Endress+Hauser Tankvision Multi Scan NXA83 User manual

Products Solutions Services
BA01296G/00/EN/01.14
71244033
Valid as of software version:
3.0.10
Operating Instructions
Tankvision
Multi Scan NXA83
Redundancy manual

Tankvision
2Endress+Hauser
Table of Contents
1 Document information . . . . . . . . . . . . . . 3
1.1 Target audience for this manual . . . . . . . . . . . . . . . 3
1.2 Version history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.3 Document function . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1.4 Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
2 Basic safety instructions . . . . . . . . . . . . 5
2.1 Requirements for the personnel . . . . . . . . . . . . . . . 5
2.2 IT security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2.3 Designated use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2.4 Workplace safety . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.5 Operational safety . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.6 Product safety . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
3 Introduction . . . . . . . . . . . . . . . . . . . . . . . 7
4 Switch By System. . . . . . . . . . . . . . . . . . . 8
4.1 Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
4.2 Port Latching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
4.3 Boot Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
4.4 Mode display and control . . . . . . . . . . . . . . . . . . . . . 9
4.5 Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Tankvision Document information
Endress+Hauser 3
1 Document information
1.1 Target audience for this manual
This manual is giving detailed information on the system capabilities and architecture. It
supports project and sales engineers in designing the system architecture during acquisition
and execution phase. Furthermore during operation time of the system all servicing
personnel in need of detailed knowledge about the system capabilites.
1.2 Version history
1.3 Document function
1.3.1 Used symbols
Safety symbols
Symbols for certain types of information
Document version Valid for SW version Changes to the previous version
BA01296G/00/EN/01.14 3.0.10 Initial version
Symbol Meaning
A0011189-EN
DANGER!
This symbol alerts you to a dangerous situation. Failure to avoid this situation will
result in serious or fatal injury.
A0011190-EN
WARNING!
This symbol alerts you to a dangerous situation. Failure to avoid this situation can
result in serious or fatal injury.
A0011191-EN
CAUTION!
This symbol alerts you to a dangerous situation. Failure to avoid this situation can
result in minor or medium injury.
A0011192-EN
NOTICE!
This symbol contains information on procedures and other facts which do not result
in personal injury.
Symbol Meaning
A0011193
Tip
Indicates additional information.
A0011195
Reference to page
Refers to the corresponding page number.
, , ... Series of steps
A0018373
Result of a sequence of actions
DANGER
WARNING
CAUTION
NOTICE
1.
2.

Document information Tankvision
4Endress+Hauser
Symbols in graphics
1.4 Documentation
1.4.1 Operating instructions
Symbol Meaning
1, 2, 3 ... Item numbers
, , ... Series of steps
A, B, C... Views
A0011187
Hazardous area
Indicates a hazardous area.
A0011188
Indicates a non-hazardous location
Safe area (non-hazardous area)
Document number Instrument Type of Document
BA01288G/00
•MultiScanNXA83
Operation manual
BA01290G/00 Installation and Maintenance manual
BA01291G/00 Configuration manual
BA01292G/00 DCC Configuration manual
BA01289G/00 OPC Tank Data Server manual
BA01297G/00 Web Client System Operation manual
BA01287G/00 Weights and Measures Additions
BA01296G/00 Redundancy manual
1.
2.
-
.

Tankvision Basic safety instructions
Endress+Hauser 5
2 Basic safety instructions
2.1 Requirements for the personnel
The personnel for installation, commissioning, diagnostics and maintenance must fulfill the
following requirements:
• Trained, qualified specialists: must have a relevant qualification for this specific function
and task
• Are authorized by the plant owner/operator
• Are familiar with federal/national regulations
• Before beginning work, the specialist staff must have read and understood the instructions
in the Operating Instructions and supplementary documentation as well as in the
certificates
(depending on the application)
• Following instructions and basic conditions
The operating personnel must fulfill the following requirements:
• Being instructed and authorized according to the requirements of the task by the facility's
owner operator
• Following the instructions in these Operating Instructions
2.2 IT security
We only provide a warranty if the device is installed and used as described in the Operating
Instructions. The device is equipped with security mechanisms to protect it against any
inadvertent changes to the device settings.
IT security measures in line with operators' security standards and designed to provide
additional protection for the device and device data transfer must be implemented by the
operators themselves.
Endress+Hauser can be contacted to provide support in performing this task.
2.3 Designated use
2.3.1 Applications
Inventory control
By using Tankvision Multi Scan to monitor the tank level and stored volume of valuable
liquids remotely, owners or operators of tank farms or terminals for petroleum products and
chemicals (liquids) can visualize the volume of the stored medium in real time. The data can
be used to plan the inventory and distribution. The data can also be used to manage tank
farm operations like pumping or transferring products. Tankvision has its unique concept
using network technology. Without using proprietary software, the users can visualize and
manage their valuable liquids stored in the tanks by a web browser. Tankvision Multi Scan
is a flexible and cost effective solution due to its scalable architecture. The application
coverage goes from small depots with only a few tanks up to refineries.
Inventory Calculations
Tankvision Multi Scan calculates based on measured variables and tank capacity tables:
• Observed/Gross volumes,
•Netvolumesand
•Mass

