Endress+Hauser Tankvision Multi Scan NXA83B User manual

Products Solutions Services
BA01296G/00/EN/04.18
71421942
2019-02-13
Valid as of software version:
3.4.0 and 4.4.0
Operating Instructions
Tankvision
Multi Scan NXA83B
Redundancy manual

Tankvision Multi Scan NXA83B
2Endress+Hauser
A0023555
Order code:
Ext. ord. cd.:
Ser. no.:
www.endress.com/deviceviewer Endress+Hauser
Operations App
XXXXXXXXXXXX
XXXXX-XXXXXX
XXX.XXXX.XX
Serial number
1.
3.
2.

Tankvision Multi Scan NXA83B
Endress+Hauser 3
Table of Contents
1 Document information . . . . . . . . . . . . . . 4
1.1 Target audience for this manual . . . . . . . . . . . . . . . 4
1.2 Version history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.3 Document function . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.4 Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2 Basic safety instructions . . . . . . . . . . . . . 6
2.1 Requirements for the personnel . . . . . . . . . . . . . . . 6
2.2 IT security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.3 Designated use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.4 Workplace safety . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2.5 Operational safety . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2.6 Product safety . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
3 Introduction . . . . . . . . . . . . . . . . . . . . . . . 8
4 Switch By System . . . . . . . . . . . . . . . . . . . 9
4.1 Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
4.2 Port Latching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
4.3 Boot Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
4.4 Slave interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
4.5 Mode display and control . . . . . . . . . . . . . . . . . . . 11
4.6 Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
4.7 Configuring Tankvision Professional NXA85 to talk
to a pair of redundant Multi Scan NXA83B . . . . 19
Index. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

Document information Tankvision Multi Scan NXA83B
4Endress+Hauser
1 Document information
1.1 Target audience for this manual
This manual is giving detailed information on the system capabilities and architecture. It
supports project and sales engineers in designing the system architecture during acquisition
and execution phase. Furthermore during operation time of the system all servicing
personnel in need of detailed knowledge about the system capabilites.
1.2 Version history
1.3 Document function
1.3.1 Used symbols
Safety symbols
Document version Valid for SW version Changes to the previous version
BA01296G/00/EN/01.14 3.0.10 Initial version
BA01296G/00/EN/02.15 3.0.12 Change of order code structure
BA01296G/00/EN/03.16 3.1.0 and 4.0.0 Old V1 support and simplified
configuration
BA01296G/00/EN/04.18 3.4.0 and 4.4.0 Changes to V1 Driver and GBT
calculations
Symbol Meaning
A0011189-EN
DANGER!
This symbol alerts you to a dangerous situation. Failure to avoid this situation will
result in serious or fatal injury.
A0011190-EN
WARNING!
This symbol alerts you to a dangerous situation. Failure to avoid this situation can
result in serious or fatal injury.
A0011191-EN
CAUTION!
This symbol alerts you to a dangerous situation. Failure to avoid this situation can
result in minor or medium injury.
A0011192-EN
NOTICE!
This symbol contains information on procedures and other facts which do not result
in personal injury.
DANGER
WARNING
CAUTION
NOTICE

Tankvision Multi Scan NXA83B Document information
Endress+Hauser 5
Symbols for certain types of information
Symbols in graphics
1.4 Documentation
1.4.1 Operating instructions
Symbol Meaning
A0011193
Tip
Indicates additional information.
A0011195
Reference to page
Refers to the corresponding page number.
, , ... Series of steps
A0018373
Result of a sequence of actions
Symbol Meaning
1, 2, 3 ... Item numbers
, , ... Series of steps
A, B, C... Views
A0011187
Hazardous area
Indicates a hazardous area.
A0011188
Indicates a non-hazardous location
Safe area (non-hazardous area)
Document number Instrument Type of Document
BA01288G/00
•MultiScanNXA83B
Operation manual
BA01290G/00 Installation and Maintenance manual
BA01291G/00 Configuration manual
BA01292G/00 DCC Configuration manual
BA01289G/00 OPC Tank Data Server manual
BA01297G/00 Web Client System Operation manual
BA01287G/00 Weights and Measures Additions
BA01296G/00 Redundancy manual
1.
2.
1.
2.
-
.

