, check two statistics specific to your ControlNet modules. These statistics include the CPU usage and the connections used. To view the CPU usage and the number of connections used, complete these steps. 1. In RSLinx Classic software, open the Module Statistics for the ControlNet module.

2. Click the Connection Manager tab.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

197

Chapter 8

Monitor and Maintain an Enhanced Redundancy System

CPU Usage
The CPU usage of the ControlNet modules must be at 80%, or less. Keeping the CPU usage below 80% reserves enough CPU functionality for the ControlNet module to properly facilitate a switchover. If the CPU usage is above 80%, the secondary chassis may not be able to synchronize with the primary chassis after a switchover occurs. In addition, unscheduled communication may be slowed. If you need to reduce the CPU usage of your ControlNet modules, consider making the changes described in this list: Increase the Network Update Time (NUT) of the ControlNet network. Increase the Requested Packet Interval (RPI) of your connections. Reduce the amount of connections through the ControlNet modules. Reduce the number of messages used in the program.

Connections Used
If your ControlNet modules connections used are near the limits of the module, you may experience difficulty when attempting to go online with the system or when attempting to add modules to the system. For information about connections available with ControlNet modules, see ControlNet Network Requirements on page 38.

Monitor the ControlNet Network

For most redundant applications, monitoring the status of the ControlNet network is important for maintenance and troubleshooting purposes. For programming samples to monitor the ControlNet network, visit the Rockwell Automation Sample Code Library at http:// samplecode.rockwellautomation.com. Applicable sample programs include the following: ME Faceplates for ControlNet Diagnostics ControlNet Connection and Media Status

198

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Chapter

Troubleshoot a Redundant System

Topic General Troubleshooting Tasks Check the Module Status Indicators Use RSLogix 5000 Software to View Errors Use the RMCT for Synchronization Attempts and Status Use the RMCT Event Log Keeper Status Causing Synchronize Failure Partner Network Connection Lost Redundancy Module Connection Lost Redundancy Module Missing Qualification Aborted Due to a Nonredundant Controller Controller Events Page 199 200 201 204 206 216 220 222 223 225 226

General Troubleshooting Tasks

When an error or other event occurs on the enhanced redundancy system, several tasks can be executed to determine the cause. After an error or event, you can perform these tasks: Check the module status indicators. View diagnostic information in RSLogix 5000 software. Access status and event information in the RMCT. Use RSLinx Classic software to view network status. Use RSNetWorx for ControlNet software to view ControlNet network status.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

199

Chapter 9

Troubleshoot a Redundant System

Check the Module Status Indicators

If an error or event occurs in the enhanced redundancy system, check the module status indicators to determine which module is causing the error or event. If any of the modules have status indicators that are steady or blinking red, then examine that module status display and the RMCT or other software to determine the cause.
Figure 58 - Steady or Flashing Red Indicators that Indicate Errors on 1756-RM2/A or 1756-RM2XT Modules

CH2 CH1 OK

Figure 59 - Steady of Flashing Red Indicators that Indicate Errors on 1756-RM/1756-RMXT Modules

PRI COM OK

For more information about module status indicators, see Appendix A, Status Indicators on page 227.
Figure 60 - Module Status Displays For Chassis with 1756-L6x and 1756-L7x Controllers
1756-L6x Controller and 1756-RM Module 1756-L6x Controller and 1756-RM2/A Module

PRI COM OK

CH2 CH1 OK

1756-L7x Controller and 1756-RM Module

1756-L7x Controller and 1756-RM2/A Module

PRI COM OK

CH2 CH1 OK

200

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

Use RSLogix 5000 Software to View Errors

To view redundancy status by using RSLogix 5000 software, complete these steps. 1. Go online with the redundant controller.

2. Either click Primary or Secondary, depending on the controller you are online with.

Primary Controller

Secondary Controller

The redundant controller ID and status are displayed.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

201

Chapter 9

Troubleshoot a Redundant System

3. If further information is required, click Controller Properties.

4. Click the Redundancy tab.

5. If controller fault details are needed, click the Major Faults and Minor Faults tabs to view fault types and codes.

202

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

6. If necessary, reference these resources: Redundant Controller Major Fault Codes Logix5000 Controllers Major and Minor Faults programming manual, publication 1756-PM014 (describes all major and minor fault codes)

Redundant Controller Major Fault Codes

The fault codes listed and described in this table are specific to redundant controllers. For information about all controller major and minor fault codes, see the Logix5000 Controllers Major and Minor Faults Programming Manual, publication 1756-PM014.
Table 38 - Redundant Controller Major Fault Codes
Type 12 Code 32 Cause A disqualified secondary controller has had power cycled and no partner chassis or controller was found upon powerup. Recovery Method Verify that these conditions exist: A partner chassis is connected. Power is applied to both redundant chassis. Partnered controllers have the same: Catalog number Slot number Firmware revision 12 33 An unpartnered controller has been identified in in the new primary chassis after a switchover. Use either of these methods: Remove the unpartnered controller and troubleshoot the cause of the switchover. Add a partner controller to the secondary chassis, troubleshoot the cause of the switchover, and synchronize the system. Use either of these methods: Change the mode switches from Run mode to Program mode and back to Run mode twice to clear the fault. Make sure that the mode switch positions for both controllers in a partnered set match. Use RSLogix 5000 to go online with the controllers. Then, clear the faults and change the mode switch positions for both the controllers in the partnered set to Run.

Prior to switchover, a mode switch mismatch was present. The old primary controller was in Program mode and its secondary partner's mode switch was in the Run position. Instead of the switchover transitioning the new primary controller to go to Run mode, the new primary controller transitions to a faulted state after the switchover.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

203

Chapter 9

Troubleshoot a Redundant System

Use the RMCT for Synchronization Attempts and Status

When troubleshooting your redundant system for anomalies with qualification and synchronization, check the Synchronization and Synchronization Status tabs of the RMCT.

Recent Synchronization Attempts

The Synchronization tab provides a log of the last four synchronization attempts. If a synchronization command was unsuccessful, the Recent Synchronization Attempts log indicates a cause. For more information about resolving the synchronization conflict, click the attempt and view the Description in the lower box.
Figure 61 - Example of an Unsuccessful Synchronization Attempt

For more information about interpreting the Recent Synchronization attempts log, see Recent Synchronization Attempts Log on page 118.

204

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

Module-level Synchronization Status

The Synchronization Status tab provides a module-level view of redundant chassis and can be used to identify what module pair may be causing a synchronization failure. Depending on the type of synchronization failure, you may need to open the Synchronization Status tabs for the primary and secondary redundancy modules. If there is a difference between major revisions of the controllers/modules, the Compatibility column shows Undefined, as shown in this graphic.

Primary Chassis

Secondary Chassis
19.53

If there is a difference between minor revisions of the controllers, the Compatibility column shows Incompatible, as shown below.

Primary Chassis

Secondary Chassis

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

205

Chapter 9

Troubleshoot a Redundant System

Use the RMCT Event Log

When troubleshooting your redundant system, access the Event Log to determine the cause of an event, error, switchover, or major fault.

Interpret Event Log Information

Use this procedure to view and interpret Event Log information. 1. Open the RMCT and click the Event Log tab.

Primary Chassis

Secondary Chassis

206

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

2. If an event occurred, open the Event Log for both chassis (A and B). 3. Locate the Event line that shows the qualification code, start date and time of the event, in the A chassis event log. This is the last time the redundancy module was working properly. Please note, multiple codes could be displayed if multiple errors occurred. Additionally, if a secondary redundancy module is not present, then a code may not be seen at all. See Possible Qualification Status Indicators on page 211. 4. Then, locate the matching time entry in the B chassis event log. This will display the disqualification code on the Event line.
Chassis A

2 2

PwQS and start date and start time in Chassis A. This is the last time the redundancy module was working properly.

2 2 2 2 2 2 2

Chassis B

QSwP and start date and start time in Chassis B. This is the last time the redundancy module was working properly, and by time, must match up with Chassis A.

2 2 2 2 2 2 2 2 2 2

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

207

Chapter 9

Troubleshoot a Redundant System

5. Work back in time (up the lines of preceding events), to locate the point that a switchover or disqualifying event occurred. This is the end date and time of the event, and will be indicated on the Event line in the A chassis event log, with a disqualification code that the secondary has been disqualified, and a corresponding disqualification code in the B chassis event log. Again, note that if no secondary is present, you may not see any secondary disqualification codes in the event log at all. See Possible Qualification Status Indicators on page 211.

Chassis A

PwDS and end date and end time in Chassis A. This is the time the redundancy module experienced a disqualifying event or switchover.

2 2 2 2 2 2 2 2

Preceding events that may indicate the cause of the switchover.

Chassis B

DSwP and matching end date and end time in Chassis B. This is the time the redundancy module experienced a disqualifying event or switchover.

2 2 2 2 2 2 2 2 2 2

208

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

6. Examine the range of time in between the start of the event and the end of the event to find the error that caused the disqualification. IMPORTANT Be aware that this range of time can be very large depending on how much time has passed since the last disqualifying event.

End

2 2 2 2 2 2 2 2 2

Error Start

End

2 2 2 2 2 2 2 2 2

Error Start

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

209

Chapter 9

Troubleshoot a Redundant System

TIP

You can also use the Log Time column to identify a significant event. Scan within a time range that corresponds to the time an event was reported or annunciated. In addition, you can also attempt to identify events by finding differences between times logged. Such gaps in time often identify events that require troubleshooting. When troubleshooting by identifying gaps in the time entries, remember that gaps in months, days, or minutes may indicate a significant change to the system. Not all events logged are indicative of an anomaly that needs to be corrected. For example, events classified as Minor Faults do not warrant corrective behavior unless they occur just before a switchover, major fault, or state change and can be identified as contributing to successive events.

7. After you have located an event entry related to the anomaly you are troubleshooting, double-click the event to view Extended Event Information.

2 2 2 2 2 2 2

Double-click to view more information.

The Description provides more information about the state change that occurred. No recovery method is described. This indicates that action is not required in response to this event.

8. View the Description and Extended Data Definitions. The Description and Extended Data Definitions can be used to obtain further event information and may indicate a recovery method.

210

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

Table 39 - Possible Qualification Status Indicators

Status Code PwQS QSwP DSwP DSwNP PwDS PwNS Description Primary with qualified (synchronized) secondary partner Qualified (synchronized) secondary with primary partner Disqualified secondary with primary partner Disqualified secondary with no partner Primary with disqualified secondary partner Primary with no secondary partner

Export All Event Logs

To export event logs with the RMCT version 8.01.05, follow these steps. 1. Open the RMCT on the 1756-RM module in the primary chassis and click the Event Log tab. 2. Click Export All.

2 2

The Export All dialog box appears.

3. Click OK.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

211

Chapter 9

Troubleshoot a Redundant System

The Export Event Log configuration screen appears.

4. To change the file name or save location to something other than the default, select the Browse button. 5. Click Export. 6. Select the 1756-RM in the secondary chassis. In the following example, chassis A is the secondary chassis.

The primary chassis exports first. The status displays during export.

212

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

In the following example, chassis B is the primary chassis.

The secondary chassis then exports. In the following example, chassis A is the secondary chassis.

A confirmation dialog box displays when the export completes.

7. Click OK.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

213

Chapter 9

Troubleshoot a Redundant System

Export Diagnostics

IMPORTANT

Only Export Diagnostics when requested to do so by Rockwell Automation Technical Support.

You can also click Export Diagnostics in the event of a module fault in the 1756 redundancy module. Click Export Diagnostics to collect and save diagnostic data from the redundancy module and its partner, if an unrecoverable firmware fault occurs. A nonrecoverable fault is indicated by a red OK light on the front of the redundancy module, and a fault message scrolling across the marquee display. When you click Export Diagnostics, information is recorded that can be used by Rockwell Automation engineering to determine the cause of the fault. Because diagnostic information for the redundancy module and its redundancy partner are recorded, a communication path to the partner RM is also part of the process of obtaining the diagnostics. Follow these steps. 1. Click Clear Fault if it is enabled, as it may first be necessary to clear any faults before using Export Diagnostics. 2. Click Export Diagnostics.

2 2 2

2 2 2 2 2 2

214

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

The Export Diagnostics dialog box appears, asking you to continue specifying a communication path.

3. Click OK to specify the communication path via RSWho software. The RSWho window appears.

4. Select the communication path to the partner or secondary module and click OK. The Export Diagnostics dialog box will appear and prompt you to specify a location to save the export file.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

215

Chapter 9

Troubleshoot a Redundant System

5. Name and save the export file. 6. Click Export. It may take several minutes to export all of the data. The Export Diagnostic Complete dialog box appears once the export has completed.

7. Click OK. Forward this diagnostics file to Rockwell Automation Technical Support only if requested to do so.

Contact Rockwell Automation Technical Support

If you tried to use the event logs to troubleshoot your redundant system and are unsuccessful, prepare to contact Rockwell Automations Technical Support by exporting the event logs of both the primary and secondary redundancy modules. The technical support representative who assists you will use those files to help determine the cause of a switchover or other anomaly. For more information about exporting the event logs, see Export Event Log Data on page 124.

Keeper Status Causing Synchronize Failure

To determine if a keeper status anomaly is causing a synchronization failure, you can view the module status display of the ControlNet modules, or you can check the keeper status by using RSNetWorx for ControlNet software. TIP To avoid anomalies with the Keeper Status, always reset the ControlNet module configuration of a module being used as a replacement before inserting and connecting the module in a ControlNet network. For more information about resetting the ControlNet module configuration, see Automatic Keeper Crossloads on page 102.

