S7-1500F Hardwareconfig

Safety Integrated Systems Support (SISS)
SIMATIC S7-1500F
Unrestricted / © Siemens AG 2015. All Rights Reserved. siemens.com/safety-integrated

• F-CPU 22
• Configuring 23
• F-Parameters 24
• Protection 26
• Diagnostic 29
• ET 200SP 35
• ET 200MP 92
• F-Addressing 97
Unrestricted / © Siemens AG 2015. All Rights Reserved.

Page 2 Safety Integrated Systems Support
F-CPU
Configuring
S7-1200F S7-1500F S7-300F/400F
F-CPU
Like a standard CPU àDrag & Drop from hardware catalog into network view ►
► Configuring
► F-Parameters
► Protection
► Diagnostic
► ET 200SP
► ET 200MP
► F-Addressing
Choose firmware version

F-CPU
F-Parameter
S7-1200F S7-1500F S7-300F/400F
F-CPU
F-CPU properties ►
► Configuring
► F-Parameters
► Protection
► Diagnostic
► ET 200SP
► ET 200MP
Default: F-CPU contains ► F-Addressing
a safety program
PROFIsafe monitoring time

for central F-I/O modules

F-CPU
Configuring
S7-1200F S7-1500F S7-300F/400F
F-CPU
PROFIsafe F-monitoring time for F-I/O ►
► Configuring
► F-Parameters
► Protection
► Diagnostic
► ET 200SP
► ET 200MP
► F-Addressing
PROFIsafe monitoring time

for distributed F-I/O
modules

F-CPU
Protection
S7-1200F S7-1500F S7-300F/400F
F-CPU
S7-1500F protection ►
► Configuring
► F-Parameters
The default protection Every user can read and ► Protection
level is “No protection” change the hardware ► Diagnostic
configuration and the blocks ► ET 200SP

► ET 200MP
► F-Addressing
Password only for fail-safe
Read only
HMI communication is
possible
A separate password protection

Complete protection for each access level
(e.g. for different user groups)

S7-1500F
Display – extra Values for Safety
► F-CPU
► Configuring
► F-Parameters
► Protection
► Diagnostic
► ET 200SP
► ET 200MP
Safety mode ► F-Addressing
Enabled/Disabled
Overall signature of
the safety program
Timestamp of the last

failsafe modification

S7-1500F
Webserver – extra Values for Safety
► F-CPU
► Configuring
► F-Parameters
► Protection
► Diagnostic
► ET 200SP
► ET 200MP
► F-Addressing

S7-1500F
System diagnostics with
F-CPU
• System diagnostics in firmware of
►
► Configuring
S7-1500 integrated ► F-Parameters

► Protection
Diagnostic
• System diagnostics also in STOP
►
► ET 200SP
of the PLC available ► ET 200MP
► F-Addressing
• No additional blocks necessary as

with the S7-300/400
• Easy configuration of the alarm

settings
FB49, DB49
DB50, FC49

S7-1500F
System diagnostics
► F-CPU
► Configuring
► F-Parameters
Always enabled ► Protection

► Diagnostic
► ET 200SP
► ET 200MP
► F-Addressing
Less configuration effort

S7-1500F
System diagnostics
► F-CPU
S7-1500 S7-300/400 ► Configuring

► F-Parameters
► Protection
Default settings enabled disabled ► Diagnostic
► ET 200SP
► ET 200MP
Implementation In Firmware distributed blocks ► F-Addressing
NO blocks
Availability PLC – “STOP” PLC – “RUN”

PLC – “RUN”
Influence regarding No influence high

performance (generation of the blocks)
(Generation/Download)
Connection to„3rd- not possible Export/Import of
Party“-HMI (changed architecture) generated messages (with
STEP 7 “Classic”)

• F-CPU 23
• ET 200SP 34
• Overview 35
• BaseUnit 38
• General F-parameter 42
• 8 F-DI 46
• 4 F-DQ 56
• F-PM-E 66
• 1 F-RQ 79
• F-CM AS-i Safety 83
• ET 200MP 92
• F-Addressing 97
ET 200SP
…optimum utilization of control cabinet volume
Investment protection + High availability +

• Simply add failsafe modules to • Signal-test onboard
the standard I/O • Short-circuit, wire breakage, …
• Easy and rapid localization of
faults through finely granular
Simple commissioning + fault messages in plain text
• PROFsafe address configured
via software and saved in the
coding module. Optimum utilization of control +
cabinet volume
• Reduction in module width of
Simple device replacement + 50% or more
• PROFIsafe address automatically
• Load group formation without
transferred from the intelligent
power modules
coding module

ET 200SP
Interface modules
► F-CPU
ET 200SP IM DP HF IM PN ST IM PN HF ► ET 200SP
► Overview
► BaseUnit
Number of modules 32 32 64 ► General F-parameter
► 8 F-DI
► 4 F-DQ
Failsafe I/O Module ► F-PM-E
► 1 F-RQ
► F-CM AS-i Safety
Isochronous Mode
(Synchronisation with program cycle) ► ET 200MP
► F-Addressing
Hot swapping multi single multi
Media redundancy (MRP)
Prioritized startup

