ASIMON V3 en 2008-09 Software Manual 333155802DS02
ASIMON V3 en 2008-09 Software Manual 333155802DS02
AS-Interface
General Information 1
Installation of hardware
and software 2
Edition 09/2008
GWA 4NEB 333 1558 02 DS 02
Safety Guidelines
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
Danger
indicates that death or severe personal injury will result if proper precautions are not taken.
Warning
indicates that death or severe personal injury may result if proper precautions are not taken.
Caution
with a safety alert symbol, indicates that minor personal injury can result if proper precautions are not taken.
Caution
without a safety alert symbol, indicates that property damage can result if proper precautions are not taken.
Notice
without a safety alert symbol, indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will be
used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The device/system may only be set up and used in conjunction with this documentation. Commissioning and
operation of a device/system may only be performed by qualified personnel. Within the context of the safety notes
in this documentation qualified persons are defined as persons who are authorized to commission, ground and
label devices, systems and circuits in accordance with established safety practices and standards.
Prescribed Usage
Note the following:
Warning
This device may only be used for the applications described in the catalog or the technical description and only in
connection with devices or components from other manufacturers which have been approved or recommended by
Siemens. Correct, reliable operation of the product requires proper transport, storage, positioning and assembly as
well as careful operation and maintenance.
Trademarks
All names identified by ® are registered trademarks of the Siemens AG. The remaining trademarks in this
publication may be trademarks whose use by third parties for their own purposes could violate the rights of the
owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.
Siemens AG Order No.: GWA 4NEB 333 1558 02 DS 02 Copyright © Siemens AG 2006
Automation and Drives Edition 09/2008 Technical data subject to change
Postfach 48 48
90437 NÜRNBERG
GERMANY
Table of Contents
Table of Contents
1 General Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
1.1 About the ASIMON program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
1.2 Version information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
1.3 Explanation of symbols . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
1.4 Definition of terms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
1.5 Abbreviations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
2 Installation of hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.1 Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.1.1 Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.1.2 Connection between the AS-Interface safety monitor and the PC . . . . . . . . . . . . . . . . . . . . . . 13
2.2 Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
2.2.1 System requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
2.2.2 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
3 First steps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
3.1 Launching the program . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
3.2 Description of the user interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
3.2.1 The menu bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
3.2.2 The toolbar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
3.2.3 The status/info bar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
3.2.4 The work area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
3.3 Program settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
3.3.1 Setting the program language . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
3.3.2 Selecting the serial interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
4 Configuring the AS-Interface safety monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
4.1 Function of the AS-Interface safety monitor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
4.2 General procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
4.3 Creating and changing a configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
4.3.1 Monitoring devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
4.3.2 Logic devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
4.3.3 External device monitoring devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
4.3.4 Start devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
4.3.5 Output devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
4.3.6 System devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129
4.3.7 User devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
Note
A brief introduction to secure AS-Interface transmission can be found in the operating manual
of the AS-Interface safety monitor.
This version of the ASIMON configuration software has been developed for use under the
Microsoft® Windows 95/98/ME/NT/2000/XP/Vista® operating systems.
Function range
"Basic" "Enhanced"
1 Type 1 Type 3
Number of output circuits
2 Type 2 Type 4
"Basic" "Enhanced"
Number of functional devices at logic level 32 48
OR gates (inputs) 2 6
AND gates (inputs) no 6
Safe time function, switch-on and switch-off delay no yes
Function "button" no yes
Safety guard/module with debouncing no yes
Safety guard with lock no yes
Deactivation of functional devices yes yes
Reset of error condition yes yes
Diagnosis stop yes yes
Support of A/B technology for non-safe slaves yes yes
New functional devices (flip-flop, pulse on pos. edge, etc.) no yes
Dummy device (NOP) no yes
Notice
The new functions of software version 2.1 can only be used in combination with AS-Interface
safety monitors of version 2.12 and higher.
Version 3.0 of the ASIMON configuration software includes the following new features:
• Support of safe AS-Interface transmission for controlling safe AS-Interface actuators
• Coupling of multiple safe AS-i networks through the function of the safety monitor as a
safe input slave (only for new device types with safe AS-i output)
• Multi-window technology with graphical printout of the configuration for each window
• Circuit diagram display of the logical links from left to right
• Extension of the device library and restructuring of the monitoring devices
• New monitoring device: 2-channel dependent with filtering
• Definition of user-specific functional devices
• Manual input of code sequences
• Availability of the standard out bits of the safe slaves for operational switching tasks
(acknowledgements, validations, unlocking, etc.)
Notice
The new functions of software version 3.0 can only be used in combination with AS-Interface
safety monitors of version 3.0 and higher.
Compatibility
With version 3.0 of the ASIMON configuration software, old configurations from version 1 and
version 2 can be opened, edited and saved.
Note
ASIMON configuration files have the extension *.ASI (version 1 AS-Interface safety moni-
tors), *.AS2 (version 2 AS-Interface safety monitors) or *.AS3 (version 3 AS-Interface safety
monitors).
Note
This symbol indicates text which contains important information.
Output circuit
Consists of the two logically connected output switching elements.
OSSD
The safe AS-Interface components and functional devices assigned to an output circuit of the
AS-Interface safety monitor. They are responsible for releasing the machine element which ge-
nerates the hazardous movement.
Integrated slave
Component with which sensor and/or actuator functions are grouped together with the slave
into a unit.
Configuration operation
Operating state of the safety monitor in which the configuration is loaded and checked.
Master
Component for data transmission which controls the logical and temporal behaviour on the
AS-Interface line.
Protective operation
Operating state of the safety monitor in which the sensors are monitored and the output swit-
ching elements are switched.
Safety output
See output switching element.
Safe slave
Slave for connecting safe sensors, actuators and other devices.
Safety monitor
Component which monitors the safe slaves and the correct function of the network.
Slave
Component for data transmission; the master cyclically addresses this component by its
address. Only then does it generate an answer.
Standard slave
Slave for connecting non-safe sensors, actuators and other devices.
Synchronisation time
The maximum permissible temporal offset between the occurrence of two events which are
dependent on one another.
ON state
Switched on, logical "1", TRUE.
This state means that the device has agreed to validate the circuit, i.e. to activate the safe
switching outputs. Depending on the device type, various conditions must first be met.
OFF state
Switched off, logical "0", FALSE.
This state means that the device has not agreed to validate the circuit, i.e. it results in the
switching off of the safe switching outputs.
1.5 Abbreviations
AS-Interface Actuator Sensor Interface
2.1 Hardware
2.1.1 Prerequisites
To configure the AS-Interface safety monitor via a PC, you will need:
• an AS-Interface safety monitor type 1 … type 6
• the interface cable for connecting the PC and AS-Interface safety monitor
• a PC or a laptop with the following minimum requirements:
- an Intel® processor at Pentium® level
(or compatible models, e.g. AMD® or Cyrix®)
- a CD-ROM drive for installing from CD-ROM
- a mouse (recommended)
- a free RS 232 (serial) interface with 9-pin Sub-D connection
Notice
When using a USB-RS 232 interface converter or a serial interface card, communication pro-
blems may occur with the safety monitor.
To configure the AS-Interface safety monitor with ASIMON, you must connect your PC and the
AS-Interface safety monitor using the serial interface cable (available as accessory).
Caution
Use only the interface cable which is available as an accessory. The use of a different cable
may lead to data loss or damage to the connected AS-Interface safety monitor!
To connect, plug the interface cable end with the RJ45 connector into the 'CONFIG' socket on
the front of the AS-Interface safety monitor and the other end with the 9-pin Sub-D socket con-
nector to a free COM port (serial RS232 interface) on your PC.
Notice
If the connection between the AS-Interface safety monitor and the PC is already established
when the PC is started, the mouse cursor may move erratically about the screen.
Remedy:
• When starting the PC, unplug the connection cable between the PC and the safety moni-
tor.
• Change the start behaviour of the PC (see user documentation for the PC or that of the
operating system manufacturer).
2.2 Software
2.2.2 Installation
To install the configuration software, you need the installation CD-ROM.
Upon execution of the setup program setup.exe on the installation CD-ROM, a self-expla-
natory installation routine is started. After the installation, the program is ready to be started.
With an update installation, the setup program checks whether ASIMON version 2.x is already
installed on the PC. If a previous installation is detected, the setup program offers the option
of replacing the existing installation with version 3.0 or, as an alternative, creating a second
subfolder.
Note
Connect the interface cable to the PC and the safety monitor as described in chapter 2.1.2.
Switch on the power supply for the safety monitor before starting the configuration software.
Data transmission is otherwise not possible.
However, even if the safety monitor is not connected to the PC, you may still define device con-
figurations and save them on your PC or edit a previously stored configuration
2
3
Figure 3-1 User interface of the ASIMON configuration software after starting the software
Start Assistant
Note
In order to query the diagnostic information, the connected AS-Interface safety monitor must
be in protective operation.
If a connection to the AS-Interface safety monitor cannot be established on program startup
(no AS-Interface safety monitor connected, connected to wrong interface etc.) or if the connec-
ted AS-Interface safety monitor is in configuration operation, the Diagnostics option is deac-
tivated.
In this case, it is only possible to create a new configuration, load and edit a configuration which
has been stored on a data carrier or to search for errors (see chapter 6.2 "Troubleshooting and
error rectification").
Option Diagnostics
When you select the Diagnostics option, first a window opens with the following query. By
clicking Neutral, the diagnostic information of the connected AS-Interface safety monitor is
queried, even if no configuration is loaded in ASIMON.
Note
Querying the diagnostic information of an unknown configuration can take several minutes, as
the configuration of the connected AS-Interface safety monitor must be reconstructed in ASI-
MON. In this way you can load an unknown configuration without needing to exit protective
operation.
Note
The Information about monitor and bus window can be called up at any time. To do this, on
the Edit menu, select the Information about monitor and bus… menu item or click the
button.
Note
If a valid configuration has been loaded to or from an AS-Interface safety monitor, the time at
which the current configuration in the program was transmitted to the AS-Interface safety mo-
nitor is shown in the Download time window area.
In the Information monitor tab, you must enter a title for the configuration, select the opera-
ting mode, specify whether a safe AS-i output exists and specify the "Basic" or "Enhanced"
function range of the AS-Interface safety monitor.
Figure 3-3 Information about monitor and bus window, Information monitor tab
Configuration title
In this field, enter a title for the new configuration. The title may contain up to 63 characters.
Operating mode
You can select from three operating modes:
• one OSSD
for AS-Interface safety monitors of type 1 or type 3 with 1 OSSD (1 redundant safe relay
output)
• two independent OSSDs
for AS-Interface safety monitors of type 2 or type 4 with 2 independently functioning
OSSDs (2 redundant safe relay outputs)
Select this operating mode when you would like to configure two completely independent
shutdown modes.
• two dependent OSSDs
for AS-Interface safety monitors of type 2 or type 4 with 2 OSSDs (2 redundant safe relay
outputs) in which the second OSSD is dependent on the first (see chapter 4.3.5 "Output
devices").
Special switch-off functions are available in this operating mode.
Note
Prior to a subsequent change of operating mode, determine whether this operating mode is
compatible with the AS-Interface safety monitor type which you are using (see table 3-1).
AS-i output
Here, you specify whether the AS-Interface safety monitor which is to be configured has a safe
AS-i output and whether it is linked to a safe AS-i input. Furthermore, you also specify here
whether a safe actuator is connected or whether the AS-Interface safety monitor functions as
a safe input slave in a coupled AS-Interface network. In this case, you must specify the
AS-Interface address of the actuator or assign the safe input slave an AS-Interface address.
Function range
Here, enter the function range of the AS-Interface safety monitor which is to be configured. The
following table shows how the six device types of the AS-Interface safety monitor differ from
one another:
On the Information bus tab, you must enter the AS-Interface bus addresses of the used stan-
dard slave and the safety-oriented AS-Interface slaves which are present in this AS-Interface
network.
Figure 3-4 Information about monitor and bus window, Information bus tab
Notice
If you would like to operate two or more AS-Interface safety monitors on the same AS-Interface
bus, you must enter for all AS-Interface safety monitors all safe slaves on this AS-Interface bus
in the Information bus tab even when they are not monitored by the given AS-Interface safety
monitor.
With the Find button, you can also search the AS-Interface bus for slaves when the AS-Inter-
face safety monitor is in configuration operation.
Note
The AS-Interface slaves found when searching the AS-Interface bus are first all listed in the
Information bus tab as standard. You must then manually assign each as safe/standard!
If you clicked the Simulate slaves checkbox on the Diagnosis / Service tab, two or four bus
addresses are automatically assigned for the simulated slaves and the corresponding check-
box deactivated. In order to be able to activate Simulate slaves, the one or three addresses
which follow the monitor address must be free.
On the Diagnosis / Service tab, you can make service settings for Diagnosis stop and for Re-
set of error condition as well as configure the diagnostics via the AS-Interface bus.
Figure 3-5 Information about monitor and bus window, Diagnosis / Service tab
The Diagnosis stop function is activated by clicking the Activate: checkbox. This function is
used when a stop condition is fulfilled (specified AS-Interface standard/A/B slave is in the ON
state) to keep the devices in a ready state (diagnostics LED yellow, waiting for confirmation).