216

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

Check the Module Status Display

If the module status display of the ControlNet modules in the redundant chassis indicate these errors, you need to take corrective action: Keeper: Unconfigured Keeper: Unconfigured (data format changed) Keeper: Unconfigured (slot changed) Keeper: Unconfigured (net address changed) Keeper: Signature Mismatch Keeper: None Valid on Network

Check Keeper Status in RSNetWorx for ControlNet Software

To check the status of keepers on the ControlNet network, open RSNetWorx for ControlNet access the Keeper Status from the Network menu.
Figure 62 - Network Keeper Status

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

217

Chapter 9

Troubleshoot a Redundant System

Valid Keepers and Signatures

This example shows a Keeper Status dialog box where the ControlNet network that is comprised of valid keepers and signatures.

Valid Keeper Status and Signatures

Unconfigured Keeper
The example below shows the Keeper Status dialog box where a module has an unconfigured status. Besides the status shown, the module status display indicates Keeper: Unconfigured (node address changed). This error results when the modules node address has been changed. After changing the node address, the module was used as a replacement and inserted into the redundant chassis.
Figure 63 - Keeper Status - Unconfigured

To correct this anomaly, do one of the following: Select the unconfigured module and click Update Keeper. Reschedule the ControlNet network.

218

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

Keeper Signature Mismatch

This example shows ControlNet modules in the redundant chassis that do not have the same keeper signatures. With this anomaly, the ControlNet module display indicates Keeper: Signature Mismatch. This anomaly may result if a ControlNet module configured for the same node of another network is used to replace a ControlNet module with the same node address in the redundant chassis.
Figure 64 - Keeper Status - Signature Mismatch

ControlNet modules in the redundant chassis with different keeper signatures.

To correct this anomaly, do one of the following: Select the unconfigured module and click Update Keeper. Reschedule the ControlNet network.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

219

Chapter 9

Troubleshoot a Redundant System

Partner Network Connection Lost

If a partner network connection between a redundant chassis pair is lost, a state change or switchover may occur. These state changes may result: Primary with qualified secondary changes to primary with disqualified secondary Qualified secondary with primary to disqualified secondary with primary To use the Event Log to determine if a lost partner network connection caused a state change, complete these steps. IMPORTANT This example shows a connection lost over a ControlNet network. You same steps apply if the connection is lost over an EtherNet/IP network.

1. Open RSLinx Classic software and access the RMCT of the primary redundancy module. This is the chassis that was previously the secondary but is now the primary.
Primary Chassis

Secondary Chassis

2. Locate the last event that indicates successful qualification and status.
Primary Chassis Event Log
2 2 2 2 2

A switchover is initiated.

2 2 2 2 2

Event indicates chassis state is as a qualified secondary.

2 2

3. Open the Event Log for the secondary chassis because the cause of the switchover is not apparent.
220 Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

4. Use the time of the switchover event found in the primary chassis to identify the corresponding event in the secondary chassis. The switchover indicated in the primary chassis log occurred at 10:27:08.
Secondary Chassis Event Log

2 2 2 2

The corresponding events in the secondary chassis log indicate that the network is not attached and that the SYS_FAIL_LActive backplane signal is active. Both these events indicate an error in the connection of the ControlNet module to the network. 5. Confirm the ControlNet connection error by browsing the network in RSLinx Classic software.

This node is no longer connected. An attempt to access the secondary RMCT fails and this error is indicated.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

221

Chapter 9

Troubleshoot a Redundant System

To recover from a ControlNet network disconnection, take these actions: Check all ControlNet tap and trunkline connections. Correct any disconnections or other connection anomalies. If the Auto-Synchronization parameter is not set to Always, use the commands in the Synchronization tab of the RMCT to synchronize your chassis. For more information about troubleshooting ControlNet network anomalies, see the ControlNet Modules in Logix5000 Control System User Manual, publication CNET-UM001. To recover from a EtherNet/IP network disconnection, take these actions: Check all EtherNet/IP network and switch connections. If the Auto-Synchronization parameter is not set to Always, use the commands in the Synchronization tab of the RMCT to synchronize your chassis. For more information about troubleshooting EtherNet/IP network anomalies, see the EtherNet/IP Modules in Logix5000 Control System User Manual, publication ENET-UM001.

Redundancy Module Connection Lost

To determine if the connection between the redundancy modules caused a switchover or state change, open the Event Log of the redundancy module that is currently the primary.

2 2 2 2 2

2 2 2

The Event Log clearly indicates that one of the redundancy modules has been disconnected. In addition, the dimmed secondary chassis log indicates that the module is not connected.

222

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

To resolve this anomaly, check the intermodule cable that connects the redundancy modules. Verify that it is properly connect and is not severed. Also, if the Auto-Synchronization parameter of this system is not set to always, use the commands in the Synchronization tab to synchronize that chassis once the anomaly is resolved.

Redundancy Module Missing

To determine if a missing redundancy module caused a state change and switchover, access the Event Log of the chassis that is currently the primary chassis.
Figure 65 - Event Log with Partner RM Screamed Event

RM Screamed event indicates module removal.

2 2

2
2 2

Last normal event logged.

Dimmed secondary chassis log indicates issue with redundancy module.

The Partner RM Screamed event is logged by the redundancy module just before it is disconnected. Depending on cause of the missing module, the Partner RM Screamed event may not be logged before the module is lost.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

223

Chapter 9

Troubleshoot a Redundant System

You can also browse to the redundancy module in RSLinx Classic software to determine if it is connected to the network. A red X over the redundancy module indicates the module is not in the chassis.
Figure 66 - Missing Redundancy Module in RSLinx Classic Software

To correct the missing module anomaly, first verify that the redundancy module is correctly installed in the chassis and it is properly powered. Then check the intermodule cable that connects the redundancy modules. After you have verified that the module is installed and powered, you may need to synchronize the chassis by using the synchronization commands in the Synchronization tab. Use the synchronization commands if your AutoSynchronization parameter for the chassis is not set to Always.

224

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Troubleshoot a Redundant System

Chapter 9

Qualification Aborted Due to a Nonredundant Controller

If you place a controller that is not enabled for redundancy into the redundant chassis, the qualification and synchronization fail. To determine if your synchronization failure is due to a nonredundant controller, complete these steps. 1. If not already open, open the RMCT of the primary module. 2. Click the Synchronization tab and view the Recent Synchronization Status Attempts log. The log indicates there is a Module Configuration Error. 3. Select the aborted attempt to view the description

4. Click the Synchronization Status tab to check the compatibility between modules.

All of the modules are indicated as being fully-compatible.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

225

Chapter 9

Troubleshoot a Redundant System

5. Open RSLogix 5000 and go online with the primary controller in your system. 6. Open the controller properties and verify that Redundancy Enabled is checked.

This controller is not enabled for use in a redundant system.

If Redundancy Enabled is not selected, then take these actions: Do one of the following: Remove the controllers that are not Redundancy Enabled. Enable the controller for redundancy and make other program changes to accommodate redundancy. After removing or correcting the Redundancy Enabled setting, attempt to synchronize your redundant system again.

Controller Events

Occasionally, controller-related events may be logged in the RMCT Event Log. In some cases, the anomalies are strictly status updates and are not indicative of an anomaly that requires troubleshooting. In other cases, the event description may indicate Program Fault Cleared, or a similar description of a resolved anomaly. If these types of events are not followed by state changes or switchovers, then they are not indicative of an anomaly that requires additional troubleshooting. If an event logged for a controller in the redundant system is followed by a state change or switchover, use RSLogix 5000 software to go online with the controller and determine the cause of the fault. For more information about using RSLogix 5000 software to troubleshoot a fault, see the section titled Use RSLogix 5000 Software to View Errors on page 201.

226

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Appendix

Status Indicators

Topic Redundancy Module Status Indicators

Page 227

Redundancy Module Status Indicators

The redundancy modules have these diagnostic status indicators.

1756-RM2/A and 1756-RM2XT Status Indicators

Figure 67 - Redundancy Module Status Indicators for 1756-RM2/A and 1756-RM2XT Modules

PR I M
CH2 CH1 OK
CH2 CH1 OK

Module Status Display

The module status display provides diagnostic information.
Table 40 - Module Status Display
Module Status Display Description Four-character display executing self-test at powerup. No action necessary. Txxx The redundancy module is executing a self-test at powerup. (xxx represents a hexadecimal test identification number.) Wait for self-test to finish. No action required. Application firmware update is in progress. Wait for firmware update to finish. No action is required. Boot mode - Erasing current redundancy module firmware Flash b mode - Updating redundancy module firmware Wait for firmware update to finish. No action is required. Resolving initial redundancy module state Wait for state resolution to finish. No action is required.

(1) May be present for either CH1 or CH2, but not both at the same time.

SFP Error Message

Use only Rockwell Automation approved small form pluggable (SFP). When an incompatible SFP is installed in the 1756-RM2/A module, the CH1/ CH2 status indicator shows solid red and the RMCT software displays the following error message in the status bar at the bottom of the screen: SFP !Cpt.

1756-RM/A and 1756-RM/B Status Indicators

Figure 68 - Redundancy Module Status Indicators for 1756-RM and 1756-RMXT Modules

PR I M
PRI COM OK
PRI COM OK

Module Status Display Status Indicators

Module Status Display

The module status display provides diagnostic information.
Table 43 - Module Status Display
Module Status Display Description Four-character display executing self-test at powerup. No action necessary. Txxx The redundancy module is executing a self-test at powerup. (xxx represents a hexadecimal test identification number.) Wait for self-test to finish. No action required. Application firmware update is in progress. Wait for firmware update to finish. No action is required. Boot mode - Erasing current redundancy module firmware.

XFER ERAS

230

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Status Indicators

Appendix A

Table 43 - Module Status Display

Module Status Display PROG ???? PRIM DISQ QFNG SYNC LKNG LOCK Exxx Description Boot mode - Updating redundancy module firmware. Wait for firmware update to finish. No action is required. Resolving initial redundancy module state. Wait for state resolution to finish. No action is required. Primary redundancy module. The module is operating as the primary module. No action required. Disqualified secondary redundancy module. Check the secondary partner modules type and revision. Qualifying secondary redundancy module. Redundant system status. No action is required. Qualified secondary redundancy module. Redundant system status. No action is required. Secondary redundancy module that is in process of locking for update. Secondary redundancy module that is locked for update. Major fault has occurred (xxx represents an error or fault code, with the two leastsignificant characters in decimal). Use the Error ID code to diagnose and address the error. For more information on error codes, see Redundancy Module Fault Codes and Display Messages on page 233. On-board EEPROM is empty. Replace the module. Error in erasing NVS device while updating boot image. Cycle power to the module. If the error persists, replace the module. Error in writing in NVS device while updating boot image. Cycle power to the module. If the error persists, replace the module. Error in erasing NVS device while updating application image. Cycle power to the redundancy module. If the error persists, replace the module. Error in writing in NVS device while updating application image. Cycle power to the redundancy module. If the error persists, replace the module. Error in erasing NVS device while updating configuration log image. Cycle power to the redundancy module. If the error persists, replace the module. Error in writing in NVS device while updating configuration log image. Cycle power to the redundancy module. If the error persists, replace the module. Error in writing in EEPROM device while updating configuration log image. Cycle power to the redundancy module. If the error persists, replace the module. The module is running boot firmware. Download the application firmware obtained from the respective redundancy bundle. A test line on the backplane is asserted. Check if the error message goes away after removing each module, one at a time. If error persists, cycle power to the chassis, or replace the chassis. All modules in the chassis do not belong to the same standard or enhanced redundancy platform.

EEPROM Update Required BOOT Erase Error BOOT Program Error APP Erase Error APP Program Error CONFIG Erase Error CONFIG Program Error EEPROM Write Error Application Update Required ICPT

!Cpt

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

231

Appendix A

Status Indicators

OK Status Indicators
The OK status indicator reveals the current redundancy module state.
Table 44 - OK Status Indicator
Indicator State Off Solid red Description No power is applied to the redundancy module. If necessary, apply power. One of these conditions exists: The redundancy module is conducting a self-test during powerup. No action necessary. The redundancy module has experienced a major fault. Cycle power to clear the fault. If the major fault does not clear, replace the module. Flashing red One of these conditions exists: The redundancy module is updating its firmware. No action necessary. The redundancy module has been configured improperly. Check the module configuration and correct any issues. The redundancy module has experienced a minor failure. Cycle power to clear the fault. If the major fault does not clear, replace the module. Solid green Flashing green The redundancy module is operating normally. No action required. The redundancy module is operating normally but is not communicating with the other redundancy module. If necessary, establish communication with the other redundancy module.

Communication Status Indicator

The communication status indicator indicates activity on the redundancy module communication between chassis in the redundant chassis pair.
Table 45 - Communication Status Indicator
Indicator State Off Description One of these conditions exist: No power is currently applied to the module. Apply power to the module. There is no communication between redundancy modules in the redundant chassis pair. Diagnose the redundancy configuration to determine why no communication is taking place. Red < 1 second Solid red Flashing green > 250 ms The module has been started and has established partner communication. No action required. The module has experienced a critical communication failure. Cycle power to clear the fault. If the major fault does not clear, replace the module. Communication activity is present. No action required.

232

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Status Indicators

Appendix A

Chassis State Status Indicator

The Chassis State (PRI) status indicator identifies whether the chassis is primary. The PRI status indicator on the primary redundancy module remains solid green, and the PRI status indicator on the secondary redundancy module remains off.

Redundancy Module Fault Codes and Display Messages

Redundancy modules may experience any of these faults.
Table 46 - Module Fault Codes
Fault Type Minor Recoverable Description This fault type results in these conditions: The fault does not stop redundancy operations and provides you with a recovery mechanism. The module may clear some minor recoverable faults on its own. This fault type results in these conditions: The fault does not stop redundancy operations. No recovery mechanism is available. The fault impacts redundancy operations, although the effect may not be immediate. For example, if the fault occurred in the secondary redundancy module, the secondary chassis will disqualify and will not be able to take over control if the primary redundancy module fails This fault type results in these conditions: This is a critical fault. Redundancy operations will cease. A switchover may occur. No recover mechanism is available. The module may need to be replaced.

