turck TBIP-L-FDIO1-2IOL Series User guide

Your Global Automation Partner
TBIP-L…-FDIO1-2IOL
Safety Block I/O Module
Safety manual – Translation

2 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com

3
V01.0 | 2017/10
Table of Contents
1 About this Document 5
2 Scope 5
3 Safety Integrity Level/Performance Level/Category 5
4 Product Description 6
4.1 Intended Use 6
4.1.1 Foreseeable Misuse 6
4.2 Device Overview 6
4.3 Type Labels 7
4.4 Switches and Connectors 7
4.5 Block Diagram 7
5 Safety Function 8
5.1 Safe Status 8
5.2 Fatal Error 8
6 Safety Planning 8
6.1 Prerequisites 8
6.2 Reaction Time 8
6.3 Safety Characteristic Data 9
7 Operating Instructions 9
7.1 General 9
7.2 Before Operation 10
7.2.1 Mounting 10
7.2.2 Connecting 11
7.2.3 Address Assignment 12
7.2.4 Conguring 12
7.3 Operating 13
7.3.1 Indication Elements 13
7.3.2 Output Error Behavior 14
7.3.3 Decommissioning 14
8 Appendix Wiring Diagrams 14
8.1 Ethernet 14
8.2 Supply Voltage 14
8.2.1 TBIP-L5-FDIO1-2IOL 14
8.2.2 TBIP-L4-FDIO1-2IOL 15
8.3 Safety Inputs 15
8.4 Safety In-/Outputs 15
8.5 DXP 15
8.6 IO-Link 15
9 Appendix: Switching examples 16
9.1 Inputs 16
9.2 Outputs 16

4 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com
10 Appendix: Designations and Abbreviations 17
11 Appendix: Function Tests 17
12 Appendix: Document History 17
13 Appendix: Technical data 18
14 Appendix: Declaration of Conformity 20

5
V01.0 | 2017/10
1 About this Document
This safety manual contains all information that is required by users to operate the device in
functional safety systems. Read this manual carefully before using the device.
This document addresses only functional safety according EN ISO 13849-1 and EN/IEC 61508.
Other issues are not considered.
All instructions must be followed in order to assure functional safety.
Always make sure that this is the latest version of the safety manual at www.turck.com.
TheGerman versionis considered the definitive document. Every care was taken in the produc-
tion of the translations of this document. If there is any uncertainty in its interpretation, refer to
theEnglish version of the safety manual or contact TURCK directly.
2 Scope
This safety manual is valid for the Turck CIP Safety devices TBIP-L4-FDIO1-2IOL and
TBIP-L5-FDIO1-2IOL.
3 Safety Integrity Level/Performance Level/Category
The devices are rated for applications rated to:
■SIL3 according to EN/IEC 61508 and EN/IEC 62061
■Category 4/PLe according to EN ISO 13849-1

6
Product Description
Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com
4 Product Description
The TBIP-L4-FDIO1-2IOL and TBIP-L5-FDIO1-2IOL are safety block I/O modules for safety applica-
tions with CIP Safety over EtherNet/IP™.
The devices provide two safety SIL3-inputs (FDI) to connect 2-channel mechanical safety
switches and electronic safety sensors (OSSD).
Two further SIL3-channels (FDX) can be freely used as inputs (FDI) or outputs (FDO). The safety
outputs serve for the safety shutdown of loads (ohmic up to 2 A).
For non-safety functions, the devices provide four universal In-/outputs (DXP) at ports C4 and
C5 as well as two IO-Link master channels (IOL) at ports C6 and C7 for connecting IO-Link
sensors and IO-Link hubs. Additionally, the IO-Link slots each provide one digital in-/output at
pin2.
The non-safety ports C4, C5 and C7 can be switched-o safe via the internal outputs FSO0 and
FSO1 (see”4.5 Block Diagram” on p.7). This allows a safety shutdown of the connected
sensors and actuators.
4.1 Intended Use
TBIP-L4-FDIO1-2IOL and TBIP-L5-FDIO1-2IOL are decentralized CIP Safety safety modules.
The modules collect field signals and transfer the signals safe to a CIP Safety master.
Thanks to an extended temperature range from -40 to +70 °C and the protection class IP65/
IP67/IP69K, the device can be used in harsh environments directly on the machine.
The device is specified for the operation in industrial environment. If it is used in residential or
mixing areas, radio interference may occur.
4.1.1 Foreseeable Misuse
The devices are not suitable for:
■The use in explosive areas
■Outdoor use
■The permanent use in liquids
4.2 Device Overview
218
230.5
C4C5C6C7
6.3
38.8
60.4
C0C1C2C3
24
30.2
X2
X1
P2
P1