This does not occur with activated local acknowledgement. The diagnosis stop is level-sensi-
tive and is deactivated if the specified standard/A/B slave has no bus communication.
This function is very useful, for example, for detecting during very brief switch-off actions which
device, and, thus, which safe input slave caused the switch-off.
Note
For additional information on calling up diagnostic information see chapter "Diagnostics and
error handling" and chapter "Diagnostics via AS-Interface".
Figure 3-7 Reset of error condition sub-tab of the Diagnosis / Service tab
By selecting the Activate: checkbox, the global reset of error conditions via one of the stan-
dard/A/B slaves connected to the AS-Interface bus is activated.
If a device detects an error, the AS-Interface safety monitor enters the error state. The error
state is locked (error lock). With versions of the AS-Interface safety monitor before 2.0, the er-
ror state can be rectified only by resetting the AS-Interface communication or by resetting the
AS-Interface safety monitor by switching off and then switching back on the AS-Interface safety
monitor or by pressing the Service button on the AS-Interface safety monitor.
As of version 2.0 of the AS-Interface safety monitor, it is possible to differentiate the reset of
error conditions (Reset). Reset of error condition can be activated by an AS-Interface standard/
A/B slave, e.g. a button, and acts only on a device level. Thus, the complete safety monitor is
not reset, but rather only the device locked in the error. For a safety monitor with two indepen-
dent OSSDs, therefore, only that OSSD is reset in which the device locked in the error is con-
figured.
AS-Interface diagnosis
Monitor base address
You can assign an AS-Interface bus address for the AS-Interface safety monitor. In this case,
it is possible to query diagnostic information about the AS-Interface bus from your AS-Interface
master (e.g. the PLC). If you do not assign an AS-Interface bus address, the AS-Interface sa-
fety monitor functions strictly as a "listener", i.e. only as a monitor on the bus. It is not possible
to communicate with the safety monitor via AS-Interface in this case.
For assigned monitor base addresses, you can set under Data selection whether the dia-
gnostic data are to be output via AS-Interface sorted by OSSD or are to be left unsorted (all
devices) (see chapter 7).
Note
When performing diagnostics via the AS-i, the PLC is informed of the indices of the devices
which are switched off. Previously, if a device was added to or deleted from the configuration,
all subsequent indices were shifted. As a result, it was necessary for the user to modify the
diagnostics program in the PLC.
In the Edit menu of ASIMON version 2.1, you can now use the Device index assignment
menu item to freely assign the diagnosis indices to the devices for AS-Interface diagnostics
(see chapter 7.2 "Assignment of the AS-Interface diagnosis indices").
Simulate slaves
If less than four safe or unsafe AS-Interface slaves are connected to the AS-Interface bus, you
must set Simulate slaves to zero in order for the AS-Interface safety monitor to function
correctly.
The number of simulated slaves can be 1 (for large AS-Interface networks) or 3 (for small
AS-Interface networks).
Note
If Simulate slaves is set unequal to zero, either 1 or 3 additional AS-Interface slaves are
simulated internally. These slaves are automatically assigned the first or first three bus
address(es), respectively, which follow on the AS-Interface safety monitor.
If the Simulate slaves function is activated (number of simulated slaves: 1 or 3), the state of
the relay- and message outputs can be queried by the AS-Interface master (PLC) via the
AS-Interface at monitor base address+1, data bits D3 … D0. Bit state 0 identifies an inactive
output, bit state 1 an active output, corresponding to the substitute value in the process image
of the AS-Interface master.
According to this, the AS-Interface safety monitor occupies a different number of bus
addresses in the AS-Interface network:
Number of Meaning
occupied bus
addresses
0 No bus address was assigned to the AS-Interface safety monitor. No communi-
cation and, thus, no diagnostics possible via AS-Interface with the safety moni-
tor.
1 One bus address was assigned to the AS-Interface safety monitor. Diagnostics
possible via AS-Interface with the safety monitor. Number of simulated slaves
equal to 0.
2 One bus address was assigned to the AS-Interface safety monitor. Diagnostics
possible via AS-Interface with the safety monitor. Number of simulated slaves
equal to 1. State of relay- and message outputs can be accessed via AS-Inter-
face at monitor base address+1 (monitor version 2.12 and higher).
4 One bus address was assigned to the AS-Interface safety monitor. Diagnostics
possible via AS-Interface with the safety monitor. Number of simulated slaves
equal to 3. State of relay- and message outputs can be accessed via AS-Inter-
face at monitor base address+1 (monitor version 2.12 and higher).
Note
ASIMON configuration files have the extension *.ASI (version 1 AS-Interface safety moni-
tors), *.AS2 (version 2 AS-Interface safety monitors) or *.AS3 (version 3.x AS-Interface
safety monitors).
Note
If a connection to the AS-Interface safety monitor cannot be established on program startup
(no AS-Interface safety monitor connected, connected to wrong interface etc.) or if the connec-
ted AS-Interface safety monitor is in protective operation, the Load configuration from AS-In-
terface safety monitor option is deactivated.
In this case, it is only possible to create a new configuration, load and edit a configuration which
has been stored on a data carrier or to search for errors (see chapter 6.2 "Troubleshooting and
error rectification").
When you select the Load configuration from AS-Interface safety monitor option, the con-
figuration of the connected AS-Interface safety monitor is queried and displayed in the main
program window.
Checkbox Show dialog on startup
When this checkbox is activated, the Start Assistant is called up each time the ASIMON pro-
gram is started. If you do not wish to use this program feature, simply deactivate this checkbox
and the Start Assistant will no longer automatically be opened on program startup.
On the Extras menu under Use Start Assistant, you can reactivate or deactivate the automa-
tic call of the Start Assistant on program startup at any time.
Menu overview
File menu
Edit menu
Monitor menu
Extras menu
Window menu
Help menu
Note
Depending on the program state, particularly when no connection to an AS-Interface safety
monitor exists, not all menu commands are available.
Menu command
Menu command
Redo
Undo
The information on the monitor version in the centre has the following meaning:
CV - Configuration Validated
03.00E - safety monitor version
03 - number of safety outputs (00 = type1/type3, 01 = type2/type4, 02 = type5, 03 = type6)
25 - UART version
00 - free
90C4 - 4-digit code
Click the status/info bar in configuration operation to open a window with status information on
the connected AS-Interface safety monitor.
Note
You can switch between the new circuit diagram display (beginning with software version 3)
and the old tree structure display.
To do this, select the Extras –> Display options menu item or press <Ctrl> + <S> or
<Ctrl> + <T>.
The sizes of the individual windows can be adjusted to meet your needs as in other Windows®
programs.
Window
The work area may contain any number of windows. The functions in the Window menu are
available for arranging the windows.
As in the past, a device is inserted from the icon library using drag&drop. All windows are ini-
tially equal. A window becomes an OSSD window by inserting an output device. If all OSSDs
are defined by a separate configuration window, no further output devices can be inserted in
other windows.
In addition to the OSSD windows, which contain the actual configuration for an AS-Interface
safety monitor, you can use other windows to form substructures (sub-devices) and create
user devices.
Note
The Preprocessing window area familiar from previous software versions no longer exists.
For AS-Interface safety monitors of types 1 and 2 with "Basic" function range, the only possible
logic device available for the linking of two monitoring or system devices is the logic OR func-
tion.
In the 1st OSSD and 2nd OSSD windows, the monitoring devices (safe AS-Interface slaves),
start devices, external device monitoring devices, system devices, logic devices and output de-
vices are grouped into the desired configuration and linked to one another using the logical
AND function. Very complex functions can be created in this way.
Note
The view in the window is updated by pressing the <F5> key; i.e. the window contents are re-
drawn on the screen.
Operation
To paste devices from the icon library into the other windows, as well as to edit, delete, move
and copy devices between the windows, various options are available depending on your per-
sonal preference:
• With the mouse:
- by drag&drop from the icon library:
click device with the left mouse button, keep mouse button pressed, and move the de-
vice. Simultaneously press the <Ctrl> key for further options:
- If devices are pulled from the selection list to a window with the mouse, the device is
automatically inserted. If the <Ctrl> key is pressed before the mouse button is relea-
sed, the selected device replaces the device previously present at this position.
• using the right mouse button:
click device with right mouse button and select action from the pop-up menu. If necessary,
change to another window area, click the right mouse button again and select action.
• using menu commands:
click device with the left mouse button, on the Edit menu select one of the commands
Deactivate, Invert, Delete, Select, Paste, Move, Assign or Replace. If necessary, chan-
ge to another window area, click OSSD, Preprocessing, device or position and again click
a command on the Edit menu.
1 2 3
Click the output of a Pull the connection line ("rubber band")
device with the left to the input on the desired device and
mouse button and release the left mouse button.
hold down.
Device is
assigned to
the link
Note
If a monitoring device from an OSSD is to be assigned to a link in a new (non-OSSD window),
the link must first be created. After creating the link, select the monitoring device in the OSSD
(<Ctrl> + <C>) and assign it to the logic device in the new window (click the logic device and
press <Ctrl> + <A>).
Display options…
You can set with which informational content the devices are to be displayed in the windows
and the size in which the windows are printed out as graphics. To do this, on the Extras menu,
select the Display options… menu item or click the button.
In addition, you can globally set the type of configuration display for all windows here:
• new circuit diagram display (beginning with software version 3) –> tick in Circuit diagram
display.
• old tree structure display –> no tick in Circuit diagram display.
The Horizontal raster and Vertical raster values determine the distances between the indi-
vidual devices in the circuit diagram display. By setting the tick for Standard setting, the de-
fault values (h:100, v:50) for the device raster are restored.
You can specify the scaling for printing the active window as a graphic on the Printer tab.
Note
The Japanese characters can be displayed only if the operating system supports such
characters.
Notice
When using a USB-RS 232 interface converter or a serial interface card, the intermediate
buffering of data may cause communication problems with the safety monitor.
The AS-Interface safety monitor is a universally usable protective device and can, therefore,
be configured for a very wide range of applications.
In the first step of the evaluation, the states of all monitoring, logic and EDM devices are linked
to one another by means of a global logic AND function, i.e. only when all configured monito-
ring, logic and EDM devices have the ON state is the result of the AND function equal to ON.
In principle, the device states are evaluated in the same way as in an electrical safety circuit in
which all safety switch elements are connected in series and validation is possible only when
all contacts are closed.
In the second step, the start devices which determine the startup behaviour of the OSSD are
evaluated. A start device enters the ON state when the result of the global AND function from
the first step of the evaluation is equal to ON and when the respective start condition is fulfilled.
With regard to the start condition, the start devices have a lock. The start condition must the-
refore only be fulfilled once. A start device is reset (OFF state) when the result of the global
AND function from the first step of the evaluation returns the OFF state. The states of the start
devices used are linked to one another with an OR function, i.e. only one of the start devices
needs to be in the ON state in order for the internal validation of the circuit to occur.
In the third step, the output device is then analysed. If the circuit has been internally validated
(result of the OR function from the second step of the evaluation is equal to ON), the output
device switches the message and safe switching outputs of the OSSD in accordance with its
function characteristics and time behaviour, i.e. the relays trip and the switching contacts close
or the safe AS-Interface output is set.
Safe input
Index 32
Safe input
Index 33
Safe input
Index 34
Safe input
Index 37
OR
Index 38
External device
monitoring circuit
Index 39
> OR function
=1
Index 40
Start devices OR
Index 41
Safety
Output device switching output
Index 42 and/or
safe actuator
Figure 4-1 Order of events during the evaluation of the configured devices
Step 3 - Commissioning
After you have created a valid configuration, you can commission the AS-Interface safety mo-
nitor. The commissioning procedure is described in chapter 5.
Procedure
Select a device from the icon library and insert it into the window of the desired OSSD (see
“Operation” on page 30).
Note
Detailed information about which devices can be used with which configurations can be found
in the description of the individual devices.
When you insert the device into a window, the input mask for the device first opens. Here, you
can make all required entries for this device.
This includes information such as:
• designation (name) of the device within your application, e.g. "Lock gate1"
• type, e.g. "double channel forced"
• AS-Interface bus address
• additional device options which can be activated
• monitoring and delay times
After confirming your entries with the OK button, the device appears in the window of the re-
spective OSSD.
Note
The view in the window is updated by pressing the <F5> key; i.e. the window contents are re-
drawn on the screen.
Example:
Device designation
in quotation marks
Device symbol
Device index for the device
AS-Interface address
of the assigned slave
In addition to icon, designation and name, the respective device index for each device is spe-
cified. The index, which is automatically assigned by ASIMON for each configured device,
uniquely identifies each device, regardless of whether it has been configured for the first or se-
cond OSSD.
The index begins with 32 and increases incrementally by 1. Within the configuration log, each
configured device can be uniquely identified using the index.
Note
The display of the devices can be modified.
To do this, on the Extras menu select the Display options… menu item or click the button
(see chapter 3.2.4 "The work area").
Note
When performing diagnostics via the AS-i, the PLC is informed of the indices of the devices
which are switched off. Previously, if a device was added to or deleted from the configuration,
all subsequent indices were shifted. As a result, it was necessary for the user to modify the
diagnostics program in the PLC.
In the Edit menu of ASIMON version 2.1, you can now use the Device index assignment
menu item to freely assign diagnosis indices to the devices for AS-Interface diagnostics (see
chapter 7). When making the assignments, you can specify whether the diagnosis index range
is 0 … 47 or analogous to the device indices 32 … 79.