ET 200SP
Choose the correct BaseUnit
► F-CPU
New potential group ► ET 200SP
necessary? ► Overview
BaseUnit
à white BaseUnit
►
► General F-parameter
► 8 F-DI
Want to use the existing ► 4 F-DQ
potential group? ► F-PM-E

► 1 F-RQ
à dark BaseUnit ► F-CM AS-i Safety
► ET 200MP
► F-Addressing
BaseUnits with additional

AUX terminals

ET 200SP
Choose the correct BaseUnit for F-PM and F-RQ
F-CPU
Power module Relay module ►
► ET 200SP
F-PM-E PPM 24VDC/8A F-RQ 1x24VDC/24..230VAC/5A ► Overview
► BaseUnit
► 8 F-DI
► 4 F-DQ
► F-PM-E
► 1 F-RQ
► ET 200MP
► F-Addressing
Opens a new potential group for

Specific Baseunit for F-RQ
safety-related shutdown
BaseUnit: BU20-P8+A4+0B
BaseUnit: BU20-P6+A2+4D
Article Nr.: 6ES7193-6BP20-0BF0
Article Nr.: 6ES7193-6BP20-0DC0

ET 200SP
► F-CPU
► ET 200SP
► Overview
► BaseUnit
General F-parameter
New potential group
►
► 8 F-DI
► 4 F-DQ
► F-PM-E
► 1 F-RQ
AUX clamps connected ► ET 200MP
► F-Addressing

ET 200SP
F-CPU
Choose the correct BaseUnit in the hardware configuration. ►
► ET 200SP
► Overview
► BaseUnit
► 8 F-DI
Choose the correct potential ► 4 F-DQ
group ► F-PM-E
► 1 F-RQ
► ET 200MP
► F-Addressing

ET 200SP
General F-Parameter
ET 200SP
General F-parameter

ET 200SP
General F-Parameter
Overview – safety-related parameters of the F-I/O modules
PROFIsafe parameters
• PROFIsafe monitoring time (watchdog)
• PROFIsafe target address, unique per F-module

ET 200SP
General F-Parameter

ET 200SP
General F-Parameter
F-CPU
The general F-parameters are the same for all modules PROFIsafe monitoring time of
►
► ET 200SP
the F-CPU interface ► Overview
► BaseUnit
► 8 F-DI
► 4 F-DQ
Has to be configured with ► F-PM-E
“Assign failsafe address” ► 1 F-RQ

(no DIP switch).
► ET 200MP
► F-Addressing
CRC across all parameters

without the PROFIsafe
address
Passivation behavior:
Passivate channel
Passivate entire module

F-Addressing
Assign failsafe address in TIA Portal
Open the context menu of

the PROFINET device
Select “Assign
F-destination address”

F-Addressing
Checks all modules for

assigning the failsafe
address
Checks only one module

for assigning the failsafe
address
Start the procedure by

clicking on
“Identification”

F-Addressing
The operator has to

confirm the failsafe
address assignment
within 60 sec.

F-Addressing
Assignment by serial
number
Confirm the serial

number of the ET
200SP IM

ET 200SP
General F-Parameter

ET 200SP
General F-Parameter
F-CPU
When it should a Passivation of modules happen à QBAD ►
► ET 200SP
• During the start-up of the F-system until the CPU is in RUN ► Overview
• With PROFIsafe communication errors between F-CPU and F-I/O ► BaseUnit

• If F-I/O or channel faults occur (e.g. wire break, cross circuit, etc.) ► 8 F-DI
• By setting the parameter PASS_ON = 1 in the F-I/O DB ► 4 F-DQ

► F-PM-E
► 1 F-RQ
Passivation means ► F-CM AS-i Safety
► ET 200MP
• Outputs are de-energized – independently of the process image
► F-Addressing
• Inputs provide the substitute value “0” – independently of the actual signal
QBAD ACK_REQ
Reintegration means à ACK_REI (↑)
• Outputs are supplied by the process image again Everything OK 0 0
• Process image of the inputs is supplied with valid process values Error 1 0
Error fixed 1 1
When do you need a Reintegration (after error is cleared)
ACK_REI (↑) 0 0
• Automatically for ACK_NEC = 0 – except for communication errors
• Manually for ACK_NEC = 1 by setting ACK_REI = 1 in the F-I/O DB Everything OK 0 0

STEP 7 Safety V13 SP1
F-I/O DB
S7-1200F S7-1500F S7-300F/400F
Passivate the
F-I/O
For reintegration
of F-I/O
I/O evaluation

Value status
S7-1200F S7-1500F S7-300F/400F
Location of value status bits in the PII for fail-safe digital input modules
Example of address
assignment in the PII
for a F-DI module with
16 channels
• The value status bits come straight after the channel values in the PII.

