Siemens SIMATIC S7-400H User manual

Preface, Contents
Fault-Tolerant Programmable Logic
Controllers 1
S7-400H Installation Options 2
Getting Started 3
Installation of a CPU 41x-H 4
System and Operating Modes of the
S7-400H 5
Linking and Synchronizing 6
Using I/O on the S7-400H 7
Communication Functions 8
Configuring with STEP 7 9
Failure and Replacement of
Components During Operation 10
Modifying the System During Operation 11
Synchronization module 12
Technical Specifications 13
Appendices
Characteristic Values of Redundant
Programmable Logic Controllers A
Single Operation B
Converting from S5-H to S7-400H C
Differences Between Fault-Tolerant
Systems and Standard Systems D
Function Modules and Communication
Processors Used on the S7-400H E
Connection Examples for Redundant I/O F
Glossary, Index
Edition 07/2003
A5E00068197-07
Automation System S7-400H
Fault-tolerant Systems
Manual
SIMATIC
This manual has the order number:
6ES7988-8HA10-8BA0

Index-2 AutomationSystem S7-400HTitel 2
A5E00068197-07
!Danger
indicates that death, severe personal injury or substantial property damage will result if proper precautions
are not taken.
!Warning
indicates that death, severe personal injury or substantial property damage can result if proper
precautions are not taken.
!Caution
indicates that minor personal injury can result if proper precautions are not taken.
Caution
indicates that property damage can result if proper precautions are not taken.
Notice
draws your attention to particularly important information on the product, handling the product, or to a
particular part of the documentation.
Qualified Personnel
Only qualified personnel should be allowed to install and work on this equipment. Qualified persons are
defined as persons who are authorized to commission, to ground and to tag circuits, equipment, and
systems in accordance with established safety practices and standards.
Correct Usage
Note the following:
!Warning
This device and its components may only be used for the applications described in the catalog or the
technical description, and only in connection with devices or components from other manufacturers which
have been approved or recommended by Siemens.
This product can only function correctly and safely if it is transported, stored, set up, and installed
correctly, and operated and maintained as recommended.
Trademarks SIMATIC, SIMATIC HMIand SIMATIC NETare registered trademarks of SIEMENS AG.
Third parties using for their own purposes any other names in this document which refer to trademarks
might infringe upon the rights of the trademark owners.
Safety Guidelines
This manual contains notices intended to ensure personal safety, as well as to protect the products and
connected equipment against damage. These notices are highlighted by the symbols shown below and
graded according to severity by the following texts:
We have checked the contents of this manual for agreement
with the hardware and software described. Since deviations
cannot be precluded entirely, we cannot guarantee full
agreement. However, the data in this manual are reviewed
regularly and any necessary corrections included in
subsequent editions. Suggestions for improvement are
welcomed.
Disclaimof LiabilityCopyright WSiemens AG 1998-2003 All rights reserved
The reproduction, transmission or use of this document or its
contents is not permitted without express written authority.
Offenders will be liable for damages. All rights, including rights
created by patent grant or registration of a utility model or
design,are reserved.
Siemens AG
Bereich Automation and Drives
Geschaeftsgebiet Industrial Automation Systems
Postfach 4848, D- 90327 Nuernberg SiemensAG 1998-2003
Technical data subject to change.
Siemens Aktiengesellschaft 6ES7988-8HA10-8BA0

iii
Automation System S7-400H Fault-tolerant Systems
A5E00068197-07
Preface
Purpose of the manual
The present manual is intended for persons involved in the areas of configuration,
commissioning and servicing of programmable logic control systems.
To help you get familiar with the product, we recommend that you start with the
example in Chapter 3. It shows you an easy method of getting started on the
subject of fault-tolerant systems.
Basic knowledge required
In order to understand the manual, you will need to be familiar with the general
principles of automation technology.
Knowledge of S7 programs is also a prerequisite; you can read more about S7
programs in the Programming with STEP 7 manual. As you need the STEP 7
standard software while you are configuring, you should also be familiar with
running the standard software, as explained in the STEP 7 User Manual.
Target Group
This manual is aimed at people with the required qualifications to commission,
operate and maintain the products described.
Validity of the manual
The manual is relevant to the following components:
•CPU 414-4H as of firmware version V3.1
•CPU 417-4H as of firmware version V3.1
•Optional package “S7 H Systems” beginning with Version 5.2

