Siemens SIMATIC PCS 7 Parts list manual

SIMATIC
Process Control System PCS 7
Fault-tolerant Process Control
Systems (V8.1)
Function Manual
Valid for PCS 7 as of V8.1
11/2014
A5E34878832-AA
Preface 1
Basics of Fault Tolerance 2
Fault-tolerant Solutions in
PCS 7 3
Advantages of fault-tolerant
components 4
Component Replacement
and Plant Changes 5
Failure, Switchover and
Return of Fault-tolerant
Components 6
Diagnostics 7

Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will be
used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property
damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified
personnel are those who, based on their training and experience, are capable of identifying risks and avoiding
potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended or
approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described.
Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in
this publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG
Industry Sector
Postfach 48 48
90026 NÜRNBERG
GERMANY
A5E34878832-AA
Ⓟ 09/2014 Subject to change
Copyright © Siemens AG 2014.
All rights reserved

Table of contents
1 Preface.........................................................................................................................................................7
2Basics of Fault Tolerance...........................................................................................................................13
2.1 Rationale for using fault-tolerant process control systems.....................................................13
2.2 System-wide availability analyses..........................................................................................16
2.3 PCS 7 redundancy concept...................................................................................................17
2.4 Overview of the PCS 7 redundancy features.........................................................................20
2.5 Features for the configuration phase.....................................................................................22
2.6 Features for the commissioning and operation phases.........................................................23
2.7 Features for servicing and system expansions......................................................................25
2.8 Definition of availability...........................................................................................................26
2.9 Definition of the standby modes.............................................................................................27
2.10 Redundancy nodes................................................................................................................28
3 Fault-tolerant Solutions in PCS 7...............................................................................................................31
3.1 Solutions for the I/O...............................................................................................................31
3.1.1 Redundant I/O........................................................................................................................32
3.1.2 Switched I/O...........................................................................................................................34
3.1.3 Components in the distributed I/O..........................................................................................36
3.1.3.1 Redundant interface modules in distributed I/O.....................................................................36
3.1.3.2 Redundant I/O modules.........................................................................................................37
3.1.3.3 Redundant actuators and sensors.........................................................................................39
3.2 Solutions for automation systems..........................................................................................40
3.2.1 S7-400H hardware components............................................................................................40
3.2.2 How the SIMATIC S7-400H AS operates..............................................................................43
3.3 Solutions for communication..................................................................................................44
3.3.1 Network components.............................................................................................................46
3.3.2 Media Redundancy Protocol..................................................................................................49
3.3.3 Solutions for the terminal bus.................................................................................................51
3.3.3.1 Connecting PC stations to the terminal bus...........................................................................51
3.3.3.2 Fault-tolerant terminal bus.....................................................................................................51
3.3.3.3 Redundant, fault-tolerant terminal bus...................................................................................53
3.3.3.4 Redundant, fault-tolerant terminal bus based on the Parallel Redundancy Protocol (PRP)......54
3.3.3.5 Redundant, fault-tolerant terminal bus based on the INTEL TEAM mode.............................57
3.3.4 Solutions for the plant bus......................................................................................................60
3.3.4.1 Connecting PC stations to the plant bus................................................................................60
3.3.4.2 Fault-tolerant plant bus..........................................................................................................61
3.3.4.3 Redundant, fault-tolerant plant bus........................................................................................63
3.3.4.4 AS 410H on redundant, fault-tolerant plant bus.....................................................................66
3.3.5 Solutions for the fieldbus........................................................................................................68
3.3.5.1 Redundant PROFIBUS DP....................................................................................................68
Fault-tolerant Process Control Systems (V8.1)
Function Manual, 11/2014, A5E34878832-AA 3