Basic safety instructions Tankvision Multi Scan NXA83B
6Endress+Hauser
2 Basic safety instructions
2.1 Requirements for the personnel
The personnel for installation, commissioning, diagnostics and maintenance must fulfill the
following requirements:
• Trained, qualified specialists: must have a relevant qualification for this specific function
and task
• Are authorized by the plant owner/operator
• Are familiar with federal/national regulations
• Before beginning work, the specialist staff must have read and understood the instructions
in the Operating Instructions and supplementary documentation as well as in the
certificates
(depending on the application)
• Following instructions and basic conditions
The operating personnel must fulfill the following requirements:
• Being instructed and authorized according to the requirements of the task by the facility's
owner operator
• Following the instructions in these Operating Instructions
2.2 IT security
We only provide a warranty if the device is installed and used as described in the Operating
Instructions. The device is equipped with security mechanisms to protect it against any
inadvertent changes to the device settings.
IT security measures in line with operators' security standards and designed to provide
additional protection for the device and device data transfer must be implemented by the
operators themselves.
Endress+Hauser can be contacted to provide support in performing this task.
2.3 Designated use
2.3.1 Applications
Inventory control
By using Tankvision Multi Scan to monitor the tank level and stored volume of valuable
liquids remotely, owners or operators of tank farms or terminals for petroleum products and
chemicals (liquids) can visualize the volume of the stored medium in real time. The data can
be used to plan the inventory and distribution. The data can also be used to manage tank
farm operations like pumping or transferring products. Tankvision has its unique concept
using network technology. Without using proprietary software, the users can visualize and
manage their valuable liquids stored in the tanks by a web browser. Tankvision Multi Scan
is a flexible and cost effective solution due to its scalable architecture. The application
coverage goes from small depots with only a few tanks up to refineries.
Inventory Calculations
Tankvision Multi Scan calculates based on measured variables and tank capacity tables:
• Observed/Gross volumes,
•Netvolumesand
•Mass

Tankvision Multi Scan NXA83B Basic safety instructions
Endress+Hauser 7
of products like
• Hydrocarbons,
• Liquefied gases,
• Asphalt.
They are corrected according to international standards, including API/ASTM tables 5A, 5B/
6, 53A, 53B/54, 23/24, LPG.
This includes temperature corrections at 15 °C, 60 °F and alternative temperatures.
Additionally, available pumpable volumes and water volume are calculated.
Remote configuration of measuring equipment
Some on-site operations can be avoided using remote configuration of measuring equipment
during commissioning or maintenance (the availability of this feature may depend on the
system configuration).
Application areas
• Tank farms in refineries
• Ship loading terminals
• Marketing and distribution terminals
• Pipeline terminals
• Logistic terminals for tanks storing products like crude oils, refined white and black
products, chemicals, LPG
2.4 Workplace safety
For work on and with the device:
• Wear the required personal protective equipment according to federal/national
regulations.
• Switch off the supply voltage before connecting the device.
2.5 Operational safety
Risk of injury!
• Operate the device in proper technical condition and fail-safe condition only.
• The operator is responsible for interference-free operation of the device.
Conversions to the device
Unauthorized modifications to the device are not permitted and can lead to unforeseeable
dangers.
• If, despite this, modifications are required, consult with Endress+Hauser.
Repair
To ensure continued operational safety and reliability,
• Carry out repairs on the device only if they are expressly permitted.
• Observe federal/national regulations pertaining to repair of an electrical device.
• Use original spare parts and accessories from Endress+Hauser only.
2.6 Product safety
The device is designed to meet state-of-the-art safety requirements, has been tested and left
thefactory in a condition in which it is safe to operate. The device complies with the
applicable standards and regulations as listed in the EC declaration of conformity and thus
complies with the statutory requirements of the EG directives. Endress+Hauser confirms the
successful testing of the device by affixing to it the CE mark.

Introduction Tankvision Multi Scan NXA83B
8Endress+Hauser
3Introduction
The Multi Scan NXA83B is a configurable system designed for tank gauging and tank
inventory management systems.
Redundant operation with a pair of Multi Scan NXA83B linked together is supported, so that
only one NXA83B will poll the gauges. The other Multi Scan NXA83B will automatically
update its database with live data from the active Multi Scan NXA83B.
This mode of redundancy is called Switch By System and this document outlines the
configuration and operation of the two Multi Scan NXA83B.
There are two other modes of redundancy, both of which operate on a single Multi Scan
NXA83B (i.e. not a redundant pair):
•Switch By Gauge: Gauges are configured with two ports (Primary and Backup) on the
same Multi Scan NXA83B. If the Multi Scan NXA83B loses connection to a gauge on one
port it will switch to poll the gauge from the other port. This is on an individual gauge
basis, thus both Primary and Backup ports may be polling at the same time.
•Switch By Interface: This is similar the switch by Gauge, except that the Multi Scan
NXA83B will poll ALL gauges on only one port (i.e. Primary on startup). Only when
communication to all gauges has failed on this port will the Multi Scan NXA83B switch to
poll gauges from the other port. Thus the Primary and Backup ports will never poll at the
same time.
This manual is solely concerned with the redundancy functionality, it is assumed that the
user has read the Multi Scan NXA83B manuals and is familiar with configuring a Multi Scan
NXA83B database.

