Endress+Hauser Tankvision Multi Scan NXA83 User manual

Products Solutions Services
BA01296G/00/EN/01.14
71244033
Valid as of software version:
3.0.10
Operating Instructions
Tankvision
Multi Scan NXA83
Redundancy manual

Tankvision
2Endress+Hauser
Table of Contents
1 Document information . . . . . . . . . . . . . . 3
1.1 Target audience for this manual . . . . . . . . . . . . . . . 3
1.2 Version history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.3 Document function . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.4 Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2 Basic safety instructions . . . . . . . . . . . . 5
2.1 Requirements for the personnel . . . . . . . . . . . . . . . 5
2.2 IT security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2.3 Designated use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2.4 Workplace safety . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.5 Operational safety . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.6 Product safety . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
3 Introduction . . . . . . . . . . . . . . . . . . . . . . . 7
4 Switch By System. . . . . . . . . . . . . . . . . . . 8
4.1 Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
4.2 Port Latching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
4.3 Boot Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
4.4 Mode display and control . . . . . . . . . . . . . . . . . . . . . 9
4.5 Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Tankvision Document information
Endress+Hauser 3
1 Document information
1.1 Target audience for this manual
This manual is giving detailed information on the system capabilities and architecture. It
supports project and sales engineers in designing the system architecture during acquisition
and execution phase. Furthermore during operation time of the system all servicing
personnel in need of detailed knowledge about the system capabilites.
1.2 Version history
1.3 Document function
1.3.1 Used symbols
Safety symbols
Symbols for certain types of information
Document version Valid for SW version Changes to the previous version
BA01296G/00/EN/01.14 3.0.10 Initial version
Symbol Meaning
A0011189-EN
DANGER!
This symbol alerts you to a dangerous situation. Failure to avoid this situation will
result in serious or fatal injury.
A0011190-EN
WARNING!
This symbol alerts you to a dangerous situation. Failure to avoid this situation can
result in serious or fatal injury.
A0011191-EN
CAUTION!
This symbol alerts you to a dangerous situation. Failure to avoid this situation can
result in minor or medium injury.
A0011192-EN
NOTICE!
This symbol contains information on procedures and other facts which do not result
in personal injury.
Symbol Meaning
A0011193
Tip
Indicates additional information.
A0011195
Reference to page
Refers to the corresponding page number.
, , ... Series of steps
A0018373
Result of a sequence of actions
DANGER
WARNING
CAUTION
NOTICE
1.
2.

Document information Tankvision
4Endress+Hauser
Symbols in graphics
1.4 Documentation
1.4.1 Operating instructions
Symbol Meaning
1, 2, 3 ... Item numbers
, , ... Series of steps
A, B, C... Views
A0011187
Hazardous area
Indicates a hazardous area.
A0011188
Indicates a non-hazardous location
Safe area (non-hazardous area)
Document number Instrument Type of Document
BA01288G/00
•MultiScanNXA83
Operation manual
BA01290G/00 Installation and Maintenance manual
BA01291G/00 Configuration manual
BA01292G/00 DCC Configuration manual
BA01289G/00 OPC Tank Data Server manual
BA01297G/00 Web Client System Operation manual
BA01287G/00 Weights and Measures Additions
BA01296G/00 Redundancy manual
1.
2.
-
.