7
V01.0 | 2017/10
4.3 Type Labels
TBIP-L5-FDIO1-2IOL TBIP-L4-FDIO1-2IOL
TBIP-L5-FDIO1-2IOL
Ident-No.: 6814056
Charge code:
YoC:
Hans Turck GmbH & Co. KG
Witzlebenstr.7
D-45472 Mülheim a. d. Ruhr
www.turck.com
TBIP-L4-FDIO1-2IOL
Ident-No.: 100000360
Charge code:
YoC:
Hans Turck GmbH & Co. KG
Witzlebenstr.7
D-45472 Mülheim a. d. Ruhr
www.turck.com
4.4 Switches and Connectors
Meaning
C4
C5
C6
C7
C0
C1
C2
C3
X2X1
P2P1
FE
IP Address
X1 Power IN
X2 Power OUT
C0 FDI0/1, safety-related input
C1 FDI2/3, safety-related input
C2 FDX4/5, safety-related in-/output
C3 FDX6/7, safety-related in-/output
C4 DXP8/9, standard in-/outputs
(safe shutdown via FSO0 possible)
C5 DXP10/11, standard in-/outputs
(safe shutdown via FSO0 possible)
C6 IOL, IO-Link port1
C7 IOL, IO-Link port2 (safe shutdown via FSO 1 possible)
IP address Rotary coding switch for address setting (last byte of the IP address for
the safe device side – C3 to C7))
P1 Ethernet 1
P2 Ethernet 2
FE Functional earth
4.5 Block Diagram
2
4
C0
V1
2
4
C1
2
4
5
1
5
1
5
1
C2
2
4
C3
C4
C5
C6
C7
2
4
2
4
2
4
2
4
FDI0/1 FSO0
(intern)
FDI2/3
FDX4/5
FSO1
(intern)
FDX6/7
DXP9
DXP8
DXP11
DXP10
DXP13
DI12 (C/Q)
DXP15
DI14 (C/Q)
IO-Link Port1
IO-Link Port2

8
Safety Function
Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com
5 Safety Function
The devices provide two safe digital SIL3 inputs (FDI) and two SIL3-connectors (FDX), configu-
rable as in- or outputs.
The following devices can be connected to the safety inputs:
■Max. four 2-channel safety switches and sensors
■Contact based switches, e.g. emergency switches, protective door switches
■Sensors with OSSD switch outputs with test pulses
■Sensors with OSSD switch outputs without test pulses
The two safe SIL3 outputs can be used PP- or PM-switching.
Additionally, the DXP-channels (C4 and C5) as well as the second IO-Link port (C7) can be
switched-off safe via the internal outputs FSO0 and FSO1 (see “4.5 Block Diagram” on p.7).
5.1 Safe Status
In the safe state the device outputs are in LOW-state (0).
The inputs report a LOW-state (0) to the logic.
5.2 Fatal Error
The following errors lead to Fatal Error and thus to the safe state:
■Incorrect wiring at the output (e.g. capacitive load, energetic recovery)
■Incorrect power supply
■Strong EMC disturbances
■Internal device error
6 Safety Planning
The operator is responsible for the safety planning.
6.1 Prerequisites
 Perform a hazard and risk analysis.
 Develop a safety concept for the machine or plant.
 Calculate the safety integrity for the complete machine or plant.
 Validate the complete system.
6.2 Reaction Time
If the system is operated with higher availability, the max. reaction time is extended (see “6.3
Safety Characteristic Data” on p.9).
In addition to the reaction time in the device, reaction times of the further CIP Safety compo-
nents have to be considered eventually. Please find the respective information in the technical
data of the respective devices.
Further information about the reaction time can be found in the on-line help for the software
“Turck Safety Configurator” (see also “7.2.4 Configuring” on p.12).