Tankvision Multi Scan NXA83B Switch By System
Endress+Hauser 9
4 Switch By System
4.1 Operation
The diagram below shows an example of a pair of Multi Scan NXA83B used in the Switch By
System redundancy mode.
NXA83B_System-configuration_Switch-by-system
1 Tankvision Professional NXA85 Workstation
2 Ethernet
3 Tankvision Multi Scan NXA83B
4 Control link RS232
5 Fieldbus protocol
6 Proservo
7Promonitor
8Prothermo
9TankSideMonitor
10 Micropilot
The two NXA83B have a number of field loops (2 Enraf BPM in this example) connected to
both Multi Scan NXA83B.
There are also 2 Control links connected between the NXA83B, these are used to transfer
data between the systems, one for each direction of data transfer.
In normal operation one Multi Scan NXA83B will be in Live Polling mode, that is, polling for
all field data from the gauges. The other Multi Scan NXA83B will be in Redundant Link
mode, and it will be getting data from the live Multi Scan NXA83B via one of the Control
Links.
Therefore both Multi Scan NXA83B will have live field data, which will be displayed on
screen and be available on any slave (Modbus etc.) port or OPC connection. Slave ports may
55
4
4
8
8
10
3
9
3
11
22
7
6

Switch By System Tankvision Multi Scan NXA83B
10 Endress+Hauser
be configured to not reply on the passive system, to mimic functionality in older equipment
such as the Datacon.
If one of the field ports on the live system does not receive a correctly formatted reply for
longer than the timeout period (default 60 seconds), it will be marked as failed and initiate
a switch. This will cause the Multi Scan NXA83B to stop polling all field ports and switch to
Redundant Link mode.
An event will be generated to inform the user that the system is now passive.
NXA83_Alarm-Event-Viewer_Redundant-Mode-Switched-To-Passive
The second Multi Scan NXA83B will detect this change, switch to Live Polling mode and start
to poll all the field ports for gauge data.
An event will be generated in the second Multi Scan NXA83B to inform the user that the
system is now active and polling for gauge data.
NXA83_Alarm-Event-Viewer_Redundant-Mode-Switched-To-Active
During the switchover, no data will be lost and no gauging alarms will be raised in the Multi
Scan NXA83B or in any connected tank gauging software.
If, following the switch, the field port on the second Multi Scan NXA83B also fails to receive
correctly formatted data then a No Reply From Gauge alarm will be generated for each gauge
on that field port.
If at any time an individual gauge fails on a port (i.e. does not reply), but other gauges are
returning valid data, the failed gauge will immediately be set to error and an alarm raised.
This will not trigger a switch.

Tankvision Multi Scan NXA83B Switch By System
Endress+Hauser 11
4.2 Port Latching
If a port has failed on both Multi Scan NXA83B the system will "Latch" for that port. A
Latched port will not trigger redundancy mode switching. This state will remain until valid
communications is restored to the port. If the second Multi Scan NXA83B is not connected
or powered up, all ports will latch and no switching will occur.
Latching does not affect other ports, so if an unlatched port fails redundant mode switching
will occur as normal.
4.3 Boot Up
Multi Scan NXA83B which are configured as "Switch by System" will initially boot up in
Redundant Link mode and check to see if there is a Multi Scan NXA83B in Live Polling Mode.
If a Multi Scan NXA83B in Redundant Link mode does not find a "Live" system within a
timeout period it will switch to Live Polling mode. The timeout period contains a random
element, so that if two Multi Scan NXA83B boot at exactly the same time, one should always
switch to Live Polling before the other.
If there are no Control Link connections between the two systems both will eventually switch
to Live Polling mode.
4.4 Slave interfaces
All slave interfaces (Modbus, Datacon etc) by default operate as normal when used on
redundant Multi Scan NXA83B. They will reply to requests whether they are running on the
Live Polling or Passive system, as both systems have valid live data.
However there may be applications where the master system requires that only slave
interfaces running on the Live Polling system reply to requests. For instance if both Multi
Scan NXA83B are multi-dropped on the same interface and have the same addresses etc.
In this case the Slave port should be configured with the Do Not Reply When Passive option
ticked in the Port Config tool. See later section on Slave Port Configuration for details on
where this can be found, →ä16.
If this option is ticked then the slave interface will not reply to any requests if it is running
on the Passive system.
4.5 Mode display and control
The current redundancy mode may be displayed via the Communications Monitor, which can
be accessed from a remote control session or from the operator touch screen. For full details
on accessing and using the Communications Monitor, refer to the DCC Communications
Configuration manual BA01292G.
The redundancy mode is normally automatically selected by the two Multi Scan NXA83B
systems which between them will determine which system is Active and which is Passive. A
Multi Scan NXA83B will boot up in the Passive mode and only go Active if it detects that the
other system is either not running or is in Passive mode as well.
However there may be times when the mode requires to be manually controlled, in which
case this can be carried out using the Communications Monitor redundancy screen. It can be
used to initiate a manual switchover or to set the two systems to never switch, for instance
when some maintenance work is to be carried out.
When a Multi Scan NXA83B is rebooted it will always start in automatic (Dynamic)
switchover mode.