Minor Nonrecoverable

Major Recoverable

Major Nonrecoverable

When the redundancy module experiences a fault, indication of that fault type is presented in these methods: Event log Module Status Display IMPORTANT This section describes a subset of module fault codes you may see in the event log or Module Status Display. If you see a fault code not included in this chapter, contact Rockwell Automation for assistance in troubleshooting that fault.

Event Log When Redundancy Module Experiences Fault

The redundancy module logs the fault type in its event log in NVS memory. You access the event log through the RMCT to troubleshoot the fault yourself or with assistance from Rockwell Automation Technical Support for troubleshooting the fault.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

233

Appendix A

Status Indicators

Module Status Display

A character string scrolls across the Module Status Display to indicate the fault type. The character string displays the fault type in either of these ways: Two to four-character word abbreviations Alpha numeric codes This table describes the two to four-character word abbreviations.
Table 47 - Major Fault Code Messages
1st Word CFG COMM COMM COMM 2nd Word LOG RSRC RSRC RSRC 3rd Word ERR ERR ERR ERR PRT1 PRT2 4th Word Error Description Configuration log error. No action is required. Communication resource error. Reset the redundancy module. Port1 Communication resource error on Backplane. Reset the redundancy module and check the chassis. Port2 Communication resource error on redundancy link. Complete these tasks: 1. Reset the module. 2. Check the cable. Port1 Communication error, Backplane communication. Check or replace the chassis. Port2 Communication error on the redundancy link. Check or replace the single-mode cable. General Communication Error. No action is required. Duplicate redundancy module. This module is not in control. Remove this redundancy module. ERR Event Log Error. No action is required. Firmware error. Update the firmware. Hardware failure. Replace the module. Operating system error. Replace the module. DOWN The redundancy module Power Down, Module detected a DC_Fail condition. Check the other modules in the chassis. Watchdog time out. Reset the module. Watchdog task failed its status check. Replace the module.

COMM COMM COMM DUPL EVNT FMWR HDW OS RM

ERR ERR ERR RM LOG ERR ERR ERR PWR

PRT1 PRT2

WDOG WDOG

ERR FAIL

234

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Status Indicators

Appendix A

Table 48 describes the alphanumeric codes. The fault code is a four-character alphanumeric string. Valid characters are 09 and A through Z, except S and O. The first character is always E. Each firmware subsystem within the redundancy module is assigned a range of fault codes. Each subsystem assigns fault codes within its range.
Table 48 - Alphanumeric Error Codes
Valid Character String E Indication Error. The subsystem in which the error was detected. The subsystem function or group of functions in which the error was detected. The specific error.

x1 x2 x3

Range E 0__ E 1__ E 2__ E 3__ E 4__ E 5__ E 6__ E 7__ E 8__ E 9__ E A__ E B__

Subsystem Back-up Control Object OS Board Support Package Chassis Profile Object Coordinated System Time Object Device Object Extended Log Object Event Log Object Back-up Communication Object ICP Toolkit Indicator Device Driver RM State Machine Event Log Device Driver

Range E C__ E D__ E E__ E F__ E G__ E H__ E I__ E J__ E K__ EL__ EM__

Subsystem Object Communication Wall Clock Time Object Non-maskable Interrupt Service Routine Nonvolatile Storage Object RM Fault Handler Self Test Object Workstation Display Object Industrial Control Platform Object RM Watchdog Manager Instrumentation Object File Object

If you encounter one of these error codes, record the Exxx code and contact Rockwell Automation Technical Support.

Recovery Messages
For certain faults, the module status display provides recovery instructions. Up to four, four-character words are displayed.
Table 49 - Recover Messages
Recovery Instruction Code RPLC MOD RSET MOD REMV MOD SEAT MOD Description Replace the module. Reset the module. Remove the module. Reinsert the module into the chassis.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

235

Appendix A

Status Indicators

Notes:

236

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Appendix

Event Log Descriptions

This table lists and explains some of the most-commonly experienced event descriptions found in the Event Log of the RMCT. Use this table as a reference when determining if an event on your system requires additional troubleshooting.
Event Description Autoqualification trigger Blank memories rule Description Something happened that caused the system to try and synchronize again. Double-click the event to see what happened. A check to choose a primary chassis if both chassis power up at the same time. Suppose that the controllers in one chassis don't have projects while the controllers in the other chassis do have projects. In that case, the other chassis becomes primary. A check to choose a primary chassis if both chassis power up at the same time. Suppose that one chassis has more modules than the other chassis. In that case, the chassis with the most modules gets the first chance to become primary. It becomes primary as long as the other chassis isn't more able to control the system. The chassis changed to a different redundancy state. PwQS Primary with qualified (synchronized) secondary partner QSwP Qualified (synchronized) secondary with primary partner DSwP Disqualified secondary with primary partner DSwNP Disqualified secondary with no partner PwDS Primary with disqualified secondary partner PwNS Primary with no secondary partner PLU Primary locked for update SLU Secondary locked for update A module is not able to get some information to its partner. A check to choose a primary chassis if both chassis power up at the same time. Suppose that the modules in one of the chassis powered down in a disqualified secondary state. In that case, the other chassis becomes primary. A check to choose a primary chassis if both chassis power up at the same time. Suppose that a module in one of the chassis is faulted but its partner module in the other chassis is not faulted. In that case, the other chassis becomes primary. The redundancy module has an anomaly. A lock for update cannot be performed if the primary controller is faulted. A lock for update or locked switchover cannot be performed if the mode switch on either controller is not in the REM position. A lock for update cannot be performed if the project names or applications are not identical in the primary and secondary chassis. When PTP is enabled on the primary partner, the secondary partner must be PTP time synchronized as well or it will not synchronize. The initial secondary PTP synchronization attempt may fail before the automatic retry is successful. In this case, the event reports that initial failed attempt. A lock for update cannot be performed if test edits or SFC forces exist in the application. The 1756-RM now sees the module on the backplane. This means the module has either just powered up, just been put into the chassis, or just finished resetting. Double click the event to see the slot number of the module. A module (with a slot number specified in byte 0 of the extended status) rejected the lock-for-update command. See events from that module to determine the cause. The 1756-RM no longer sees a module on the backplane. This means that the module either experienced a nonrecoverable fault, was removed from the chassis, or was reset. Double-click the event to see the slot number of the module. Rockwell Automation Publication 1756-UM535D-EN-P - November 2012 237

Chassis modules rule

Chassis redundancy state changed to

Crossloading error Disqualified secondaries rule Failed modules rule

Firmware error Improper mode or mode switch position Incompatible application Initial secondary PTP time synchronization failure

Invalid application Module insertion Module rejected lock for update command from 1756-RM module Module removal

Appendix B

Event Log Descriptions

Event Description Modules chassis state rule NRC modules rule

Description A check to choose a primary chassis if both chassis power up at the same time. Suppose that the modules in one chassis are already in a primary state. In that case, that chassis becomes primary. A check to choose a primary chassis if both chassis power up at the same time. NRC stands for nonredundancy compliant. Suppose that a module in one of the chassis doesn't support redundancy and all the modules in the other chassis do support redundancy. In that case, the other chassis becomes primary. A primary communication module cannot communicate with its partner across the network. For example, a 1756-CN2R/ B communication module in the primary chassis cannot communication with its partner 1756-CN2R/B communication module in the secondary chassis. These conditions may result in this event: A network anomaly, such as noise, a poor connection, or a termination anomaly, exists. The secondary communication module is not connected to the same network as the primary or any network at all. A check to choose a primary chassis if both chassis power up at the same time. If the two chassis powered down more than one second apart, the last chassis to power down gets the first chance at being primary. The primary module is now PTP synchronized and an auto qualification was requested. A controller has a major fault. A redundant controller's PTP clock is not synchronized or the partner controller pair is synchronized to different grandmasters. PTP is now synchronized on the module. The redundancy module has an anomaly. A check to choose a primary chassis if both chassis power up at the same time. This is the final tie-breaker. The 1756-RM with the lower serial number gets the first chance to become primary. It becomes primary as long as the other chassis isn't more able to control the system. A check to choose a primary chassis if both chassis power up at the same time. Because standby isn't available yet, this check always ends in a tie. A module has a nonrecoverable fault or lost its connection to the network. When that happens, the SYS_FAIL signal becomes true. The backplane of the chassis has a SYS_FAIL signal. Each module in the chassis uses this signal to indicate an anomaly: The signal is normally false (inactive), which means that all modules in the chassis are OK. A module turns the SYS_FAIL signal true (active) when the module has a nonrecoverable fault or it losses its connection to the network. Look for later events to find out what happened: If you see a Module Removal event shortly afterward, then a module has a nonrecoverable fault. Double-click the Module Removal event to see the slot number of the module. The SYS_FAIL signal may stay true until you cycle power or remove the faulted module. If you see a SYS_FAIL_L Inactive event within a few hundred milliseconds, then a cable is probably disconnected or broken. A communication module pulses the SYS_FAIL signal when the module loses its connection to the network. Look for a Transition to Lonely event to see which module lost its connection. The partner 1756-RM powered up or become connected by the fiber-optic cable. The partner 1756-RM lost power, has an unrecoverable fault, or was removed. An 1756-RM has circuits that hold power long enough for it to send a message to its partner over the fiber-optic interconnect cable. The 1756-RM sends the message even after you remove it from the chassis. This message is called a scream. The scream lets the partner 1756-RM tell the difference between a broken fiber-optic interconnect cable and the power loss or removal of the primary 1756-RM. If the fiber optic cable breaks, then there isn't a switchover. If the redundancy module loses power or is removed, then there is a switchover. A communication module doesn't see any other devices on its network. This usually means that the network cable of the module is disconnected or broken. The event log shows Transition to Not Lonely when you reconnect the cable. A unicast connection is configured in the redundant controller, and enhanced redundancy systems do not support Unicast. The 1756-RM configuration tool may be an older version and must be updated. The clock of the 1756-RM changed. This happens when you: use the RMCT to set the clock. connect the redundancy module to another redundancy module that is already the primary. The redundancy module synchronizes its clock to that of the primary 1756-RM.

Partner not on same link

Powerdown time rule Primary became PTP time synchronized Program Fault PTP not synchronized PTP now synchronized 1756-RM OS error 1756-RM serial number rule

Standby secondaries rule SYS_FAIL_L Active

The partner RM has been connected The partner RM screamed

Transition to lonely Unicast not supported Unknown event WCT time change (> 1 second)

238

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Appendix

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Topic Upgrade from a Standard Redundancy System Upgrade System Components Upgrade Ethernet Modules When Rotary Switches Are Set between 2254 Upgrade the System Software Upgrade by Using Redundancy System Update Replace 1756-RM/A or 1756-RM/B Redundancy Modules with 1756-RM2/A Redundancy Modules

Page 239 240 244 241 250 264

Upgrade from a Standard Redundancy System

If you need to upgrade your standard redundancy system to an enhanced redundancy system, complete this procedure.

Before You Begin

Before you begin upgrading from a standard redundancy system to an enhanced redundancy system, consider these points: If the standard redundancy system uses a 1757-SRM redundancy module, you must replace it with a 1756-RM redundancy module. You must upgrade all ControlNet or EtherNet/IP communication modules. You must upgrade the firmware on all controllers. Depending on the enhanced redundancy system revision to which you are upgrading, you may need to upgrade software.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

239

Appendix C

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Upgrade System Components

This section includes the procedure to upgrade your Ethernet communication modules when the modules rotary switches are set to 2254 and you are unable to interrupt the primary. IMPORTANT
This procedure must be executed before steps 612 of Upgrade by Using Redundancy System Update on page 250. This is a change from prior releases upgrade procedures. Please note, you must be physically present at the location where the redundant chassis are located to do this upgrade. You can only upgrade from firmware revision 19.052 or later to firmware revision 20.054. These steps apply when upgrading from firmware revision 19.052 or later to firmware revision 20.054.

IMPORTANT IMPORTANT

IMPORTANT

Before starting the following steps, complete steps 15 on page 250. If your system is controlling a process and using rotary switches, follow these steps. 1. Set the mode switch of the primary and secondary controllers to REM. If the redundant controllers in both chassis of the redundant chassis pair are not in Remote Program (REM) mode, the redundancy firmware upgrade cannot be completed. 2. Open RSLinx Classic software and browse to the redundancy module. 3. Right-click the redundancy module and choose Module Configuration.

4. Click the Configuration tab.

244

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Appendix C

5. From the Auto-Synchronization pull-down menu, choose Never.

6. Click Apply, then click Yes. 7. Click the Synchronization tab.

8. Click Disqualify Secondary, then click Yes. The secondary chassis is disqualified as indicated by the RMCT at the bottom-left of the RMCT and on the redundancy modules status display.
Status in RMCT

9. Click OK.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

245

Appendix C

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

10. Make a note of the primary Ethernet modules Port Configuration including the following: IP Address Network Mask Gateway Address

11. Disconnect the Ethernet cable or cables from the secondary Ethernet module. 12. Remove the secondary Ethernet module from the secondary chassis. Record the original rotary switch settings, as you need to set them back later. Set the rotary switches to 999. 13. Reinsert the secondary Ethernet module into the secondary chassis. 14. Bridging across the backplane (or via the Ethernet modules USB port), configure the secondary Ethernet modules Port Configuration to match the primary Ethernet modules Port Configuration from step 10. 15. Update the secondary Ethernet module to firmware revision 5.008 by following these steps. a. Launch ControlFLASH software and click Next.