Basic safety instructions Tankvision
6Endress+Hauser
of products like
• Hydrocarbons,
• Liquefied gases,
• Asphalt.
They are corrected according to international standards, including API/ASTM tables 5A, 5B/
6, 53A, 53B/54, 23/24, LPG.
This includes temperature corrections at 15 °C, 60 °F and alternative temperatures.
Additionally, available pumpable volumes and water volume are calculated.
Remote configuration of measuring equipment
Some on-site operations can be avoided using remote configuration of measuring equipment
during commissioning or maintenance (the availability of this feature may depend on the
system configuration).
Application areas
• Tank farms in refineries
• Ship loading terminals
• Marketing and distribution terminals
• Pipeline terminals
• Logistic terminals for tanks storing products like crude oils, refined white and black
products, chemicals, LPG
2.4 Workplace safety
For work on and with the device:
• Wear the required personal protective equipment according to federal/national
regulations.
• Switch off the supply voltage before connecting the device.
2.5 Operational safety
Risk of injury!
• Operate the device in proper technical condition and fail-safe condition only.
• The operator is responsible for interference-free operation of the device.
Conversions to the device
Unauthorized modifications to the device are not permitted and can lead to unforeseeable
dangers.
• If, despite this, modifications are required, consult with Endress+Hauser.
Repair
To ensure continued operational safety and reliability,
• Carry out repairs on the device only if they are expressly permitted.
• Observe federal/national regulations pertaining to repair of an electrical device.
• Use original spare parts and accessories from Endress+Hauser only.
2.6 Product safety
The device is designed to meet state-of-the-art safety requirements, has been tested and left
thefactory in a condition in which it is safe to operate. The device complies with the
applicable standards and regulations as listed in the EC declaration of conformity and thus
complies with the statutory requirements of the EG directives. Endress+Hauser confirms the
successful testing of the device by affixing to it the CE mark.

Tankvision Introduction
Endress+Hauser 7
3Introduction
The Multi Scan NXA83 is a configurable system designed for tank gauging and tank
inventory management systems.
Redundant operation with a pair of Multi Scan NXA83 linked together is supported, so that
only one NXA83 will poll the gauges. The other Multi Scan NXA83 will automatically update
its database with live data from the active Multi Scan NXA83.
This mode of redundancy is called Switch By System and this document outlines the
configuration and operation of the two Multi Scan NXA83.
There are two other modes of redundancy, both of which operate on a single Multi Scan
NXA83 (i.e. not a redundant pair):
•Switch By Gauge: Gauges are configured with two ports (Primary and Backup) on the
same Multi Scan NXA83. If the Multi Scan NXA83 loses connection to a gauge on one port
it will switch to poll the gauge from the other port. This is on an individual gauge basis,
thus both Primary and Backup ports may be polling at the same time.
•Switch By Interface: This is similar the switch by Gauge, except that the Multi Scan
NXA83 will poll ALL gauges on only one port (i.e. Primary on startup). Only when
communication to all gauges has failed on this port will the Multi Scan NXA83 switch to
poll gauges from the other port. Thus the Primary and Backup ports will never poll at the
same time.
This manual is solely concerned with the redundancy functionality, it is assumed that the
user has read the Multi Scan NXA83 manuals and is familiar with configuring a Multi Scan
NXA83 database.