Tankvision Basic safety instructions
Endress+Hauser 5
2 Basic safety instructions
2.1 Requirements for the personnel
The personnel for installation, commissioning, diagnostics and maintenance must fulfill the
following requirements:
• Trained, qualified specialists: must have a relevant qualification for this specific function
and task
• Are authorized by the plant owner/operator
• Are familiar with federal/national regulations
• Before beginning work, the specialist staff must have read and understood the instructions
in the Operating Instructions and supplementary documentation as well as in the
certificates
(depending on the application)
• Following instructions and basic conditions
The operating personnel must fulfill the following requirements:
• Being instructed and authorized according to the requirements of the task by the facility's
owner operator
• Following the instructions in these Operating Instructions
2.2 IT security
We only provide a warranty if the device is installed and used as described in the Operating
Instructions. The device is equipped with security mechanisms to protect it against any
inadvertent changes to the device settings.
IT security measures in line with operators' security standards and designed to provide
additional protection for the device and device data transfer must be implemented by the
operators themselves.
Endress+Hauser can be contacted to provide support in performing this task.
2.3 Designated use
2.3.1 Applications
Inventory control
By using Tankvision Multi Scan to monitor the tank level and stored volume of valuable
liquids remotely, owners or operators of tank farms or terminals for petroleum products and
chemicals (liquids) can visualize the volume of the stored medium in real time. The data can
be used to plan the inventory and distribution. The data can also be used to manage tank
farm operations like pumping or transferring products. Tankvision has its unique concept
using network technology. Without using proprietary software, the users can visualize and
manage their valuable liquids stored in the tanks by a web browser. Tankvision Multi Scan
is a flexible and cost effective solution due to its scalable architecture. The application
coverage goes from small depots with only a few tanks up to refineries.
Inventory Calculations
Tankvision Multi Scan calculates based on measured variables and tank capacity tables:
• Observed/Gross volumes,
•Netvolumesand
•Mass

Basic safety instructions Tankvision
6Endress+Hauser
of products like
• Hydrocarbons,
• Liquefied gases,
• Asphalt.
They are corrected according to international standards, including API/ASTM tables 5A, 5B/
6, 53A, 53B/54, 23/24, LPG.
This includes temperature corrections at 15 °C, 60 °F and alternative temperatures.
Additionally, available pumpable volumes and water volume are calculated.
Remote configuration of measuring equipment
Some on-site operations can be avoided using remote configuration of measuring equipment
during commissioning or maintenance (the availability of this feature may depend on the
system configuration).
Application areas
• Tank farms in refineries
• Ship loading terminals
• Marketing and distribution terminals
• Pipeline terminals
• Logistic terminals for tanks storing products like crude oils, refined white and black
products, chemicals, LPG
2.4 Workplace safety
For work on and with the device:
• Wear the required personal protective equipment according to federal/national
regulations.
• Switch off the supply voltage before connecting the device.
2.5 Operational safety
Risk of injury!
• Operate the device in proper technical condition and fail-safe condition only.
• The operator is responsible for interference-free operation of the device.
Conversions to the device
Unauthorized modifications to the device are not permitted and can lead to unforeseeable
dangers.
• If, despite this, modifications are required, consult with Endress+Hauser.
Repair
To ensure continued operational safety and reliability,
• Carry out repairs on the device only if they are expressly permitted.
• Observe federal/national regulations pertaining to repair of an electrical device.
• Use original spare parts and accessories from Endress+Hauser only.
2.6 Product safety
The device is designed to meet state-of-the-art safety requirements, has been tested and left
thefactory in a condition in which it is safe to operate. The device complies with the
applicable standards and regulations as listed in the EC declaration of conformity and thus
complies with the statutory requirements of the EG directives. Endress+Hauser confirms the
successful testing of the device by affixing to it the CE mark.

Tankvision Introduction
Endress+Hauser 7
3Introduction
The Multi Scan NXA83 is a configurable system designed for tank gauging and tank
inventory management systems.
Redundant operation with a pair of Multi Scan NXA83 linked together is supported, so that
only one NXA83 will poll the gauges. The other Multi Scan NXA83 will automatically update
its database with live data from the active Multi Scan NXA83.
This mode of redundancy is called Switch By System and this document outlines the
configuration and operation of the two Multi Scan NXA83.
There are two other modes of redundancy, both of which operate on a single Multi Scan
NXA83 (i.e. not a redundant pair):
•Switch By Gauge: Gauges are configured with two ports (Primary and Backup) on the
same Multi Scan NXA83. If the Multi Scan NXA83 loses connection to a gauge on one port
it will switch to poll the gauge from the other port. This is on an individual gauge basis,
thus both Primary and Backup ports may be polling at the same time.
•Switch By Interface: This is similar the switch by Gauge, except that the Multi Scan
NXA83 will poll ALL gauges on only one port (i.e. Primary on startup). Only when
communication to all gauges has failed on this port will the Multi Scan NXA83 switch to
poll gauges from the other port. Thus the Primary and Backup ports will never poll at the
same time.
This manual is solely concerned with the redundancy functionality, it is assumed that the
user has read the Multi Scan NXA83 manuals and is familiar with configuring a Multi Scan
NXA83 database.