Switch By System Tankvision Multi Scan NXA83B
12 Endress+Hauser
The redundancy state screen in the Communications Monitor can be displayed by clicking on
the Redundancy button.
NXA83_Redundancy_001
The fields displayed on this screen will include the following:
•Redundancy Type – this shows the type of redundancy configured for this Multi Scan
NXA83B. It will also show the current switching mode if the redundancy is set to Switch
By System.
•System Polling State – this shows the current polling state, ACTIVE or PASSIVE. It will
always show ACTIVE if the redundancy type is NOT Switch By System.
•Last Switch Time – the time that the last switchover occurred in a Switch By System
redundant system. If the redundancy type is not Switch By System or a switchover has not
occurred then this field will be blank.
•Last Fail Reason – If a switchover has occurred then this will indicate the cause and can
be one of the following:
– Field Port Failed
– Manual command
– Control Port detected other system passive
– Control Port detected both systems active
If the redundancy type is not Switch By System or a switchover has not occurred then this
field will be blank.
•Last Field Port Fail – this COM port number of the last field port to fail and trigger a
redundant switchover.
The Command field allows a set of redundant actions to be selected.
NXA83_Redundancy_002
The command action will not be carried out until the OK button is clicked and the
Redundancy Status screen is closed.
When initiating a manual switchover, the recommended procedure is to select the Set
System PASSIVE command on the system that is currently ACTIVE.

Tankvision Multi Scan NXA83B Switch By System
Endress+Hauser 13
4.5.1 Single Tank Display
The current redundancy mode may also be displayed in the Single Tank displays on the local
touchscreen. This is generally only recommended for firmware versions before v3.2.0/4.2.0.
For later versions use the Communications Monitor.
This screen shows the mode that the Tankvision Multi Scan is currently operating. The mode
may also be manually controlled using this screen.
NXA83_Redundancy_003

Switch By System Tankvision Multi Scan NXA83B
14 Endress+Hauser
4.6 Configuration
4.6.1 Redundancy Control Port Configuration
The first step to configuring a redundant database on the Multi Scan NXA83B is to configure
the redundancy mode. This is set using the Port Configuration module in the
Communications menu.
Click on the Host Comms tab, and set the Redundancy Settings to Switch By System.
NXA83_Port-Configuration_Host-Comms_Switch-By-System
The Configure button will now be enabled. Click this button to determine the method of
connecting the control links between the two Multi Scan NXA83B.
NXA83_Redundancy_004
There are five options to select from:
•COM ports 1 and 2 used for Control Ports: The Multi Scan NXA83B automatically
configures the communications ports for redundancy. Ensure that COM 1 and COM 2 are
NOT selected as "In Use" as either Host or Slave ports. Connect a Serial Cross-over lead from
COM 1 on one Multi Scan NXA83B to COM 2 on the other for both Multi Scan NXA83B.
This is the recommended method of connecting the control links.