Preface
iv AutomationSystem S7-400H Fault-tolerant Systems
A5E00068197-07
Changes compared to the previous version
The current version of the ”Redundant Systems” manual contains the following
changes compared with the previous version:
•We have expanded the spectrum of redundant I/O modules.
Note: You can identify the previous version of the ”Redundant Systems” manual by
the number on the footer: A5E00068197-06.
The current number is : A5E00068197-07.
Certification
The SIMATIC S7-400 product range has the following certificates:
•Underwriters Laboratories, Inc.: UL 508 (Industrial Control Equipment)
•Canadian Standards Association: CSA C22.2 Number 142 (Process Control
Equipment)
•Factory Mutual Research: Approval Standard Class Number 3611.
Detailed information about the certifications and standards is available in the
reference manual “Automation System S7-400, Module Specifications” in
Chapter 1.1, Standards and Certifications.
CE Labeling
The SIMATIC S7-400 product range complies with the requirements and protection
objectives of the following EU directives:
•EC low voltage directive 73/23/EEC
•EC electromagnetic compatibility directive 89/336/EEC
C-Tick Mark
The SIMATIC S7-400 product range complies with the requirements of the
AS/NZS 2064 standard (Australia and New Zealand).
Standards
The SIMATIC S7-400 product range complies with the requirements and criteria of
the IEC 61131-2.
Place of this documentation in the information environment
This manual can be order separately under the order number
6ES7988-8HA10-8BA0. It is also available in electronic version on the product CD
“H Options Package”.

Preface
v
AutomationSystem S7-400H Fault-tolerant Systems
A5E00068197-07
Online Help
In addition to the manual, detailed support on how to use the software is provided
by the online Help system integrated in the software.
The Help system can be accessed using a number of interfaces:
•The Help menu contains a number of commands: Contents opens the Help
index. You will find help on fault-tolerant systems at Call Help on options
packages, configuring fault-tolerant systems.
•How to Use Help provides detailed instructions on how to use the online help
system.
•Context-sensitive Help provides information on the current context - for
example, on an open dialog box or an active window. It is accessed by means
of the “Help” button or F1.
•Another form of context-sensitive Help is the status bar. A brief explanation of
each menu command is displayed here when you place the mouse pointer on a
command.
•A brief explanation of the toolbar buttons is also shown when the mouse pointer
comes to rest for a short time on the buttons.
If you would like to read information from online Help in printed form, you can print
individual topics, books or the entire Help.
Finding Your Way
To help you find special information quickly, the manual contains the following
access aids:
•At the start of the manual you will find a complete table of contents and a list of
the diagrams and tables that appear in the manual.
•An overview of the contents of each section is provided in the left column on
each page of each chapter.
•You will find a glossary in the appendix at the end of the manual. The glossary
contains definitions of the main technical terms used in the manual.
•At the end of the manual you will find a comprehensive index which gives you
rapid access to the information you need.

Preface
vi AutomationSystem S7-400H Fault-tolerant Systems
A5E00068197-07
Note
You require the following manuals and manual packages in order to program and
commission an S7-400:
Manual/
Manual Package Contents
Standard Software
for S7 and M7
STEP 7 Basic
Information
•Installing and starting up STEP 7 on a programming device / PC
•Working with STEP 7 with the following contents:
Managing projects and files
Configuring and assigning parameters to the S7-400 configuration
Assigning symbolic names for user programs
Creating and testing a user program in STL/LAD
Creating data blocks
Configuring the communication between two or more CPUs
Loading, storing and deleting user programs in the CPU / programming device
Monitoring and controlling user programs
Monitoring and controlling the CPU
Monitoring and controlling the CPU
•Guide for efficiently implementing the programming task with the programming
device / PC and STEP 7
•How the CPUs work (for example, memory concept, access to inputs and
outputs, addressing, blocks, data management)
•Description of STEP 7 data management
•Using data types of STEP 7
•Using linear and structured programming
•Using block call instructions
•Using the debug and diagnostics functions of the CPUs in the user program
(for example, error OBs, status word)
STEP 7 Reference
Information
Statement List (STL
)
for S7-300 and
S7-400
Ladder Logic (LAD)
for S7-300 and
•Basic procedure for working with STL, LAD, or FBD (for example, structure of
STL, LAD, or FBD, number formats, syntax)
•Description of all instructions in STEP 7 (with program examples)
•Description of the various addressing methods in STEP 7 (with examples)
•Description of all functions integrated in the CPUs
•Description of the internal registers in the CPU
for S7-300 and
S7-400
Function Block
Diagram (FBD) for
S7-300 and S7-400
System and
Standard Functions
Description of the internal registers in the CPU
•Description of all system functions integrated in the CPUs
•Description of all organization blocks integrated in the CPUs
Manual
PG 7xx
•Description of the programming device hardware
•Connecting a programming device to various devices
•Starting up a programming device

Preface
vii
AutomationSystem S7-400H Fault-tolerant Systems
A5E00068197-07
Recycling and Disposal
The S7-400 H can be recycled due to the use of non-toxic materials in its
construction. For environmentally compatible recycling and disposal of your old
device in accordance with the current state of the art, please contact a certified
recycling company for electronic component waste.
Further Support
If you have any technical questions, please get in touch with your Siemens
representative or agent responsible.
http://www.ad.siemens.com/automation/partner
H/F Competence Center
The HF Competence Center in Nuremberg offers a special workshop on the
subject redundant automation system SIMATIC S7. In addition, the H/F
Competence Center offers you on-site assistance during configuration,
commissioning or in the event of problems.
Phone: [phone]
Fax: [phone]
Training Centers
We offer a number of courses to help you become familiar with the SIMATIC S7
programmable logic controller. Please contact your regional training center or our
central training center in D 90327 Nuremberg, Germany for details:
Phone: [phone].
Internet: http://www.sitrain.com