Switch By System Tankvision
8Endress+Hauser
4 Switch By System
4.1 Operation
The diagram below shows an example of a pair of Multi Scan NXA83 used in the Switch By
System redundancy mode.
NXA83_System-configuration_Switch-by-system
1 Tankvision Professional NXA85 Workstation
2Ethernet
3 Tankvision Multi Scan NXA83
4 Control link RS232
5 Fieldbus protocol
6 Proservo
7Promonitor
8Prothermo
9 Tank Side Monitor
10 Micropilot
The two NXA83 have a number of field loops (2 Enraf BPM in this example) connected to
both Multi Scan NXA83.
There are also 2 Control links connected between the NXA83, these are used to transfer data
between the systems, one for each direction of data transfer.
In normal operation one Multi Scan NXA83 will be in Live Polling mode, that is, polling for
all field data from the gauges. The other Multi Scan NXA83 will be in Redundant Link mode,
and it will be getting data from the live Multi Scan NXA83 via one of the Control Links.
Therefore both Multi Scan NXA83 will have live field data, which will be displayed on screen
and be available on any slave (Modbus etc.) port or OPC connection. Slave ports may be
configured to not reply on the passive system, to mimic functionality in older equipment
such as the Datacon.
55
4
4
8
8
10
3
9
3
11
22
7
6

Tankvision Switch By System
Endress+Hauser 9
If one of the field ports on the live system does not receive a correctly formatted reply for
longer than the timeout period (default 60 seconds), it will be marked as failed and initiate
a switch. This will cause the Multi Scan NXA83 to stop polling all field ports and switch to
Redundant Link mode. The second Multi Scan NXA83 will detect this change, switch to Live
Polling mode and start to poll all the field ports for gauge data.
During the switchover, no data will be lost and no gauging alarms will be raised in the Multi
Scan NXA83 or in any connected tank gauging software. An event will, however, be raised
on the Multi Scan NXA83 recording the switchover.
If, following the switch, the field port on the second Multi Scan NXA83 also fails to receive
correctly formatted data No Reply alarms will be generated.
If at any time an individual gauge fails on a port (i.e. does not reply), but other gauges are
returning valid data, the failed gauge will immediately be set to error and an alarm raised.
This will not trigger a switch.
4.2 Port Latching
If a port has failed on both Multi Scan NXA83 the system will "Latch" for that port. A Latched
port will not trigger redundancy mode switching. This state will remain until valid
communications is restored to the port. If the second Multi Scan NXA83 is not connected or
powered up, all ports will latch and no switching will occur.
Latching does not affect other ports, so if an Unlatched port fails redundant mode switching
will occur as normal.
4.3 Boot Up
Multi Scan NXA83 which are configured as "Switch by System" will initially boot up in
Redundant Link mode and check to see if there is a Multi Scan NXA83 in Live Polling Mode.
If a Multi Scan NXA83 in Redundant Link mode does not find a "Live" system within a timeout
period it will switch to Live Polling mode. The timeout period contains a random element, so
that if two Multi Scan NXA83 boot at exactly the same time, one should always switch to
Live Polling before the other.
If there are no Control Link connections between the two systems both will eventually switch
to Live Polling mode.
4.4 Mode display and control
The current redundancy mode may be displayed in the NXA83 runtime displays on the local
touchscreen.
A default screen is available on the configurator, although this may altered as required
during the configuration process.

Switch By System Tankvision
10 Endress+Hauser
NXA83_Display_Redundancy_Automatic
This screen shows the mode that the Multi Scan NXA83 is currently operating. The mode
may also be manually controlled using this screen.
The redundant mode is normally selected automatically, i.e. the two systems will determine
the best mode for each.
There may be times when the redundancy mode needs to be fixed to prevent switching, e.g.
during maintenance periods. This can be achieved by selecting the Set Mode Never
Changes option. When the mode is set to Fixed, if a port fails NO switch will occur.