ASIMON automatically organises all devices of a configuration with respect to the device indi-
ces in the following order:
1. Monitoring and logic devices in any order
2. External device monitoring (EDM) devices (contactor monitoring)
3. Start devices
4. Output device
Upon insertion of a new device, the indices are correspondingly rearranged.
Note
A monitoring or logic device configured in the 1st OSSD can also be used in the 2nd OSSD
and vice versa.
You can define a device or a logical group of devices as a user device; this user device can
then very easily be used multiple times in the OSSDs.
Example:
To delete a device from the configuration, mark it with the mouse and then select the Delete
command from the Edit menu or the pop-up menu (right mouse button) or simply press the
<Delete> key.
To edit a device, double-click its icon to reopen its input mask. Here, you can edit all device
parameters. Alternatively, you can use the Device parameters… command in the Edit menu
or the Edit … command in the pop-up menu.
Note
These components are only available for the types of the AS-Interface safety monitor with en-
hanced function range (type 3 … type 6).
The monitoring to determine whether a safety guard is open or closed is performed by two pro-
tective switches. If this safety guard is opened or closed, the protective switches are not actu-
ated simultaneously. Moreover, the switches bounce, for example when the guard is closed
too fast. In the double channel dependent functional device with debouncing, it is, therefore,
also possible to specify a bounce time in addition to the synchronisation time. The bounce time
begins when both contacts close the first time. Within the specified bounce time, the switches
can change their state freely. After the bounce time has passed, both contacts are again que-
ried. If they are then closed and if the synchronisation time has not yet passed, the validation
is performed. The selected synchronisation time must be greater than the bounce time. If the
synchronisation time is exceeded, the start-test state results. The safety monitor also monitors
the switches to ensure that one of the two end positions "both switches open" or "both switches
closed" is always achieved.
The functional device for double channel, dependent components with debouncing can, thus,
be used for applications such as
• slow-action switch
• switches with high bounce times
Here, both the direct connection of an integrated AS-Interface slave as well as the connection
of a conventional device via a safe coupling module are possible. Local acknowledgement and/
or the startup test are available as options.
Double channel, dependent components with filtering
Note
These components are only available for the types of the AS-Interface safety monitor with en-
hanced function range (type 3 … type 6).
The monitoring to determine whether a safety guard is open or closed is performed by two pro-
tective switches. If this safety guard is opened or closed, the protective switches are not actu-
ated simultaneously. In addition, guard vibrations may result in short-term, single-channel
interruptions. This monitoring device can be used to "filter out" such interference without cau-
sing the system to be switched off. The user defines a synchronisation time, a stabilising time
and, if necessary, a tolerance time for short-term, single-channel interruptions. When switched
on, the protective switch may switch between all possible states (none, one, or both contacts
closed) during the synchronisation time.
If both contacts remain open for the duration of the stabilising time, the synchronisation time is
restarted when the contacts are again closed. If the protective switch is in an undefined state
for the duration of the stabilising time, the functional device switches to the locked error state.
Only if both contacts close within the synchronisation time and remain closed for the duration
of the stabilising time is the validation performed.
The functional device offers various possibilities for handling short-term, single-channel inter-
ruptions. Local acknowledgement and/or the startup test are available as options.
Note
These components are only available for the types of the AS-Interface safety monitor with en-
hanced function range (type 3 and type 4).
The monitoring to determine whether a safety guard is open or closed is performed by a pro-
tective switch with lock. One contact is switched by the protective switch, the second by the
lock monitor. If the lock is opened, the guard can also be opened. This sequence of events is
monitored. It is an error if the protective switch opens first.
Which contact is dependent on which can be freely selected in the double channel conditionally
dependent functional device. The dependent contact can be freely opened and closed as long
as the independent contact is not opened.
The functional device for double channel, conditionally dependent components can, thus, be
used for applications such as
• door switch with lock
Here, both the direct connection of an integrated AS-Interface slave as well as the connection
of a conventional device via a safe coupling module are possible.
Notice
As a result of the permissible, independent actuation, a loss of redundancy is not detected!
Notice
As a result of the permissible, independent actuation, a loss of redundancy is not detected!
Standard slave
Within an OSSD, it is also possible to use standard AS-Interface slaves in order to realise, by
means of their switching signals (inputs or outputs), an exclusively operational switching of the
safe switching outputs of the AS-Interface safety monitor in an OSSD.
Notice
The use of a standard slave device for safe switching tasks is not permitted!
Monitor input
Within the OSSDs or preprocessing, the input signals of the 2 or 4 inputs 1.Y1, 1.Y2 and
2.Y1, 2.Y2, respectively, of the AS-Interface safety monitor can also be used to implement
strictly operational switching of the safe switching output(s) of the AS-Interface safety monitor
in an OSSD.
Notice
The use of a monitor input device for safe switching tasks is not permitted!
Button
The Button device can be integrated within the OSSD or Preprocessing. The Button device
makes acknowledgement possible on the device level. As soon as the validation for the device
which is linked to the button is present, this device can be validated by actuating the button,
i.e. acknowledged.
With the aid of the Device button, it is possible, for example, to assign a common local
acknowledgement to multiple light barriers which have been linked together by an AND gate.
NOP
Dummies (NOP - No OPeration) can be used within an (OSSD) window to make the configu-
ration or the graphical display in ASIMON easier to organise or to create a sample configura-
tion to be used as a pattern for different configuration variants. An NOP dummy occupies an
index within the configuration. Each functional device can be replaced by an NOP dummy and
vice versa.
Notice
The use of a zero sequence detection device for safe switching tasks is not permitted!
Application icons
The safe monitoring devices generally differ from one another only in type, e.g. double channel
dependent. From an application perspective, a device of the same type can be used both as a
safety guard as well as for two-handed operation.
Described in the following are the safe monitoring devices organised according to type. In the
icon library, you must first select the application icon for the desired device and then select the
respective type in the input mask.
To the left of the application icon in the configuration window, the type icon (double channel
forced, double channel dependent, double channel independent, etc.) is displayed for all safe
monitoring devices in order to clearly represent the configuration with a practical perspective.
The input mask of the application icons offers all device options, even if e.g. a local acknow-
ledgement for a two-handed operation does not make much sense.
Device options
Many monitoring devices also possess, in addition to their safe switching behaviour, options
which can be used to realise more complex applications. These include:
Startup test
The startup test is used, for example, when the proper function of a safety guard is to be in-
spected prior to starting the machine. In this case, the startup test requires that the guard be
opened and closed again before the machine is started. Only then can the machine be started.
Local acknowledgement
Local acknowledgement is used, for example, when a safety guard is located in an area not
visible from the control desk. With local acknowledgement, acknowledgement (i.e. a confirma-
tion that no persons are present in this part of the machine) can only be performed from the
local operating desk.
In terms of the AS-Interface bus, an additional switching signal is linked to the monitoring de-
vice. Only if this switching signal was active is the monitoring device validated in the safety mo-
nitor. The switching signal for the local acknowledgement can be a standard slave, an A/B
slave or the non-safe OUT bits of a safe input slave whose AS-Interface bus address and bit
address must be specified.
Note
Certain time conditions apply to the arrival of the signals. These are illustrated using a safety
light barrier as an example:
1. Between the release of the safety light barrier and the actuation of the local acknow-
ledgement, at least 50ms must pass.
2. An actuation of the local acknowledgement is evaluated as valid when the switching
signal is present for a minimum of 50ms and a maximum of 2s.
3. After the local acknowledgement is released, the monitoring device is validated fol-
lowing a wait period of 50ms.
Note
The functional devices and their variants, e.g. double channel forced safety input with
startup test, included in the devices described below can be found in this form in the configu-
ration log of the AS-Interface safety monitor (see chapter 5.8 and examples of the respective
monitoring devices).
Icon
Functional device Double channel forced safety input
Parameter
Name: max. 29 ASCII characters plaintext
Address: AS-Interface bus address (1 … 31)
Start-up test: with / without
Local acknowledgement: with / also after startup / without
Slave type: standard/A/B slave
Address: AS-Interface bus address of the local acknowledgement
(1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Input mask
Description
With the double channel forced monitoring device, the switching signal of the respective safe
AS-Interface slave acts on all four bits of the transmission sequence.
Optionally, a startup test and/or a local acknowledgement are/is possible. Upon activation of
the Also acknowledge after startup checkbox, local acknowledgement is always mandatory
even after switching on the AS-Interface safety monitor or following a communication error
(warm start of the AS-Interface safety monitor).
Note
If only one contact opens/closes, after a tolerated transition time of 100ms the device switches
to the "Error" state.
Application icons
Emergency shutdown
Safety guard
Module - used to connect conventional safe switching elements via a safe AS-Inter-
face module.
Enabling switch
Key switch
Coupling - AS-Interface safety monitor of a coupled network which provides its valida-
tion information as a safe input slave for processing to this AS-Interface
network (no local acknowledgement possible).
Configuration logl
Example: Without startup test + with local acknowledgement also after startup
Icon
Functional device Double channel dependent safety input
Parameter
Name: max. 29 ASCII characters plaintext
Address: AS-Interface bus address (1 … 31)
Start-up test: with / without
Synchronisation time: 100ms … 30s in multiples of 100ms or ∞ (infinite)
Local acknowledgement: with / also after startup / without
Slave type: standard/A/B slave
Address: AS-Interface bus address of the local acknowledgement
(1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Input mask
Description
With the double channel dependent monitoring device, both switching signals of the respec-
tive safe AS-Interface slave each act on 2 bits of the transmission sequence. In this case, both
of the switching signals must arrive within a synchronisation time defined by the user. If only
one contact opens, the second contact must still open before both contacts can be closed
again.
Optionally, a startup test and/or a local acknowledgement are/is possible. Upon activation of
the Also acknowledge after startup checkbox, local acknowledgement is always mandatory
even after switching on the AS-Interface safety monitor or following a communication error
(warm start of the AS-Interface safety monitor).
Note
If the synchronisation time defined by the user is exceeded, the activation must be repeated.
If the synchronisation time is set to infinite (∞), the AS-Interface safety monitor does not grant
the validation until the second switching signal arrives.
Application icons
Emergency shutdown
Safety guard
Enabling switch
Key switch
Two-handed operation
(as per EN 574: with startup test, max. synchronisation time 500ms)
Caution
When using for two-handed operation, the corresponding application notes in the manufactu-
rer's documentation must be observed!
Configuration log
Example: Without startup test + with local acknowledgement also after startup
0040 INDEX: 35 = "Name" 0
0041 TYPE: 21 = double channel dependent safety input 1
0042 SUBTYPE: no startup test 2
0043 SUBTYPE: local acknowledge always ADDRESS: 21 BIT: In-0 invert 3
0044 ASSIGNED: channel one 4
0045 SAFE SLAVE: 5 5
0046 SYNC TIME: 0.100 Sec 6
Icon
Functional device Double channel dependent safety input with debouncing
Parameter
Name: max. 29 ASCII characters plaintext
Address: AS-Interface bus address (1 … 31)
Start-up test: with / without
Synchronisation time: 200 ms … 60s in multiples of 100ms or ∞ (infinite), default 0.5s
Bounce time: 100ms … 25s in multiples of 100ms
Local acknowledgement: with / also after startup / without
Slave type: standard/A/B slave
Address: AS-Interface bus address of the local acknowledgement
(1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Input mask
Description
With the double channel dependent with debouncing monitoring device, both switching si-
gnals of the respective safe AS-Interface slave each act on 2 bits of the transmission sequen-
ce. In this case, both of the switching signals must arrive within a synchronisation time defined
by the user.
For debouncing the contacts, a bounce time can be defined. During this time, the contacts are
not evaluated. The bounce time begins when both contacts close the first time. After the
bounce time has passed, both contacts are again queried. If they are then closed and if the
synchronisation time has not yet passed, the validation is performed. The selected synchroni-
sation time must be greater than the bounce time.
Note
The set bounce time is always allowed to pass. This means that if a bounce time of 10s is set,
then the device is validated no sooner than this time.
If only one contact opens, the second contact must still open before both contacts can be
closed again.
Note
If the synchronisation time defined by the user is exceeded, the activation must be repeated.
If the synchronisation time is set to infinite (∞), the AS-Interface safety monitor does not grant
the validation until the second switching signal arrives.
Optionally, a startup test and/or a local acknowledgement are/is possible. Upon activation of
the Also acknowledge after startup checkbox, local acknowledgement is always mandatory
even after switching on the AS-Interface safety monitor or following a communication error
(warm start of the AS-Interface safety monitor).
Application icons
Safety guard
Module - used to connect conventional safe switching elements via a safe AS-Interface
module.
Configuration log
It was developed for applications in areas with electrical interference as well as with vibrating
guards.
Icon
Functional device Double channel dependent safety input with filtering
Parameter
Name: max. 29 ASCII characters plaintext
Address: AS-Interface bus address (1 … 31)
Start-up test: with / without
Synchronisation time: 100 ms … 60 s in multiples of 100 ms or ∞ (infinite), default
0.5s
Stabilising time: 100 ms … 10 s in multiples of 100 ms
Short-term, single-channel
interruption: shutdown with test request/
shutdown without test request/
tolerancing without shutdown
Tolerance time: 100 ms … 1 s in multiples of 100 ms,
default 0.1s
Local acknowledgement: with / also after startup / without
Slave type: standard/A/B slave
Address: AS-Interface bus address of the local acknowledgement
(1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Input mask
Description
With the double channel dependent with filtering monitoring device, both switching signals
of the respective safe AS-Interface slave each act on 2 bits of the transmission sequence. The
user defines a synchronisation time, a stabilising time and, if necessary, a tolerance time.