9
V01.0 | 2017/10
6.3 Safety Characteristic Data
Characteristic data Value Standard
Performance Level (PL) e EN/ISO 13849-1
Safety category 4 EN/ISO 13849-1
Safety Integrity Level (SIL) 3 IEC/EN 61508
SIL CL 3 EN/IEC 62061
PFHD4 × 10 -9 1/h IEC/EN 61508; EN/ISO 13849-1
PFD 5 × 10-6 IEC/EN 61508
MTTFD> 2500 years EN/ISO 13849-1: 2016
DC 99 %
Permissible duration of use (TM) 20 years EN ISO 13849-1
Maximum on-time 12 months IEC/EN 61508
Max. reaction time in case of shutdown
CIP Safety > local output 25 ms IEC/EN 61508
Local input > CIP Safety 20 ms
Local input <> local output 35 ms
7 Operating Instructions
7.1 General
 In case of a safety application, register the devices under www.turck.de/SIL .
 Only trained and qualified personnel must mount, install, operate and maintain the devices.
 The devices are not specified for a certain application. Make sure that application-specific
aspects are considered.
 Replace the devices before the expiration of the permissible duration of use (see “6.3 Safety
Characteristic Data” on p.9).
 Execute a functional test every twelve months.
 The devices must not be repaired. If problems occur with regard to functional safety, notify
Turck immediately and return the devices immediately to:
Hans Turck GmbH & Co. KG
Witzlebenstraße 7
45472 Mülheim an der Ruhr
Germany
 In case of device errors which lead to the safe state, take measures which guarantee the safe
state for the further operation of the complete control system.
 Report dangerous failures immediately to Turck.

10
Operating Instructions
Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com
7.2 Before Operation
The operator of the machine or the plant in which the safety related system is used, is responsi-
ble for the correct and safe overall function of every single safety component.
 Carry out a validation of the safety category for the complete system depending on the selec-
tion of the used safety components.
7.2.1 Mounting
ATTENTION
Mounting on uneven surfaces
Damage to the device due to mechanical tensions
 Mount the device onto an even mounting surface
 Use two M6 screws to mount the device.
 Mount the device onto a pre-drilled and grounded mounting surface. The maximum
tightening torque for the screws is 1.5 Nm.
218 [5.58]
M6 (2x)
max. 1.5 Nm

11
V01.0 | 2017/10
7.2.2 Connecting
ATTENTION Loss of protection class IP65/IP67/IP69K
Damage to the device due to invasive foreign material or liquids
 Seal unused sockets, connectors and covers carefully.
 Use appropriate 7/8" sealing caps, e.g. type RKMV-CCC (not included in the scope of
delivery).
 Use appropriate M12-sealing caps (included in the scope of delivery).
Connecting Ethernet
The maximum tightening torque for the Ethernet connectors is 0.6 Nm.
 Connect the device to Ethernet according to the pin assignment (see “8 Appendix: Wiring
Diagrams” on p.14).
Connecting Power Supply
The externally connectable circuits have to be securely disconnected from the mains supply.
WARNING
Wrong 24 V power supply unit
Dangerous voltage and loss of functional safety
 Exclusively use power supply units with PELV according to EN50179/EN50178 (PELV).
 Assure that the maximum output voltage not exceeds 60 V even in case of an error.
 Connect the device to the power supply according to the pin assignment (see “8 Appen-
dix: Wiring Diagrams”on p.14). The female connectors at the device have the following
function:
ūX1: Voltage IN
ūX2: Conduct voltage to next node
Connect Sensors/Actuators
DANGER
Wrong supply of sensors and actuators
Danger to life due to external supply
 Guarantee that no external supply is used.
 Guarantee that the inputs are only supplied through the same 24 V source as the
device itself.
DANGER
Connection of fast reacting loads
Danger to life due to connection failures
 Use loads with mechanical or electrical inertia.
Positive and negative test pulses have to be tolerated.
The maximum tightening torque for the M12 connectors is 0.8 Nm.
 Connect the sensors and actuators to the in- and outputs according to the pin assignment
(see “8 Appendix: Wiring Diagrams”on p.14).