3.3.5.2 Fault-tolerant fieldbus based on PROFINET..........................................................................70
3.3.5.3 Gateway between redundant and non-redundant PROFIBUS DP........................................71
3.3.5.4 Connection of PROFIBUS PA to PROFIBUS DP..................................................................72
3.3.5.5 Fault-tolerant PROFIBUS PA.................................................................................................74
3.3.5.6 Connecting the FOUNDATION Fieldbus to PROFIBUS DP..................................................78
3.3.5.7 Fault-tolerant FOUNDATION Fieldbus...................................................................................80
3.4 Solutions for integrating a PCS 7 system in a domain...........................................................84
3.5 Solutions for OS servers........................................................................................................85
3.6 Solutions for OS clients..........................................................................................................89
3.6.1 Additional OS clients..............................................................................................................89
3.6.2 Permanent operability............................................................................................................89
3.7 Solutions for SIMATIC BATCH..............................................................................................91
3.8 Solutions for Route Control server.........................................................................................94
3.9 Solutions for engineering station............................................................................................96
3.10 Time synchronization.............................................................................................................97
4 Advantages of fault-tolerant components...................................................................................................99
4.1 Creating and expanding a project with pre-configured stations.............................................99
4.2 SIMATIC H Station...............................................................................................................100
4.2.1 Overview of configuration tasks...........................................................................................100
4.2.2 How to add a SIMATIC H station to your project.................................................................100
4.2.3 How to insert synchronization modules into the H CPU.......................................................102
4.2.4 How to configure redundant communication processors.....................................................103
4.2.5 How to set the failure reaction of the input/output modules on the CPU..............................105
4.3 Communication connections................................................................................................107
4.3.1 Overview of configuration tasks...........................................................................................107
4.3.2 Configuring the connection to the terminal bus....................................................................107
4.3.2.1 How to configure the redundant terminal bus on the basis of the Parallel Redundancy
Protocol................................................................................................................................107
4.3.2.2 How to configure the redundant terminal bus on the basis of the INTEL TEAM mode .......108
4.3.2.3 How to connect singular components to the redundant terminal bus on the basis of the
Parallel Redundancy Protocol..............................................................................................111
4.3.3 How to configure a fault-tolerant plant bus...........................................................................112
4.3.4 How to configure a redundant PROFIBUS DP.....................................................................114
4.3.5 How to configure a fault-tolerant fieldbus on the basis of PROFINET.................................117
4.3.6 How to configure a media-redundant fieldbus on the basis of PROFINET..........................120
4.3.7 How to configure the redundant PROFIBUS PA..................................................................123
4.4 Distributed I/O......................................................................................................................126
4.4.1 Overview of configuration tasks...........................................................................................126
4.4.2 How to configure the redundant interface for the I/O device................................................126
4.4.3 How to configure redundant I/O modules.............................................................................129
4.4.4 How to configure the redundancy for HART field devices....................................................133
4.4.5 How to configure the Y Link.................................................................................................136
4.4.6 Configuring DP/PA Link.......................................................................................................138
4.4.7 Configuring FF Link..............................................................................................................140
4.4.8 Configuration of redundant signals......................................................................................141
4.5 Operator stations..................................................................................................................143
Table of contents
Fault-tolerant Process Control Systems (V8.1)
4Function Manual, 11/2014, A5E34878832-AA