Value status
S7-1200F S7-1500F S7-300F/400F
Location of value status bits in the PII for fail-safe digital output modules
Example of address
assignment in the PIQ
for a F-DQ module with
4 channels
• The value status bits in the PII are mapped with the same structure
as the channel values in the PIQ.
Example of address
for a F-DQ module with
4 channels

Value status
S7-1500F S7-300F/400F
Location of value status bits in the PII for fail-safe digital input/output modules
Example of address
assignment in the PIQ
for a F-DI/DQ module
with 2/1 channels
• The value status bits in the PII are mapped with the same structure
as the channel values in the PII and PIQ.
Example of address
for a F-DI/DQ module
with 2/1 channels

Safety blocks
Evaluation of the F-I/O in a separate F-FB „F-Periphery“

ET 200SP
F-DI 8x24VDC HF
ET 200SP
F-DI 8x24VDC HF

ET 200SP
General F-Parameter
F-CPU
Overview – safety-related parameters of the F-I/O modules ►
► ET 200SP
► Overview
PROFIsafe parameters ► BaseUnit

• PROFIsafe monitoring time (watchdog) ► 8 F-DI
• PROFIsafe target address, unique per F-module ► 4 F-DQ

► F-PM-E
► 1 F-RQ
Module parameters ► F-CM AS-i Safety
► ET 200MP
• Passivation behavior in case of module or channel errors
► F-Addressing
• Passivation of a single channel or of the whole module
• Activation / deactivation of cyclic tests

• Wire break, short circuit, …
• Sensor interconnection on F-DI modules

• 1-channel, 2-channel equivalent, 2-channel non equivalent

ET 200SP
F-DI 8x24VDC HF
F-CPU
Sensor supplies ►
► ET 200SP
► Overview
► BaseUnit
• Each sensor supply can be used for each input ► General F-parameter
8 F-DI
• If you don’t use a supply, it is deactivated
►
► 4 F-DQ
► F-PM-E
► 1 F-RQ
► ET 200MP
► F-Addressing
Sensor supply is not in use

and therefore deactivated

ET 200SP
F-DI 8x24VDC HF
F-CPU
Sensor supplies ►
► ET 200SP
Overview
When the short-circuit test is If the module does not detect a
►
► BaseUnit
enabled, the corresponding "0" signal at the input within ► General F-parameter
sensor supply is switched the assigned time, a diagnostic ► 8 F-DI
off for the configured time. interrupt is generated. ► 4 F-DQ
Otherwise it supplies Meanwhile the process value is

► F-PM-E
► 1 F-RQ
constant 24V DC. “frozen” ► F-CM AS-i Safety
► ET 200MP
► F-Addressing
You use this parameter to

notify the module how long the
utilized sensor needs to start
up after connecting the sensor
supply.
Afterwards the process value
is up to date

ET 200SP
F-DI 8x24VDC HF
F-CPU
Channel parameters: 1oo2 evaluation Dual-channel sensor with ►
ET 200SP
equivalent or antivalent ►
► Overview
evaluation ► BaseUnit
► 8 F-DI
Supply last valid value or 0 ► 4 F-DQ
if discrepancy ► F-PM-E
► 1 F-RQ
► ET 200MP
Channel discrepancy time
► F-Addressing
Reintegration behavior:
Test 0-Signal necessary /
not necessary

ET 200SP
F-DI 8x24VDC HF
F-CPU
Channel parameters ►
Single-channel sensor ► ET 200SP

evaluation ► Overview
► BaseUnit
Channel in use ► 8 F-DI

► 4 F-DQ
► F-PM-E
► 1 F-RQ
External / Internal sensor ► F-CM AS-i Safety
supply 0…7 ► ET 200MP
► F-Addressing
To suppress stray
interference, you can set
an input delay for the
entire channel or channel
pair.
It results in a longer
response time.

ET 200SP
F-DI 8x24VDC HF
F-CPU
► ET 200SP
► Overview
► BaseUnit
► 8 F-DI
Recognizing unusual signal ► 4 F-DQ
patterns (with 1oo1 available) ► F-PM-E

► 1 F-RQ
► ET 200MP
► F-Addressing
Number of signal changes until

a chatter error is detected
The monitoring window starts

8
with the first signal change of
the input signal

ET 200SP
F-DI 8x24VDC HF
F-CPU
Chatter monitoring ►
► ET 200SP
An assigned monitoring window is available for each input channel. The monitoring window starts with the ► Overview
first signal change of the input signal. If the input signal changes within the monitoring window at least as ► BaseUnit
often as the assigned "Number of signal changes", a chatter error is detected. If no chatter error is detected ► General F-parameter
► 8 F-DI
within the monitoring window, the next signal change restarts the monitoring window. ► 4 F-DQ
► F-PM-E
► 1 F-RQ
Diagnosis chatter error ► ET 200MP
If a chatter error is detected, a ► F-Addressing
diagnostic is signaled. If the
chatter error does not occur for
the monitoring window for three
times the configured period, the
diagnostic is reset.

ET 200SP
F-DI 8x24VDC HF
► F-CPU
► ET 200SP
► Overview
► BaseUnit
► 8 F-DI
► 4 F-DQ
One sensor is connected via one channel ► F-PM-E
(1oo1 evaluation) for each process signal. Any ► 1 F-RQ
sensor supply of the module can be assigned ► F-CM AS-i Safety
ET 200MP
to each input.
►
► F-Addressing
You can also supply the sensor by means of

an external sensor supply.