246

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Appendix C

b. Select the Ethernet module catalog number and click Next.

c. Browse to the module and select it.

Secondary Chassis

d. Click OK. e. Select the firmware revision to upgrade to and click Next. f. Click Finish. The firmware begins to update. When the update is complete, the Update status dialog box indicates completion.

Wait for the update to complete. 16. After the update completes, reconnect the Ethernet cable or cables to the secondary Ethernet module and wait for communication to resume on the network. 17. Repeat steps 1016 for all Ethernet modules that have their rotary switches set between 2254.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

247

Appendix C

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

18. In RSLinx Classic software, browse in this chassis to the primary 1756-RM module. 19. Right-click to select Module Configuration to open the RMCT. 20. Click the Synchronization tab in the RMCT.

21. Click Synchronize Secondary, then click Yes. 22. After the redundant chassis pair synchronizes, click Initiate Switchover from the Synchronization tab in the RMCT, then click Yes.

23. In RSLinx Classic software, select Module Configuration on the new primary Ethernet communication module. 24. Click the Port Configuration tab and change the Gateway address from 0.0.0.0 to 192.168.1.1. 25. Click Apply, then click OK. 26. Disconnect the Ethernet cable or cables from the secondary Ethernet module. 27. In ControlFLASH software, bridge across the backplane (or use the Ethernet modules USB port), and update the new secondary Ethernet module to firmware revision 5.008. When the update is complete, the Update status dialog box indicates completion.

248

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Appendix C

28. After the update completes, reconnect the Ethernet cable or cables to the secondary Ethernet module and wait for communication to resume on the network. 29. Repeat steps 2328 for all Ethernet modules that have their rotary switches set between 2254. 30. In RSLinx Classic software, browse to the primary 1756-RM module. 31. Right-click to select Module Configuration to open the RMCT. 32. Click the Synchronization tab in the RMCT.

33. Click Synchronize Secondary, then click Yes. 34. After the redundant chassis pair synchronizes, select Initiate Switchover from the Synchronization tab in the RMCT, then click Yes.

35. Remove the new secondary Ethernet module from the chassis and reset the rotary switches back to their original setting from 999. 36. Reinsert the secondary Ethernet module back in the chassis and wait until network communication resumes. 37. Repeat steps 3536 for all Ethernet modules that have their rotary switches set between 2254.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

249

Appendix C

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Upgrade by Using Redundancy System Update

You can upgrade an enhanced redundancy system revision to another while your process continues to run. This is known as Redundancy System Update (RSU). IMPORTANT
RSU is available only when upgrading from an enhanced redundancy system revision to another. You cannot use this process to upgrade from a standard redundancy system to an enhanced redundancy system. Any Ethernet communication modules that have the rotary switch set must first be updated using the Upgrade Ethernet Modules When Rotary Switches Are Set between 2254 on page 244 You can only upgrade from firmware revision 19.052 or later to firmware revision 20.054. These steps apply when upgrading from firmware revision19.052 or later to firmware revision 20.054.

IMPORTANT

Complete these steps to upgrade your redundancy system from one enhanced redundancy system revision to another enhanced redundancy revision while your process continues to run. 1. Step 1: Before You Begin 2. Step 2: Upgrade the Workstation Software 3. Step 3: Download and Install the Redundancy Firmware Bundle 4. Step 4: Upgrade the Redundancy Module Configuration Tool 5. Step 5: Add the EDS Files 6. Step 6: Prepare the Redundant Chassis for the Firmware Upgrade 7. Step 7: Upgrade the Primary Chassis Redundancy Module Firmware 8. Step 8: Upgrade the Secondary Redundancy Module Firmware and All Other Modules Firmware in the Secondary Chassis 9. Step 9: Prepare the RSLogix 5000 Project for the Upgrade 10. Step 10: Lock the System and Initiate a Switchover to Upgrade 11. Step 11: Upgrade the New Secondary Chassis Firmware 12. Step 12: Synchronize the Redundant Chassis

250

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Appendix C

Step 1: Before You Begin

Consider these points before you begin upgrading your enhanced redundancy system to a new revision. During the upgrade procedures, you cannot use RSLogix 5000 software to change the mode of the controller. Instead, use the mode switch on the front of the controller. Leave RSNetWorx for ControlNet software closed or offline throughout this procedure. If the software is open or online, you see errors in the RSNetWorx for ControlNet software during the upgrade process. Remember the following when completing the tasks described in the rest of this section: Do not make any changes to the RSLogix 5000 project other than those identified in these tasks. Verify that no one will be or is making changes to the project. Do not use a FactoryTalk Batch Server to change equipment phasestates when upgrading your enhanced redundancy system.

Step 2: Upgrade the Workstation Software

Before you download and upgrade software for your redundant system, use one of these methods to fully shut down RSLinx Classic software. Right-click the RSLinx Classic icon in the notification area of the screen and choose Shutdown RSLinx Classic.

With RSLinx Classic software open, from the File menu, choose Exit and Shutdown.

Install the software required for your redundant system configuration. See Software Requirements on page 49 for software versions required for use with this enhanced redundancy system revision. Use the installation instructions or release notes provided with each software version for installation procedures and requirements.
Rockwell Automation Publication 1756-UM535D-EN-P - November 2012 251

Appendix C

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Step 3: Download and Install the Redundancy Firmware Bundle

Download and install the redundancy firmware revision bundle from the Rockwell Automation Support website at: www.rockwellautomation.com/ support/ Follow these steps. 1. 2. 3. 4. 5. 6. 7. 8. 9. Click the Downloads link on the Get Support Now menu. Click Firmware Updates under Additional Resources. Click Control Hardware. Click the 1756-Lxx Enhanced Redundancy Bundle file. The Flash Firmware Updates window appears. Enter your Serial Number. Click Qualify For Update. Click Finish when the Qualified For Update window appears. Download the zipped file. Install the Redundancy Firmware Bundle.

Step 4: Upgrade the Redundancy Module Configuration Tool

The RMCT, version 8.01.05, is included in the enhanced redundancy system, revision 20.054_kit1 bundle. Once this bundle is installed, you can use the RMCT, version 8.01.05.

Verify Your RMCT Version

Complete these steps to check or verify the version of the RMCT you have installed. 1. Launch RSLinx Classic software. 2. Click RSWho.

3. Right-click your redundancy module and choose Module Configuration.

252

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Appendix C

The Module Configuration dialog box opens. 4. Right-click the title bar and select About.

The About dialog box opens and indicates the RMCT version.

TIP

The RMCT launches at the version that is compatible with the redundancy module firmware that is currently installed. If you upgrade your RMCT version but do not upgrade your redundancy module firmware revision compatible with the new RMCT version, the About dialog box may not reflect the new RMCT version.

Step 5: Add the EDS Files

If needed, obtain EDS files for modules in your system from the Rockwell Automation website at: http://www.rockwellautomation.com/ resources/eds/. Once you have downloaded the required EDS file, launch the EDS Hardware Configuration Tool by choosing Start > Programs > Rockwell Software > RSLinx Tools > EDS Hardware Installation Tool. The tool then prompts you to Add or Remove EDS files.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

253

Appendix C

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Step 6: Prepare the Redundant Chassis for the Firmware Upgrade

Complete these steps to prepare both the primary and secondary redundant chassis for redundancy firmware upgrades. 1. Set the mode switch of the primary and secondary controllers to REM. If the redundant controllers in both chassis of the redundant chassis pair are not in Remote Program (REM) mode, the redundancy firmware upgrade cannot be completed. 2. Open RSLinx Classic software and browse to the redundancy module. 3. Right-click the redundancy module and select Module Configuration to open the RMCT.

4. Click the Configuration tab in the RMCT. 5. From the Auto-Synchronization pull-down menu, choose Never.

6. Click Apply, then click Yes.

254

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Appendix C

7. Click the Synchronization tab.

9. Click OK and close the RMCT. Closing the RMCT helps prevent a timeout from occurring when the redundancy modules firmware is upgraded.

Step 7: Upgrade the Primary Chassis Redundancy Module Firmware

Wait 45 seconds before you begin updating the 1756-RM firmware. During this time, the redundancy module conducts internal operations to prepare for an upgrade. 1. Launch ControlFLASH software and click Next. 2. Select the redundancy module catalog number and click Next.

1756-RM/B 1756-RM2/A

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

255

Appendix C

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

3. Browse to the module and select it.

Primary Chassis

Secondary Chassis

4. Click OK. 5. Select the firmware revision to upgrade to and click Next. 6. Click Finish. The firmware begins to update. When the update is complete, the Update status dialog box indicates completion.

Step 8: Upgrade the Secondary Redundancy Module Firmware and All Other Modules Firmware in the Secondary Chassis
Power on the secondary chassis. Wait 45 seconds before you begin updating the secondary chassis firmware. During this time, the redundancy module conducts internal operations to prepare for an upgrade. Complete these steps to upgrade the firmware in the secondary chassis. 1. Launch ControlFLASH software and click Next. 2. Select the redundancy module catalog number and click Next.

1756-RM/B 1756-RM2/A

256

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Appendix C

3. Browse to the module and select it.

Primary Chassis Secondary Chassis

7. If you are replacing or upgrading your controller hardware, remove the controller from the secondary chassis and replace it with the new controller. Use this table to determine if your planned primary and secondary controllers can be used together in the redundant chassis.
Table 50 - Controller Compatibility
Primary Controller 1756-L61 1756-L62 1756-L63 1756-L64 1756-L65(1) 1756-L71 1756-L72 1756-L73 1756-L74 1756-L75 Compatible Secondary Controller 1756-L61, 1756-L62, 1756-L63, 1756-L64, 1756-L65 1756-L62, 1756-L63, 1756-L64, 1756-L65 1756-L63, 1756-L64, 1756-L65 1756-L64, 1756-L65 1756-L65 1756-L71, 1756-L72, 1756-L73, 1756-L74, 1756-L75 1756-L72, 1756-L73, 1756-L74, 1756-L75 1756-L73, 1756-L74, 1756-L75 1756-L74, 1756-L75 1756-L75

(1) In the ControlLogix enhanced redundancy system, revision 19.052, the ControlLogix 1756-L65 controllers performance differs from that of the ControlLogix 1756-L64 controller.

IMPORTANT

Controller compatibility is the same for the XT controllers as the standard controllers.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

257

Appendix C

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

8. Complete steps 27 for each module in the secondary chassis, including a new controller, if applicable. IMPORTANT
Ethernet communication modules that have rotary switches set must have been previously updated using Upgrade Ethernet Modules When Rotary Switches Are Set between 2254 on page 244.

Once you have upgraded the firmware for each module in the secondary chassis, prepare the RSLogix 5000 project for the upgrade.

Step 9: Prepare the RSLogix 5000 Project for the Upgrade

Complete these steps to prepare the RSLogix 5000 program and controllers for the upgrade. 1. Launch RSLogix 5000 software and go online with the primary controller. 2. Verify that the watchdog time is set to a value that corresponds with the requirements of the enhanced redundancy system revision and your application. See Minimum Value for the Watchdog Time on page 177 for information about calculating the minimum watchdog time. 3. Cancel or assemble any pending test edits. 4. Remove all Sequential Function Chart (SFC) forces from the project. 5. Verify that no changes need to be made to the following: I/O forces I/O configuration After this step, changes to I/O cannot be made until after the enhanced redundancy system revision upgrade is complete and both chassis are synchronized. 6. If you are upgrading an enhanced redundancy system, revision 16.81 or earlier, disable CST Mastership. 7. Configure the controllers and communication modules in the redundant chassis pair as necessary. 8. Save the project. 9. Go offline.

Controller Properties

10. Click Controller Properties.

258

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Appendix C

11. Click Change Controller.

12. Specify the controller revision to which you are upgrading. 13. If you installed a new controller while upgrading the primary chassis firmware, specify the new controller catalog number. 14. Click OK. 15. Access the Module Properties for each communication module in the chassis and specify the module firmware revision to which you are upgrading.

TIP

If you are unable to specify the new revision, you may need to change the Electronic Keying parameter to Compatible Keying.

16. Save the project. 17. Download the project to the secondary controller. The secondary controller is at the higher network address of the two available for the redundant chassis.

18. After the download is complete, go offline.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012 259

Appendix C

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

You are now ready to lock the system and initiate a locked switchover to update the primary chassis. Continue with Step 10: Lock the System and Initiate a Switchover to Upgrade.

Step 10: Lock the System and Initiate a Switchover to Upgrade

Once you have downloaded the RSLogix 5000 project you prepared, complete these steps to lock your system and initiate a switchover. IMPORTANT
Remain offline while completing these steps. Once you have locked the system, do not abort the system lock. Aborting the system lock during this procedure clears the project from the secondary controller. Do not disconnect any communication cables while completing these steps. Completing a locked switchover causes SFC instructions to be reset to their initial state. This may result in SFC instructions executing twice.

1. Open the RMCT for the redundancy module in the primary chassis by right-clicking on the RM module in RSLinx Classic software and selecting Module Configuration.

2. Click the System Update tab.

3. Click Lock For Update, then click Yes. 4. Wait for the system to lock.

260

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Appendix C

The System Update Lock Attempts log indicates when the system lock is complete.

5. Click Initiate Locked Switchover, then click Yes.

This step results in your secondary chassis assuming control and becoming the primary chassis. When the switchover is complete, the Locked Switchover Attempts log indicates success.

In addition to the log, the text in chassis status row indicates the switchover state.

Once your locked switchover is complete, upgrade the firmware revisions for modules in the new secondary chassis. IMPORTANT
Following the locked switchover, secondary controllers no longer contain a user application and their configuration settings are reset to the factory-default settings. The new secondary controllers use the default settings and the components in the secondary chassis are upgraded and the system is synchronized.