When switched on, the protective switch may switch between all possible states (none, one,
or both contacts closed) during the synchronisation time.
If both contacts remain open for the duration of the stabilising time, the synchronisation time is
restarted when the contacts are again closed. If the protective switch is in an undefined state
for the duration of the stabilising time, the functional device switches to the locked error state.
Only if both contacts close within the synchronisation time and remain closed for the duration
of the stabilising time is the validation performed.
The functional device offers 3 possibilities for handling short-term, single-channel interrup-
tions.
• If the shutdown with test request is activated, the functional device always calls for re-
start with test request.
• If shutdown without test request is activated, the functional device calls for restart with
test request only for single channel interruptions which have lasted longer than the set to-
lerance time.
• If tolerancing without shutdown is selected, shutdown in the event of single channel in-
terruptions only occurs after the tolerance time has passed. Note here that the reaction
time is extended by the set tolerance time!
Notice
If tolerancing without shutdown is selected, shutdown in the event of single channel interrupti-
ons only occurs after the tolerance time has passed. The reaction time is extended by the set
tolerance time!
The set tolerance time in the "Tolerancing without shutdown" operating mode must not exceed
one tenth of the average time between two actuations of the monitored switch!
Example:
The shortest time between 2 opening operations of a safety guard is 5 s.
The set tolerance time in this case may be maximum 0.5 seconds.
Optionally, a startup test and/or a local acknowledgement are/is possible. Upon activation of
the Also acknowledge after startup checkbox, local acknowledgement is always mandatory
even after switching on the AS-Interface safety monitor or following a communication error
(warm start of the AS-Interface safety monitor).
Application icons
Safety guard
Module - used to connect conventional safe switching elements via a safe AS-Inter-
face module.
Configuration log
Example: Synchronisation time 0.3 s, stabilising time 0.2 s, shutdown with test
request
Icon
Functional device Double channel conditionally dependent safety input
Parameter
Name: max. 29 ASCII characters plaintext
Address: AS-Interface bus address (1 … 31)
Independent: Bit address of the independent contact (In-1 or In-2)
Input mask
Description
With the double channel conditionally dependent monitoring device, both switching signals
of the respective safe AS-Interface slave each act on 2 bits of the transmission sequence. In
order for the second, dependent switching signal to be accepted in this case, the first switching
signal must be present. Which contact is dependent on which can be freely selected. It is an
error if the second, dependent switching signal arrives before the first switching signal.
Example: A door switch with locking. One contact is operated by the door switch (independent
contact), the second by the lock monitor (dependent contact). Only if the door is closed, the
lock can be opened and closed. An opened door contact with the lock closed is an error.
Caution
Double channel conditionally dependent monitoring devices offer only limited safety, as they
cannot be checked for simultaneousness. Check carefully to ensure that the use of a double
channel conditionally dependent monitoring device fulfils the requirements of the desired sa-
fety category.
Application icons
Icon
Functional device Double channel independent safety input
Parameter
Name: max. 29 ASCII characters plaintext
Address: AS-Interface bus address (1 … 31)
Start-up test: with / without
Local acknowledgement: with / also after startup / without
Slave type: standard/A/B slave
Address: AS-Interface bus address of the local acknowledgement
(1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Input mask
Description
With the double channel independent monitoring device, the two switching signals of the re-
spective safe AS-Interface slave each act on 2 bits of the transmission sequence. In this case,
it is only necessary that both switching signals arrive. There is no synchronisation time.
Optionally, a startup test and/or a local acknowledgement are/is possible. Upon activation of
the Also acknowledge after startup checkbox, local acknowledgement is always mandatory
even after switching on the AS-Interface safety monitor or following a communication error
(warm start of the AS-Interface safety monitor).
Note
If the startup test option is selected, both switches must be open at all times during the test.
Moreover, a startup test must be performed following the reset of an error condition.
Caution
Double channel independent monitoring devices offer only limited safety, as they cannot be
checked for simultaneousness. Check carefully to ensure that the use of a double channel in-
dependent monitoring device fulfils the requirements of the desired safety category.
Application icons
Emergency shutdown
Safety guard
Enabling switch
Key switch
Configuration log
Standard slave
Icon or
Functional device Standard slave
Parameter
Name: max. 29 ASCII characters plaintext
Slave type: standard/A/B slave
Address: AS-Interface bus address (1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Input mask
Description
The standard slave monitoring device is used to integrate one bit (input or output) of a non-
safe, standard AS-Interface switching signal as an additional switching signal for operational
switching of the AS-Interface safety monitor relay(s) in an OSSD.
Note
With the input and output bits of a non-safe, standard AS-Interface slave, the process image
is always analysed, i.e. the ON state always means an active signal in the process image.
With the standard slave, the output bits of a slave address can also be used. In this way it is
possible to react to a signal from the controller as well. As of version 2.0 the slaves simulated
by the monitor can also be used for this purpose.
If the Inverted parameter is activated, the inverter icon precedes the icon for the standard sla-
ve device in the configuration.
Notice
The use of a standard slave device for safe switching tasks is not permitted!
Configuration log
Example:
0018 INDEX: 32 = "Name" 8
0019 TYPE: 23 = activation switch 9
0020 ASSIGNED: channel one 0
0021 ADDRESS: 21 BIT: In-0 noninv 1
Monitor input
Icon or
Functional device Monitor input
Parameter
Name: max. 29 ASCII characters plaintext
Monitor input: 1.Y1, 1.Y2, 2.Y1 or 2.Y2, inverted / not inverted
Input mask
Description
The monitor input monitoring device is used to link a signal to one of the inputs 1.Y1 through
2.Y2 of the AS-Interface safety monitor as an additional switching signal for operational
switching of the AS-Interface safety monitor relay(s) in an OSSD.
The state of the device corresponds to the level at the selected monitor input. In order to chan-
ge the state of the device, the level at the selected monitor input must remain stable for the
duration of three machine cycles. It is possible to invert the device state.
Note
A configuration which uses inputs 2.Y1 or 2.Y2 cannot be operated in a single channel
AS-Interface safety monitor.
If the Inverted parameter is activated, the inverter icon precedes the icon for the monitor input
device in the configuration.
Notice
The use of a monitor input device for safe switching tasks is not permitted!
Configuration log
Example:
0018 INDEX: 32 = "Name" 8
0019 TYPE: 28 = monitor input 9
0020 ASSIGNED: channel one 0
0021 INPUT: 1.Y2 invert 1
Button
Icon
Functional device Button
Parameter
Name: max. 29 ASCII characters plaintext
Slave type: standard/A/B slave
Address: AS-Interface bus address (1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Pulse length 5ms … 300s in multiples of 5ms or ∞ (infinite)
Input mask
Description
The Button device can be integrated within the OSSD or Preprocessing. The Button device
makes acknowledgement possible on the device level. As soon as the validation for the device
which is linked to the button is present, this device can be released by actuating the button, i.e.
acknowledged (device switches to the ON state). If the device is not validated before the
acknowledgement arrives, the device switches to the OFF state.
Note
This function requires that the button remain unactuated after the validation condition has been
fulfilled for at least 50ms and then be actuated for at least 50ms yet for no more than 2s. After
the button is released, the device switches to the ON state after an additional 50ms for the time
set under pulse length.
Configuration log
Example:
NOP
Icon
Functional device Dummy
Parameter
Name: max. 29 ASCII characters plaintext
State: ON or OFF
Input mask
Description
Dummies (NOP - No OPeration) can be used within one of the OSSDs or Preprocessing to
make the configuration or the graphical display in ASIMON easier to organise or to create a
sample configuration to be used as a pattern for different configuration variants. An NOP dum-
my occupies an index within the configuration. Each functional device can be replaced by an
NOP dummy and vice versa.
Note
With NOP devices, make certain that the status values are assigned correctly in the configu-
ration. In AND logic operations, NOP devices should be assigned the ON state; in OR logic
operations, on the other hand, they should assigned the OFF state.
Configuration log
Icon
Functional device Zero sequence detection
Parameter
Name: max. 29 ASCII characters plaintext
Address: AS-Interface bus address (1 … 31)
State: ON or OFF
Input mask
Description
The zero sequence detection monitoring device can be used to monitor whether both swit-
ches of a safe input slave are open. It is used to perform operational switching tasks. The de-
vice switches to the ON state when the value 0000 is continuously transmitted by the safe
slave. With zero sequence detection, safe input slaves which are included at a different point
in the configuration can also be monitored. And vice versa, the address selected for zero se-
quence detection for monitoring devices remains available.
Notice
In the event of a defect or error, e.g. insufficient voltage at the slave, the ON state can also be
achieved when both switches are closed. For this reason, it is not permitted to use a zero
sequence detection device for safe switching tasks!
Configuration log
Note
You can also link monitoring devices from the other OSSD by assigning them to a logic device.
For AS-Interface safety monitors of types 1 and 2 with "Basic" function range, the only possible
logic device available for the linking of two monitoring or system devices is the logic OR func-
tion.
Example 1:
In the example shown here, the OR logic device switches to the ON state (switched on) when
the active optoelectronic protective device "LG1" is in the ON state (switched on) or the safe
switching output of the second OSSD is activated (relay triggered) or both conditions are true.
Example 2:
OR
Note
For AS-Interface safety monitors of types 1 and 2 with "Basic" function range, the only possible
logic device available for the linking of two monitoring or system devices is the logic OR func-
tion.
Icon
Functional device OR gate
Parameter
Name: max. 29 ASCII characters plaintext
Input mask
Description
With the OR logic device, up to 6 monitoring or system devices are linked to one another via
the logic OR function.
The OR logic device is in the ON state when at least one of the linked devices has the ON
state.
Notice
In the configuration of the AS-Interface safety monitor, the same functional devices can be
used e.g. for a light barrier and an emergency-off switch. When configuring, you must pay at-
tention to which safety functions may and which may not be bridged.
An application which can make use of the OR logic device is, for example, a material lock in
which the machine may only be put into operation when at least one of the two lock gates is
closed.
Configuration log
Example: OR link
AND
Note
This logic device is not available for AS-Interface safety monitors of types 1 and 2 with
"Basic" function range.
Icon
Functional device AND gate
Parameter
Name: max. 29 ASCII characters plaintext
Input mask
Description
With the AND logic device, up to 6 monitoring or system devices are linked to one another via
the logic AND function.
The AND logic device only has the ON state when all linked devices have the ON state.
Configuration log
FlipFlop
Note
This logic device is not available for AS-Interface safety monitors of types 1 and 2 with "Basic"
function range.
Icon
Functional device R/S-flipflop
Parameter
Name: max. 29 ASCII characters plaintext
Input mask
Description
With the FlipFlop logic device, two monitoring or system devices are linked to one another via
the logic R/S-flipflop function.
The state of the FlipFlop logic device is calculated according to the following table:
Old output Set input (Set) Hold input (Hold) New output
any switched on (ON) switched on (ON) switched on (ON)
switched on (ON) any switched on (ON) switched on (ON)
switched off (OFF) any switched off (OFF) switched off (OFF)
other switched off (OFF)
Configuration log
Example:
Switch-on delay
Note
This logic device is not available for AS-Interface safety monitors of types 1 and 2 with "Basic"
function range.
Icon
Functional device Switching delay
Parameter
Name: max. 29 ASCII characters plaintext
Delay time: 5ms … 300s in multiples of 5ms
Input mask
Description
With the switch-on delay logic device, the switching on of a monitoring or system device can
be delayed by the adjustable delay time. The state of the switch-on delay logic device is cal-
culated according to the following table:
Configuration log
Example:
Switch-off delay
Note
This logic device is not available for AS-Interface safety monitors of types 1 and 2 with "Basic"
function range.
Notice
Note that the system reaction time can be lengthened as a result of the use of the
switch-off delay device.
Icon
Functional device Switching delay
Parameter
Name: max. 29 ASCII characters plaintext
Delay time: 5ms … 300s in multiples of 5ms
Input mask
Description
With the switch-off delay logic device, the switching off of a monitoring or system device can
be delayed by the adjustable delay time. The state of the switch-off delay logic device is cal-
culated according to the following table:
Configuration log
Example:
Icon
Functional device Pulse generator on positive edge
Parameter
Name: max. 29 ASCII characters plaintext
Pulse duration: 5ms … 300s in multiples of 5ms
Input mask
Description
With the Pulse on pos. edge logic device, an ON pulse with adjustable pulse duration is created
if a monitoring or system device changes state from OFF to ON.
The state of the Pulse on pos. edge logic device is calculated according to the following table:
Notice
While the ON pulse is present at the output, the input is not monitored, i.e. a change of the
input state during the ON pulse is not evaluated and has no effect on the ON pulse. The func-
tion of the device corresponds to a non-retriggering monoflop.
Notice
Even a short communication error on the AS-Interface line results in an ON pulse at the output!
Configuration log
Example:
Note
Multiple EDM devices can be integrated in an OSSD.