Preface
viii AutomationSystem S7-400H Fault-tolerant Systems
A5E00068197-07
A&D Technical Support
Worldwide, available 24 hours a day:
Johnson City
Nuernberg
Beijing
Technical Support
Worldwide (Nuernberg)
Technical Support
24 hours a day, 365 days a year
Phone: [phone]
Fax: [phone]
E-Mail: adsupport@
siemens.com
GMT: +1:00
Europe / Africa (Nuernberg)
Authorization
Local time: Mon.-Fri. 7:00 to 17:00
Phone: [phone]
Fax: [phone]
E-Mail: adautorisierung@
siemens.com
GMT: +1:00
United States (Johnson City)
Technical Support and
Authorization
Local time: Mon.-Fri. 8:00 to 17:00
Phone: [phone]
Fax: [phone]
E-Mail: simatic.hotline@
sea.siemens.com
GMT: –5:00
Asia / Australia (Beijing)
Technical Support and
Authorization
Local time: Mon.-Fri. 8:30 to 17:30
Phone: [phone]
Fax: [phone]
E-Mail: adsupport.asia@
siemens.com
GMT: +8:00
The languages of the SIMATIC Hotlines and the authorization hotline are generally German and English.

Preface
ix
Automation System S7-400H Fault-tolerant Systems
A5E00068197-07
Service & Support on the Internet
In addition to our documentation, we offer our Know-how online on the internet at:
http://www.siemens.com/automation/service&support
where you will find the following:
•The newsletter, which constantly provides you with up–to–date information on
your products.
•The right documents via our Search function in Service & Support.
•A forum, where users and experts from all over the world exchange their
experiences.
•Your local representative for Automation & Drives via our representatives
database.
•Information on field service, repairs, spare parts and more under “Services”.

Preface
xAutomationSystem S7-400H Fault-tolerant Systems
A5E00068197-07

xi
Automation System S7-400H Fault-tolerant Systems
A5E00068197-07
Contents
1 Fault-Tolerant Programmable Logic Controllers 1-1. . . . . . . . . . . . . . . . . . . . . . . . . .
1.1 Redundant Programmable Logic Controllers in the SIMATIC Series 1-2. . . .
1.2 Increasing System Availability 1-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2 S7-400H Installation Options 2-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.1 Base System of the S7-400H 2-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.2 I/O Modules for S7-400H 2-5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.3 Communication 2-6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.4 Tools for Configuration and Programming 2-7. . . . . . . . . . . . . . . . . . . . . . . . . . .
2.5 The User Program 2-7. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2.6 Documentation 2-9. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3 Getting Started 3-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.1 Requirements 3-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3.2 Configuring Hardware and Starting Up the S7-400H 3-3. . . . . . . . . . . . . . . . . .
3.3 Examples of Fault-Tolerant System Response to Faults 3-5. . . . . . . . . . . . . .
4 Installation of a CPU 41x-H 4-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.1 Controls and Indicators of the CPUs 4-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.2 Monitoring Functions of the CPU 4-6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.3 Status and Error LEDs 4-8. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.4 Mode Selector 4-11. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.5 Expanded Memory 4-15. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.5.1 Expanding Load Memory with Memory Cards 4-17. . . . . . . . . . . . . . . . . . . . . . .
4.5.2 Expanding the Working Memory of the CPU 417-4 H
with Memory Modules 4-22. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.6 Multipoint Interface (MPI) 4-24. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.7 PROFIBUS DP Interface 4-25. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.8 Overview of the Parameters for the S7-400 CPUs 4-26. . . . . . . . . . . . . . . . . . .
4.9 CPU 41x-H as Profibus DP Master 4-29. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.9.1 DP Address Areas of the CPUs 41x 4-30. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.9.2 CPU 41x as DP Master 4-30. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.9.3 Diagnostics of the CPU 41x as DP Master 4-35. . . . . . . . . . . . . . . . . . . . . . . . . .