12
Operating Instructions
Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [email protected] | www.turck.com
7.2.3 Address Assignment
The device has 2 IP addresses. The first IP address addresses the safe (left) functional unit
(C0…C3), the second IP address addresses the non-safe (right) functional unit (C4…C7).
The address setting of both functional units is done via the web server of the safe unit (IP ad-
dress in the state of delivery: 192.168.1.254).
The rotary coding switches at the device set the last byte of the IP address for the safe (left)
functional unit.
 Set the last byte of the IP address for the TBIP-L…-FDIO1-2IOL using the 3 rotary coding
switches under the cover at the device.
In the delivery state, the rotary switches are set to 000.
Switch position Meaning
000 192.168.1.254
1…254 Static rotary, setting of the last byte of the IP address, accept the setting with a
device restart
300 BootP
400 DHCP
500 PGM
600 PGM-DHCP
900 Factory Reset: reset of the device to factory settings
901 Stick Reset: Deletes the content of the memory chip.
7.2.4 Conguring
The safety function of the safe channels can only be configured via the software “Turck Safety
Configurator”.
After the configuration, the device generates a CRC and a validation protocol. This protocol has
to be checked and validated by the user. The CRC is stored as reference in the configuration of
the PLC and guarantees the correct safety function.
Further information can be found in the online help.
The configuration of the safe I/O channels set via the Turck Safety Configuratior is automatically
stored to a pluggable memory stick which is part of the scope of delivery. In case of a device ex-
change, the device configuration can be transferred to another device using the memory stick.
WINK
MS
NS
EtherNet/IP™ETH1 ETH2
IP Address
0
987 6
5
4
32
1
0
98 7 6
5
4
32
1
0
98 7 6
5
4
32
1
x 100 x 10 x1
Memory

13
V01.0 | 2017/10
7.3 Operating
7.3.1 Indication Elements
During operation, the LEDs have the following functions:
LED Color Meaning
ETH1 green Link established, 100 Mbps
green blinking Ethernet Traffic, 100 Mbps
yellow Link established, 10 Mbps
yellow blinking Ethernet Traffic, 10 Mbps
ETH2 green Link established, 100 Mbps
green blinking Ethernet Traffic, 100 Mbps
yellow Link established, 10 Mbps
yellow blinking Ethernet Traffic, 10 Mbps
PWR green Voltage OK
red Power supply faulty
MS off The device may not be powered
green No diagnostic message, device is operating in normal condition
green blinking The Device is in the Idle or Standby State.
red Critical fault, the device has an unrecoverable fault, may need replacing.
red blinking Recoverable Fault
green/red blinking During start-up: device is in self test
During operation: device needs commissioning due to configuration or Unique
Node Identifier missing, incomplete or incorrect.
NS off Device is not on-line.
The device may not be powered.
green Active connection to a master
green blinking Device is on-line but has no connections in the established state.
A connection may be established, but not completed.
red Failed communication of device.
red blinking One or more I/O Connections are in the Timed–Out state.
green/red blinking During start-up: device is in self test
During operation: Device detected a Network Access error and is in the
Communication Faulted state.
0…3 green Channel active
green blinking Self-testing
red Discrepancy
red blinking Cross Connection