For example, with dynamic contactor monitoring, the motor contactors connected downstream
of the safety monitor for the potentially dangerous movement are connected to the safe swit-
ching outputs of the AS-Interface safety monitor. Via a feedback control loop, the state of the
contactors is monitored by the input contactor monitor on the AS-Interface safety monitor.
Note
Additional information about the electrical design and connection of a contactor monitor can be
found in the operating manual of the AS-Interface safety monitor.
Icon
Functional device External device monitoring circuit
Parameter
Name: max. 29 ASCII characters plaintext
Switching time: 10 … 1000ms, switching time of the contactor
Limited error lock: with / without
Input mask
Description
As long as the safe outputs are switched off, the input contactor monitor on the AS-Interface
safety monitor must be active = ON . After the safe outputs have been switched on (validation),
the input contactor monitor is not relevant for set switching time. Afterward, the input must be
inactive = OFF. The state of the contactor monitor is active = ON (switched on).
After the safe outputs have been switched off, the state of the contactor monitor returns to
inactive = OFF (switched off) and the input contactor monitor is not queried for the set
switching time. Afterward, the input contactor monitor must again be active = ON.
Contactor monitoring prevents the monitor from being switched back on for the duration of the
set switching time after it is switched off. This should allow all downstream contactors to reach
the idle state before contactor monitoring again queries the input signal, thereby preventing an
error lock.
Error lock
If the input is inactive when the safe outputs are switched off or active when the safe outputs
are switched on, the system switches to the error state and locks.
Note
With dynamic contactor monitoring with error lock, series connection of the contactor controller
with operational switches is not possible.
Notice
The combination of the dynamic contactor monitoring with limited error lock together with
automatic start is not permitted, as in this combination it is possible for the safe outputs of the
AS-Interface safety monitor to be continuously switched on and off.
Configuration log
Icon
Functional device External device monitoring circuit with standard slave
Parameter
Name: max. 29 ASCII characters plaintext
Switching time: 10 … 1000ms, switching time of the contactor
Limited error lock: with / without
Slave type: standard/A/B slave
Address: AS-Interface bus address (1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Input mask
Description
The external device monitoring circuit with standard slave is functionally identical to the normal
external device monitoring circuit.
As long as the safety outputs are switched off, the standard/A/B slave must be in the state
active = ON. After the safe outputs have been switched on (validation), the state of the stan-
dard/A/B slave is not relevant for set switching time. Afterward, the standard/A/B slave must
be in the inactive = OFF state again. The state of the contactor monitor is active = ON (swit-
ched on).
After the safe outputs have been switched off, the state of the contactor monitor returns to
inactive = OFF (switched off) and the state of the standard/A/B slave is not queried for the set
switching time. Afterward, the standard/A/B slave must be in the state active = ON again.
Contactor monitoring prevents the monitor from being switched back on for the duration of the
set switching time after it is switched off. This should allow all downstream contactors to reach
the idle state before contactor monitoring again queries the input signal, thereby preventing an
error lock.
Error lock
If the input is inactive = OFF when the safe outputs are switched off or active = ON when the
safe outputs are switched on, the system switches to the error state and locks.
Note
With dynamic contactor monitoring with error lock, series connection of the contactor controller
with operational switches is not possible.
Notice
The combination of the dynamic contactor monitoring with limited error lock together with au-
tomatic start is not permitted, as in this combination it is possible for the safe outputs of the
AS-Interface safety monitor to be continuously switched on and off.
Configuration log
Icon
Functional device External device monitoring circuit for dependent, second OSSD
Parameter
Name: max. 29 ASCII characters plaintext
Switching time: 10 … 1000ms, switching time of the contactor
Limited error lock: with / without
Input mask
Description
The external device monitoring circuit for a second, dependent OSSD is functionally identical
with a normal external device monitoring circuit. It monitors the downstream contactor on the
second channel, but acts on the validation of channel 1.
As long as the safe outputs are switched off, the input contactor monitor on the AS-Interface
safety monitor must be active = ON . After the safe outputs have been switched on (validation),
the input contactor monitor is not relevant for set switching time. Afterward, the input must be
inactive = OFF. The state of the contactor monitor is active = ON (switched on).
After the safe outputs have been switched off, the state of the contactor monitor returns to
inactive = OFF (switched off) and the input contactor monitor is not queried for the set swit-
ching time. Afterward, the input contactor monitor must again be active = ON.
Contactor monitoring prevents the monitor from being switched back on for the duration of the
set switching time after it is switched off. This should allow all downstream contactors to reach
the idle state before contactor monitoring again queries the input signal, thereby preventing an
error lock.
Error lock
If the input is inactive when the safe outputs are switched off or active when the safe outputs
are switched on, the system switches to the error state and locks.
Note
With dynamic contactor monitoring with error lock, series connection of the contactor controller
with operational switches is not possible.
Notice
The combination of the dynamic contactor monitoring with limited error lock together with
automatic start is not permitted, as in this combination it is possible for the safe outputs of the
AS-Interface safety monitor to be continuously switched on and off.
Configuration log
External device monitoring circuit with standard slave for dependent, second OSSD
Note
This EDM device can only be used in the 1st OSSD of a configuration with two dependent
output groups.
Icon
Functional device External device monitoring circuit with standard slave for dependent,
second OSSD
Parameter
Name: max. 29 ASCII characters plaintext
Switching time: 10 … 1000ms, switching time of the contactor
Limited error lock: with / without
Slave type: standard/A/B slave
Address: AS-Interface bus address (1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Input mask
Description
The external device monitoring circuit with standard slave for the second, dependent OSSD is
functionally identical with a normal external device monitoring circuit for the second, dependent
OSSD.
As long as the safety outputs are switched off, the standard/A/B slave must be in the state
active = ON. After the safe outputs have been switched on (validation), the state of the stan-
dard/A/B slave is not relevant for set switching time. Afterward, the standard/A/B slave must
be in the inactive = OFF state again. The state of the contactor monitor is active = ON
(switched on).
After the safe outputs have been switched off, the state of the contactor monitor returns to
inactive = OFF (switched off) and the state of the standard/A/B slave is not queried for the set
switching time. Afterward, the standard/A/B slave must be in the state active = ON again.
Contactor monitoring prevents the monitor from being switched back on for the duration of the
set switching time after it is switched off. This should allow all downstream contactors to reach
the idle state before contactor monitoring again queries the input signal, thereby preventing an
error lock.
Configuration log
Note
A start device can only be assigned to one OSSD. If, for example, both OSSDs are to be star-
ted with one button, a start device is to be configured for each OSSD. Both of the devices, ho-
wever, use the same button.
Automatic start
Icon
Functional device Automatic start
Parameter
Name: max. 29 ASCII characters plaintext
Input mask
Description
The "automatic start" start device requires no additional start condition. If the AND link for all
monitoring, logic and EDM devices of an OSSD returns the result ON, the "automatic start"
start device releases the OSSD via the respectively configured output device.
Danger
In the event of an automatic start, the OSSD switches on as soon as all conditions are fulfilled!
The machine can, in this case, start unexpectedly!
Configuration log
Example:
Note
The combination of the automatic start start device with other start devices is not useful, as
a start would occur in every case.
Icon
Functional device Monitored start - standard slave
Parameter
Name: max. 29 ASCII characters plaintext
Slave type: standard/A/B slave
Address: AS-Interface bus address (1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3
Input mask
Description
The "monitored start - standard slave" start device requires as additional start condition the ON
state of a standard/A/B slave on the AS-Interface bus (e.g. start button via AS-Interface stan-
dard slave module). If the AND link of all monitoring, logic and EDM devices of an OSSD re-
turns the result ON and start condition is fulfilled, the "monitored start - standard slave" start
device passes on the validation request to the output device.
Note
Between the occurrence of the ON state of the AND link of all monitoring, logic and EDM de-
vices of an OSSD and the activation of the standard/A/B slave, at least 50ms must pass. The
standard/A/B slave must be activated for at least 50ms and at most 2s. 50ms after activation
of the standard/A/B slave has concluded, the validation request is performed.
Configuration log
Example:
0027 INDEX: 33 = "Name" 7
0028 TYPE: 81 = manual start standard slave 8
0029 ASSIGNED: channel one 9
0030 ADDRESS: 10 BIT: In-0 noninv 0
Icon
Functional device Monitored start - monitor input
Parameter
Name: max. 29 ASCII characters plaintext
Input mask
Description
The "monitored start - monitor input" start device requires as additional start condition the ac-
tivation of the start input of the corresponding OSSD. If the AND link of all monitoring, logic and
EDM devices of an OSSD returns the result ON and the start condition is fulfilled, the "monito-
red start - monitor input" start device passes on the validation request to the output device.
Note
Between the occurrence of the ON state of the AND link of all monitoring, logic and EDM de-
vices of an OSSD and the activation of the start input, at least 50ms must pass. The start input
must be activated at least 50ms and at most 2s. 50ms after deactivation of the input, the va-
lidation request is performed.
Configuration log
Example:
Icon
Functional device Monitored start - safe input slave
Parameter
Name: max. 29 ASCII characters plaintext
Address: AS-Interface bus address (1 … 31)
Input mask
Description
The "monitored start - safe input slave" start device requires as additional start condition the
ON state of a safe input slave on the AS-Interface bus. If the AND link of all monitoring, logic
and EDM devices of an OSSD returns the result ON and the start condition is fulfilled, the "mo-
nitored start - safe input slave" start device passes on the validation request to the output de-
vice.
Note
Between the occurrence of the ON state of the AND link of all monitoring, logic and EDM de-
vices of an OSSD and the activation of the safe input slave, at least 50ms must pass. The safe
input slave must be activated for at least 50ms and at most 2s. 50ms after activation of the
safe input slave has concluded, the validation request is performed.
Configuration log
Example:
Icon
Functional device Activation via standard slave
Parameter
Name: max. 29 ASCII characters plaintext
Slave type: standard/A/B slave
Address: AS-Interface bus address (1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3
Input mask
Description
The activation via standard slave start device is used to implement a start function via an
AS-Interface input (Start signal) or an AS-Interface PLC output. Unlike the monitored start -
standard slave start device, this start device is not pulse-sensitive, but rather level-sensitive.
The start signal must be applied for at least 100ms before the device switches to the ON state
and sends the validation request to the output device.
Danger
Danger! Upon activation via a standard slave, the OSSD switches on as soon as all conditions
are fulfilled and the activating level is reached! When the level is frozen while in the activated
state, the machine can, thus, start unexpectedly!
Note
A combination with the automatic start start device is not permitted.
Configuration log
Example:
Icon
Functional device Activation via monitor input
Parameter
Name: max. 29 ASCII characters plaintext
Input mask
Description
The activation via monitor input start device is used to implement a start function via the mo-
nitor input. Unlike the monitored start - monitor input start device, this start device is not pul-
se-sensitive, but rather level-sensitive. The start signal must be applied for at least 100ms
before the device switches to the ON state and sends the validation request to the output de-
vice.
Danger
Upon activation via a monitor input, the OSSD switches on as soon as all conditions are fulfilled
and the activating level is reached! When the level is frozen while in the activating state, the
machine can, thus, start unexpectedly!
Note
A combination with the automatic start start device is not permitted.
Configuration log
Example:
Note
For two independent OSSDs, exactly one output device must be present for each OSSD.
For two dependent OSSDs, exactly one output device in the 1st OSSD establishes the depen-
dence.
The conversion of the logical to the physical switching state for relays, message outputs and
LEDs is then performed in the hardware of the AS-Interface safety monitor. A false switching
state in the hardware detected when reading the data back in also results in the switching of
the affected output device to the error state.
Symbol or
Functional device Stop category 1 - message and delayed relay output
Parameter
Name: max. 29 ASCII characters plaintext
Switch-off delay: 0s … 300s in multiples of 100ms
Input mask
Description
Upon validation of the circuit, ON state, the message output and the output circuit are simulta-
neously activated by the stop category 1 - message and delayed relay output output de-
vice. If the circuit is switched off, OFF state, the message output is switched off immediately
and the output circuit is switched off after the set switch-off delay has elapsed. The switch-off
delay can be set to values between 0s and 300s in increments of 100ms. The circuit can be
switched back on only after both output circuits have been switched off.
Notice
The message output is not safe. A safe maximum switch-off delay only exists for the output
circuits.
In the event of an internal error in the AS-Interface safety monitor, the output circuits are swit-
ched off immediately. For all other errors, e.g. communication interruption, the set switch-off
delay is retained.
Configuration log
Example:
Stop category 0
Note
This output device is available only for one OSSD or for two independent OSSDs.
Symbol or
Functional device Stop category 0
Parameter
Name: max. 29 ASCII characters plaintext
Input mask
Description
Upon validation of the circuit, ON state, the message output and the output circuit are simulta-
neously activated by the stop category 0 output device. If the circuit is switched off, OFF state,
the message output and the output circuit are switched off immediately without delay.
Note
In the event of an error in the AS-Interface safety monitor, the state of the message output is
undefined. The output circuit is switched off.
Configuration log
Example:
Parameter
Name: max. 29 ASCII characters plaintext
Switch-off delay: 0s … 300s in multiples of 100ms
Input mask
Description
Upon validation of the circuit, ON state, the output circuits (two relays each) of both OSSDs
are simultaneously activated by the stop category 1 - two relay outputs output device. If the
circuit is switched off, OFF state, the output circuit of OSSD 1 is switched off immediately
without delay. The output circuit of the dependent OSSD is switched off with the set switch-off
delay. The switch-off delay can be set to values between 0s and 300s in increments of 100ms.