Contents
xii Automation System S7-400H Fault-tolerant Systems
A5E00068197-07
4.10 Consistent Data 4-40. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4.10.1 Consistency for Communication Blocks and Functions 4-41. . . . . . . . . . . . . . .
4.10.2 Access to the Working Memory of the CPU 4-42. . . . . . . . . . . . . . . . . . . . . . . . .
4.10.3 Consistency Rules for SFB 14 “GET” and Reading Tags 4-43. . . . . . . . . . . . . .
4.10.4 Reading Data consistently from a DP Standard Slave
and Writing Consistently to a DP Standard Slave 4-45. . . . . . . . . . . . . . . . . . . .
4.10.5 Consistent Data Access without the Use of SFC 14 or SFC 15 4-47. . . . . . . .
5 System and Operating Modes of the S7-400H 5-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.1 Introduction 5-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.2 System Modes of the S7-400H 5-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3 Operating Modes of the CPUs 5-5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.1 STOP Operating Mode 5-6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.2 STARTUP Operating Mode 5-7. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.3 Operating States LINK–UP and UPDATE 5-7. . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.4 Operating State RUN 5-8. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.5 Operating States HOLD 5-9. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.3.6 TROUBLESHOOTING Operating State 5-10. . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.4 Self-Test 5-11. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.5 Time Response 5-14. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5.6 Evaluation of Process Interrupts in the S7-400H System 5-14. . . . . . . . . . . . . .
6 Linking and Synchronizing 6-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6.1 Effects of Link-up and Update 6-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6.2 Functional Sequence of Link-up and Update 6-3. . . . . . . . . . . . . . . . . . . . . . . .
6.2.1 Process of Link-up 6-7. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6.2.2 Updating Procedure 6-9. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6.2.3 Switch to CPU with modified configuration 6-12. . . . . . . . . . . . . . . . . . . . . . . . . .
6.2.4 Block Link-up and Update 6-13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6.3 Time Monitoring 6-14. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6.3.1 Time Response 6-16. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6.3.2 Determination of the Monitoring Times 6-17. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6.3.3 Influences on the Time Response 6-24. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6.3.4 Performance Values for Link–up and Update 6-25. . . . . . . . . . . . . . . . . . . . . . . .
6.4 Peculiarities during Link-up and Update 6-27. . . . . . . . . . . . . . . . . . . . . . . . . . . .
7 Using I/O on the S7-400H 7-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7.1 Introduction 7-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7.2 Using Single-Channel, One-Sided I/O 7-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7.3 Using Single-Channel, Switched I/O 7-5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7.4 Connecting Redundant I/O 7-10. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7.4.1 Determining the status of the passivation 7-33. . . . . . . . . . . . . . . . . . . . . . . . . . .
7.5 Other possibilities for connecting redundant I/O 7-35. . . . . . . . . . . . . . . . . . . . .

Contents
xiii
Automation System S7-400H Fault-tolerant Systems
A5E00068197-07
8 Communication Functions 8-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8.1 Fundamentals and Basic Concepts 8-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8.2 Suitable Networks 8-5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8.2.1 Industrial Ethernet 8-5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8.2.2 PROFIBUS 8-6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8.3 Supported Communication Services 8-8. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8.4 Communications via Fault-tolerant S7 Connections 8-8. . . . . . . . . . . . . . . . . .
8.4.1 Communications between Fault-Tolerant Systems 8-10. . . . . . . . . . . . . . . . . . .
8.4.2 Communications between Fault-Tolerant Systems
and a Fault-Tolerant CPU 8-12. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8.4.3 Communications between Fault-Tolerant Systems and PCs 8-14. . . . . . . . . . .
8.5 Communications via S7 Connections 8-15. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8.5.1 Communications via S7 Connections – One-Sided Mode 8-16. . . . . . . . . . . . .
8.5.2 Communications over Redundant S7 Connections 8-18. . . . . . . . . . . . . . . . . . .
8.5.3 Communications via a Point-to-Point CP on the ET 200M 8-19. . . . . . . . . . . . .
8.5.4 Random Connection with Single-channel Systems 8-20. . . . . . . . . . . . . . . . . . .
8.6 Communication Performance 8-21. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
9 Configuring with STEP 7 9-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
9.1 Installation of the Options Package 9-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
9.2 Configuring with STEP 7 9-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
9.2.1 Rules for Fitting a Fault-Tolerant Station 9-3. . . . . . . . . . . . . . . . . . . . . . . . . . . .
9.2.2 Configuring Hardware 9-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
9.2.3 Assigning Parameters to Modules in a Fault-Tolerant Station 9-5. . . . . . . . . .
9.2.4 Recommendations for Setting the CPU Parameters 9-5. . . . . . . . . . . . . . . . . .
9.2.5 Configuring Networks 9-7. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
9.3 Programming Device Functions in STEP 7 9-8. . . . . . . . . . . . . . . . . . . . . . . . . .
10 Failure and Replacement of Components During Operation 10-1. . . . . . . . . . . . . . .
10.1 Failure and Replacement of Components in Central Racks
and Expansion Racks 10-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10.1.1 Failure and Replacement of a Central Processing Unit
(Fault-Tolerant CPU) 10-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10.1.2 Failure and Replacement of a Power Supply Module 10-5. . . . . . . . . . . . . . . . .
10.1.3 Failure and Replacement of an Input/Output or Function Module 10-6. . . . . . .
10.1.4 Failure and Replacement of a Communication Processor 10-7. . . . . . . . . . . . .
10.1.5 Failure and Replacement of a Synchronization Submodule
or Fiber-Optic Cable 10-8. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10.1.6 Failure and Replacement of an IM 460 and IM 461 Interface Module 10-11. . .
10.2 Failure and Replacement of Components of the Distributed I/O 10-12. . . . . . . .
10.2.1 Failure and Replacement of a PROFIBUS-DP Master 10-13. . . . . . . . . . . . . . . .
10.2.2 Failure and Replacement of a Redundant PROFIBUS-DP
Interface Module 10-14. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10.2.3 Failure and Replacement of a PROFIBUS-DP Slave 10-15. . . . . . . . . . . . . . . . .
10.2.4 Failure and Replacement of PROFIBUS-DP Cables 10-16. . . . . . . . . . . . . . . . . .