Tankvision Multi Scan NXA83B Switch By System
Endress+Hauser 15
•COM ports 7 and 8 used for Control Ports: The Multi Scan NXA83B automatically
configures the communications ports for redundancy. Ensure that COM 7 and COM 8 are
NOT selected as "In Use" as either Host or Slave ports. Connect a Serial Cross-over lead from
COM 7 on one Multi Scan NXA83B to COM 8 on the other for both Multi Scan NXA83B.
•Manual Selection of Control Ports: This option must be selected when the control ports
have been manually configured. There must be two control ports configured:
– 1 DCC Host port configured as a Redundant Link Control protocol.
– 1 DCC Slave port configured as a Redundant Link Control protocol.
These can be either standard RS232 COM ports (recommended for manual configuration)
or Network ports. The communication parameters should be set identically for both Multi
Scan NXA83B.
In operation the Host Redundant Link Control is connected to the Slave Redundant Link
Control of the other system, and vice-versa.
NXA83_Port-Configuration_Host-Comms
•Network used for Control Ports: The Multi Scan NXA83B automatically configures
network ports for redundancy. The Network address of the second Multi Scan NXA83B
must be supplied in the Network Address field. Both Multi Scan NXA83B must be
connected to the same network, or have a Network Cross-over lead connected between the
Ethernet ports of the two Multi Scan NXA83B. Connection using a Network Cross-over
lead is not a recommended method for Redundant Link since it prevents access to the
Multi Scan NXA83B operating system using a remote desktop connection.
•No Control Ports Used: If this option is selected both Multi Scan NXA83B will default to
Live polling mode. This option should NOT be used for Switch By System redundancy.

Switch By System Tankvision Multi Scan NXA83B
16 Endress+Hauser
4.6.2 Field Port and Slave Port Configuration
Next configure all field ports in the Host Comms page as normal, except that the redundancy
operation may be modified for individual ports by editing the Redundancy Settings section
of the COM port Settings dialog.
NXA83_COM-Port-Settings
For Host ports the following settings may be adjusted:
•Do Not Trigger Redundant Switch: If ticked the port will not trigger a switchover if it fails
•Timeout Period: The time period for determining if the port has failed. If no replies are
received from devices on the port for longer than this period a switchover will be triggered.
Defaults to 60 seconds.
For Slave ports the following setting may be adjusted:
•Do Not Reply When Passive: The port will not reply to any requests if it is running on the
passive system.
4.6.3 Current Loop Board Configuration
When using Current Loop interface boards with redundant systems (such as when
interfacing to Whessoe WM500/550 devices) the following should be implemented:
Set the Flow Control Field to Redundant.

Tankvision Multi Scan NXA83B Switch By System
Endress+Hauser 17
NXA83_COM-Port-Settings_Flow-Control_Redundant
Remove the Redundant Mode Control jumper from each board.
NXA83_Current-Loop-Board_Redundant-Mode-Control-jumper
1TxLED
2RxLED
3 Redundant Mode Control jumper (Fitted = Loop always powered; Not Fitted = Redundant Mode)
4 Loop Current Adjust
5Master/SlaveSelect
6 Power Converters
1
2
3
4
5
6

Switch By System Tankvision Multi Scan NXA83B
18 Endress+Hauser
4.6.4 L&J Tankway Board Configuration
When using L&J interface boards with redundant systems the following should be
implemented:
Set the Flow Control field to Redundant.
NXA83_COM-Port-Settings_Flow-Control_Redundant
Make sure LK1 is in the UP position (i.e. towards the Tx/Rx LEDs) on each board.

Tankvision Multi Scan NXA83B Switch By System
Endress+Hauser 19
4.6.5 Gauge Configuration
After the interfaces have been configured, the gauges must be configured for redundant
operation.
To do this, select the gauge in the Gauge Configuration screen in the Configurator tools.
NXA83_Device-Configuration
Set the Comm Port field to be the field port (i.e. the port that the gauges are connected to).
There is no need to enter port a Backup COM Port field, so leave blank.
Firmware Versions before 3.0.6 do require the Backup COM Port field to be the Host
Redundant Link Control port. To display this field click on the Advanced button.
4.7 Configuring Tankvision Professional NXA85 to talk to
a pair of redundant Multi Scan NXA83B
A PC running the Tankvision Professional NXA85 tank gauging software may be used on
conjunction with a pair of redundant pair of Multi Scan NXA83B.
It must be connected to the Multi Scan NXA83B by one of the following:
• RS232, RS485 or RS422, using a pair of serial communication ports on the PC (one for
each Multi Scan NXA83B).
• Ethernet, with the PC and both Multi Scan NXA83B connected via a switch or similar.
This section will give some notes on what to configure, but refer to the DCC Configuration
manual (BA01292G) for more details on configuring Tankvision Professional NXA85.
4.7.1 Multi Scan NXA83B Configuration
Each Multi Scan NXA83B should be configured with a slave interface to communicate with
the VTW, using the Datacon protocol. The screen shot shows it configured as a network
interface.

Switch By System Tankvision Multi Scan NXA83B
20 Endress+Hauser
NXA83_Redundancy_005