ET 200SP
F-DI 8x24VDC HF
F-CPU
Some examples for 1oo2 equivalent / antivalent ►
► ET 200SP
► Overview
► BaseUnit
► 8 F-DI
► 4 F-DQ
► F-PM-E
► 1 F-RQ
► ET 200MP
► F-Addressing

ET 200SP
F-DI 8x24VDC HF
F-CPU
Terminal assignment ►
► ET 200SP
Clamp Assignment Clamp Assignment ► Overview
► BaseUnit
1 DI0 2 DI1
DI0 DI1 ►
►
General F-parameter
8 F-DI
► 4 F-DQ
3 DI2 4 DI3 ► F-PM-E
1 F-RQ
5 DI4 6 DI5
►
7 DI6 8 DI7 ► ET 200MP
US0 US1 ► F-Addressing

9 US0 10 US1
11 US2 12 US3
13 US4 14 US5
15 US6 16 US7
L+ DC24V M M
• DIn: Fail-safe digital input, Channel n
• USn: Internal sensor power supply, Channel n
ET 200SP
F-DI 8x24VDC HF - Properties
Properties
F-DI 8 x 24 VDC HF • centraler/decentraler automation
• 8 inputs up to SIL2 resp.

• 4 inputs up to SIL 3
• separated short-circuit protected sensor supplies
• Integrated diagnosis of input circuit – short-circuit

monitoring – discrepancy evaluation
• external sensor supply possible
• module passivation in case of error
• chatter monitoring of input signals
• width: 15mm

ET 200SP
F-DI 8x24VDC HF – Application examples
Emergency-Stop device …any assignment of sensor

supply for each input channel
module diagnosis
• Two-channel evaluation (1oo2)

channel 0 & 8 correspond as one
channelgroup à 1 signal in process
image of inputs
• Internal sensor-supply
• Short-circuit monitoring
• Discrepancy evaluation
à high degree of diagnostic (up to SIL 3)

ET 200SP
F-DI 8x24VDC HF - Application examples
Two-Hand operating device …any assignment of sensor

supply for each input channel
module diagnosis
• One-channel evaluation (1oo1)
• Internal sensor-supply
• Short-circuit monitoring
• No evaluation of discrepancy
à mid degree of diagnostic (up to SIL3/PLe)*
*with using library safety function „TWO_H_EN“, according to EN574 synchronization time: 500ms

ET 200SP
F-DI 8x24VDC HF – Application examples
Protective door-switch (OSSD-signal)
module diagnosis
• Two-channel evaluation (1oo2)

channel 0 & 8 correspond as one
channelgroup à 1 signal in process
image of inputs
• External sensor-supply
• no short-circuit monitoring
(sensor integrated)
• discrepancy evaluation
à mid degree of diagnostic (up to SIL

SIL3/PLe)

ET 200SP
F-DQ 4x24VDC/2A PM HF
ET 200SP
F-DQ 4xVDC/2A PM HF

ET 200SP
F-CPU
Channel parameters for “Potential group” and “F-parameter” are the same ►
► ET 200SP
as for a F-DI and F-DQ module. ► Overview
► BaseUnit
► 8 F-DI
► 4 F-DQ
► F-PM-E
► 1 F-RQ
► ET 200MP
► F-Addressing

ET 200SP
F-CPU
Channel parameter Specifies the time within
►
► ET 200SP
the light, dark and switch ► Overview
on test should be ► BaseUnit
performed. In case of a ► General F-parameter
fault, the time is reduced to ► 8 F-DI

► 4 F-DQ
60 seconds ► F-PM-E
► 1 F-RQ
F-CM AS-i Safety
Readback time for the dark ►
ET 200MP
test ►
► F-Addressing
Readback time for switch

on test
Option: light test
Option: Wire break

diagnosis

ET 200SP
F-CPU
Dark test ►
► ET 200SP
► Overview
• Dark tests are shutdown tests within bit pattern test. ► BaseUnit
• A test signal is switched to the output channel while the output channel is active ("1"). ► General F-parameter
► 8 F-DI
• The output channel is then briefly disabled (= "dark period") and read back. ► 4 F-DQ
• A sufficiently slow actuator does not respond to this and remains switched on. ► F-PM-E
► 1 F-RQ
„Max readback time dark test“ should be set as ► ET 200MP
low as possible, but high enough that the output ► F-Addressing
channel is not passivated.
The dark test detects the following faults:

ü Short circuit P to L+
ü Short circuit M to ground
ü Cross circuit
Readback

ET 200SP
F-CPU
Switch on test ►
► ET 200SP
► Overview
• The switch on test is part of the bit pattern test. ► BaseUnit
• During the switch on test, the P-switch and M-switch of the output channel are alternately closed ► General F-parameter
► 8 F-DI
and read back when the output channel is inactive ("0"). ► 4 F-DQ
• In contrary to the light test, no power flows through the connected load during the test. ► F-PM-E
► 1 F-RQ
„Max. readback time switch on test“ should be ► ET 200MP
set as low as possible but high enough that the ► F-Addressing
output channel is not passivated
The switch on test detects the following faults:

ü Short circuit M to ground
ü Short circuit P to L+
ü Cross circuit
Readback

ET 200SP
F-CPU
► ET 200SP
► Overview
► BaseUnit
► 8 F-DI
► 4 F-DQ
► F-PM-E
► 1 F-RQ
► ET 200MP
► F-Addressing
Option: Activate light test
Option: Activate wire-break

monitoring

ET 200SP
F-CPU
Light test ►
► ET 200SP
► Overview
• A test signal is switched to the output channel while the output channel is inactive ("0"). ► BaseUnit
• The output channel is switched on briefly during the light test (= "light period") and read back. A ► General F-parameter
► 8 F-DI
sufficiently slow actuator does not respond to this and remains switched off. ► 4 F-DQ
• In contrary to the switch on test, the P-switch and the M-switch switch at the same time during the ► F-PM-E
1 F-RQ
light test and power flows through the connected load.
►
► ET 200MP
► F-Addressing
The light test detects the following faults:

ü Overload with a “0” signal at the output
ü Wire break with a “0” signal at the output
Readback

ET 200SP
F-CPU
Wiring ►
► ET 200SP
► Overview
In order to achieve SIL3/Cat.4/PLe with this ► BaseUnit
wiring, you must install a qualified actuator, for ► General F-parameter

► 8 F-DI
example, in accordance with IEC 60947. ► 4 F-DQ
► F-PM-E
► 1 F-RQ
"wire break" fault is only detected if the wire ► ET 200MP
break disconnects both relays from P or M. ► F-Addressing
This diagnostics is not safety-related.
SIRIUS contactor
"wire break" and "overload" faults are detected
only at the P-switch of the output (not at the
M-switch).

ET 200SP
F-DQ 4x24VDC/2A PM HF – Application Example
Two-channel contactor control
module diagnosis
• short-circuit P to L+
• short-circuit M to ground
• cross-circuit detection
P-… to P-… resp. M-… to M-…
• wire-break-/overload-monitoring
P-switch
à high degree of diagnostic (up to SIL3/PLe)*
*with implementation of feedback monitoring in F-user program

ET 200SP
F-CPU
► ET 200SP
Clamp Assignment Clamp Assignment ► Overview
► BaseUnit
DQP0 DQP1 ► General F-parameter
1 DQ-P0 2 DQ-P1 ► 8 F-DI

► 4 F-DQ
3 DQ-P2 4 DQ-P3 ► F-PM-E
► 1 F-RQ
5 DQ-P0 6 DQ-P1 ► F-CM AS-i Safety
ET 200MP
7 DQ-P2 8 DQ-P3 ►
DQM0 DQM1 ► F-Addressing

9 DQ-M0 10 DQ-M1
11 DQ-M2 12 DQ-M3
13 DQ-M0 14 DQ-M1
15 DQ-M2 16 DQ-M3
L+ DC24V M M
• DQ-Pn: Fail-safe digital output, Channel n, P-switching
• DQ-Mn: Ground for Fail-safe digital output, Channel n, M-switching
ET 200SP
F-RQ 1x24VDC/24..230VAC/5A
ET 200SP
F-RQ 1x24VDC/
24..230VAC/5A

ET 200SP
Internal construction ► F-CPU

ET 200SP
• Module-internal Feedback signal by the process image of the inputs (PII): ►
► Overview
► BaseUnit
► 8 F-DI
► 4 F-DQ
► F-PM-E
► 1 F-RQ
► ET 200MP
► F-Addressing

ET 200SP
F-CPU
ET 200SP 1 F-RQ ►
► ET 200SP
• 1 relay output (2x two-channel NO contacts) ► Overview
• SIL 3 / PL e if controlled by F-DQ output ► BaseUnit

• Galvanically isolated switching up to 5A ► 8 F-DI
► 4 F-DQ
► F-PM-E
► 1 F-RQ
► ET 200MP
► F-Addressing

ET 200SP
F-RQ 1x24VDC/24..230VAC/5A – Application Example
Two-Channel contactor control
module diagnosis
• Relay contacts with internal readback

signal as part of PII
• galvanically isolated switching contacts
à high degree of diagnostic (up to SIL3/PLe)*
…cascade signal to control more

*controlled by F-DQ (P/M-switching)
F-RLY modules
ET 200SP
F-CPU
► ET 200SP
Overview
Clamp Assignment Clamp Assignment
►
► BaseUnit
RQ01+ RQ01- ► 8 F-DI
1 RQ01+ 2 RQ01- ► 4 F-DQ
RQ02+ RQ02- F-PM-E
3 RQ02+ 4 RQ02-
►
► 1 F-RQ
F-CM AS-i Safety
5 - 6 -
►
► ET 200MP
7 - 8 - ► F-Addressing
9 IN P 10 OUT P
IN P
11 IN M 12 OUT M
IN M
13 AUX 14 AUX
15 AUX 16 AUX

I IA AS S SUP FA 3
SIMATIC S7-1500F
Unrestricted / © Siemens AG 2015. All Rights Reserved. siemens.com/safety-integrated

Functional segment M1 – Auto mode for M1
Description:
• In "Auto“ mode M1 starts with "Start".
• Safe shutdown via E4.
• To Acknowledge press "Reset".
Tasks:
• Create the safe shutdown with E4
• Define a „Auto_flag“ for the Start/Stop-operation in „Auto“ mode
• Once the Auto mode is selected, by pressing “Start” button, auto_flag should switched to true. (consider
switch off condition: Fdback.error, Estop.Q, Service mode, global Qbad)
• If Safety feedback monitoring with „FDBACK“ also get a true signal, the motor M1 should be switched on
• If “auto_flag” is true and the FDBACK is true also, the relay which connected to M1 should be switched on.