Switch By System Tankvision
8Endress+Hauser
4 Switch By System
4.1 Operation
The diagram below shows an example of a pair of Multi Scan NXA83 used in the Switch By
System redundancy mode.
NXA83_System-configuration_Switch-by-system
1 Tankvision Professional NXA85 Workstation
2Ethernet
3 Tankvision Multi Scan NXA83
4 Control link RS232
5 Fieldbus protocol
6 Proservo
7Promonitor
8Prothermo
9 Tank Side Monitor
10 Micropilot
The two NXA83 have a number of field loops (2 Enraf BPM in this example) connected to
both Multi Scan NXA83.
There are also 2 Control links connected between the NXA83, these are used to transfer data
between the systems, one for each direction of data transfer.
In normal operation one Multi Scan NXA83 will be in Live Polling mode, that is, polling for
all field data from the gauges. The other Multi Scan NXA83 will be in Redundant Link mode,
and it will be getting data from the live Multi Scan NXA83 via one of the Control Links.
Therefore both Multi Scan NXA83 will have live field data, which will be displayed on screen
and be available on any slave (Modbus etc.) port or OPC connection. Slave ports may be
configured to not reply on the passive system, to mimic functionality in older equipment
such as the Datacon.
55
4
4
8
8
10
3
9
3
11
22
7
6

Tankvision Switch By System
Endress+Hauser 9
If one of the field ports on the live system does not receive a correctly formatted reply for
longer than the timeout period (default 60 seconds), it will be marked as failed and initiate
a switch. This will cause the Multi Scan NXA83 to stop polling all field ports and switch to
Redundant Link mode. The second Multi Scan NXA83 will detect this change, switch to Live
Polling mode and start to poll all the field ports for gauge data.
During the switchover, no data will be lost and no gauging alarms will be raised in the Multi
Scan NXA83 or in any connected tank gauging software. An event will, however, be raised
on the Multi Scan NXA83 recording the switchover.
If, following the switch, the field port on the second Multi Scan NXA83 also fails to receive
correctly formatted data No Reply alarms will be generated.
If at any time an individual gauge fails on a port (i.e. does not reply), but other gauges are
returning valid data, the failed gauge will immediately be set to error and an alarm raised.
This will not trigger a switch.
4.2 Port Latching
If a port has failed on both Multi Scan NXA83 the system will "Latch" for that port. A Latched
port will not trigger redundancy mode switching. This state will remain until valid
communications is restored to the port. If the second Multi Scan NXA83 is not connected or
powered up, all ports will latch and no switching will occur.
Latching does not affect other ports, so if an Unlatched port fails redundant mode switching
will occur as normal.
4.3 Boot Up
Multi Scan NXA83 which are configured as "Switch by System" will initially boot up in
Redundant Link mode and check to see if there is a Multi Scan NXA83 in Live Polling Mode.
If a Multi Scan NXA83 in Redundant Link mode does not find a "Live" system within a timeout
period it will switch to Live Polling mode. The timeout period contains a random element, so
that if two Multi Scan NXA83 boot at exactly the same time, one should always switch to
Live Polling before the other.
If there are no Control Link connections between the two systems both will eventually switch
to Live Polling mode.
4.4 Mode display and control
The current redundancy mode may be displayed in the NXA83 runtime displays on the local
touchscreen.
A default screen is available on the configurator, although this may altered as required
during the configuration process.

Switch By System Tankvision
10 Endress+Hauser
NXA83_Display_Redundancy_Automatic
This screen shows the mode that the Multi Scan NXA83 is currently operating. The mode
may also be manually controlled using this screen.
The redundant mode is normally selected automatically, i.e. the two systems will determine
the best mode for each.
There may be times when the redundancy mode needs to be fixed to prevent switching, e.g.
during maintenance periods. This can be achieved by selecting the Set Mode Never
Changes option. When the mode is set to Fixed, if a port fails NO switch will occur.

Tankvision Switch By System
Endress+Hauser 11
NXA83_Display_Redundancy_Fixed
When a NXA83 is rebooted, it always starts in automatic redundant selection.
4.5 Configuration
The first step to configuring a redundant database on the Multi Scan NXA83 is to configure
the redundancy mode. This is set using the Port Configuration module in the
Communications menu.
Click on the Host Comms tab, and set the Redundancy Settings to Switch By System.