14
Appendix: Wiring Diagrams
Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [email protected] | www.turck.com
LED Color Meaning
4…7 green Channel active
green blinking Self-testing (input only)
red Discrepancy, overload (output only)
red blinking Cross Connection
8…11 green Channel active
red Overload (output only)
red blinking Channel inactive (input only), overload at supply
green permanent,
red blinking
Channel active and overload at supply (input only)
12…15 green IO-Link communication or DI active
red Error
0…7 red all blinking,
alternating
Fatal Error
WINK white flashing Helps to localize the module if the Blink/Wink command is active.
7.3.2 Output Error Behavior
In case of an error a switched-off output can be switched on for ≤ 1 ms.
7.3.3 Decommissioning
The decommissioning is described in the user manual (100000718).
8 Appendix: Wiring Diagrams
The pin assignments can be found on the side of the device.
8.1 Ethernet
v
4
13
2
P2
1 = RX +
2 = TX +
3 = RX –
4 = TX –
flange = FE
v
4
13
2
P1
1 = TX +
2 = RX +
3 = TX –
4 = RX –
flange = FE

15
V01.0 | 2017/10
8.2 Supply Voltage
8.2.1 TBIP-L5-FDIO1-2IOL
8.2.2 TBIP-L4-FDIO1-2IOL
wv
1
2
3
4
1 RD = 24 VDC V2
2 GN = 24 VDC V1
3 WH = GND V1
4 BK = GND V2
1
2
3
4
X1 X2
8.3 Safety Inputs
8.4 Safety In-/Outputs
NOTE
For PM-switching outputs, connect the negative pole of the load to the M-connector
of the respective output (pin 2), see “9 Appendix: Switching examples”on p.16.
8.5 DXP
8.6 IO-Link
1 BK = GND V2
2 BU = GND V1
3 GNYE = FE
4 BN = 24 VDC V1
5 WH = 24 VDC V2
3
4
5
2
1
wv
3
4
5
2
1
X1 X2
4
13
2
5
v
1 = Vaux1/T1
2 = FDI (T2)
3 = GND (V1)
4 = FDI (T1)
5 = T2
4
13
2
5
v
1 = Vaux1/T1
2 = FDO-/FDI (T2)
3 = GND (V1)
4 = FDO+/FDI (T1)
5 = T2
4
13
2
5
v
1 = FSO0
2 = DI/DO
3 = GND (V1)
4 = DI/DO
5 = FE
4
13
2
5
v
1 = Vaux1/FSO1
2 = DI/DO
3 = GND (V1)
4 = C/Q
5 = GND (V1)

16
Appendix: Switching examples
Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [email protected] | www.turck.com
9 Appendix: Switching examples
9.1 Inputs
Safe equivalent input for potential free contacts (NC/NC)
2 FDI (T2)
1 T1
3 n.c.
4 FDI (T1)
5 T2
TBPN-L1…
2 FDI (T2)
1 T1
3 n.c.
4 FDI (T1)
5 T2
TBPN-L1…
Safe antivalent input for potential free contacts (NC/NO)
2 FDI (T2)
1 T1
3 n.c.
4 FDI (T1)
5 T2
TBPN-L1…
Safe electronic input (OSSD)
2 FDI (T2)
1 VAUX1
3 GND
4 FDI (T1)
5 n.c.
OSSD +
–
TBPN-L1…
9.2 Outputs
Safe output PP-switching
2 n.c.
1 n.c.
3 GND (V1)
4 FDO +
5 n.c.
TBPN-L1…
For PP-switching outputs, connect the negative
pole of the load to the GND-connector of the re-
spective output (pin 3). Another connection to the
GND of the power supply unit is not permitted!
The wiring has to allow an exclusion of faults
regarding cross connection.
Safe output PM-switching
2 FDO –
1 n.c.
3 n.c.
4 FDO +
5 n.c.
TBPN-L1…
For PM-switching outputs, connect the negative
pole of the load to the M-connector of the respec-
tive output (pin 2).