4.5.1 Overview of configuration tasks...........................................................................................143
4.5.2 How to configure an OS server and its redundant OS partner server..................................143
4.5.3 How to set the project paths of the destination OS and standby OS...................................146
4.5.4 How to configure a redundant connection between an OS and AS.....................................147
4.5.5 How to configure redundancy for OS servers on the engineering station............................150
4.5.6 How to set the redundancy connection for OS servers........................................................152
4.5.7 How to assign an S7 program to an OS...............................................................................153
4.5.8 How to configure an OS client..............................................................................................154
4.5.9 How to configure an OS client for permanent operability.....................................................156
4.5.10 How to download a SIMATIC PCS 7 project to the target systems.....................................159
4.5.11 Evaluating the "@RM_MASTER" Redundancy Variables with Scripts................................160
4.6 SIMATIC BATCH Stations...................................................................................................161
4.6.1 Overview of configuration tasks...........................................................................................161
4.6.2 How to configure a BATCH server and its redundant BATCH partner server......................161
4.6.3 How to configure a BATCH client.........................................................................................163
4.6.4 How to set the redundancy monitoring of BATCH servers...................................................165
4.6.5 How to configure the redundancy connection for BATCH servers on the engineering
station...................................................................................................................................166
4.6.6 How to set the redundancy connection for BATCH servers.................................................167
4.6.7 How to download the target systems for SIMATIC BATCH.................................................167
4.7 SIMATIC Route Control stations..........................................................................................169
4.7.1 Overview of configuration tasks...........................................................................................169
4.7.2 How to configure a Route Control server and its redundant Route Control partner server....169
4.7.3 How to configure a Route Control client...............................................................................171
4.7.4 How to configure a redundant connection between a Route Control server and AS...........174
4.7.5 How to set the redundancy connection for Route Control servers.......................................176
4.7.6 How to set the redundancy of the Route Control servers....................................................177
4.7.7 How to download the target systems for Route Control.......................................................177
4.8 Archive servers (Process Historian and Information Server)...............................................178
4.8.1 How to configure a Process Historian and its redundant partner server..............................178
5 Component Replacement and Plant Changes.........................................................................................181
5.1 Failure and replacement of bus components.......................................................................181
5.1.1 Replacement of SIMATIC components in runtime...............................................................181
5.1.2 Replacement of bus components in runtime........................................................................182
5.1.3 Replacement of operator stations in runtime.......................................................................183
5.1.4 Replacement of BATCH stations in runtime.........................................................................184
5.1.5 Replacement of Route Control stations in runtime...............................................................185
5.2 Plant changes in runtime......................................................................................................187
6 Failure, Switchover and Return of Fault-tolerant Components.................................................................189
6.1 I/O........................................................................................................................................189
6.1.1 Failure of redundant interface modules................................................................................189
6.1.2 Failure of redundant I/O modules.........................................................................................189
6.2 Automation system...............................................................................................................192
6.2.1 Failure of the master CPU....................................................................................................192
6.2.2 Failure of a fiber-optic cable.................................................................................................192
6.3 Communication....................................................................................................................195
6.3.1 Failure of redundant bus components..................................................................................195
Table of contents
Fault-tolerant Process Control Systems (V8.1)
Function Manual, 11/2014, A5E34878832-AA 5

6.4 OS server.............................................................................................................................196
6.4.1 Failure, failover and restarting of redundant OS servers.....................................................196
6.5 BATCH Server.....................................................................................................................201
6.5.1 Reaction of BATCH servers to failure..................................................................................201
6.6 Route Control server............................................................................................................202
6.6.1 Reaction of Route Control servers to failure........................................................................202
6.7 OS clients.............................................................................................................................204
6.7.1 Failover reactions of OS clients with permanent operability................................................204
6.8 BATCH clients......................................................................................................................206
6.8.1 Failover reactions of BATCH clients....................................................................................206
6.9 Route Control clients............................................................................................................207
6.9.1 Failover reaction of Route Control clients............................................................................207
6.10 Guidelines for updating a redundant OS in runtime.............................................................208
6.10.1 Introduction..........................................................................................................................208
6.10.2 Overview of the required tasks.............................................................................................210
6.10.3 Phase 1: Updating Server_2................................................................................................214
6.10.4 Phase 2: Updating OS clients interconnected with Server_2...............................................217
6.10.5 Phase 3: Downloading the connections, gateways and changes to the AS........................219
6.10.6 Phase 4: Updating the OS clients interconnected with Server_1.........................................220
6.10.7 Phase 5: Updating Server_2................................................................................................222
6.11 Guide to updating a redundant BATCH server in runtime....................................................226
6.11.1 Software update (migration).................................................................................................226
6.12 Guide to updating a redundant Route Control server in runtime..........................................227
6.12.1 Updating a redundant Route Control server in runtime........................................................227
7 Diagnostics...............................................................................................................................................229
7.1 Advanced self-diagnostics of communication connections..................................................230
7.2 State of redundant operator stations in diagnostic pictures.................................................232
Index.........................................................................................................................................................233
Table of contents
Fault-tolerant Process Control Systems (V8.1)
6Function Manual, 11/2014, A5E34878832-AA

Preface 1
Purpose of this documentation
This documentation informs you about the following aspects of configuring fault-tolerant
systems with the SIMATIC PCS 7 Process Control System:
● The basic solution concepts
● The functional mechanisms
● The most important configurations
It presents the availability solutions on all automation levels (control, process, field).
You will find references to other product manuals containing specific information for working
with individual components.
Options for accessing PCS 7 documentation
You can find the PCS 7 documentation at the following locations:
● On the
Process Control System; SIMATIC PCS 7 DVD
● After installation, on the computer
● On the Internet
Full versions of the documentation are available from the "Technical Documentation SIMATIC
PCS 7" web pages: http:\\www.siemens.com/pcs7-documentation (http:\\www.siemens.com/
pcs7-documentation)
Note
PCS 7 Readme (Internet version)
The information provided in the PCS 7 Readme on the Internet takes precedence over all PCS
7 documentation.
Please read this PCS 7 Readme carefully; it contains important information and amendments
on PCS 7.
Fault-tolerant Process Control Systems (V8.1)
Function Manual, 11/2014, A5E34878832-AA 7