The circuit can be switched back on only after both output circuits have been switched off.
Note
In the event of an internal error in the AS-Interface safety monitor, all output circuits are swit-
ched off immediately. For all other errors, e.g. communication interruption, the set switch-off
delay is retained.
Configuration log
Example:
Symbol / or
in the dependent OSSD
Functional device Door lock
Parameter
Name: max. 29 ASCII characters plaintext
Release time: 1s … 300 s in multiples of 1s
Unlocking device: with / without
Slave type: standard/A/B slave
Address: AS-Interface bus address (1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Input mask
Description
After the first output circuit is switched off, the second output circuit is switched on if the zero-
speed relays report that machine standstill has occurred. Zero-speed relays are to be assigned
as devices to the second output circuit.
In order to also facilitate the release of the door lock during communication disturbances and
other errors, the set delay time is adhered to for inactive zero-speed relays. This release time
is the time between the switching off of the first output circuit and the switching on of the se-
cond. The release time can be set between 1s and 300s in increments of 1s.
Before the first output circuit is switched on, the second must be switched off. If the validation,
ON state, is performed again before the second output circuit is switched on, the first output
circuit is switched back on and the second remains switched off.
Note
After the AS-Interface safety monitor is switched on, the second output circuit is inactive until
the monitored movement has come to a standstill, however for no longer than the duration of
the set release time.
Dummy
Assign the dummies for restart and reset of error condition the desired devices by using
drag&drop to move devices from the icon library onto the dummies.
Note
For an automatic restart, simply assign the restart dummy the TRUE system device.
Once the dummies are assigned the appropriate devices, you can make further settings for the
reset of error condition and for restart by reopening the input mask of the output device.
To do this, click the output device with the right mouse button, select the Edit command from
the pop-up menu which opens and click the AS-iS control tab in the input mask.
Input mask
In the Reset of error condition and Restart areas in the Help signals part of the window, you
can define in detail which signals result in an activation of the reset of error condition and in
restart of the safe actuator.
Available for selection for activating the reset of error condition are:
- Once on OFF --> ON
- Once on ON --> OFF
- Once on change of state
Available for selection for activating the restart are:
- Continuous while ON
- Continuous while OFF
- Continuous while ON and OFF
- Once on OFF --> ON
- Once on ON --> OFF
- Once on change of state
Define the events for activating the reset of error condition and restart and confirm your entry
with OK.
Configuration log
Door lock by means of zero-speed relay and delay time with stop category 1
Note
This output device is available only with two dependent OSSDs.
Parameter
Name: max. 29 ASCII characters plaintext
Release time: 1s … 250 s in multiples of 1s
Unlocking device: with / without
Slave type: standard/A/B slave
Address: AS-Interface bus address (1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Relay delay: 0s … 300s in multiples of 100ms
Input mask
Description
After the first output circuit is switched off, the second output circuit is switched on if the zero-
speed relays report that machine standstill has occurred. Zero-speed relays are to be assigned
as devices to the second output circuit.
In order to also facilitate the release of the door lock during communication disturbances and
other errors, the set delay time is adhered to for inactive zero-speed relays. This release time
is the time between the switching off of the first output circuit and the switching on of the se-
cond. The release time can be set between 1s and 250s in increments of 1s.
The first output circuit is switched off after the set relay delay time has elapsed; the correspon-
ding message output is switched off immediately (stop category 1). The message output of the
second output circuit is switched at the same time as the corresponding relay output.
Notice
The message output is not safe. A safe maximum switch-off delay only exists for the output
circuits.
In the event of an internal error in the AS-Interface safety monitor, the output circuits are swit-
ched off immediately. For all other errors, e.g. communication interruption, the set switch-off
delay is retained.
Before the first output circuit is switched on, the second must be switched off. If the validation,
ON state, is performed again before the second output circuit is switched on, the first output
circuit is switched back on and the second remains switched off.
Note
After the AS-Interface safety monitor is switched on, the second output circuit is inactive until
the monitored movement has come to a standstill, however for no longer than the duration of
the set release time.
Dummy
Assign the dummies for restart and reset of error condition the desired devices by using
drag&drop to move devices from the icon library onto the dummies.
Note
For an automatic restart, simply assign the restart dummy the TRUE system device.
Once the dummies are assigned the appropriate devices, you can make further settings for the
reset of error condition and for restart by reopening the input mask of the output device.
To do this, click the output device with the right mouse button, select the Edit command from
the pop-up menu which opens and click the AS-iS control tab in the input mask.
Input mask
In the Reset of error condition and Restart areas in the Help signals part of the window, you
can define in detail which signals result in an activation of the reset of error condition and in
restart of the safe actuator.
Available for selection for activating the reset of error condition are:
- Once on OFF --> ON
- Once on ON --> OFF
- Once on change of state
Available for selection for activating the restart are:
- Continuous while ON
- Continuous while OFF
- Continuous while ON and OFF
- Once on OFF --> ON
- Once on ON --> OFF
- Once on change of state
Define the events for activating the reset of error condition and restart and confirm your entry
with OK.
Configuration log
Symbol / or
in the dependent OSSD
Functional device Door lock
Parameter
Name: max. 29 ASCII characters plaintext
Release time: 1s … 300 s in multiples of 1s
Unlocking device: with / without
Slave type: standard/A/B slave
Address: AS-Interface bus address (1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Input mask
Description
After the first output circuit is switched off, the second output circuit is switched on after the
set delay time has elapsed. The delay time can be set between 1s and 300s in increments of
1s. Before the first output circuit is switched on, the second must be switched off.
If the validation, ON state, is performed again before the second output circuit is switched on,
the first output circuit is switched back on and the second remains switched off.
Note
After the AS-Interface safety monitor is switched on, the second output circuit is inactive for at
least the duration of the set release time.
Dummy
Assign the dummies for restart and reset of error condition the desired devices by using
drag&drop to move devices from the icon library onto the dummies.
Note
For an automatic restart, simply assign the restart dummy the TRUE system device.
Once the dummies are assigned the appropriate devices, you can make further settings for the
reset of error condition and for restart by reopening the input mask of the output device.
To do this, click the output device with the right mouse button, select the Edit command from
the pop-up menu which opens and click the AS-iS control tab in the input mask.
Input mask
In the Reset of error condition and Restart areas in the Help signals part of the window, you
can define in detail which signals result in an activation of the reset of error condition and in
restart of the safe actuator.
Available for selection for activating the reset of error condition are:
- Once on OFF --> ON
- Once on ON --> OFF
- Once on change of state
Available for selection for activating the restart are:
- Continuous while ON
- Continuous while OFF
- Continuous while ON and OFF
- Once on OFF --> ON
- Once on ON --> OFF
- Once on change of state
Define the events for activating the reset of error condition and restart and confirm your entry
with OK.
Configuration logl
Symbol / or
in the dependent OSSD
Functional device Door lock
Parameter
Name: max. 29 ASCII characters plaintext
Release time: 1s … 250 s in multiples of 1s
Unlocking device: with / without
Slave type: standard/A/B slave
Address: AS-Interface bus address (1 … 31)
Bit address: In-0 … In-3 or Out-0 … Out-3, inverted / not inverted
Relay delay: 0s … 300s in multiples of 100ms
Input mask
Description
After the first output circuit is switched off, the second output circuit is switched on after the
set delay time has elapsed. The delay time can be set between 1s and 250s in increments of
1s. Before the first output circuit is switched on, the second must be switched off.
The first output circuit is switched off after the set relay delay time has elapsed; the correspon-
ding message output is switched off immediately (stop category 1). The message output of the
second output circuit is switched at the same time as the corresponding relay output.
Notice
The message output is not safe. A safe maximum switch-off delay only exists for the output
circuits.
In the event of an internal error in the AS-Interface safety monitor, the output circuits are swit-
ched off immediately. For all other errors, e.g. communication interruption, the set switch-off
delay is retained.
If the validation, ON state, is performed again before the second output circuit is switched on,
the first output circuit is switched back on and the second remains switched off.
Note
After the AS-Interface safety monitor is switched on, the second output circuit is inactive for at
least the duration of the set release time.
Dummy
Assign the dummies for restart and reset of error condition the desired devices by using
drag&drop to move devices from the icon library onto the dummies.
Note
For an automatic restart, simply assign the restart dummy the TRUE system device.
Once the dummies are assigned the appropriate devices, you can make further settings for the
reset of error condition and for restart by reopening the input mask of the output device.
To do this, click the output device with the right mouse button, select the Edit command from
the pop-up menu which opens and click the AS-iS control tab in the input mask.
Input mask
In the Reset of error condition and Restart areas in the Help signals part of the window, you
can define in detail which signals result in an activation of the reset of error condition and in
restart of the safe actuator.
Available for selection for activating the reset of error condition are:
- Once on OFF --> ON
- Once on ON --> OFF
- Once on change of state
Available for selection for activating the restart are:
- Continuous while ON
- Continuous while OFF
- Continuous while ON and OFF
- Once on OFF --> ON
- Once on ON --> OFF
- Once on change of state
Define the events for activating the reset of error condition and restart and confirm your entry
with OK.
Configuration logl
Note
Within a configuration, system devices can only be used as auxiliary variables for the logical
linking of states in the logic devices.
State of output switching 2 = main output one State of the output switching element of OSSD 1
element 1
Negated state of output 18 = not main output one Negated state of the output switching element of
switching element 1 OSSD 1
State of output switching 3 = main output two State of the output switching element of OSSD 2
element 2
Negated state of output 19 = not main output two Negated state of output switching element of
switching element 2 OSSD 2
State of message output 1 4 = notify output one State of the message output of OSSD 1
Negated state of message 20 = not notify output one Negated state of the message output of OSSD 1
output 1
State of message output 2 5 = notify output two State of the message output of OSSD 2
Negated state of message 21 = not notify output two Negated state of the message output of OSSD 2
output 2
State of OSSD 1 6 = devices started one Result of the OR link of all start devices of OSSD 1
Negated state of OSSD 1 22 = not devices started one Negated result of the OR link of all start devices of
OSSD 1
State of OSSD 2 7 = devices started two Result of the OR link of all start devices of OSSD 2
Negated state of OSSD 2 23 = not devices started two Negated result of the OR link of all start devices of
OSSD 2
State of devices before 8 = dev before start one Result of the AND link of the states of all monito-
start 1 ring, logic and EDM devices of OSSD 1
Negated state of devices 24 = not dev before start one Negated result of the AND link of the states of all
before start 1 monitoring, logic and EDM devices of OSSD 1
State of devices before 9 = dev before start two Result of the AND link of the states of all monito-
start 2 ring, logic and EDM devices of OSSD 2
Negated state of devices 25 = not dev before start two Negated result of the AND link of the states of all
before start 2 monitoring, logic and EDM devices of OSSD 2
The user device is then displayed in a separate window with its components and in the confi-
guration windows as a single device and is added to the icon library by name.
The new symbol is now displayed in the configuration windows and in the icon library.
AS-Interface safety monitors starting with version 2.0 offer the possibility to activate and
deactivate devices. As a result, it is possible to configure all conceivable options in the safety-
relevant design of a machine. Through targeted deactivation of devices, the configuration can
be adapted to the actual situation.
Deactivating devices
Caution
Observe all safety regulations when you deactivate a device. This must only be performed by
an authorised safety technician.
When you select a device with the mouse and click the right mouse button, the following
pop-up menu opens:
Select the Deactivate command. In the window which opens, you specify under which condi-
tions the deactivated device is to be replaced in the configuration. To do this within an AND
device, select the value TRUE. This is in the top configuration level. To do this within an OR
device, select the value FALSE.
This device then always delivers the preset value regardless of whether the safe slave is in-
stalled on the bus.
This option can also be used for commissioning when the safe slave is not yet installed but
parts of the configuration are to be put into operation.
If the safe AS-Interface address of the device to be deactivated is no longer used in any other
device1), you can decide during deactivation how this address should be used:
1. Information about bus for address … Delete:
The address should be removed from the bus information (results in no check mark for this
address - neither under "Safe" nor "Standard") if the safe slave is also physically removed
from the AS-Interface bus.
2. Information about bus for address … Retain:
The address is retained as an unused safe address (results in a deselectable check mark
for this address in the "Safe" column) if the safe slave physically remains in the AS-Inter-
face bus.
1) Such multiple usage is, however, only possible with the "zero sequence detection" device.
Background:
As long as they remain on the bus, the code sequences of all safe slaves must be known to
the monitor for safety reasons. The code sequences are, therefore, also queried when tea-
ching the safe configuration (teach) in this case. If, on the other hand, a safe slave is removed
from the bus but not from the bus information, an error message which requests that the con-
figuration procedure be reperformed does not appear until teaching the safe configuration.
After deactivating a device, the device is displayed in grey. Within logic devices, deactivated
devices are represented with green-grey colour (value TRUE) or with red-grey colour (value
FALSE) depending on their value.
Deactivated device
Note
When you deactivate a logic device, you can no longer see the devices used within the logic
function, and you can also no longer display the logic device. When editing a deactivated de-
vice, you can only change the names and the value.