Contents
xiv Automation System S7-400H Fault-tolerant Systems
A5E00068197-07
11 Modifying the System During Operation 11-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.1 Possible Hardware Modifications 11-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.2 Adding Components in PCS 7 11-6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.2.1 PCS 7, Step 1: Modification of Hardware 11-7. . . . . . . . . . . . . . . . . . . . . . . . . . .
11.2.2 PCS 7, Step 2: Offline Modification of the Hardware Configuration 11-8. . . . .
11.2.3 PCS 7, Step 3: Stopping the Standby CPU 11-9. . . . . . . . . . . . . . . . . . . . . . . . .
11.2.4 PCS 7, Step 4: Loading New Hardware Configuration
in the Standby CPU 11-10. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.2.5 PCS 7, Step 5: Switch to CPU with Modified Configuration 11-11. . . . . . . . . . . .
11.2.6 PCS 7, Step 6: Transition to Redundant System Mode 11-12. . . . . . . . . . . . . . .
11.2.7 PCS 7, Step 7: Changing and Loading User Program 11-13. . . . . . . . . . . . . . . .
11.2.8 Adding Interface Modules in PCS 7 11-14. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.3 Removing Components in PCS 7 11-16. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.3.1 PCS 7, Step I: Offline Modification of the Hardware Configuration 11-17. . . . . .
11.3.2 PCS 7, Step II: Changing and Loading User Program 11-18. . . . . . . . . . . . . . . .
11.3.3 PCS 7, Step III: Stopping the Standby CPU 11-19. . . . . . . . . . . . . . . . . . . . . . . . .
11.3.4 PCS 7, Step IV: Loading New Hardware Configuration
in the Standby CPU 11-19. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.3.5 PCS 7, Step V: Switch to CPU with Modified Configuration 11-20. . . . . . . . . . . .
11.3.6 PCS 7, Step VI: Transition to Redundant System Mode 11-21. . . . . . . . . . . . . .
11.3.7 PCS 7, Step VII: Modification of Hardware 11-22. . . . . . . . . . . . . . . . . . . . . . . . . .
11.3.8 Removing Interface Modules in PCS 7 11-23. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.4 Adding Components in STEP 7 11-24. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.4.1 STEP 7, Step 1: Modification of Hardware 11-25. . . . . . . . . . . . . . . . . . . . . . . . . .
11.4.2 STEP 7, Step 2: Offline Modification of the Hardware Configuration 11-26. . . .
11.4.3 STEP 7, Step 3: Expanding and Loading Organization Blocks 11-26. . . . . . . . .
11.4.4 STEP 7, Step 4: Stopping the Standby CPU 11-27. . . . . . . . . . . . . . . . . . . . . . . .
11.4.5 STEP 7, Step 5: Loading New Hardware Configuration
in the Standby CPU 11-27. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.4.6 STEP 7, Step 6: Switch to CPU with Modified Configuration 11-28. . . . . . . . . . .
11.4.7 STEP 7, Step 7: Transition to Redundant System Mode 11-29. . . . . . . . . . . . . .
11.4.8 STEP 7, Step 8: Changing and Loading User Program 11-30. . . . . . . . . . . . . . .
11.4.9 Adding Interface Modules in STEP 7 11-31. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.5 Removing Components in STEP 7 11-32. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.5.1 STEP 7, Step I: Offline Modification of the Hardware Configuration 11-33. . . . .
11.5.2 STEP 7, Step II: Changing and Loading User Program 11-34. . . . . . . . . . . . . . .
11.5.3 STEP 7, Step III: Stopping the Standby CPU 11-35. . . . . . . . . . . . . . . . . . . . . . . .
11.5.4 STEP 7, Step IV: Loading New Hardware Configuration
in the Standby CPU 11-35. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.5.5 STEP 7, Step V: Switch to CPU with Modified Configuration 11-36. . . . . . . . . . .
11.5.6 STEP 7, Step VI: Transition to Redundant System Mode 11-37. . . . . . . . . . . . .
11.5.7 STEP 7, Step VII: Modification of Hardware 11-38. . . . . . . . . . . . . . . . . . . . . . . . .
11.5.8 STEP 7, Step VIII: Modifying and Loading Organization Blocks 11-39. . . . . . . .
11.5.9 Removing Interface Modules in STEP 7 11-40. . . . . . . . . . . . . . . . . . . . . . . . . . . .