PCS 7 documentation on the Process Control System; SIMATIC PCS 7 DVD
●PCS 7 Readme (DVD version)
The PCS 7 Readme on the Process Control System; SIMATIC PCS 7 DVD contains
important information about PCS 7 and takes precedence over the PCS 7 documentation
supplied with the product. After installation of PCS 7, you can find the Process Control
System PCS 7; PCS 7 Readme document in the Windows Start menu using the following
path:
Siemens Automation > SIMATIC > Product Information > <language>
● You will find the most important PCS 7 system documentation at the following locations:
– On the SIMATIC PCS 7 DVD in the "_Manuals" folder
– On the engineering station as online help (CHM file) for the SIMATIC Manager
application
– On the engineering station as a PDF file in the Windows Start menu using the following
path:
Siemens Automation > SIMATIC > Documentation > <language>
Note
The following PCS 7 system documentation is included:
● Catalog Overview Process Control System PCS 7; PCS 7 Documentation
● Configuration manual Process Control System PCS 7; Engineering System
● Function manual Process Control System PCS 7; PCS 7 PC Configuration
● Configuration manual Process Control System PCS 7; Operator Station
● Function manual Process Control System PCS 7; OS Process Control
● The product documentation is installed with the relevant product.
Preface
Fault-tolerant Process Control Systems (V8.1)
8Function Manual, 11/2014, A5E34878832-AA

Documentation for PCS 7 on the Internet (current versions)
The latest documentation for the PCS 7 versions is available from the "Technical
Documentation SIMATIC PCS 7" web page:
●In the section "Software manuals for SIMATIC PCS 7 ..."
– The link to the latest system and product documentation of the particular PCS 7 version.
– The link to download the Setup for the latest system documentation
"PCS 7 Documentation Portal Setup".
Note
PCS 7 Documentation Portal Setup
Setup includes the complete system documentation for PCS 7 (PDF files and online
help).
● You can install this Setup without PCS 7.
● If you install the Setup on the engineering station, the following documents are
updated (missing documents are added and existing documents are overwritten if
the original installation folder is selected):
– Online help of the "SIMATIC Manager" application: (CHM files)
– System documentation for PCS 7 in the Windows Start menu:
Siemens Automation > SIMATIC > Documentation > Language > PDF files
● The PCS 7 Newsletter keeps you informed when new versions of the system
documentation become available.
– The link for downloading the entire PCS 7 documentation as a Manual Collection in the
My Documentation Manager (http://support.automation.siemens.com/WW/view/en/
38715968).
The Manual Collection includes the manuals for hardware and software.
●In the section "Hardware Manuals for SIMATIC PCS 7 ..."
– The link to the latest manuals for components released with a PCS 7 version.
– The link to the latest manuals for approved SIMATIC PCS 7 industry software for PCS
7.
Catalogs, brochures, customer magazines and demo software
You can find this information on the Internet at: Information and Download Center (http://
www.automation.siemens.com/mcms/infocenter)
Required basic knowledge
General knowledge in the area of automation engineering and basic knowledge of PCS 7 is
required to understand this documentation. It is also assumed that the reader knows how to
use computers or other equipment similar to PCs (such as programming devices) with the
Windows operating system.
The configuration manuals and the Getting Started documentation for PCS 7 will provide you
with basic information regarding the use of PCS 7.
Preface
Fault-tolerant Process Control Systems (V8.1)
Function Manual, 11/2014, A5E34878832-AA 9