Step 11: Upgrade the New Secondary Chassis Firmware

Complete these steps to upgrade the firmware of all of the modules in the new secondary chassis, except for the redundancy module that was already upgraded as described in Step 7: Upgrade the Primary Chassis Redundancy Module Firmware on page 255.
Rockwell Automation Publication 1756-UM535D-EN-P - November 2012 261

Appendix C

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

1. If you are replacing and upgrading your controller hardware, remove the controller from the secondary chassis and replace it with the new controller. 2. Launch ControlFLASH software and click Next. 3. Select the module catalog number and click Next.

4. Browse to the module and select it.

Primary Chassis Secondary Chassis

5. Click OK. 6. Select the firmware revision to upgrade to and click Next. 7. Click Finish. The firmware begins to update. When the updated is complete, the Update status dialog box indicates completion.

8. Complete steps 2 7 for each module in the new secondary chassis, including the new controllers, if applicable. Once you have upgraded the firmware for each of the modules in the new secondary chassis, continue by synchronizing the redundant chassis.

262

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Appendix C

Step 12: Synchronize the Redundant Chassis

Complete these steps to synchronize the redundant chassis after firmware in both chassis have been upgraded to the same revision. 1. Launch the RMCT for the redundancy module in the primary chassis by right-clicking on the module in RSLinx Classic software and selecting Module Configuration.

2. From the Auto-Synchronization pull-down menu, choose the frequency that suits your application.

3. Click Apply, then click Yes. 4. Synchronize the chassis.

5. Set the redundancy module date and time according to your preference. 6. Click OK. 7. Close the RMCT. Your redundant system firmware upgrade is now complete.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

263

Appendix C

Upgrade from a Standard Redundancy System or to Another Enhanced Redundancy System

Replace 1756-RM/A or 1756RM/B Redundancy Modules with 1756-RM2/A Redundancy Modules

If you need to replace your current redundancy modules with 1756-RM2/A modules, you can do so without initiating a switchover. TIP For the following steps, redundancy module is used when referring to the 1756-RM/A or 1756-RM/B modules.

Before executing these steps, review the most recent Redundancy Bundle release notes to determine the 1756-RM2 firmware revision and RMCT version needed. You can find this information at the Product Compatibility and Download Center at http://www.rockwellautomation.com/support/downloads.html. 1. Install the compatible version of the RMCT software. You must shut down RSLinx Classic software to perform the installation, and then restart RSLinx Classic software after the installation is complete. 2. Set the Auto-Synchronization option in the Configuration tab of the RMCT to Never. 3. Using the RMCT, disqualify the redundant chassis pair (if not already disqualified). 4. Unplug the fiber cable on both of the redundancy modules. 5. Close any open RMCT sessions connected to the current redundancy modules being replaced. 6. Remove the redundancy module pair (in any order) from the redundant chassis. 7. Insert the 1756-RM2/A redundancy module pair (in any order) in the redundant chassis into the same slots as the redundancy modules. 8. If not already installed, install the EDS file for the 1756-RM2/A module by uploading it from the module by using RSLinx Classic software. If needed, obtain the EDS file for the 1756-RM2/A module. Right click on the module in RSWho and select Upload EDS file from device. 9. Update to the appropriate firmware revision in the primary and secondary 1756-RM2/A modules. 10. Reconnect the fiber cable on either CH1 or CH2 of the 1756-RM2/A redundancy module. 11. Optional: Connect a second fiber cable on the remaining channel if fiber redundancy is desired. 12. Wait for at least 45 seconds after connecting one of the fiber cables. 13. Launch the RMCT again for the newly-installed 1756-RM2/A modules. 14. Set the Auto-Synchronization option in the Configuration tab back to the original value or to a new desired value. 15. Using the RMCT, synchronize the system again (if it is not already qualified).
264 Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Appendix

Convert from a Nonredundant System

Topic Update the Configuration in RSLogix 5000 Software Replace Local I/O Tags Replace Aliases to Local I/O Tags Remove Other Modules from the Controller Chassis Add an Identical Chassis Upgrade to Enhanced Redundancy Firmware Update the Controller Revision and Download the Project

Page 266 268 269 270 271 271 271

When converting from a nonredundant to a redundant system, first consider the following: You can use only RSLogix 5000 software versions 16, 19, or 20 in an enhanced redundancy system. The redundant chassis pair has controller, communication module and I/O module restrictions. See Chapter 1 for additional information. Complete the tasks in this section to convert a nonredundant ControlLogix system to an enhanced redundancy system.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

265

Appendix D

Convert from a Nonredundant System

Update the Configuration in RSLogix 5000 Software

These steps provide an overview of the process required to update the I/O Configuration tree in RSLogix 5000 software. 1. If you have I/O in the chassis with the controller, add a ControlLogix communication module to the appropriate network because I/O modules are not permitted in a redundant chassis.

You can now move the I/O modules to the new chassis in the I/O Configuration tree.

The I/O can be placed in this chassis.

266

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Convert from a Nonredundant System

Appendix D

2. Copy the I/O modules and paste them into the chassis of the newly-added communication module.

Paste I/O into the new ControlNet chassis.

3. Delete the I/O modules from the controller chassis configuration.

4. Continue by completing the procedures to Replace Local I/O Tags and to Replace Aliases to Local I/O Tags.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

267

Appendix D

Convert from a Nonredundant System

Replace Local I/O Tags

If you have moved I/O modules out of the local controller chassis and into the remote I/O chassis, complete these steps to find and replace the local I/O tags in your program. 1. Open the routine where the local I/O tags need to be updated. 2. Press CTRL+H to open the Replace in Routines dialog box.

3. From the Find What pull-down menu, choose Local:. 4. From the Replace With pull-down menu, choose the name of the communication module where the remote I/O was placed. 5. From the Find Where pull-down menu, choose All Routines. 6. Click Find Within >>. 7. Select Ladder Diagrams. 8. Check Instruction Operands.

268

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Convert from a Nonredundant System

Appendix D

9. Click Replace All. The find/replace is completed and the results are indicated in the Search Results tab.

Replace Aliases to Local I/O Tags

If your program uses alias tags for the I/O modules that you are moving, complete these steps to replace alias tags. 1. In RSLogix 5000 software, open the Controller Tags. 2. Press CTRL+H to open the Replace Tags dialog box.

3. From the Find What pull-down menu, choose Local:. 4. From the Replace With pull-down menu, choose the name of the communication module where the remote I/O was placed. 5. From the Find Where pull-down menu, choose All Tags. 6. Click Find Within >>. 7. Select Alias and click Replace All. The Search Results tab indicates the changed tags.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

269

Appendix D

Convert from a Nonredundant System

Remove Other Modules from the Controller Chassis

Module type Cat. No. Description

If modules other than those listed below are in the controller chassis, you must remove them. You can use these modules in ControlLogix enhanced redundancy systems.
Available with Enhanced Available with System, Revision 20.054 Enhanced System, Revision 19.053 or later Available with Enhanced Available with System, Revision 19.052 Enhanced System, or later Revision 16.081

Table 51 - Components Available for Use in a Redundant Chassis Pair

Communicatio n modules

1756-CN2/B 1756-CN2R/B

ControlLogix ControlNet bridge module ControlLogix redundant media ControlNet bridge module

1756-CN2RXT ControlLogix-XT ControlNet bridge module 1756-EN2T 1756-EN2TR 1756-EN2TXT 1756-EN2F Controllers 1756-L61, 1756-L62, 1756-L63, 1756-L64 1756-L63XT 1756-L65 1756-L72, 1756-L73, 1756-L74, 1756-L75 1756-L71 1756-L73XT Redundancy modules 1756-RM 1756-RMXT ControlLogix-XT controller ControlLogix redundancy module ControlLogix-XT redundancy module ControlLogix EtherNet/IP bridge module ControlLogix EtherNet/IP 2-port module ControlLogix-XT EtherNet/IP bridge module ControlLogix EtherNet/IP 2-port fiber module ControlLogix controllers

ControlLogix-XT controller ControlLogix controller ControlLogix controllers

270

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Convert from a Nonredundant System

Appendix D

Add an Identical Chassis

After you have configured your primary chassis with the modules listed above, add an identical chassis that contains the same modules with the same moduleplacement. For more information about chassis configuration, see the section titled Redundant Chassis on page 28.

Upgrade to Enhanced Redundancy Firmware

Once you have made the appropriate changes to your system configuration and program, and have added the identical chassis, upgrade your system firmware. For information about upgrading the redundant system firmware, see Step 4: Update Redundant Chassis Firmware on page 67.

Update the Controller Revision and Download the Project

After you upgrade the firmware, use RSLogix 5000 software to access the controller properties and update the controller revision to match the redundancy firmware revision you are using.

Once you have updated the controller firmware revision and saved the changes, download the updated program to the controller.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

271

Appendix D

Convert from a Nonredundant System

Notes:

272

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Appendix

Redundancy Object Attributes

Use this table of redundancy object attributes as a reference when programming to obtain the status of your redundancy system.
For this information Redundancy status of the entire chassis. Get this attribute
ChassisRedundancyState

Data Type INT

GSV/SSV GSV

Description If 16#2 16#3 16#4 16#10 Then Primary with synchronized secondary Primary with disqualified secondary Primary with no secondary Primary locked for update Then Synchronized secondary Disqualified secondary with primary No partner Secondary locked for update Then Primary with synchronized secondary Primary with disqualified secondary Primary with no secondary Primary with synchronizing secondary Primary locking for update. Primary locked for update Then Synchronizing secondary Synchronized secondary Disqualified secondary with primary No partner Secondary locking for update Secondary locked for update Then Undetermined No compatible partner Fully compatible partner

Get this attribute Qualification InProgress

Data Type INT

GSV/SSV GSV

Description If -1 0 1 - 99 50 100 Then Synchronization (qualification) is not in progress. Unsupported For modules that can measure their completion percentage, the percent of synchronization (qualification) that is complete. For modules that cannot measure their completion percentage, synchronization (qualification) is in progress. Synchronization (qualification) is complete. Then The mode switches match OR No partner is present. Mode switches do not match Then the mode switch is in Unknown RUN PROG REM Means this minor fault Power-up fault IO fault Problem with an instruction (program) Periodic task overlap (watchdog) Problem with the serial port Low battery or issue with the energy storage module Then Power up Program Run Test Faulted Run-to-program Test-to-program Program-to-run Test-to-run Run-to-test Program-to-test Into faulted Faulted-to-program

Mode switch settings of the Mode switchAlarm controller and its partner match or do not match.

DINT

GSV

If 0

1 Position of the mode switchmode switch of the partner. Partnermode switch DINT GSV If 0 1 2 3 Status of the minor faults of the partner (if the ModuleRedundancyState indicates that a partner is present). PartnerMinorFaults DINT GSV This bit 1 3 4 6 9 10 Mode of the partner. PartnerMode DINT GSV If 16#0 16#1 16#2 16#3 16#4 16#5 16#6 16#7 16#8 16#9 16#A 16#B 16#C

274

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Redundancy Object Attributes

Appendix E

For this information In a pair of redundant chassis, identification of a specific chassis without regard to the state of the chassis.

Get this attribute PhysicalChassisID

Data Type INT

GSV/SSV GSV

Description If 0 1 2 Then Unknown Chassis A Chassis B

Slot number of the 1756-RM module in this chassis. Size of the last crossload. Size of the last crossload if you had a secondary chassis.

1756-RM SlotNumber LastDataTransfer Size

INT DINT

GSV GSV This attribute gives the size of data that was or would have been crossloaded in the last scan in the number of DINTs (4-byte words). The secondary chassis does not have to be connected or online. If you do not have a secondary chassis, the number of DINTs that would have been crossloaded are indicated. This attribute gives the biggest size of the LastDataTransfer Size attribute in DINTs (4-byte words). The secondary chassis does not have to be connected or online. If you do not have a secondary chassis, the largest number of DINTs that would have been crossloaded are indicated. If you need to reset this value, use an SSV instruction with a Source value of 0.

Size of the biggest crossload. Size of the biggest crossload if you had a secondary chassis.

MaxDataTransfer Size

DINT

GSV SSV

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

275

Appendix E

Redundancy Object Attributes

Notes:

276

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Appendix

Enhanced Redundancy System Checklists

Topic Chassis Configuration Checklist Remote I/O Checklist Redundancy Module Checklist ControlLogix Controller Checklist ControlNet Checklist EtherNet/IP Module Checklist Project and Programming Checklist

Page 277 278 278 279 279 280 281

Chassis Configuration Checklist

Requirement Chassis used for the redundant pair are the same size, for example, both are 1756-A7, 7-slot chassis. Only these modules are used in the redundant chassis: ControlLogix controllers, catalog numbers 1756-L61, 1756-L62, 1756-L63, 1756-L63XT,1756-L64, 1756-L65, 1756-L71, 1756-L72, 1756-L73, 1756-L73XT, 1756-L74, 1756-L75 ControlNet communication modules, catalog numbers 1756-CN2/B, 1756-CN2R/B, 1756-CN2RXT EtherNet/IP communication modules, catalog numbers 1756-EN2T,1756-EN2TXT, 1756-EN2TR, 1756-EN2F Redundancy modules, catalog numbers 1756-RM, 1756-RMXT, 1756-RM2/A, 1756-RM2XT Each chassis of the pair is comprised of identical modules that are of identical redundancy firmware revisions, series, and memory sizes.(1) Partner modules are placed in same slots of both chassis of the redundant pair (for example, the 1756-L63 is placed in slot 0 of both chassis). I/O modules are not placed in the redundant chassis. Seven or fewer communication modules of any type or combination are used in each redundant chassis.
(1) There are some exceptions to this requirement. For more information, see Redundant Chassis on page 28.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

277

Appendix F

Enhanced Redundancy System Checklists

Remote I/O Checklist

Requirement I/O is not placed in redundant chassis. I/O is connected to the redundant chassis by using one of these networking options: ControlNet connections to the same ControlNet network as the redundant controller chassis, without bridging. EtherNet/IP connections to the same EtherNet/IP network as the redundant controller chassis, without bridging. If in the I/O tree of the redundancy controller, all I/O and consumed tag connections must be multicast connections. The I/O tree of the redundancy controller may contain produced unicast tags consumed by remote users. A DeviceNet network connected through a 1756-DNB DeviceNet communication module in a remote, that is, nonredundant, chassis. A universal remote I/O or Data Highway Plus network connected through the use of a 1756-DHRIO module in a remote (nonredundant) chassis.