Safety blocks

Safety blocks
Signal profile diagram F_ESTOP1 (ACK_NEC = 1)

Functional segment M1 – Service mode for M1
Description:
• In “Service” mode M2 is active as long as the two-hand-monitoring evaluation
is “1”
• Safe shutdown via E4.
Tasks:
• „S1“ and „S2“ are the input for the „TWO_H_EN“ module
• Create a service_flag (consider: Estop.Q, service mode and
TWO_H_EN_M1.Q)
• Once the service_flag is true and the FDBACK is true also, the relay which
connected to M1 should be switched on.

ET 200SP
F-PM-E 24VDC/8A PPM
ET 200SP
F-PM-E 24VDC/8A PPM

ET 200SP
F-PM-E 24VDC/8A PPM
F-CPU
New potential group is already defined ►
► ET 200SP
► Overview
BaseUnit
The F-PM needs a special (20mm) ►
BaseUnit which opens a new ► 8 F-DI
potential group (light BaseUnit). ► 4 F-DQ
► F-PM-E
► 1 F-RQ
► ET 200MP
► F-Addressing

ET 200SP
F-PM-E 24VDC/8A PPM
F-CPU
Channel parameters for “F-parameter” are the same for all F-Modules ►
► ET 200SP
Overview
PROFIsafe monitoring time of
►
► BaseUnit
the F-CPU interface ► General F-parameter
► 8 F-DI
► 4 F-DQ
► F-PM-E
Has to be configured with ► 1 F-RQ
“Assign failsafe address” ► F-CM AS-i Safety
ET 200MP
(no DIP switch). ►
► F-Addressing
CRC across all parameters

without the I/O address
Passivation behavior:
Passivate channel
Passivate entire module

ET 200SP
F-PM-E 24VDC/8A PPM
► F-CPU
Specifies the time within the light, ► ET 200SP
dark and switch on tests should be ► Overview

► BaseUnit
performed throughout the module ► General F-parameter
► 8 F-DI
When the short-circuit test is ► 4 F-DQ

F-PM-E
enabled, the corresponding sensor ►
► 1 F-RQ
supply is switched off for the ► F-CM AS-i Safety
configured time. ► ET 200MP
► F-Addressing
If the module does not detect a "0"
signal at the input within the
assigned time, a diagnostic
interrupt is generated.
You use this parameter to notify the

module how long the utilized sensor
needs to start up after connecting
the sensor supply.

ET 200SP
F-PM-E 24VDC/8A PPM
F-CPU
Dual-channel sensor with ► ET 200SP
equivalent or antivalent ► Overview

► BaseUnit
evaluation ► General F-parameter
► 8 F-DI
► 4 F-DQ
► F-PM-E
Supply last valid value or 0 ► 1 F-RQ
if discrepancy ► F-CM AS-i Safety
► ET 200MP
► F-Addressing
Channel discrepancy time
Reintegration behavior

ET 200SP
F-PM-E 24VDC/8A PPM
F-CPU
► ET 200SP
► Overview
► BaseUnit
► 8 F-DI
► 4 F-DQ
► F-PM-E
► 1 F-RQ
Channel activated ► F-CM AS-i Safety
► ET 200MP
► F-Addressing
The evaluation of the
safety function can take
place in the “F-CPU” or “F-
CPU and onboard F-DI” for
fast group shutdown.
Specifies if the output is

PM or PP switching

ET 200SP
F-PM-E 24VDC/8A PPM
F-CPU
► ET 200SP
► Overview
► BaseUnit
► 8 F-DI
► 4 F-DQ
► F-PM-E
1 F-RQ
Sets the time to read back
►

the dark test. ► ET 200MP
► F-Addressing
Sets the time to read back

the switch on test.
Activate light test
Activate wire-break
monitoring

ET 200SP
F-PM-E 24VDC/8A PPM – Application example
Failsafe Switching Off of Standard DQ-Modules
ü High Diagnostic, as the F-DI/F-DQ Modules (short-circuit, cross-circuit, discrepancy evaluation)
ü Evaluation of safety function either in F-PM-Module (one-/two-channel evalution) or in F-CPU
ü Fast group shut-down of standard DQ-Modules up to SIL2/PLc

ET 200SP
F-PM-E 24VDC/8A PPM
F-CPU
F-PM-E 24VDC/8A PPM ►
► ET 200SP
• 2 inputs (SIL 3/PL e) ► Overview
• 1 output PM or PP switching, output current 8 A (SIL 3/PL e) ► BaseUnit

Safety-oriented tripping of standard DQ modules ► 8 F-DI

► 4 F-DQ
The evaluation of the safety function take place ► F-PM-E

► 1 F-RQ
• In the F-CPU or ► F-CM AS-i Safety
• In the F-PM E power module ► ET 200MP

► F-Addressing
F-DI
E-Stop F-DI
„Fast
Response“ DQ DQ DQ DQ DI
[SIL 2/PL d]
Acknowledge
and/or
IM
F-DQ

ET 200SP
F-PM-E 24VDC/8A PPM
F-CPU
PM / PP – Differences ►
► ET 200SP
► Overview
PM switching ► BaseUnit
No further requirements for wiring ► 8 F-DI

► 4 F-DQ
► F-PM-E
If the following two conditions are met, a PM-switched module ► 1 F-RQ
detects a short circuit: ► F-CM AS-i Safety
► ET 200MP
• Loads that have a connection between chassis and ground.
► F-Addressing
• Chassis and ground are connected at the power supply unit.
PP switching
Use it, if you need potential-free contacts
You have to ensure that no shortcut to P occurs.