Position in the information landscape
The following documentation provides more information about fault-tolerant process control
systems and the handling of the individual components. This documentation is part of the PCS
7 software.
Manual Contents
Getting Started Process Control Sys‐
tem PCS 7; Part 1 - Getting Started
● Creating projects
● Working with the CFC Editor
● Working with the Import/Export Wizard
● Working with the SFC Editor
● Compiling, downloading and testing
● Working with the operator station
Configuration manual Process Con‐
trol System PCS 7; Engineering Sys‐
tem
● Basics of PCS 7
● Creating projects
● Configuring hardware
● Configuring networks
Configuration manual Process Con‐
trol System PCS 7; Operator Station
● Configuring SIMATIC connections
● Interconnecting faceplates
● Configuring operator stations
● Compiling the OS
● Installation guidelines
Process Control System PCS 7;
Maintenance Station function man‐
ual
● Activation of the maintenance functions
● Configuration of redundancy
● Adding the OPC server
Configuration manual WinCC
● Getting Started
● Operating principle of WinCC redundancy
● User archives
● Creating the "Project_Redundancy_Server" example project
● Description of the WinCC projects
● Server project
Manual WinCC Hardware Options,
Part 3 Redundancy
● Structure of a redundant WinCC system
● Operating principle of WinCC redundancy
● Configuring the OS server pair
● Guide for setting up a redundant system
● Entering the servers in Windows
Manual
Process Control System PCS 7; SI‐
MATIC BATCH
● Structure of a redundant BATCH system
● Configuring the BATCH server pair
● Installation guidelines
Manual
Process Control System PCS 7; SI‐
MATIC Route Control
● Setting up a redundant Route Control system
● Configuring the Route Control server pair
● Installation guidelines
Preface
Fault-tolerant Process Control Systems (V8.1)
10 Function Manual, 11/2014, A5E34878832-AA

Manual Contents
Manuals for PCS 7 Software Update ● Updating a PCS 7 Project with and without use of new
functions
● Upgrading a redundant system during online operation
Manual Automation System
S7-400H, Fault-tolerant Systems
● Redundant SIMATIC automation systems
● Increasing availability
● System and operating modes of the S7-400H
● Linking and updating
Manual Modifying the System in
Runtime via CiR
● Modifying standard systems in runtime
Manual Distributed I/O Device
ET 200M
● Configuration options
● Mounting
● Wiring
● Commissioning and diagnostics
Manual Distributed I/O Device
ET 200iSP
● Configuration options
● Mounting
● Wiring
● Commissioning and diagnostics
Operating instructions SIMATIC
NET; Industrial Ethernet Switches
SCALANCE X-200
● Configuration options
● Mounting
● Wiring
● Commissioning and diagnostics
Operating instructions SIMATIC
NET; Industrial Ethernet Switches
SCALANCE X-400
● Configuration options
● Mounting
● Wiring
● Commissioning and diagnostics
Manual SIMATIC NET Manual In‐
dustrial Twisted Pair and Fiber-Optic
Networks
● Networks with Industrial Ethernet and Fast Ethernet
● Network configuration
● Passive components for electrical and optical networks
● Active components and topologies
Manual SIMATIC Diagnostic Repeat‐
er for PROFIBUS-DP
● Configuration options
● Mounting
● Wiring
● Commissioning and diagnostics
Manual SIMATIC DP/PA Coupler,
DP/PA Link and
Y Link
● Fundamentals of PROFIBUS PA
● DP/PA Coupler
● DP/PA Link
● DP/PA Link in redundant operation with the S7-400H
Documentation
PCS 7 - Released Modules
● Components released for redundancy in PCS 7
Preface
Fault-tolerant Process Control Systems (V8.1)
Function Manual, 11/2014, A5E34878832-AA 11

Guide
This manual is organized into the following topics:
● Basics of fault-tolerance in PCS 7
● Description of fault-tolerant solutions in PCS 7
● Description of configurations for various redundant components in PCS 7
● Failure scenarios and diagnostic options
● Options for quantitative analysis of fault-tolerant process control systems
● Glossary with important terms for understanding this documentation
● Index of important keywords
Conventions
In this documentation, the names of elements in the software interface are specified in the
language of this documentation. If you have installed a multi-language package for the
operating system, some of the designations will be displayed in the base language of the
operating system after a language switch and will, therefore, differ from the designations used
in the documentation.
Changes compared to the previous version
Below you will find an overview of the most important changes in the documentation compared
to the previous version:
● Using the redundant, fault-tolerant terminal bus
You can find information on this in the section "Solutions for the terminal bus (Page 51)"
● Using the Process Historian and Information Server for central archiving
– For additional information on this topic, refer to the
SIMATIC HMI; SIMATIC Process
Historian documentation.
– Migration of the central archive server (CAS) to Process Historian
You can find additional information on this in the "WinCC Classic Information System".
● Using a fault-tolerant fieldbus based on PROFINET
You can find information on this in the section "Fault-tolerant fieldbus based on
PROFINET (Page 70)"
● Using the redundant FOUNDATION Fieldbus
You can find information about this in the "Fault-tolerant FOUNDATION Fieldbus
(Page 80)" section
Preface
Fault-tolerant Process Control Systems (V8.1)
12 Function Manual, 11/2014, A5E34878832-AA