Contents
xv
Automation System S7-400H Fault-tolerant Systems
A5E00068197-07
11.6 Changing the CPU Parameters 11-41. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.6.1 Step A: Changing the CPU Parameters Offline 11-43. . . . . . . . . . . . . . . . . . . . . .
11.6.2 Step B: Stopping the Standby CPU 11-43. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11.6.3 Step C: Loading Modified CPU Parameters in the Standby CPU 11-44. . . . . . .
11.6.4 Step D: Switch to CPU with Modified Configuration 11-45. . . . . . . . . . . . . . . . . .
11.6.5 Step E: Transition to Redundant System Mode 11-46. . . . . . . . . . . . . . . . . . . . . .
11.7 Changing the Memory Components of the CPU 11-47. . . . . . . . . . . . . . . . . . . . .
11.7.1 Expanding the Main and/or Load Memory 11-47. . . . . . . . . . . . . . . . . . . . . . . . . . .
11.7.2 Changing the Type of Load Memory 11-49. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
12 Synchronization Module 12-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
12.1 Synchronization Module for S7-400H 12-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
12.2 Routing Cables Using Fiber Optics 12-6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
13 Technical Specifications 13-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
13.1 Technical Specifications of the CPU 414-4H; (6ES7 414-4HJ00-0AB0) 13-2.
13.2 Technical Specifications of the CPU 417-4H; (6ES7 417-4HL01-0AB0) 13-6.
13.3 Run Times of the FCs and FBs for Redundant I/O 13-10. . . . . . . . . . . . . . . . . . .
A Characteristic Values of Redundant Programmable Logic Controllers A-1. . . . . .
A.1 Basic Concepts A-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
A.2 Comparison of MTBFs for Selected Configurations A-4. . . . . . . . . . . . . . . . . .
A.2.1 System Configurations With Central I/O A-4. . . . . . . . . . . . . . . . . . . . . . . . . . . .
A.2.2 System Configurations With Distributed I/O A-6. . . . . . . . . . . . . . . . . . . . . . . . .
A.2.3 Comparison of System Configurations With Standard
and Fault-Tolerant Communications A-9. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
B Single Operation B-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
C Converting from S5-H to S7-400H C-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
C.1 General Information C-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
C.2 Configuration, Programming and Diagnostics C-2. . . . . . . . . . . . . . . . . . . . . . .
D Differences Between Fault-Tolerant Systems and Standard Systems D-1. . . . . . .
E Function Modules and Communication Processors Used on the S7-400H E-1. .
F Connection Examples for Redundant I/O F-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
F.1 SM 321; DI 8 x AC 120/230 V, 6ES7 321-1FF01-0AA0 F-2. . . . . . . . . . . . . . .
F.2 SM 322; DO 8 x AC 230 V/2 A, 6ES7 322-1FF01-0AA0 F-3. . . . . . . . . . . . . .
F.3 SM 321; DI 16 x AC 120/230 V, 6ES7 321-1FF00-0AA0 F-4. . . . . . . . . . . . . .
F.4 SM 331; AI 8 x 16 Bit; 6ES7331-7NF00-0AB0 F-5. . . . . . . . . . . . . . . . . . . . . . .
F.5 SM 332; AO 4 x 12 Bit; 6ES7 332-5HD01-0AB0 F-6. . . . . . . . . . . . . . . . . . . . .
F.6 SM 421; DI 32 x UC 120 V, 6ES7 421-1EL00-0AA0 F-7. . . . . . . . . . . . . . . . . .
F.7 SM 422; DO 16 x AC 120/230 V/2 A, 6ES7 422-1FH00-0AA0 F-8. . . . . . . . .
F.8 SM 321; DI 16 DC 24 V, 6ES7 321-7BH00-0AB0 F-9. . . . . . . . . . . . . . . . . . . .
F.9 SM 322; DO 32 DC 24 V/0.5 A, 6ES7 322-1BL00-0AA0 F-10. . . . . . . . . . . . . .
F.10 SM 331; AI 8 12 Bit, 6ES7 331-7KF02-0AB0 F-11. . . . . . . . . . . . . . . . . . . . . . . .
Glossary Glossary-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Index Index-1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Contents
xvi Automation System S7-400H Fault-tolerant Systems
A5E00068197-07
Figures
1-1 Operating objectives of redundant programmable logic controllers 1-2. . . . .
1-2 Universal automation solutions with SIMATIC 1-4. . . . . . . . . . . . . . . . . . . . . . .
1-3 Example of redundancy in a network without malfunction 1-5. . . . . . . . . . . . .
1-4 Example of redundancy in a 2-out-of-2 system with malfunction 1-5. . . . . . .
1-5 Example of redundancy in a 2-out-of-2 system with total failure 1-5. . . . . . . .
2-1 Overview 2-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2-2 Hardware of the S7-400H base system 2-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2-3 User documentation for fault-tolerant systems 2-9. . . . . . . . . . . . . . . . . . . . . . .
3-1 Hardware configuration 3-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4-1 Layout of the controls and indicators of the CPU 414-4H/417-4H 4-2. . . . . . .
4-2 Positions of the mode selector 4-11. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4-3 Design of the memory card 4-17. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4-4 Fitting memory cards in the CPUs 4-23. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4-5 Memory card 4-23. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4-6 Overview: system configuration for modification
of the system during operation 4-33. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4-7 Diagnostics with CPU 41x 4-37. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4-8 Diagnostics addresses for the DP master and DP slave 4-38. . . . . . . . . . . . . .
4-9 Data transmission without data consistency 4-43. . . . . . . . . . . . . . . . . . . . . . . . .
4-10 Data transmission without data consistency 4-44. . . . . . . . . . . . . . . . . . . . . . . . .
5-1 Synchronizing the subsystems 5-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5-2 System and operating modes of the fault-tolerant system 5-5. . . . . . . . . . . . .
6-1 Functional sequence of link-up and update 6-4. . . . . . . . . . . . . . . . . . . . . . . . . .
6-2 Process for update 6-6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6-3 6-6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6-4 Significance of the times relevant during the update 6-15. . . . . . . . . . . . . . . . . .
6-5 Relationship between the minimum I/O retention time
and the maximum blocking time for priority classes > 15 6-20. . . . . . . . . . . . . .
7-1 Single-channel, one-way I/O configuration 7-3. . . . . . . . . . . . . . . . . . . . . . . . . .
7-2 Single-channel, switched ET 200M distributed I/O 7-6. . . . . . . . . . . . . . . . . . .
7-3 Redundant I/O in central- and expansion devices 7-10. . . . . . . . . . . . . . . . . . . .
7-4 Redundant I/O in the one-way DP slave 7-11. . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-5 Redundant I/O in the switched DP slave 7-12. . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-6 Redundant I/O in single mode 7-13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-7 Fault-tolerant digital input module in a 1-out-of-2 configuration
with one sensor 7-18. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-8 Fault-tolerant digital input modules in a 1-out-of-2 configuration
with 2 sensors 7-20. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-9 Fault-tolerant digital output module in a 1-of-2 configuration 7-21. . . . . . . . . . .
7-10 Fault-tolerant analog input modules in a 1-out-of-2 configuration
with one sensor 7-24. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-11 Fault-tolerant analog input modules in a 1-out-of-2 configuration
with two sensors 7-30. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-12 Redundant analog output modules in a 1-of-2 structure 7-32. . . . . . . . . . . . . . .
7-13 Redundant one-way and switched I/Os 7-35. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-14 Flowchart for OB1 7-38. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Contents
xvii
Automation System S7-400H Fault-tolerant Systems
A5E00068197-07
8-1 Example of an S7 connection 8-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8-2 Example of the number of resulting partial connections being dependent
on the configuration 8-4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8-3 Example of redundancy with fault-tolerant system and redundant ring 8-11. .
8-4 Example of redundancy with fault-tolerant system
and redundant bus system 8-11. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8-5 Example of a fault-tolerant system with additional CP redundancy 8-11. . . . .
8-6 Example of redundancy with fault-tolerant system and fault-tolerant CPU 8-13
8-7 Example of redundancy with fault-tolerant system
and redundant bus system 8-14. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8-8 Example of redundancy with a fault-tolerant system,
redundant bus system and CP redundancy in the PC 8-15. . . . . . . . . . . . . . . . .
8-9 Example of interconnected standard and fault-tolerant systems
on a redundant ring 8-17. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8-10 Example of interconnected standard and fault-tolerant systems
on a redundant bus system 8-17. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
8-11 Example of redundancy with fault-tolerant systems and redundant
bus system with redundant standard connections 8-18. . . . . . . . . . . . . . . . . . . .
8-12 Example of interconnection of a fault-tolerant system
and a single-channel third-party system 8-19. . . . . . . . . . . . . . . . . . . . . . . . . . . .
8-13 Example of interconnection of a fault-tolerant system
and a single-channel third-party system 8-20. . . . . . . . . . . . . . . . . . . . . . . . . . . .
8-14 Data throughput via communication load (basic trend) 8-22. . . . . . . . . . . . . . . .
8-15 Response time via communication load (basic trend) 8-22. . . . . . . . . . . . . . . . .
F-1 Connection example SM 321; DI 8 x AC 120/230 V F-2. . . . . . . . . . . . . . . . . .
F-2 Connection example SM 322; DO 8 x AC 230 V/2 A F-3. . . . . . . . . . . . . . . . .
F-3 Connection example SM 321; DI 16 x AC 120/230 V F-4. . . . . . . . . . . . . . . . .
F-4 Connection example SM 331; AI 18 x 16 Bit F-5. . . . . . . . . . . . . . . . . . . . . . . .
F-5 Connection example SM 332, AO 4 x 12 Bit F-6. . . . . . . . . . . . . . . . . . . . . . . . .
F-6 Connection example SM 421; DI 32 x UC 120 V F-7. . . . . . . . . . . . . . . . . . . . .
F-7 Connection example SM 422; DO 16 x AC 120/230 V/2 A F-8. . . . . . . . . . . .
F-8 Connection example SM 321; DI 16 x DC 24V F-9. . . . . . . . . . . . . . . . . . . . . .
F-9 Connection example SM 322; DO 32 x DC 24 V/0.5 A F-10. . . . . . . . . . . . . . . .
F-10 Connection example SM 331; AI 8 x 12 Bit F-11. . . . . . . . . . . . . . . . . . . . . . . . . .