Activating devices
In order to reactivate a deactivated device, click the right mouse button on the deactivated de-
vice. The following pop-up menu opens.
Select the Activate command. The device is again displayed as a full-colour image.
The safe address is reset to "safe" upon activation in the bus information and marked as used
in the configuration. This is represented by greyed-out fields and a check mark which cannot
be deselected in the "Safe" column.
If the safe address of the deactivated device was removed from the bus information during de-
activation, it is first re-registered.
If, in the meantime, the address in question was assigned to a different, newly configured de-
vice, an address conflict may result. In this case, the input window of the device which is to be
activated appears together with an info window which is attached to the edge of the window.
Select either a different safe address from those which are available or ensure (after cancelling
activation) that the address of the deactivated device is again available.
To save a configuration, select either the Save or Save as… command from the File menu.
Configurations are saved in the accustomed Windows® manner.
Note
ASIMON configuration files have the extension *.ASI (version 1 AS-Interface safety moni-
tors), *.AS2 (version 2 AS-Interface safety monitors) or *.AS3 (version 3 AS-Interface safety
monitors).
Saving a configuration on a data carrier does not ensure a useful, correct and functioning con-
figuration. For further information, refer to chapter "Commissioning the AS-Interface safety
monitor"5.
5.1 Procedure
Caution
As the commissioning of the AS-Interface safety monitor involves safety-relevant worksteps,
the commissioning must be performed by the safety officer responsible for the application.
For reasons of safety, the commissioning of the AS-Interface safety monitor is performed step
by step according to a fixed procedure.
Note
By querying the diagnostic information of an AS-Interface safety monitor used in protective
operation, you can reconstruct an unknown configuration. See “Option Diagnostics” on
page 17.
Notice
The existing configuration on the AS-Interface safety monitor is overwritten during a new con-
figuration. If you are not certain whether this configuration will be needed again in the future,
please read it into ASIMON and save it to a data carrier before performing a new configuration.
If you would like to reconfigure the AS-Interface safety monitor, you must first change the
default password to a new password, which is known only to you as the safety officer (see
chapter 5.9 "Entering and changing the password").
Proceed as follows:
• If the AS-Interface safety monitor is in protective operation, you must first switch it to con-
figuration operation by clicking the button or by using the Stop command in the Monitor
(password protection) menu (see chapter 5.7 "Stopping the AS-Interface safety monitor").
• Then transfer the current configuration from ASIMON to the AS-Interface safety monitor
using the PC -> Monitor ... command (see chapter 5.3 "Transferring a configuration to the
AS-Interface safety monitor").
• Following successful transfer to the AS-Interface safety monitor, the configuration must be
taught in (teaching in the code sequence of the safe AS-Interface slaves to be monitored).
A dialog window appears after the configuration has been transferred, asking whether you
would now like to do this.
Note
To teach-in the safe configuration, the respective AS-Interface bus must be in full operation
and the safe AS-Interface slaves which are to be monitored should, if possible, be in the swit-
ched-on state (ON). Otherwise, the AS-Interface safety monitor cannot receive code se-
quences.
Alternatively, you can also enter the code sequences manually.
• Confirm the query "Would you like to teach the code sequences?" with the Yes button
or select on the Monitor menu the Teach safe configuration… command (see chapter
5.4 "Teach safe configuration").
• The code sequences are now taught in. If, due to the system design, not all of the safe
AS-Interface slaves which are to be monitored can simultaneously be set to the switched-
on state (ON), teaching in of the code sequences is repeated in steps until the code se-
quences of all of the slaves which are to be monitored have been read in correctly. To do
this, set all of the safe AS-Interface slaves which are to be monitored to the switched-on
state (ON) in sequence. Alternatively, you can also enter the code sequences manually.
If the code sequences of all safe AS-Interface slaves which are to be monitored could reliably
be read in, the provisional configuration log is then immediately transferred to ASIMON for re-
view by the safety officer responsible for the application.
Notice
By validating the configuration, you confirm as safety officer that the system is set up correctly
and all safety-relevant regulations and standards for the application have been adhered to. To
do this, select from the Monitor menu the Validate… command (see chapter 5.5 "Validating
the configuration").
Following validation of the AS-Interface safety monitor configuration, the final configuration log
must be transferred to ASIMON as part of the application documentation to be maintained by
the responsible safety officer.
Print out this log and file it together with the other safety-relevant documentation for your ap-
plication. In addition, you can also save the log as a text file. The structure of the configuration
log is described in detail in chapter 5.8.
Upon successful conclusion of the data transmission from the AS-Interface safety monitor, the
configuration is available in ASIMON for further editing.
If an error occurs during the data transmission, an error message is output.
Upon successful conclusion of the data transmission to the AS-Interface safety monitor, the
configuration is stored in the AS-Interface safety monitor.
If an error occurs during the data transmission, an error message is output.
Note
Additional information on code sequences and secure AS-Interface transmission can be found
in the operating manual for the AS-Interface safety monitor.
Before teaching-in the safe configuration, you must commission the AS-Interface bus including
all safe AS-Interface slaves which are to be monitored and, where possible, set all safe AS-In-
terface slaves which are to be monitored to the switched-on state (ON).
If, due to the system design, not all of the safe AS-Interface slaves which are to be monitored
can simultaneously be set to the switched-on state (ON) (e.g. for a wicket gate in a material air
lock in which a switch with safe AS-Interface slave is located at each of the end positions), te-
aching in of the code sequences is repeated in steps until the code sequences of all of the sla-
ves which are to be monitored have been read in correctly. To do this, set all of the safe
AS-Interface slaves which are to be monitored to the switched-on state (ON) in sequence.
To teach-in the code tables, select from the Monitor menu the Teach safe configuration…
command or confirm when prompted "Would you like to teach the code sequences?" with
the Yes button.
The code tables are then taught in by the AS-Interface safety monitor. The teaching-in process
takes several seconds. The progress is displayed in a window.
If not all of the safe AS-Interface slaves which are to be monitored can be set to the switched-
on state (ON) simultaneously, the following window appears in which the progress of the tea-
ching process is graphically depicted.
Now, one after the other, set all safe AS-Interface slaves whose code sequences could not
previously be read to the switched-on state (ON) for several seconds. The configuration is con-
tinuously read by the AS-Interface safety monitor. The display of the safe AS-Interface slaves
which have already been taught and those which still need to be taught is updated constantly.
As an alternative to this, you can also manually enter the code sequence of a safe AS-Interface
slave. To do this, double-click the checkbox of the respective safe AS-Interface slave in the CT
column (code table). The following window for manual input of the code sequence opens.
Enter the correct code sequence and confirm your entry with OK.
Upon successful conclusion of the teaching process or after entering all code sequences, click
OK. Immediately afterward, the preliminary configuration log is transmitted to ASIMON.
Note
In the Incremental teach window, switch states S1 and S2 are displayed for the respective
slaves in addition to the teach state. In this way, you can also detect possible device malfunc-
tions or communication faults from a single screen.
Incremental teaching of the code sequences also functions with older AS-Interface safety mo-
nitor models, but takes longer as the entire configuration must always be loaded into the safety
monitor between two successive teach operations.
The progress of the transmission of the provisional configuration log is displayed in a window.
An info window then prompts you to have the configuration reviewed by the safety officer re-
sponsible for the application using the configuration log.
Note
The configuration log is always written in English.
You can print out this provisional configuration log and/or store it as a file, as long as the pro-
tocol window remains open. To do this, select on the Monitor menu in the Configuration log
submenu the appropriate command.
With the Save as… command, the standard Windows® dialog window for saving files is
opened; with the Print… command, the file is printed directly on the set printer.
After you have successfully checked the configuration using the provisional configuration log,
you can validate the configuration in the AS-Interface safety monitor.
To validate a configuration, select on the Monitor menu the Validate… command. A dialog
box appears in which you can validate a configuration by entering your name and the pass-
word.
2 … 8 alphanumerical characters;
A … Z, a … z, 0 … 9
4 … 8 alphanumerical characters;
A … Z, a … z, 0 … 9, default: "SIMON"
Note
Configuration validation is, as are several other safety-relevant commands, password protec-
ted. The default password of a brand-new AS-Interface safety monitor is "SIMON". You must
change this default password to a password known only to the safety officer responsible for
the application (see chapter 5.9 "Entering and changing the password").
Confirm your entry with the OK button. An info window then confirms successful validation of
the configuration.
Validation information:
- date and time
- name
- code
Note
Following successful validation, save the configuration again on the PC. In this way you ensure
that the download time and the taught-in code sequences are also stored in the configuration
file and the ASIMON diagnostics recognise the correct configuration.
Note the validation information in addition to the password, however, in a different location.
Using this information, the manufacturer can generate a generic password which can be used
to re-enable the AS-Interface safety monitor should the password be lost.
The validation information can also be found in line 10 of the final configuration log.
Immediately afterward, the final configuration log is transmitted to ASIMON. The progress of
the transmission of the final configuration log is displayed in a window.
Note
The configuration log is always written in English.
You can print out the final configuration log and/or store it as a file. To do this, select on the
Monitor menu in the Configuration log submenu the appropriate command.
With the Save as… command, the standard Windows® dialog window for saving files is
opened; with the Print… command, the file is printed directly on the set default printer.
The change from protective operation to configuration operation is then possible only by
means of a Stop command (see chapter 5.7 "Stopping the AS-Interface safety monitor").
Note
When replacing a defective safe input slave, it is possible to change from protective operation
to configuration operation even without a connected PC by using the AS-Interface safety mo-
nitor service button. Further information can be found in the operating manual for the AS-Inter-
face safety monitor.
Note
The configuration log is always written in English.
0000 **************************************************************************0
0001 CONFIGURATION AS-INTERFACE SAFETY MONITOR 1
0002 IDENT: "Configuration 1" 2
0003 **************************************************************************3
0004 MONITOR SECTION 4
0005 **************************************************************************5
0006 MONITOR VERSION: 03.00 enhanced 6
0007 CONFIG STRUCTURE: 02.01 7
0008 PC VERSION: 02.03 8
0009 DOWNLOAD TIME: 2007/09/10 12:54 9
0010 VALIDATED: 2007/09/10 12:54 BY: "SIMON" CODE: CCB5 COUNT: 0011 0
0011 MONITOR ADDRESS: 28 - 31 DIAGNOSIS: all devices 1
0012 MODE: two independent output groups 2
0013 DIAG FREEZE: no 3
0014 ERROR UNLOCK: no 4
0015 OUTPUT CH1: relais 5
0016 OUTPUT CH2: relais, AS-i CODE: 16 CD A9 E5 6
0017 **************************************************************************7
0018 DEVICE SECTION 8
0019 **************************************************************************9
0020 NUMBER OF DEVICES: 8 0
0021 --------------------------------------------------------------------------1
0022 INDEX: 32 = "NA 1" 2
0023 TYPE: 20 = double channel forced safety input 3
0024 SUBTYPE: no startup test 4
0025 SUBTYPE: no local acknowledge 5
0026 ASSIGNED: channel one 6
0027 SAFE SLAVE: 1 7
0028 --------------------------------------------------------------------------8
0029 INDEX: 33 = "NA 3" 9
0030 TYPE: 20 = double channel forced safety input 0
0031 SUBTYPE: no startup test 1
0032 SUBTYPE: no local acknowledge 2
0033 ASSIGNED: channel one 3
0034 SAFE SLAVE: 2 4
0035 --------------------------------------------------------------------------5
0036 INDEX: 34 = "NA 2" 6
0037 TYPE: 20 = double channel forced safety input 7
0038 SUBTYPE: no startup test 8
0039 SUBTYPE: no local acknowledge 9
0040 ASSIGNED: channel two 0
0041 SAFE SLAVE: 4 1
0049 --------------------------------------------------------------------------9
0050 INDEX: 36 = "S 2" 0
0051 TYPE: 81 = manual start standard slave 1
0052 ASSIGNED: channel two 2
0053 ADDRESS: 10 BIT: In-1 noninv 3
0101 **************************************************************************1
0102 INFO SECTION 2
0103 **************************************************************************3
0104 INACTIVE: none 4
0105 **************************************************************************5
0106 VALIDATED: 2007/09/10 12:54 BY: "SIMON" CODE: CCB5 COUNT: 0011 6
0107 END OF CONFIGURATION 7
0108 **************************************************************************8
Note
The detailed descriptions of the devices as well as an example of their respective entries in the
configuration log can be found in chapter 4.3.