Basics of Fault Tolerance 2
2.1 Rationale for using fault-tolerant process control systems
Advantages of fault-tolerant components
Process control systems are responsible for controlling, monitoring and documenting
production and manufacturing processes. Due to the increasing degree of automation and the
demand for improved efficiency, the availability of these systems is playing an increasingly
important role.
Failure of the control system or any of its components can lead to costly downtime in production
and manufacturing. The expense involved in restarting a continuous process also has to be
taken into consideration along with the actual production losses resulting from a failure. In
addition, the loss of an entire batch may occur due to lost quality data. If the process is intended
to operate without supervisory or service personnel, a process control system must be
configured fault-tolerant for all of the components.
You can minimize the risk of a production failure and other detrimental effects by using fault-
tolerant components in a process control system. A redundant design ensures increased
availability of a control system. This means that all components involved in the process have
a backup in continuous operation that simultaneously participates in the control tasks. When
a fault occurs or one of the control system components fails, the correctly operating redundant
component takes over the continuing control task. The ultimate goal is to increase the fault
tolerance and fail-safe performance in process control systems.
The following applies to you as the plant operator:
The higher the cost of a production stoppage, the more you need a fault-tolerant system. The
higher initial investment usually associated with a fault-tolerant system is soon offset by the
savings resulting from decreased production downtimes.
Fault-tolerant PCS 7 process control system
The following components of the PCS 7 process control system allow you to implement fault-
tolerance at all automation levels in the form and to the degree you require:
● Operator stations, maintenance station, central archive server, BATCH stations, Route
Control stations (management level)
● Bus system
● Automation systems (process level)
● Distributed I/O (field level)
The following figure shows an example of a fault-tolerant process control system with PCS 7
components.
Fault-tolerant Process Control Systems (V8.1)
Function Manual, 11/2014, A5E34878832-AA 13

6HQVRU6HQVRU
7HUPLQDOEXV3ODQWEXV)LHOGEXV%$7&+FOLHQWV26FOLHQWV5RXWH&RQWUROFOLHQWV%$7&+VHUYHU06VHUYHU5RXWH&RQWUROVHUYHU26VHUYHU(QJLQHHULQJVWDWLRQ06FOLHQWPS CPU CPCPCPCPCP
(706+(70PS CPU CPCPCPCPCP
PS PS IM IM SM SM SM SM SM SM
PS PS IM IM SM SM SM SM SM SM
Legend for the above illustration:
Note
The following short designations are commonly used in this documentation.
Short designation Meaning
Engineering Sta‐
tion
Engineering station, PC
OS server Operator station, PC project data station in the project form "WinCC Server"
Basics of Fault Tolerance
2.1 Rationale for using fault-tolerant process control systems
Fault-tolerant Process Control Systems (V8.1)
14 Function Manual, 11/2014, A5E34878832-AA

Short designation Meaning
OS client Operator station, PC visualization station in the project form "WinCC Client"
BATCH server BATCH station, PC recipe and batch data station
BATCH client BATCH station, PC recipe creation and batch visualization station
Route Control
server
Route Control station, PC Route Control data station
Route Control cli‐
ent
Route Control station, PC Route Control visualization station
Plant bus, terminal
bus
Bus systems for communication over Industrial Ethernet (electrical or optical)
S7-400H SIMATIC S7 fault-tolerant automation system, or H system for short
PS Power supply
CPU Central processing unit
CP Communications processor
IM Interface module
SM Signal module / I/O module in analog or digital form
ET 200M Distributed I/O device
Fieldbus Fieldbus for distributed I/O
Sensor Transmitters, sensors
Basics of Fault Tolerance
2.1 Rationale for using fault-tolerant process control systems
Fault-tolerant Process Control Systems (V8.1)
Function Manual, 11/2014, A5E34878832-AA 15