(wiring inside a switch cabinet or by using a steel pipe)

ET 200SP
F-PM-E 24VDC/8A PPM
F-CPU
► ET 200SP
Clamp
Klemme Assignmen
Zuweisung
Assignment Clamp
Klemme Assignmen
Assignment
Zuweisung ► Overview
t t DI0
►
►
BaseUnit
General F-parameter
1 DI
DI00 2 DI
DI11 US0 ► 8 F-DI
4 F-DQ
DQP0 DQM0
►
3 UUS0S0 4 UUS1S1 ► F-PM-E

► 1 F-RQ
5 DQ-P
DQ-P00 6 DQ-M
DQ-M00 ► F-CM AS-i Safety
► ET 200MP
7 AUX
AUX 8 AUX
AUX
► F-Addressing
L+ DC24V
DC24V M M
M
L+ DC24V
DC24V M M
M
• DIn: Fail-safe digital input, Channel n
• USn: Internal sensor power supply, Channel n
• DQ-P0: Fail-safe digital output, Channel 0, P switching
• DQ-M0: Ground for Fail-safe digital output, Channel 0, M switching
• AUX: Terminal for PE or voltage bus (free for use up to AC 230 V)

Functional segment M2 – inc. fast shutdown with F-PM
Description:
• The safe shutdown is implemented with a F-PM-E module. If the estop E3 is
pressed, the voltage on the buses P1 and P2 of the following potential group
would be opened. Thus, the power supply of the standard DQ module is
removed and M2 is switched off safely.
• In “Auto" M2 can be started with "Start“ button. Acknowledgement is with
"Reset".
Tasks:
• Create the safe shutdown with „ESTOP1“.
• If E3 was not pressed and the auto mode is selected, F-PM should be
switched on
• If there isn't any fault in the system. You can start with “Start” button
(consider: Estop.Q, auto mode, global Qbad)
• Use the „FDBACK“-block, you can active the drive M1
• Optional: Expand / Create the block “signal lights”
ET 200SP
CM AS-i Master and F-CM AS-i Safety
ET 200SP
CM AS-i Master and
F-CM AS-i Safety

ET 200SP
F-CPU
Scalable SIMATIC AS-i F-Link with ET 200SP ►
► ET 200SP
► Overview
Characteristics ► BaseUnit
► 8 F-DI
• Up to 31 safe AS-i input slaves ► 4 F-DQ
• Up to 16 safe AS-i output slaves or ► F-PM-E

► 1 F-RQ
shutdown groups ► F-CM AS-i Safety
• Combined as required with ► ET 200MP

F-Addressing
ET 200SP assembly ►
• F parameter setting as usual with

ET 200SP
• Startup test, Discrepancy
monitoring, 1oo1 and 1oo2, …

ET 200SP
The AS-i Master for ET 200SP provides

CM
easy access to the AS-i slaves from the
AS-i Master
SIMATIC program.
By adding the F-CM AS-i Safety, the

F-CM standard AS-i Master turns into the safe
AS-i Safety AS-i Master

ET 200SP
► F-CPU
By adding it to the AS-i Master, it provides the connection of safe actuators and ► ET 200SP
sensors by means of AS-Interface ► Overview
► BaseUnit
• Only AS-i Power 30 V ► 8 F-DI
• Only distributed configuration at the moment! ►
►
4 F-DQ
F-PM-E
• Converts the ASIsafe protocol to PROFIsafe ► 1 F-RQ

F-CM AS-i Safety
• Safe communication possible in both directions (SIL 3)
►
► ET 200MP
• Up to 31 safe AS-i slaves can be evaluated per network ► F-Addressing
• Up to 12 independent safe AS-i actuators can be controlled per
network
• Integration as with 31 F-DI / 12 F-DO module
• Setting the F-address without DIP switches
• One F-address per AS-i network
• Width: 20mm

ET 200SP
F-CPU
Integration into STEP 7 Safety Advanced ►
► ET 200SP
► Overview
• Safe AS-i slaves are addressed by the F blocks from STEP 7 Safety ► BaseUnit
• Same configuration of the ASIsafe system as for the standard automation system ► 8 F-DI
• Safety functions can also be implemented for AS-i through the integrated library with ► 4 F-DQ
► F-PM-E
TÜV-certified function blocks ► 1 F-RQ
► ET 200MP
► F-Addressing

ET 200SP
Safe control
e.g. S7-1500 F
Standard data
PROFINET/ PROFIsafe PROFIBUS/ PROFIsafe
Secure data
SIMATIC ET 200SP SIMATIC ET 200SP
AS-i double master and AS-i single master
Global emergency stop
F-DI module
e.g. via F-DI
AS-i / ASIsafe AS-i / ASIsafe
Safety cell Safety cell Safety cell