Explanation of the table entries for the AS-Interface bus address assignments
0000 **************************************************************************0
0001 CONFIGURATION AS-INTERFACE SAFETY MONITOR 1
0002 IDENT: "Configuration 1" 2
0003 **************************************************************************3
0004 MONITOR SECTION 4
0005 **************************************************************************5
0006 MONITOR VERSION: 02.12 enhanced 6
0007 CONFIG STRUCTURE: 02.01 7
0008 PC VERSION: 02.02 8
0009 DOWNLOAD TIME: 2005/08/05 19:07 9
0010 NOT VALIDATED 0
0011 MONITOR ADDRESS: 28 - 31 DIAGNOSIS: all devices 1
0012 MODE: two independent output groups 2
0013 DIAG FREEZE: no 3
0014 ERROR UNLOCK: no 4
0015 OUTPUT CH1: relais 5
0016 OUTPUT CH2: relais, AS-i CODE: 16 CD A9 E5 6
0017 **************************************************************************5
:
:
A provisional configuration log can be identified by the entry "NOT VALIDATED" in line 10
:
:
0075 **************************************************************************5
0076 SUBDEVICE SECTION 6
0077 **************************************************************************7
0078 ADDRESS: 1 used standard 8
0079 ADDRESS: 2 used safety input CODE: 00 00 00 00
9
0080 ADDRESS: 3 no entry 0
0081 ADDRESS: 4 no entry 1
:
:
:
0107 ADDRESS: 30 no entry 7
0108 ADDRESS: 31 no entry 8
0109 **************************************************************************9
0110 INFO SECTION 0
0111 **************************************************************************1
0112 INACTIVE: none 2
0113 **************************************************************************3
0114 NOT VALIDATED 4
0115
Note
If the default assignment of the diagnosis indices is changed (see chapter 7.2) and this confi-
guration is loaded into the AS-Interface safety monitor, the current assignments of the device
indices to the AS-i diagnosis indices is included in the configuration log as an assignment list.
0101 **************************************************************************1
0102 INACTIVE: none 2
0103 --------------------------------------------------------------------------3
0104 AS-INTERFACE DIAGNOSIS REFERENCE LIST 4
0105 DIAG INDEX: 00 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 5
0106 DEVICE: -- 32 33 35 34 -- -- -- -- -- -- -- -- -- -- -- 6
0107 7
0108 DIAG INDEX: 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 8
0109 DEVICE: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- 9
0110 0
0111 DIAG INDEX: 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 1
0112 DEVICE: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- 2
0113 **************************************************************************3
Note
Printing the configuration using the Print command in the File menu does not replace the con-
figuration log. It serves only as a good documentation aid in the set program language.
- 1 -
AS-interface safety monitor configuration
[35] AOPD
Name: "BWS 1"
Type: forced
Start-up test: No
Local acknowledgement: No
OSSD: 1 / 2
Address: 3
Checkboxes for commissioning
'
,
" "-) $
!"
#
$%& $
'( ) )) *)+
Note
The printout of the configuration window does not replace the configuration log. It serves only
as a good documentation aid in the set program language.
TIP:
The printout of a configuration window contains checkboxes located to the upper right of each
device which you can use to tick off the commissioning of each device.
4 … 8 alphanumerical characters;
A … Z, a … z, 0 … 9, default: "SIMON"
Password is case-sensitive!
If an incorrect password is entered, an error message is output and command execution is in-
terrupted.
Note
When a correct password is entered, ASIMON remembers the password for 5 minutes. If you
execute other password-protected commands during this period, you do not need to re-enter
the password. Each time a password-protected command is executed, the internal marker time
is reset to 5 minutes.
This makes working with the software easier, as you do not need to constantly enter the
password. It should, however, not lead to careless use of the password.
The default password (factory setting) of the AS-Interface safety monitor is "SIMON". If you
would like to reconfigure the AS-Interface safety monitor, you must first change this default
password to a new one known only to you as safety officer.
With the Change password… command in the Monitor menu, you can change the password
of the connected AS-Interface safety monitor in configuration operation.
The following dialog box opens:
4 … 8 alphanumerical characters;
A … Z, a … z, 0 … 9
Password is case-sensitive!
Confirm your entry with the OK button. The new password is now stored in the AS-Interface
safety monitor and must be used for all password-protected commands from now on.
6.1 Diagnostics
Use the Diagnostics command in the Monitor menu or click the button to call up the dia-
gnostics view of the configuration stored in the AS-Interface safety monitor.
Note
The Diagnostics command is available only when the AS-Interface safety monitor is in protec-
tive operation!
In protective operation, the AS-Interface safety monitor continuously transmits diagnostic data
to ASIMON via the configuration interface. In the diagnostics view, the data are displayed in
the status bar as they pass through.
For the diagnostics view, these data are converted to virtual LEDs (tree structure display) for
each device in the configuration or represented as coloured device outlines and device con-
nections (circuit diagram display) which provide a quick overview of the state of the OSSD(s).
Example 1 (circuit diagram display): both OSSDs are validated
An LED or outline/line colour is assigned to each configured device which indicates its state.
In addition, each OSSD also has three LEDs (only in the tree structure display) which cor-
respond to the device LEDs on the AS-Interface safety monitor: 1, 2 and 3 (for a description of
the states, refer to the operating manual of the AS-Interface safety monitor).
The devices or device LEDs can have the following states:
Note
Additional diagnostic information can be obtained via the AS-Interface bus and the device
LEDs on the AS-Interface safety monitor and, if applicable, the participating AS-Interface
slaves. Additional information on diagnostics can be found in chapter 7.
Remedy:
As a remedy, the connection to the monitor can be separated while the PC starts. In addition,
the start behaviour of the operating system can be changed. For details, refer to the user do-
cumentation provided by the manufacturer of your PC or operating system.
Using the AS-Interface bus, diagnosis of the AS-Interface safety monitor and configured de-
vices is possible from the AS-Interface master, normally a PLC with master module.
However, to ensure reliable transmission and efficient evaluation of the diagnostic data, a
series of requirements must be satisfied:
• Relatively long telegram propagation times may occur, particularly when using an additio-
nal bus system between PLC and AS-Interface. Owing to the asynchronous transmission
in the master in the case of two successive, identical data calls, the PLC may not neces-
sarily know when the AS-Interface safety monitor is responding to the new call. Thus, the
answers to two successive, different data calls should differ by at least one bit.
• The diagnostic data must be consistent, i.e. the status information sent by the AS-Interface
safety monitor must match the actual device states, especially if the propagation time to
the PLC is longer than the updating time in the AS-Interface safety monitor
(approx. 30 … 150ms).
• Whether a deactivated relay of an output circuit represents the normal state depends on
the operating mode of the AS-Interface safety monitor. The diagnostics in the PLC should
only be called in the event of a deviation from the normal state.
The diagnostic procedure described below satisfies these requirements and should therefore
always be followed.
Diagnostic procedure
The PLC always queries the AS-Interface safety monitor alternately with two data calls (0) and
(1). These data calls return the basic information (state of the output circuits, protective/confi-
guration operation) to allow a diagnosis. The AS-Interface safety monitor answers the two calls
with the same user data (3 bit, D2 … D0). Bit D3 is a control bit, similar (but not identical) to a
toggle bit. D3 is 0 for all even data calls (0); D3 is 1 for all odd data calls (1). This enables the
PLC to detect whether the answer has changed.
Data calls (0) and (1) return the answer X000 if the normal state exists (protective operation,
everything OK). For devices with only one output circuit and with two dependent output circuits,
output circuit 2 is always marked as OK. With two independent output circuits, an unconfigured
circuit is also marked as OK. In order to be able to interpret what is OK and what is not OK, the
user must be familiar with his configuration.
If the data call changes from (0) to (1), the data set is stored in the AS-Interface safety monitor.
Bit D3 in the answer, however, remains reset until the process is concluded. As a result, the
PLC thinks it has received answers to data call (0). If D3 is set, a consistent data set exists.
If, with the bit D3 set, the answer from the AS-Interface safety monitor signals deactivation of
an output circuit, detailed diagnostic information can now be queried in the stored state with
the specific data calls (2) … (B). Depending on the setting in the configuration of the AS-Inter-
face safety monitor, data calls (4) … (B) return device diagnostic information sorted according
to output circuit (see chapter 7.3.2) or unsorted (see chapter 7.3.3).
Note
If the AS-Interface safety monitor is in configuration operation, it is not possible to query the
detailed diagnostic information using the data calls (2) … (B).
Note
You can also call up the Device index assignment window by clicking the Diagnosis index but-
ton when creating or editing a device. When editing a device, the current diagnosis index of
the device is also displayed below the Diagnosis index button.
In the lower right part of the Device index assignment for AS-i diagnostics window, you can
first define whether the diagnosis index is to use the range from 0 … 47 (standard setting) or
the range from 32 … 79 (analogous to the device index).
By activating the Risk of overwriting checkbox, ASIMON will display the following info win-
dow to warn you if you attempt to assign an already assigned diagnosis index to a different
device.
Editing assignments
By default, all configured devices are assigned sequentially increasing diagnosis indices. The
device with index 32 is assigned diagnosis index 0, the device with index 33 is assigned dia-
gnosis index 1, etc.
Note
Use the Device sorting button to restore this original assignment at any time.
If the default assignment of the diagnosis indices is changed, the colour of the table headings
changes from grey to green.
If a device is not assigned to a diagnosis index, the Device index assignment window is split
horizontally and the unassigned devices appear in the lower window area.
When editing the assignment table, the following options are always available:
- Assignment via drag&drop with the mouse.
- Direct editing of the device indices in the upper window area in the Device index
column.
- Direct editing of the diagnosis indices in the lower window area in the Diagnosis
index column.
- Editing via the AS-i sorting, Delete assignment, Cut, Copy, Paste, Delete line and
Insert line buttons.
- Editing with keyboard commands:
Cursor buttons and <Tab> (Navigation)
<Alt>+<B> (Device sorting),
<Alt>+<A> (AS-i sorting),
<Alt>+<l> (Delete assignment),
<Ctrl>+<X> (Cut),
<Ctrl>+<C> (Copy),
<Ctrl>+<V> (Paste),
<Delete> (Delete line),
<Insert> (Insert line),
<Ctrl>+<Z> (Undo),
<Ctrl>+<Y> (Redo).
Use the Undo and Redo buttons to reverse or restore changes which you have
made step-by-step.
Device sorting
The original sequentially increasing assignment of all configured devices to the diagnosis indi-
ces is restored.
AS-i sorting
All devices assigned to an AS-Interface address are assigned to the diagnosis index which cor-
responds to the AS-Interface address. The remaining devices are listed in the lower window
area by increasing device index.
Delete assignment
The assignment of the devices to the diagnosis indices is completely deleted and all devices
are listed in the lower window area by increasing device index.
Cut
The contents of the marked line are cut and then added at the appropriate location in the lower
window area; the line remains empty.
Copy
The contents of the marked line are copied to the clipboard.
Paste
The contents of the clipboard are pasted into the marked line.
Delete line
The marked line is deleted and the device added at the appropriate location in the lower win-
dow area; the lines which follow the deleted line are shifted up (diagnosis index minus one).
Insert line
A blank line is added above the marked line, the lines which follow the added line are shifted
down (diagnosis index plus one).
After all changes have been made, click the OK button to accept the new device index assig-
nment for the AS-Interface diagnostics.
Note
If the default assignment of the diagnosis indices is changed (indicated by a change in the
colour of the table headings from grey to green) and this configuration is loaded into the
AS-Interface safety monitor, the current assignment of the device indices to the AS-i diagnosis
indices is included in the configuration log as an assignment list.
0101 **************************************************************************1
0102 INACTIVE: none 2
0103 --------------------------------------------------------------------------3
0104 AS-INTERFACE DIAGNOSIS REFERENCE LIST 4
0105 DIAG INDEX: 00 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 5
0106 DEVICE: -- 32 33 35 34 -- -- -- -- -- -- -- -- -- -- -- 6
0107 7
0108 DIAG INDEX: 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 8
0109 DEVICE: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- 9
0110 0
0111 DIAG INDEX: 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 1
0112 DEVICE: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- 2
0113 **************************************************************************3
7.3 Telegrams
Colour coding
Note
The colour of a device corresponds to the colour of the virtual LEDs in the diagnostic view of
the ASIMON configuration software. A device which is not assigned to any output circuit is al-
ways shown in green.
Note
During proper protective operation, there are also devices which are not in the green state.
When searching for the cause of a shutdown, the device with the lowest device index is the
most important. Others may just be subsequent effects (example: when the emergency shut-
down button is pressed, the start device and timer are also in the OFF state).
By appropriately programming the functional device in the PLC, the user can be guided to the
primary cause of the error. Detailed knowledge of the configuration and the function of the
AS-Interface safety monitor are necessary for the interpretation of additional information.
Because the device numbers can be shifted if the configuration is changed, we recommend
using the diagnosis index assignment.
Note
Make sure that the correct diagnosis type is set for the AS-Interface safety monitor in the
Information about monitor and bus window of the ASIMON configuration software.
The values returned in calls (5) and (6) as well as (9) and (A) refer to the device diagnosis index
in the configuration program and not to an AS-Interface address.
Always execute data calls (4) … (7) and (8) … (B) together in sequence for each device.
Note
Data calls (C) 0011 to (F) 0000 are reserved.
Note
Make sure that the correct diagnosis type is set for the AS-Interface safety monitor in the
Information about monitor and bus window of the ASIMON configuration software.
The values returned in calls (5) and (6) as well as (9) and (A) refer to the device diagnosis index
in the configuration program and not to an AS-Interface address.
Always execute data calls (4) … (7) and (8) … (B) together in sequence for each device.
Note
Data calls (C) 0011 to (F) 0000 are reserved.
Start Diagnosis
Optional
Data call (0)
State Data call (2)
Answer to (0) ≠ 0X00 LEDs of circuit 1
Diagnosis
Diagnosis or Start
Diagnosis Diagnosis
Diagnosis index < previous diagnosis index Diagnosis index < previous diagnosis index
Diagnosis Diagnosis
or Start or Start
Apendix
www.siemens.com/as-interface