2.2 System-wide availability analyses
Introduction
Availability must be analyzed globally for the system as a whole. Based on the degree of
availability needed, each system level, each system and each component within a level should
be evaluated. It is important to know the importance of each of these for the availability
requirements as well as the ways and means that the required availability will be achieved.
Avoiding repair time
In many industrial processes, it is not enough to simply correct the failure of a component and
then continue the process. The repair has to be made without interruption to the continuing
production process. The repair time can be considerably reduced by keeping replacement
parts in stock on site. The use of fault-tolerant components in the process control system
enables you to correct the cause of the system or component failure in runtime. The function
of the component is retained if no fault occurs in the remaining active (redundant) components
during the time a failed counterpart component is being repaired. That is, the plant continues
operation without disruption.
Avoiding impermissible signal edge transitions
A reserve system with connected backup I/O may not cause an impermissible signal edge
transition when a change occurs in the operating state (power on or off) or operating mode
(master or slave).
Basics of Fault Tolerance
2.2 System-wide availability analyses
Fault-tolerant Process Control Systems (V8.1)
16 Function Manual, 11/2014, A5E34878832-AA

2.3 PCS 7 redundancy concept
Advantages of the PCS 7 redundancy concept
Fault-tolerant process control systems can be realized with SIMATIC PCS 7 at minimal cost
in all phases of a system lifecycle:
● Configuration
● Commissioning/operation
● Servicing
● Expansion
PCS 7 offers the following essential advantages:
● It provides you with system-wide scalable solutions based on the PCS 7 modular design.
Advantage: The availability can be matched to your requirements. Your process control
system can be upgraded with the SIMATIC PCS 7 components that are actually needed.
● Hardware upgrades for fault tolerance do not depend on the software configuration.
Advantage: If the user program has been configured with PCS 7, it does not have to be
adapted following a hardware upgrade. You only need to download the new hardware
configuration into the CPU.
● Fault-tolerant automation system S7-400H with CPU (types: see documentation
Process
Control System PCS 7; Released Modules ), whose module racks can be set up in separate
locations.
Advantage: Protection for the spatially separated CPUs resulting in increased availability
in case of fire or explosion, for example.
● The use of redundant components in the process control system means isolated errors are
tolerated.
Advantage: The entire system does not fail when a single component in the process control
system fails. The redundant component takes over its tasks therefore allowing the process
to continue.
● Every failure of a redundant component is indicated on the OS clients in the form of a
process control message.
Advantage: You immediately receive crucial information about the status of your redundant
component. Specific components that have failed can be quickly replaced to restore the
redundancy.
● Software updates on redundant OS servers can be performed without loss of process
operability or loss of data.
Basics of Fault Tolerance
2.3 PCS 7 redundancy concept
Fault-tolerant Process Control Systems (V8.1)
Function Manual, 11/2014, A5E34878832-AA 17

Overview of the PCS 7 redundancy concept
PCS 7 offers you a redundancy concept that reaches all levels of process automation.
$6[+IDXOWWROHUDQWDXWRPDWLRQV\VWHP6HQVRU$FWXDWRU5HGXQGDQW/LQN$FWLYHILHOGGLVWULEXWRU&RQQHFWLRQRIQRQUHGXQGDQW352),%86'3GHYLFHVWRUHGXQGDQW352),%86'35HGXQGDQWIDXOWWROHUDQWSODQWEXV5HGXQGDQWIDXOWWROHUDQWWHUPLQDOEXV352),%863$ILHOGEXV6ZLWFK%$7&+VHUYHU26VHUYHU5RXWH&RQWUROVHUYHU)DLOVDIH&OLHQWV26FOLHQW%$7&+FOLHQW5RXWH&RQWUROFOLHQW(70(70(70352),%86'3</LQN
352),%86'3
Note
The numbering of the components in the illustration relates to the descriptions provided below.
Basics of Fault Tolerance
2.3 PCS 7 redundancy concept
Fault-tolerant Process Control Systems (V8.1)
18 Function Manual, 11/2014, A5E34878832-AA