Switch By System Tankvision
12 Endress+Hauser
NXA83_Port-Configuration_Host-Comms_Switch-By-System
The Configure button will be enabled. Click this button to determine the method of
connecting the control links between the two Multi Scan NXA83.
NXA83_Port-Configuration_Host-Comms_Redundancy-Settings
There are five options to select from:
•COM ports 1 and 2 used for Control Ports: The Multi Scan NXA83 automatically
configures the communications ports for redundancy. Ensure that COM 1 and COM 2 are
NOT selected as "In Use" as either Host or Slave ports. Connect a Serial Cross-over lead from
COM 1 on one Multi Scan NXA83 to COM 2 on the other for both Multi Scan NXA83. This
is the recommended method of connecting the control links.
•COM ports 7 and 8 used for Control Ports: The Multi Scan NXA83 automatically
configures the communications ports for redundancy. Ensure that COM 7 and COM 8 are
NOT selected as "In Use" as either Host or Slave ports. Connect a Serial Cross-over lead from
COM 7 on one Multi Scan NXA83 to COM 8 on the other for both Multi Scan NXA83.
•Manual Selection of Control Ports: This option must be selected when the control ports
have been manually configured. There must be two control ports configured:
– 1 DCC Host port configured as a Redundant Link Control protocol.
– 1 DCC Slave port configured as a Redundant Link Control protocol.
These can be either standard RS232 COM ports (recommended for manual configuration)
or Network ports. The communication parameters should be set identically for both Multi
Scan NXA83.

Tankvision Switch By System
Endress+Hauser 13
In operation the Host Redundant Link Control is connected to the Slave Redundant Link
Control of the other system, and vice-versa.
•Network used for Control Ports: The Multi Scan NXA83 automatically configures
network ports for redundancy. The Network address of the second Multi Scan NXA83
must be supplied in the Network Address field. Both Multi Scan NXA83 must be connected
to the same network, or have a Network Cross-over lead connected between the Ethernet
ports of the two Multi Scan NXA83. Connection using a Network Cross-over lead is not a
recommended method for Redundant Link since it prevents access to the Multi Scan
NXA83 operating system using a remote desktop connection.
•No Control Ports Used: If this option is selected both Multi Scan NXA83 will default to
Live polling mode. This option should NOT be used for Switch By System redundancy.
NXA83_Port-Configuration_Host-Comms
Next configure all field ports in the Host Comms page.
After the interfaces have been configured gauges may be configured with redundant
operation. To do this, select the gauge in the Gauge Configuration screen in the
Configurator tools, then set the COM port field to be the field port (i.e. the port that the
gauges are connected to) and the Backup COM port field to be the Host Redundant Link
Control port.

Switch By System Tankvision
14 Endress+Hauser
NXA83_Device-Configuration_Comm-Port_Primary_Backup
1 Primary Interface Comm Port
2 Backup Interface Comm Port
4.5.1 Configuration Options
The redundancy operation may be modified for individual ports by editing the Redundancy
Settings section of the COM port Settings dialog.
NXA83_COM-Port-Settings
For Host ports the following settings may be adjusted:
•Do Not Trigger Redundant Switch: If ticked the port will not trigger a switchover if it fails
12

Tankvision Switch By System
Endress+Hauser 15
•Timeout Period: The time period for determining if the port has failed. If no replies are
received from devices on the port for longer than this period a switchover will be triggered.
Defaults to 60 seconds.
For Slave ports the following setting may be adjusted:
•Do Not Reply When Passive: The port will not reply to any requests if it is running on the
passive system.
4.5.2 Current Loop Board Configuration
When using Current Loop interface boards with redundant systems (such as when
interfacing to Whessoe WM500/550 devices) the following should be implemented:
Set the Flow Control Field to Redundant.
NXA83_COM-Port-Settings_Flow-Control
Remove the Redundant Mode Control jumper from each board.

Switch By System Tankvision
16 Endress+Hauser
NXA83_Current-Loop-Board_Redundant-Mode-Control-jumper
1TxLED
2RxLED
3 Redundant Mode Control jumper (Fitted = Loop always powered; Not Fitted = Redundant Mode)
4 Loop Current Adjust
5Master/SlaveSelect
6 Power Converters
1
2
3
4
5
6

Tankvision
Endress+Hauser 17
Index
B
Boot Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
C
Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Configuration Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Current Loop Board Configuration . . . . . . . . . . . . . . . . . 15
D
Designated use. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
I
Icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
M
Mode display and control . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
O
Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
P
Port Latching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
S
Safety icons. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Switch By System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Symbols. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

www.addresses.endress.com
71244033