Redundancy Module Checklist

Requirement One redundancy module is placed in the same slot of each redundant chassis. Series A and B redundancy modules are fully compatible. Therefore, you can use any combination of them in a partnered set, for example, a 1756-RM/A module in the primary chassis and a 1756-RM/B module in the secondary chassis. However, the best scan performance occurs when two Series B redundancy modules are used with 1756-L7x controllers.

IMPORTANT

The scan time is slightly extended when you downgrade a Series B redundancy module to a Series A module in conjunction with a 1756-L7x controller in the redundant chassis pair. In this case, raise the task watchdog limits by a factor of ~2x before downgrading. Thereafter, you can retune the limits based on the updated scan time numbers. If your application uses 1756-L6x controllers in the redundant chassis pair, using a combination of Series A and Series B redundancy modules results in the same performance as if you use only a Series A redundancy module in the redundancy chassis pair, regardless of the primary or secondary redundancy state.

A fiber-optic cable connects the redundancy modules in the redundant chassis pair. These are catalog numbers of fiber-optic cable you can order from Rockwell Automation: 1756-RMC1 (1 m, 3.28 ft) 1756-RMC3 (3 m, 9.84 ft) 1756-RMC10 (10 m, 32.81 ft) If necessary, you can make your own fiber-optic cable that is up to 4 km (13,123.36 ft) for the 1756-RM/B module or 10 km (32,808.40 ft) for the 1756-RM2 module.

278

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Enhanced Redundancy System Checklists

Appendix F

ControlLogix Controller Checklist

Requirement Identical ControlLogix controllers are placed in the same slot of both chassis of the redundant pair. Partnered controllers are identical in redundancy firmware revision, and memory size. Within each redundant chassis, one or two (maximum) of these controllers are used: 1756-L61, 1756-L62, 1756-L63, 1756-L63XT, 1756-L64(1), 1756-L65 1756-L71, 1756-L72, 1756-L73, 1756-L73XT, 1756-L74, 1756-L75 Do not combine 1756-L6x and 1756-L7x controllers in a redundant chassis. Each controller in the redundancy chassis has enough memory to store twice the amount of controller data and I/O memory. (See Knowledgebase ID 28972 for more information.) Eight controller connections are reserved for redundancy use.
(1) When using ControlLogix enhanced redundancy system, revision 16.081 or earlier, you cannot use two 1756-L64 controllers in the same chassis. You can, however, use a 1756-L64 controller in the same chassis as a 1756-L61, 1756-L62, or 1756-L63 controller.

ControlNet Checklist
Requirement Identical ControlNet modules are placed in the same slot of both chassis of the redundant pair. ControlNet modules are identical in redundancy firmware revision and in series. Only the 1756-CN2/B, 1756-CN2R/B, or 1756-CN2RXT ControlNet modules are used. Partnered ControlNet modules both have identical keeper information as explained in the ControlNet Modules in Logix5000 Control Systems User Manual, publication CNET-UM001. Three connections of the ControlNet module are appropriately reserved for redundancy system use. ControlNet Network USB ports of communication modules in the redundant chassis are not used while the system is running (online). At least four ControlNet nodes are used on the ControlNet network. That is, at least two ControlNet nodes are on the ControlNet network in addition to the two ControlNet modules in the redundant chassis. These requirements apply to at least one ControlNet node: It is not in the redundant chassis pair. It uses a node address lower than the ControlNet node addresses of modules in redundant chassis pair. These requirements apply to all ControlNet communication modules available in an enhanced redundancy systems. ControlNet module partners in the redundant chassis have the following: Node address switches set to the same address (for example, both modules switches are set to node address 13). Two consecutive node addresses reserved (for example, nodes 13 and 14) to accommodate a switchover. The primary ControlNet module can have an even or oddnumbered node address. The ControlNet network is scheduled by using techniques described in the ControlNet Modules in Logix5000 Control Systems User Manual, publication CNET-UM001.(1) Devices on other communication networks are bridged to the ControlNet network appropriately. ControlNet Module

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

279

Appendix F

Enhanced Redundancy System Checklists

Requirement A ControlNet network or a ControlNet-to-EtherNet/IP gateway is used to connect to HMI because your system requires that HMI be updated immediately after a switchover. PanelView Standard terminal, PanelView 1000e or 1400e terminal For an unscheduled network, 4 HMI terminals per controller are used. For a scheduled network, any amount of terminals within the limits of the ControlNet network are used. PanelView Plus terminal, VersaView industrial computer running a Windows CE operating system RSLinx Enterprise software, version 5.0 or later, is used. Within each controller and communication module, five connections for each PanelView Plus or VersaView terminal are reserved. FactoryTalk View SE software with RSLinx communication software, version 2.52 or later, RSView 32 software, RSLinx Enterprise software, version 5.0 The number of RSLinx servers that a controller uses is limited to 14 (maximum).

ControlNet HMI

(1) Unscheduled ControlNet networks can be used, however, certain use considerations must be made. See Chapter 5, Configure the ControlNet Network on page 93.

EtherNet/IP Module Checklist

Requirement Identical EtherNet/IP communication modules are placed in the same slot of both chassis of the redundant chassis pair. EtherNet/IP communication modules are one of these catalog numbers: 1756-EN2T, 1756-EN2TXT, 1756-EN2TR, 1756-EN2F EtherNet/IP Network With firmware revision 19.052 and later, you can use an EtherNet/IP network for I/O and produced/consumed tags. With firmware revisions 16.081 and earlier, an EtherNet/IP network does not support I/O or produced/consumed tags. Enhanced redundancy systems support unicast produced tags. Unicast consumed tags are not supported in enhanced redundancy systems. USB ports of communication modules in the redundant chassis are not used while the system is running (online). IP addresses of devices on the EtherNet/IP network are static and IP address swapping is enabled.(1) EtherNet/IP Module

280

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Enhanced Redundancy System Checklists

Appendix F

Requirement HMI Blind Time is the time during a switchover from primary to secondary, when tag data from the controller is unavailable for reading or writing. See HMI Blind Time Reduction on Ethernet During a Switchover on page 21. IMPORTANT: This feature requires RSLinx Enterprise software, version 5.50.04 or later. PanelView Standard terminal None (the use of the PanelView Standard terminal in a redundant system requires the same considerations as a nonredundant system). PanelView Plus terminal, VersaView industrial computer running a Windows CE operating system RSLinx Enterprise software, version 3.0 or later, is used. Within each of the controllers and communication modules, five connections for each PanelView Plus or VersaView terminal are reserved. FactoryTalk View SE software with RSLinx Enterprise software RSLinx Enterprise software, version 3.0 or later is used. IP address swapping is used. HMI and both redundant chassis are on the same subnet. FactoryTalk View SE software with RSLinx software, version 2.x, RSView 32 software, Any other HMI client software that uses RSLinx software, version 2.x The number of RSLinx servers that a controller uses is limited to 14 (maximum).

EtherNet/IP HMI

(1) Other IP address configurations are permitted, but require additional considerations. For more information, see Use IP Address Swapping on page 77.

Project and Programming Checklist

In addition to the checklist below, see the ControlLogix Controller Checklist on page 279.

Requirement The Redundancy Module Date and Time has been set by using the RMCT. One project is created by using RSLogix 5000 software and is downloaded to the primary controller.(1) Redundancy is enabled within the Redundancy tab of the Controller Properties dialog box. Task configuration is either: One continuous task within the project. or Multiple periodic tasks with only one task at the highest priority. Also, multiple tasks are structured so that the fewest possible separate tasks are used. The redundant controller program does not contain: Event tasks. Inhibited tasks. Programming specific to critical I/O that must be bumpless is placed in the highest-priority user task according to your task configuration. If you use this task structure One continuous task One continuous task and one or more periodic tasks Multiple periodic tasks Then programming specific to bumpless I/O is in The continuous task. The highest-priority periodic task where only that one task is at the highest priority. The highest-priority periodic task where only that one task is at the highest priority.

For 1756-L6x controllers, the task watchdog is (2 * maximum_scan_time) + 150 ms when using ControlNet I/O and (2* maximum_scan_time) + 100 ms when using Ethernet I/O, where maximum_scan_time is the maximum scan time for the entire task to complete when the redundant controllers are synchronized. To calculate watchdog time for 1756-L7x controllers, see Minimum Value for the Watchdog Time on page 177.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

281

Appendix F

Enhanced Redundancy System Checklists

Requirement Scan time is minimized by using these techniques when possible: Unused tags are eliminated. Arrays and user-defined data types are used instead of individual tags. Redundancy data is synchronized at strategic points by using the Synchronize Data after Execution setting in the Program Properties dialog box. Programming is written as compactly and efficiently as possible. Programs are executed only when necessary. Data is grouped according to frequency of use. DINT tags are used instead of SINT or INT tags.

For produced/consumed data, the communication module in the remote chassis that holds the consuming controller uses the Comm Format: None. Critical messages from a remote chassis to redundant chassis use cached connections. Active tags on scan per controller are less than 10,000 tags/second.
(1) Note that the project loaded on the primary controller is automatically crossloaded to the secondary controller when sychronization occurs.

282

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Appendix

Enhanced Redundancy Revision History

Changes to This Manual

With the availability of new controllers, modules, applications, and RSLogix 5000 software features, this manual has been revised to include updated information. This appendix briefly summarizes changes that have been made with each revision of this manual. Reference this appendix if you need information to determine what changes have been made across multiple revisions. This may be especially useful if you are deciding to upgrade your hardware or software based on information added with previous revisions of this manual. This table lists the publication revision, publication date, and changes made with the revision.
Table 52 - History of Changes
Publication Revision and Date 1756-UM535C-EN-P, July 2012 Topic Updated features not supported Addend information about using signed and unsigned firmware Updated I/O modules in enhanced redundancy systems-revision 19.053 to the header for remote I/O module placement Added HMI Blind Time reduction on an EtherNet/IP network during a switchover Added information about enhanced communication modules and unicast connections Added restrictions when using firmware revision 19.052 versus 19.053 Added the 1756-L71, 1756-L73XT controllers, 1756-EN2F module, and 1756-A7XT chassis to the table of components available for use in a redundant chassis pair Listed power supplies available for a redundant chassis pair Corrected revision 19.052 to 19.053 Added or later to revision 19.052 here, and throughout the manual Added or later to revision 19.052 here, and throughout the manual, and chassis size to configuration requirements Added 1756-L71 controller for controller compatibility and updated revision information Rearranged EtherNet/IP and ControlNet networks sections; added 1756-EN2F module information Added remote chassis access restrictions using an EtherNet/IP network; added or later to revision 19.052 Added unicast functionality Added information about using a remote chassis access using a ControlNet network Added additional information about 1715 Redundant I/O Systems

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

283

Appendix G

Enhanced Redundancy Revision History

Publication Revision and Date

Topic Added firmware requirements for revisions 20.054 and 19.053Enh Added information to enhanced redundancy module quick start Added EDS files information Added communication module installation and1756-EN2F module information Updated controller installation information Updated redundancy module installation Updated fiber-optic communication cable connection Updated chassis firmware information Updated information on designating a primary and secondary chassis Updated information about conversion between nonredundant and redundant system Updated information to reset the redundant module Updated information on removing or replacing the redundant module Updated information about RPI being the same as a nonredundant chassis when using firmware revision 20.054 or later, and CPU usage information for Ethernet/IP communication modules Added information about unicast functionality in enhanced redundancy system remote controller Added socket support for the 1756-EN2F module for firmware revision 5.008 or later, and Unicast functionality with produced/consumed tags Updated information about downloading firmware bundle and determining RMCT version Updated information about 1756-L7x controller crossload time Added information about secured module mismatch Changed firmware revision information Updated MSG instructions information Updated minimum value for the Watchdog Time Changed firmware revision information Added memory usage slider Updated information for event log update Added information for Export diagnostics button Added 1756-L71 controller information Added 1756-EN2F module information Added how to upgrade Ethernet modules when rotary switches are set between 2254 Added how to upgrade from an enhanced redundancy system to another by using RSU Added software version 20 for an enhanced redundancy system Updated chassis configuration list to include 1756-L71 controller and 1756-EN2F communication module Updated information about produced unicast tags Updated information about I/O and multicast connections Updated controller checklist to add 1756-L71 controller Updated Watchdog time information

284

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Enhanced Redundancy Revision History

Appendix G

Publication Revision and Date 1756-UM535B-EN-P, December 2010

Topic Updates to EtherNet/IP network use in enhanced redundancy systems Support for 1756-A4LXT to chassis Support for 1756-L65 controller Support for 1756-L7x controllers(1) Improved scan time with 1756-L7x controllers when compared to the scan time with 1756-L6x controllers Corrected MSG attribute value to set the date and time for a 1756-RM redundancy module Support for Partial Import online Support for controller logging Updated status indicator information Updated system checklists

(1) Subsequent to revision B of this manuals release, the revision 19.052 firmware was replaced with revision 19.053 firmware for the 1756-L7x controllers.