Contents
xviii Automation System S7-400H Fault-tolerant Systems
A5E00068197-07
Tables
4-1 LEDs of the CPUs 4-3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4-2 Positions of the mode selector 4-12. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4-3 Protection levels of a S7-400 CPU 4-13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4-4 Types of memory cards 4-18. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4-5 CPUs 41x (MPI/DP Interface as Profibus DP) 4-30. . . . . . . . . . . . . . . . . . . . . .
4-6 Meaning of the BUSF LEDs of the CPU 41x as DP master 4-35. . . . . . . . . . . .
4-7 Reading out the diagnostics information with STEP 7 4-36. . . . . . . . . . . . . . . .
4-8 Event detection of the CPUs 41x as DP master 4-39. . . . . . . . . . . . . . . . . . . . .
5-1 Overview of the S7-400H system modes 5-4. . . . . . . . . . . . . . . . . . . . . . . . . . .
5-2 Explanations relating to figure 5-2 System and Operating Modes of the
Fault-Tolerant System 5-6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5-3 Causes of Error Leading to the Termination of Redundant System Mode 5-8
5-4 Response to errors during the self-test 5-11. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5-5 Response to a recurring comparison error 5-12. . . . . . . . . . . . . . . . . . . . . . . . . .
5-6 Response to checksum errors 5-12. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6-1 Properties of link-up and update 6-2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6-2 Premium for the monitoring times of redundant I/O 6-19. . . . . . . . . . . . . . . . . . .
6-3 Typical values for the user program share TP15_AWP of the
max. blocking time for priority classes > 15 6-25. . . . . . . . . . . . . . . . . . . . . . . . .
7-1 Signal modules for redundancy 7-15. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-2 Digital output module connected through/without diodes 7-21. . . . . . . . . . . . . .
7-3 Analog input modules and sensors 7-31. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-4 Assignment of the status byte 7-33. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-5 Assignment of the status bytes 7-34. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-6 OB 1 7-39. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7-7 OB 122 7-40. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
11-1 Modifiable CPU parameters 11-41. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
13-1 Run times of the blocks for redundant I/O 13-11. . . . . . . . . . . . . . . . . . . . . . . . . .
A-1 MTBF factor for redundant I/O A-8. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
B-1 Differences between S7-400 and S7-400H B-2. . . . . . . . . . . . . . . . . . . . . . . . .