Number Description
1 Several clients (OS clients, BATCH clients, Route Control clients) can access data on a
server (OS server, BATCH server, Route Control server).
2 Communication between the operator stations (client and server) and communication with
the engineering station is over a redundant, fault-tolerant terminal bus (Industrial Ethernet).
The clients and server are connected to the terminal bus via switches.
3 The servers (OS server, BATCH server, Route Control server, maintenance server, central
archive server) can, when necessary, be set up redundantly.
4 Automation systems communicate with the OS servers/Route Control servers and engi‐
neering stations and among themselves over the redundant, fault-tolerant plant bus (Indus‐
trial Ethernet).
The automation system, server and engineering station are connected to the plant bus via
switches.
5 Each part of the redundant, fault-tolerant S7-400H automation systems is connected to the
plant bus with an Ethernet communications processor (CP).
Each part of the AS be connected to several PROFIBUS DP chains. The internal PROFIBUS
DP interfaces or additional communications processors are used for the attachment.
6 The redundant connection to the DP master system is achieved using two 153-2 IM modules
in each ET 200M.
Equivalent connection via PROFINET - You can find information about this in the section
"Fault-tolerant fieldbus based on PROFINET (Page 70)"
7 Using redundant digital or analog input/output modules, you can evaluate signals from sen‐
sors/actuators. If one of the two redundant modules fails, the input/output signal of the func‐
tioning module are evaluated.
8 Fieldbus systems can be connected to the redundant PROFIBUS DP.
The configuration of a redundant fieldbus can be realized with a redundant gateway (for
example, PA link). The field devices are connected to the subsystem (for example, PROFI‐
BUS PA) via AFD, active field distributors, (or AFS when ring/coupler redundancy is used).
9 The Y Link allows you to connect non-redundant PROFIBUS distributed I/O devices to a
redundant PROFIBUS DP.
Illustration of fault tolerance using redundancy nodes
Redundancy nodes can be used to provide an overview of the fault tolerance of a process
control system. As an introductory example, the following illustration presents the process
control system shown above as a block diagram with the individual redundancy nodes.
(QFRGHU26&OLHQW26&OLHQW266HUYHU266HUYHU%XV%XV%XV%XV%XV%XV%XV%XV%XV%XV&3&3&3&3&3&38&38&3,0,0,0,0,0,0,0,0</LQN'3%XV3$%XV'33$/LQN'33$/LQN6060
Basics of Fault Tolerance
2.3 PCS 7 redundancy concept
Fault-tolerant Process Control Systems (V8.1)
Function Manual, 11/2014, A5E34878832-AA 19

2.4 Overview of the PCS 7 redundancy features
Introduction
The easiest way to increase availability is to keep replacement parts in stock on site and to
have fast service at your disposal to replace defective components.
In this documentation, we provide you with PCS 7 software and hardware solutions that go
well beyond fast service and replacement part warehousing. It focuses on "automated fault-
tolerant process control systems".
System-wide, scalable solutions in PCS 7 available
Plants are divided into the following layers in PCS 7:
● Field layer
● Process layer
● Management level
The components of PCS 7 enable you to implement fault-tolerant solutions at all automation
system levels in the form and to the degree you desire. In PCS 7, individual components (such
as signal modules), complex systems (such as operator control and monitoring systems) and
complete plants can be configured in such a way that one sub-component can automatically
take on the function of another sub-component if it fails.
You decide which components in the plant require increased availability.
The following table lists the fault-tolerant components for the three layers.
Process layer Components
Management level OS clients, maintenance clients, BATCH clients, Route Control clients
OS servers, maintenance servers, central archive servers, Process Historian,
information servers, BATCH servers, Route Control servers
Terminal bus (Industrial Ethernet)
Process layer Plant bus (Industrial Ethernet)
Automation system AS 41xH
Field layer Fieldbus PROFIBUS DP, PROFIBUS PA, Foundation Fieldbus
Distributed I/O device ET 200M, ET 200iSP
S7-300 distributed I/O modules
PROFIBUS DP, PROFIBUS PA and HART devices
Basics of Fault Tolerance
2.4 Overview of the PCS 7 redundancy features
Fault-tolerant Process Control Systems (V8.1)
20 Function Manual, 11/2014, A5E34878832-AA