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

285

Appendix G

Enhanced Redundancy Revision History

Notes:

286

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Index
1715 Redundant I/O systems 16, 18, 35, 44 1756-A7XT 24 1756-CN2/B 56 1756-CN2R/B 56 1756-CN2RXT 56 1756-CN2x modules 32 1756-EN2F 24, 242 1756-EN2T 56 sockets 85 1756-EN2TR 56 sockets 85 1756-EN2Tx modules 32 1756-EN2TXT 56 1756-L6x 279 1756-L6x controller 29 1756-L7x 30, 185, 279 1756-RM2/A 152 1756-L7x controller 29 1756-L7xXT 25 1756-RM status indicators 200 1756-RM and 1756-RMXT modules 31 1756-RM2/A 24, 57, 61 1756-L7x 152 compatible revisions 24 crossload 151 dual fiber ports 138 restrictions 22 RMCT 54 status indicators 200, 227 1756-RM2XT/A 24, 57, 61 compatible revisions 24 restrictions 22 status indicators 227

Numerics

A
Array (File)/Shift instructions 159 Auto-Synchronization 114

B
beacon 88 BOOTP/DHCP utility 86

C
calculate task watchdog 177 CH1 status indicators 229 CH2 status indicators 229

chassis 52, 55 designate 71 ID 115 install 54, 55 module placement 54 primary 19 redundant 24 secondary 19 chassis configuration list 277 CIP Sync technology 16, 35, 81-83 clearing a fault 129 communication EtherNet/IP delay 36 module connections 33 modules 32 communication module 52 replace 242 unicast 22 compatibility controller 30 compatible revisions 1756-RM2/A 24 1756-RM2XT/A 24 components enhanced redundancy system 24 overview 17 upgrade 240 concise, program 157 configuration controller 141 EtherNet/IP modules 85 HMI 46 remote I/O 44 RMCT determine if needed 106 software 49 Configuration tab 113-115 connections communication 33 controller 31 fiber-optic cable 63 continuous task execution 145 recommended 145 ControlFLASH 52, 69 controller 29 compatibility 30 configure redundancy 141 connections 31 differences between 1756-L6x and 1756-L7x controllers 29 enable user program 115 event in Event Log 226 installation 56 save project 102 status 201 troubleshoot nonredundant 225 use multiple 152 controller logging 189 controllers 25
287

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Index

ControlNet CPU usage 198 keeper crossload 102 keeper status 101 module check status 197 monitor CPU usage 198 network update time 95 node requirements 38-40 overview 38-?? produce/consume connections 93 redundant media 41 remote I/O 18 requirements 38-?? sample programs 198 schedule existing network 100 new network 98 troubleshoot keeper status 216 lost connection 220 unscheduled 97 ControlNet communication modules 56 conversion nonredundant to redundant 73 convert nonredundant to redundant 265-271 CPU usage Ethernet/IP 77 crossload 57 1756-RM2/A 151 ControlNet keepers 102 default 145 estimate 149 redundancy object attributes 150 redundant system 19 scan time 149

E
edit system event 137 EDS files 54 electrostatic discharge 58 elements of DLR network 87 enable user program control 115 enhanced redundancy system chassis 28 communication modules 32 components 17, 24 controllers 29 features 16 operations 19 power supply 34 quick start 51 redundancy modules 31 redundant power supplies 34 restrictions 22 using ControlNet 38-?? using EtherNet/IP 35-37 environmental considerations 51 Ethernet 52 HMI blind time 21 EtherNet/IP 1715 Redundant I/O systems 16 configure module 85 delay 36 device-level ring network 35 duplex setting 86 features available in system revision 19.052 only 35 IP address swapping 36, 77-79 modules 24 overview 42 produce/consume connections 35, 84 remote I/O 16, 18 requested packet interval 77 requirements 42 set address 86 troubleshoot lost connection 220 use of CIP Sync technology 35, 81-83 with HMI 46 Ethernet/IP CPU usage 77 EtherNet/IP communication modules 56 event classification 121 Event Log controller event 226 qualification events 74 RMCT 206 Event Log tab 120-129 clearing a fault 129 event classifications 121 export data for all events 127-128 export single event data 124-126 extended event information 123 execution continuous task 145 periodic task 147 export data for a single event 124-126

D
Data Highway Plus 43 date and time 115 designate primary chassis 71 designation chassis 71 conduct 19 qualification after 73 device-level ring network 35, 87 beacon interval 88 beacon timeout 88 DeviceNet 43 DLR ring node 88 supervisor node 87 DSwNP qualification status indicators 211 DSwP qualification status indicators 211 dual fiber ports 1756-RM2/A 138 duplex setting 86

288

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Index

export data for all events 127-128 export diagnostics button 214 export event log 124-128 extended event information 123

F
FactoryTalk software 16 features available in system revision 19.052 only 35 fiber-optic cable 67 connect 63 redundancy channels 65 fiber-optic communication cable 52 firmware 67 bundles 49 download 54 revision 49 signed and unsigned 17 update 67-71 firmware bundle 51 flash upgrade 67

IP address 52 BOOTP/DHCP utility 86 consecutive 78 plan 85 RSLinx communication software 86 RSLogix 5000 software 86 set 86 swap 78 swapping 36, 77-79 switches 86

K
keeper crossloads 102 status 101 mismatch 219 module status display 217 RSNetWorx for ControlNet software 217 unconfigured 218 valid 218 troubleshoot 216

L
laser radiation ports 60 log Recent Synchronization Attempts 117 System Event History 136 logic, scan-dependent 160

H
hardware install 54 HMI blind time Ethernet 21 Human-Machine-Interface (HMI) 46-48 use over ControlNet 47 use over EtherNet/IP 46

M
memory usage slider 185 1756-L7x 185 mode switch REM 68 Module Info tab 111-112 module placement chassis 54 module status display 192 monitor ControlNet sample programs 198 motion unsupported feature 17 MSG instruction 173 multicast I/O 278

I
1715 Redundant I/O systems 16, 35, 44 in enhanced redundancy system revisions 18 multicast 278 over EtherNet/IP network 16 placement 18, 44 install chassis 55 communication modules 56 controller 56 hardware 52, 54 power supply 54, 55 primary chassis 54-62 redundancy module 57 secondary chassis 63 software 53 installation instructions 62 I/O

N
network 97 ControlNet monitor CPU usage 198 overview 38-?? Data Highway Plus 43 device-level ring 35, 87 DeviceNet 42, 43 EtherNet/IP 42

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

289

Index

overview 35-37 keeper 101 keeper crossload 102 Remote I/O 42 schedule existing 100 new 98 Universal Remote I/O 43 update time 95 network update time 95 nonredundant controller 225 nonredundant to redundant conversion 73 nonredundant, convert from 265-271

online edits 182-188 finalize 186 reserve memory 187 retain edits 184 test edits 183 operations chassis designation 19 crossload 19 enhanced redundancy system 19 qualification 19 switchover 19 synchronization 19 optical ports 59

scan time 149 enable user control 115 finalize test edits 186 logic after switchover 170 maintain data integrity 159-162 manage tags 154 messages for redundancy commands 171175 monitor system status 190 obtain system status 168 online edits 182-188 optimize task execution 163-168 Partial Import Online 182 periodic task 167 reserve memory 187 scan time minimize 152-158 synchronization default 145 system overhead time slice 164 tags 154 task type 145 test edits 183 use concise 157 project save 102 PsDS qualification status indicators 211 PwNS qualifcation status indicators 211 PwQS qualification status indicators 211

P
Partial Import Online 182 periodic task 167 execution 147 recommended 145 power supplies 55 power supply 25, 34, 52 install 54, 55 redundant power supplies 34 primary 246 primary chassis 19 designate 71 designation 71-74 installation 54-62 produce/consume connections over ControlNet 93 over EtherNet/IP 35, 84 produced tags unicast 85 program crossload default 145

Q
QSwP qualification status indicators 211 qualification after designation 73 check in RMCT 194 check status 192 description of 19 status via RMCT 74 troubleshoot nonredundant controller 225 qualification status indicators 211 DSwNP 211 DSwP 211 PwDS 211 PwNS 211 PwQS 211 QSwP 211 qualify redundant module 74 quick start enhanced redundancy system 51

R
Recent Synchronization Attempts log 117 redundancy channels fiber-optic cable 65

290

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Index

redundancy firmware bundles bundles

redundancy firmware
252 redundancy module 31, 52 connect via fiber-optic cable 63 date and time 115 info 111-112 install 57 lost connection between modules 222 status indicators 227 troubleshoot missing 223 Redundancy Module Configuration Tab qualification status 74 Redundancy Module Configuration Tool 49, 105 additional configuration 106 check qualification 194 Configuration tab 113-115 Event Log tab 120-129 identify version 109 install 54 Module Info tab 111-112 open 107 Synchronization Status tab 119 Synchronization tab 116-119 System Event History tab 136 System Update tab 130-135 update 110 upgrade 252 redundancy modules replace 20, 264 redundancy object attributes for crossload time 150 redundancy system update RSU 250 redundant chassis 24 designate 71 example 26, 27 redundant fiber cable 64 redundant fiber ports single point of failure 16 redundant media ControlNet 41 redundant module qualify 74 remove 75 replace 75 reset 75 REM mode switch 68 remote 1715 Redundant I/O systems 35, 44 communication modules 43 I/O 16 ControlNet 18 EtherNet/IP 18, 35 placement 44

remote controller unicast 84 remove redundant module 75 replace redundancy modules 20, 264 redundant module 75 replace communication module 242 requested packet interval over EtherNet/IP 77 requirements 49 ControlNet 38-?? EtherNet/IP 42 firmware 49 reset redundant module 75 restrictions 22 1756-RM2/A 22 1756-RM2XT/A 22 enhanced redundancy system 22 revisions 241 ring node DLR 88 RIUP 58 RMCT 51, 105 1756-RM2/A 54 Event Log 206 troubleshoot 206 version 109 RMCT. See Redundancy Module Configuration Tool. rotary switches 244 RSLinx Classic 51, 251 shutdown 53 RSLinx communication software 49, 53, 86 RSLogix 5000 software 51, 86 use to troubleshoot 201 RSU redundancy system update 250

S
scan time best performance 152 concise programming 157 crossload 149 efficient crossloads 154-156 minimize 152-158 multiple controllers 152 number of programs 153 scan-dependent logic 160 schedule ControlNet 98 secondary 246 secondary chassis 19 designation 71-74 intallation 63 set IP address 86 SFP 230 small form pluggable 67 transceiver 67
291

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Index

shutdown RSLinx Classic 53 signed and unsigned firmware 17 SIL3 unsupported feature 17 single point of failure redundant fiber ports 16 small form pluggable SFP 67 sockets 1756-EN2T 85 1756-EN2TR 85 software 49 FactoryTalk Alarms and Events 50 FactoryTalk Batch 50 FactoryTalk View Site Edition 50 install 53 optional 50 Redundancy Module Configuration Tool 49 required 49 RSLinx communication software 49, 53, 86 RSLogix 5000 software 86 RSNetWorx for ControlNet 50 RSNetWorx for EtherNet/IP 50 RSView32 50 upgrade 241, 251 status of qualification 74 via module status display 192 status indicators 1756-RM 200 1756-RM2/A 200, 227 1756-RM2XT/A 227 CH1 229 CH2 229 redundancy module 227 use to troubleshoot 200 subnet 78 supervisor node DLR 87 switchover 19 description 20 example 133 locked attempts 135 logic after 170 monitor synchronization after 196 test 195 synchronization automatic synchronization 114 default 145 description of 19 monitor after switchover 196 Synchronization Status tab 119 Synchronization tab 116-119 attempts log 117 commands in 117 system qualification, system synchronization 19 system conversion 265

system event edit comment 137 save history 137 System Event History tab 136 system overhead time slice 166 optimize program 164 System Update commands abort system lock 132 initiate locked switchover 133 lock for update 131 System Update Lock Attempts 134 System Update tab 130-135 commands 131-133 Locked Switchover Attempts 135 System Update Lock Attempts 134

T
tags manage 154 task 147 continuous, execution 145 optimize execution 163-168 periodic 167 recommended 145 time and date 115 transceiver SFP 67 troubleshoot 199-226 check status indicators 200 controller event 226 EtherNet/IP lost connection 220 lost EtherNet/IP connection 220 missing redundancy module 223 qualification abort 225 redundancy module lost connection 222 missing 223 RMCT 206 synchronization keeper status 216 use RSLogix 5000 software 201 RSNetWorx for ControlNet software 217

U
unicast communication module 22 produced tags 85 remote controller 84 Universal Remote I/O 43 unscheduled ControlNet network 97 unsupported feature motion 17 SIL3 17 update RMCT 110 system commands 131-133 update firmware 52

292

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Index

upgrade components 240 firmware 67-71 Redundancy Module Configuration Tool 252 software 251 user comment 137 user program control 115 utilities BOOTP/DHCP 86

V
version RMCT 109

watchdog time 177, 281 workstation software 51

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

293

Index

Notes:

294

Rockwell Automation Publication 1756-UM535D-EN-P - November 2012

Rockwell Automation Support

Rockwell Automation provides technical information on the Web to assist you in using its products. At http://www.rockwellautomation.com/support, you can find technical manuals, technical and application notes, sample code and links to software service packs, and a MySupport feature that you can customize to make the best use of these tools. You can also visit our Knowledgebase at http://www.rockwellautomation.com/knowledgebase for FAQs, technical information, support chat and forums, software updates, and to sign up for product notification updates. For an additional level of technical phone support for installation, configuration, and troubleshooting, we offer TechConnectSM support programs. For more information, contact your local distributor or Rockwell Automation representative, or visit http://www.rockwellautomation.com/support/.