1-1
Automation System S7-400H Fault-tolerant Systems
A5E00068197-07
Fault-Tolerant Programmable Logic
Controllers
This chapter contains an introduction to redundant and fault-tolerant programmable
logic controllers.
In Section Description On Page
1.1 Redundant Programmable Logic Controllers in the SIMATIC
Series 1-2
1.2 Increasing System Availability 1-4
1

Fault-Tolerant Programmable Logic Controllers
1-2 AutomationSystem S7-400H Fault-tolerant Systems
A5E00068197-07
1.1 RedundantProgrammable Logic Controllers in the
SIMATIC Series
Economic, and thus resource-sparing and low-pollution production can be achieved
nowadays in all branches of industry only by employing a high degree of
automation. At the same time there is a demand for fail-safe programmable logic
controllers with the greatest degree of distribution possible.
Redundant programmable logic controllers from Siemens have proved themselves
in operation and thousands are in service.
Perhaps you are already familiar with one of the fault-tolerant systems such as the
SIMATIC S5-115H and S5-155H, or the fail-safe S5-95F and S5-115F systems.
The S7-400H is the latest fault-tolerant PLC and we will be presenting it on the
pages that follow. It is a member of the SIMATIC S7 system family, meaning that
you can fully avail yourself of all the advantages of the SIMATIC S7.
Operating objectives of redundant PLCs
Redundant programmable logic controllers are used in practice with the aim of
achieving a higher degree of availability or fault tolerance.
Redundant automation systems, e.g
Fault-tolerant 1-out-of-2 systems
Objective:
Reduce the probability of production
losses by switching to a standby sy-
stem
Fail-safe 1-out-of-2 systems
Objective:
Protect life, the environment and
investments by safely disconnec-
ting to a secure “off” position
Figure 1-1 Operating objectives of redundant programmable logic controllers
Note the difference between fault-tolerant systems and fail-safe systems. The
S7-400H is a fault-tolerant programmable logic controller that can be used only
with additional means for controlling processes relevant to safety.