17
V01.0 | 2017/10
10 Appendix: Designations and Abbreviations
Abbreviation Meaning
DC Diagnostic Coverage
E/E/PE-system Electrical/electronic/programmable electronic system
HFT Hardware failure tolerance
MTTFDMean Time To Failure Dangerous
PFD Probability of dangerous failure on demand
PFHDAverage frequency of dangerous failure per hour
PL Performance Level
SIL Safety Integrity Level
11 Appendix: Function Tests
Ensure that the function test is only carried out by qualified personnel.
A suggested function test consists of the following steps:
Step Action
1 Switch every safety related input at least once a year.
2 Control the switching behavior by monitoring the output circuits.
3 Observe the maximum duty cycle and the total operation time depending on the select-
ed PFD value.
4 If the maximum duty cycle is reached: Request the shutdown function in order to check
the function of the safety system.
Once the test has been completed, document and archive the results.
12 Appendix: Document History
Version Date Modications
1.0 2017-10-27 First version

18
Appendix: Technical data
Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [email protected] | www.turck.com
13 Appendix: Technical data
Devices
Type TBIP-L5-FDIO1-2IOL
– Ident no. 6814053
– YoC 2017
Type TBIP-L4-FDIO1-2IOL
– Ident no. 100000360
– YoC 2017
Interfaces
Ethernet 2 x M12, 4-pin, D coded
Service interface Ethernet
Power supply
Connection options
– TBIP-L5-FDIO1-2IOL 7/8’’, 5-pole
– TBIP-L4-FDIO1-2IOL 7/8’’, 4-pole
V1 (incl. electronics supply) 24 VDC
V2 24 VDC, only through connected
Permissible range 20,4…28,8 VDC
Isolation voltages ≥ 500 VAC
Times
Internal delay time
for calculating the Watchdog time)
10 ms
Reaction times see “6.3 Safety Characteristic Data” on p.9
Safety inputs for potential free contacts
Loop resistance <150 Ω
Max. cable length max. 1 μF at 150 Ω, limited by line capacity
Test pulse typ. 0.6 ms
Test pulse max. 0.8 ms
Interval between 2 test pulses 900 ms (for static inputs)
Safety inputs for OSSD
Signal voltage, low level EN 61131-2, type 1 (< 5 V; < 0,5 mA)
Signal voltage, high level EN 61131-2, type 1 (> 15 V; < 2 mA)
Max. OSSD supply per channel 2 A
Max. tolerated test pulse width 1 ms
Min. interval between 2 test pulses 12 ms at 1 ms test pulse width
8.5 ms at 0.5 ms test pulse width
7.5 ms at 0.2 ms test pulse width
Safety outputs
Suitable for inputs according to EN 61131-2, type 1
Output level in OFF-state < 5 V
Output current in OFF-state < 1 mA
Test pulse resistive load, max. 0.5 ms
Test pulse max. 1.25 ms
Interval between 2 test pulses, typical 500 ms

19
V01.0 | 2017/10
Interval between 2 test pulses, min. 250 ms
Max. output current 2 A (resistive)
Max. total current for device 9 A, derating curve
Max. output current 2 A, (DC-load) derating curve:
The user has to provide an additional overcurrent protection on site.
General Information
Max. cable length
– Ethernet 100 m (per segment)
– Sensor/ actuator 30 m
Operating/storage temperature -40 °C to +70 °C (-40 to + 158 °F)
Protection class IP65/IP67/IP69K
Housing material Fibre-glass reinforced Polyamide (PA6-GF30)
Window material Lexan
Tests
Vibration test according to EN 60068-2-6/ IEC 68-2-47,
acceleration up to 20 g
Drop and topple according to IEC 60068-2-31/IEC 60068-2-32
Shock test according to EN 60068-2-27
Electro-magnetic compatibility according to EN 61131-2/EN 61326-3-1
∑ I [A]
[°C]
7
0-404070
9
0
I[A]
[°C]
1.5
0-404070
2
0

20
Appendix: Declaration of Conformity
Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [email protected] | www.turck.com
14 Appendix: Declaration of Conformity