Installation Assistance
If you experience a problem within the first 24 hours of installation, review the information that is contained in this manual. You can contact Customer Support for initial help in getting your product up and running.
United States or Canada Outside United States or Canada 1.440.646.3434 Use the Worldwide Locator at http://www.rockwellautomation.com/support/americas/phone_en.html, or contact your local Rockwell Automation representative.

New Product Satisfaction Return

Rockwell Automation tests all of its products to ensure that they are fully operational when shipped from the manufacturing facility. However, if your product is not functioning and needs to be returned, follow these procedures.
United States Outside United States Contact your distributor. You must provide a Customer Support case number (call the phone number above to obtain one) to your distributor to complete the return process. Please contact your local Rockwell Automation representative for the return procedure.

Documentation Feedback
Your comments will help us serve your documentation needs better. If you have any suggestions on how to improve this document, complete this form, publication RA-DU002, available at http://www.rockwellautomation.com/literature/.

Rockwell Otomasyon Ticaret A.., Kar Plaza Merkezi E Blok Kat:6 34752 erenky, stanbul, Tel: +90 (216) 5698400

Publication 1756-UM535D-EN-P - November 2012

4.3 Programming - TopDownWorkflow - Exercise07
0% (1)
4.3 Programming - TopDownWorkflow - Exercise07
13 pages
EC GfxProgram UG
No ratings yet
EC GfxProgram UG
1,507 pages
Getting Started MODBUS SIMULATOR (Mdbus) FOR WINDOWS 95/98/NT/2000/XP Modicon, An AEG Company, Modicon Modbus Protocol Version
No ratings yet
Getting Started MODBUS SIMULATOR (Mdbus) FOR WINDOWS 95/98/NT/2000/XP Modicon, An AEG Company, Modicon Modbus Protocol Version
19 pages
Sylabus Spring2015 Robt308 IndustrialAutomation
No ratings yet
Sylabus Spring2015 Robt308 IndustrialAutomation
6 pages
BCM-MS TP
No ratings yet
BCM-MS TP
2 pages
Vendor Sample Projects PDF
No ratings yet
Vendor Sample Projects PDF
5 pages
Optix RTN 980 Product Introduction
No ratings yet
Optix RTN 980 Product Introduction
24 pages
Horizon Quantum, R1.3.7, Volume 2, Advanced Configuration Features, Version 1.7 PDF
No ratings yet
Horizon Quantum, R1.3.7, Volume 2, Advanced Configuration Features, Version 1.7 PDF
259 pages
Haiwell PLC Modules Introduce
No ratings yet
Haiwell PLC Modules Introduce
42 pages
Jy 997 D 66201 F
No ratings yet
Jy 997 D 66201 F
62 pages
Viewse Um006 - en e (113 224)
No ratings yet
Viewse Um006 - en e (113 224)
112 pages
Logix AOI For Modbus TCP - The Reynolds Company - Blog
No ratings yet
Logix AOI For Modbus TCP - The Reynolds Company - Blog
3 pages
CODESYS OPC UA PubSub SL - en
No ratings yet
CODESYS OPC UA PubSub SL - en
5 pages
8750 - Transmitter 2 English
No ratings yet
8750 - Transmitter 2 English
12 pages
Rectangular Connectors: FCN360 Series
No ratings yet
Rectangular Connectors: FCN360 Series
32 pages
SEL-3530 RTAC and HMI Setup Guide - 20111004
No ratings yet
SEL-3530 RTAC and HMI Setup Guide - 20111004
12 pages
APACS Architecture PDF
No ratings yet
APACS Architecture PDF
12 pages
ControlMaestro 2018 and Titanium Hardware Specifications
No ratings yet
ControlMaestro 2018 and Titanium Hardware Specifications
7 pages
MELSEC iQ-R Digital-Analog Converter Module User's Manual (Application)
No ratings yet
MELSEC iQ-R Digital-Analog Converter Module User's Manual (Application)
198 pages
P5_HMI_ConnectionManual_en_v1-0-2
No ratings yet
P5_HMI_ConnectionManual_en_v1-0-2
286 pages
Network Device Library - 12.04.00 (Released 8 - 2024)
No ratings yet
Network Device Library - 12.04.00 (Released 8 - 2024)
5 pages
GSM Control - User Manual
No ratings yet
GSM Control - User Manual
127 pages
CoDeSys Version 3.5 First Steps Ver. 1
No ratings yet
CoDeSys Version 3.5 First Steps Ver. 1
74 pages
PLC Panasonic FPX Ing
No ratings yet
PLC Panasonic FPX Ing
20 pages
As IEC 61131.2-2004 Programmable Controllers Equipment Requirements and Tests
No ratings yet
As IEC 61131.2-2004 Programmable Controllers Equipment Requirements and Tests
14 pages
PROFIBUS Slave Step7 2.1
No ratings yet
PROFIBUS Slave Step7 2.1
30 pages
ModbusRTUControl W ML1100 PDF
No ratings yet
ModbusRTUControl W ML1100 PDF
11 pages
6301!0!C - Manual Programare en
No ratings yet
6301!0!C - Manual Programare en
55 pages
Infi-Net Communication System
No ratings yet
Infi-Net Communication System
8 pages
AC500
100% (1)
AC500
68 pages
1756-pm006 - En-P - Sequential Function Charts
No ratings yet
1756-pm006 - En-P - Sequential Function Charts
82 pages
Multis Lm55 56
No ratings yet
Multis Lm55 56
100 pages
Vijeo Citect User Guide
100% (1)
Vijeo Citect User Guide
1,108 pages
Basic Instrumentation
No ratings yet
Basic Instrumentation
29 pages
Technical Information Tankvision NXA820, NXA821, NXA822
100% (1)
Technical Information Tankvision NXA820, NXA821, NXA822
16 pages
GFK 0256 D
No ratings yet
GFK 0256 D
458 pages
EcoStruxure Hybrid DCS Control Participant Services User Guide - Eng - EIO0000001524.13
No ratings yet
EcoStruxure Hybrid DCS Control Participant Services User Guide - Eng - EIO0000001524.13
100 pages
Programmable Logic Controllers: FA2J Series
No ratings yet
Programmable Logic Controllers: FA2J Series
2 pages
Healthcare Facilities: Open, Secure and Connected Solutions
No ratings yet
Healthcare Facilities: Open, Secure and Connected Solutions
8 pages
Wonderware Guide To InTouch® HMI Documentation
No ratings yet
Wonderware Guide To InTouch® HMI Documentation
14 pages
WAGO PFC200s With Codesys 35 60518884
No ratings yet
WAGO PFC200s With Codesys 35 60518884
12 pages
Connected Components Workbench™ Software Guide For Studio 5000 Logix Designer® Software Users
No ratings yet
Connected Components Workbench™ Software Guide For Studio 5000 Logix Designer® Software Users
46 pages
05 3BHS161561-612 MinLib Group Objects
No ratings yet
05 3BHS161561-612 MinLib Group Objects
142 pages
3500 - 42M Proximitor - Seismic Monitor Datasheet
No ratings yet
3500 - 42M Proximitor - Seismic Monitor Datasheet
20 pages
4.2 Programming - BottomUpWorkflow (OneStripe) - Exercise06
No ratings yet
4.2 Programming - BottomUpWorkflow (OneStripe) - Exercise06
11 pages
NetController II Install (30-3001-994 - D1 PDF
No ratings yet
NetController II Install (30-3001-994 - D1 PDF
10 pages
ControlMaestro e
No ratings yet
ControlMaestro e
1 page
Logix Hot Backup Code Generator Tool
No ratings yet
Logix Hot Backup Code Generator Tool
3 pages
TelePACE User and Reference Manual PDF
No ratings yet
TelePACE User and Reference Manual PDF
728 pages
569122g1 Manual Codesys
No ratings yet
569122g1 Manual Codesys
87 pages
Industry Process Demo ONG - v2
No ratings yet
Industry Process Demo ONG - v2
22 pages
The Modicon Quantum and Premium Make Way To The M580 EPAC - November 2016
No ratings yet
The Modicon Quantum and Premium Make Way To The M580 EPAC - November 2016
44 pages
07 Global Script en
No ratings yet
07 Global Script en
9 pages
OptiFlex OFHI CS
No ratings yet
OptiFlex OFHI CS
2 pages
Gs33l50e20-40e 003
No ratings yet
Gs33l50e20-40e 003
4 pages
Schneider Scadapack Controller Quick Start Manual
No ratings yet
Schneider Scadapack Controller Quick Start Manual
15 pages
BACnet Complete Self-Assessment Guide
From Everand
BACnet Complete Self-Assessment Guide
Gerardus Blokdyk
No ratings yet
DeviceNet The Ultimate Step-By-Step Guide
From Everand
DeviceNet The Ultimate Step-By-Step Guide
Gerardus Blokdyk
No ratings yet
Installing SQL Server 2012 Step by Step
From Everand
Installing SQL Server 2012 Step by Step
Stephen Thomas
No ratings yet
Controllogix Enhanced Redundancy System: User Manual
No ratings yet
Controllogix Enhanced Redundancy System: User Manual
254 pages
1756 Um535 - en P
No ratings yet
1756 Um535 - en P
254 pages
Controllogix 5570 Redundancy: User Manual
No ratings yet
Controllogix 5570 Redundancy: User Manual
192 pages
1756 Um535 en P Redundancy
No ratings yet
1756 Um535 en P Redundancy
192 pages
PCS7 PROFINET Devices Overview V1 1 en
No ratings yet
PCS7 PROFINET Devices Overview V1 1 en
2 pages
Assembly Features: Removable Terminals Blue
No ratings yet
Assembly Features: Removable Terminals Blue
3 pages
PCS7 PROFINET Blueprints DOC en
No ratings yet
PCS7 PROFINET Blueprints DOC en
87 pages
Eaton PCT - 208099
No ratings yet
Eaton PCT - 208099
13 pages
92 TarYarMinWai NgaThiTharPannPyit
No ratings yet
92 TarYarMinWai NgaThiTharPannPyit
119 pages
Siemens Techincal Consultant
No ratings yet
Siemens Techincal Consultant
1 page
Burner - Function - Blocks From SIEMENS
0% (1)
Burner - Function - Blocks From SIEMENS
118 pages
DLink Product Guide
No ratings yet
DLink Product Guide
44 pages
MidTerm Solution
No ratings yet
MidTerm Solution
4 pages
Vaiya Home POE Switch Comparison Tenda
No ratings yet
Vaiya Home POE Switch Comparison Tenda
2 pages
Professor Yashar Ganjali Department of Computer Science University of Toronto
No ratings yet
Professor Yashar Ganjali Department of Computer Science University of Toronto
56 pages
Lab Manual
No ratings yet
Lab Manual
97 pages
User Manual RadWin 1000
No ratings yet
User Manual RadWin 1000
124 pages
Spanning Tree Protocol
No ratings yet
Spanning Tree Protocol
30 pages
Ge Egd Manual
No ratings yet
Ge Egd Manual
47 pages
Made by Nathan Ong Midterm Quiz 2 /midterm Lab Quiz 2
No ratings yet
Made by Nathan Ong Midterm Quiz 2 /midterm Lab Quiz 2
4 pages
802.11 Protocol Stack and Physical Layer
100% (29)
802.11 Protocol Stack and Physical Layer
46 pages
GEE Reviewer Group 1 and 2
No ratings yet
GEE Reviewer Group 1 and 2
9 pages
Course 1
No ratings yet
Course 1
187 pages
MA5800T Product Description 02-2
No ratings yet
MA5800T Product Description 02-2
7 pages
CENTERLINE 1500 Medium Voltage Motor Control Centers: Selection Guide
No ratings yet
CENTERLINE 1500 Medium Voltage Motor Control Centers: Selection Guide
70 pages
MH201 IP Scenario Module Bus-Scs: - Key Card Management
No ratings yet
MH201 IP Scenario Module Bus-Scs: - Key Card Management
4 pages
A Quick Walk Around The Block With Podl: Dogs at The Ieee?
No ratings yet
A Quick Walk Around The Block With Podl: Dogs at The Ieee?
24 pages
Moxa Eds 508a MM ST Manual de Usuario
No ratings yet
Moxa Eds 508a MM ST Manual de Usuario
3 pages
Adapter User Guide
No ratings yet
Adapter User Guide
170 pages
Release Notes 2.8 (GA) Feb 2013 - RADWIN
No ratings yet
Release Notes 2.8 (GA) Feb 2013 - RADWIN
19 pages
4 7 Ethernet Concepts Exam Answers
No ratings yet
4 7 Ethernet Concepts Exam Answers
19 pages
Vendor: Cisco Exam Code: 200-125 Exam Name: Cisco Certified Network Associate
No ratings yet
Vendor: Cisco Exam Code: 200-125 Exam Name: Cisco Certified Network Associate
10 pages
Transformer Protection and Control RET615
No ratings yet
Transformer Protection and Control RET615
60 pages
TL sf1024
No ratings yet
TL sf1024
2 pages
Alarm NSN
No ratings yet
Alarm NSN
272 pages
OmniSwitch 6250 Datasheet EN
No ratings yet
OmniSwitch 6250 Datasheet EN
9 pages
PA Ky Thuat Tram Can 120 Tan
No ratings yet
PA Ky Thuat Tram Can 120 Tan
3 pages
Networking Notes For Interview
No ratings yet
Networking Notes For Interview
41 pages
Ethernet Physical Layer Transceiver - TI DP83867IR
No ratings yet
Ethernet Physical Layer Transceiver - TI DP83867IR
131 pages