• F-CPU 23
• ET 200SP 35
• ET 200MP 91
• Overview 92
• 16 F-DI 94
• 8 F-DQ 95
• F-Addressing 97

ET 200MP
Max. performance with max. number of channels
► F-CPU
One Periphery for fail-safe and standard automation 1) ► ET 200SP
► ET 200MP
• Reduction in module width up to 60% ► Overview
• Identical handling of the F-I/Os with Standard I/Os ►
►
16 F-DI
8 F-DQ
• Complete integration in the system diagnostic ► F-Addressing
• Central (CPU15xxF) and distributed architectures

(IM155-5 PN ST/HF und DP ST)
• Achievable safety level up to SIL 3 acc. to
IEC 61508:2010 and PL e acc. to ISO 13849-1:2008
Certified according to IEC 61508 2nd Edition
• F-DI 16x24VDC, F-DQ 8X24VDC / 2A ppm

• No DIP switches for F-Addressing needed (configuration via engineering)
• Automatically assignment of the module parameters in case of module exchange
1) Scheduled delivery release 10/2015

ET 200MP
F-DI 16x24VDC PROFIsafe
► F-CPU
► ET 200SP
F-DI 16x24VDC PROFIsafe 1) ► ET 200MP
► Overview
MLFB: 6ES7526-1BH00-0AB0 ► 16 F-DI
► 8 F-DQ
16 inputs (SIL3/Cat.3/PLd) or 8 inputs (SIL3/Cat.4/PLe) ► F-Addressing
Sensor evaluation 1oo1 and 1oo2

No DIP-switch for F-Addresses needed
Module and channel passivation
4 internal sensor supply voltage groups / external sensor
supply
New parameters pulse stretching and chatter monitoring
Supports FW-Update and I&M data
Requires Safety Advanced V13 SP1 + HSP

ET 200MP
F-DQ 8x24VDC / 2A PPM PROFIsafe
► F-CPU
► ET 200SP
F-DQ 8x24VDC / 2A PPM PROFIsafe 1) ► ET 200MP
► Overview
MLFB: 6ES7526-2BF00-0AB0 ► 16 F-DI
► 8 F-DQ
No DIP-switch for F-Addresses needed ► F-Addressing
Module and channel passivation

PM / PP switching parametrizable (SIL3/Cat.4/PLe)
Output current 2A per channel
New parameter „Disable dark test for 48h“
Supports FW-Update and I&M data
Requires Safety Advanced V13 SP1 + HSP

• F-CPU 23
• ET 200SP 35
• ET 200MP 92
• F-Addressing 96
• Coding element 97
• Assignment 102

F-Addressing
ET 200SP
► F-CPU
Delivery state Module is inserted Module is pulled ► ET 200SP
► ET 200MP
► F-Addressing
► Coding element
► Assignment
Remains in
the
BU after first
insertion of
module

F-Addressing
ET 200MP
Backside front conductor Coding element
Accessory:
10 yellow DIN A4 labeling sheets (yellow)

MLFB: 6ES7592-2CX00-0AA0
500 LABELING SHEETS ON ROLL FOR (yellow)

MLFB: 6ES7592-8CX00-0AA0
5 pieces coding elements

MLFB: 6ES7592-6EF00-1AA0
5 pieces FRONT DOOR FOR F-IO MODULES

MLFB: 6ES7528-0AA10-7AA0

F-Addressing
Differences in F-Addressing of ET200S & ET 200SP
► F-CPU
ET 200S F-I/O modules ET 200SP F-I/O modules ► ET 200SP
► ET 200MP
ü Addressing by means of: ü Addressing by means of: ► F-Addressing

DIP switches coding element ► Coding element
► Assignment

F-Addressing
Differences in F-Addressing of ET200S & ET 200SP
► F-CPU
ET 200S ET 200SP
► ET 200SP
ET 200MP
Action Action ►
► F-Addressing
Parameterize the PROFIsafe address in HW Config. Parameterize the PROFIsafe address in HW Config.
Coding element
à automatically or optional manual address assignment à automatically or optional manual address assignment ►
► Assignment

F-Addressing
Assign failsafe address in STEP 7 “Classic”
► F-CPU
► ET 200SP
► ET 200MP
► F-Addressing
► Coding element
Only Online possible!!! ► Assignment

F-Addressing
► F-CPU
► ET 200SP
► ET 200MP
► F-Addressing
► Coding element
► Assignment
Choose
„Name F Adresses“

F-Addressing
► F-CPU
► ET 200SP
► ET 200MP
► F-Addressing
► Coding element
► Assignment
Same procedure as in
the dialog of TIA-Portal

F-Addressing
► F-CPU
► ET 200SP
► ET 200MP
► F-Addressing
► Coding element
► Assignment
Same procedure as in
the dialog of TIA-Portal

Security information
Siemens provides automation and drive products with industrial security functions that support the secure
operation of plants or machines. They are an important component in a holistic industrial security concept.
With this in mind, our products undergo continuous development. We therefore recommend that you keep
yourself informed with respect to our product updates.
Please find further information and newsletters on this subject at: http://support.automation.siemens.com
To ensure the secure operation of a plant or machine it is also necessary to take suitable preventive action
(e.g. cell protection concept) and to integrate the automation and drive components into a state-of-the-art
holistic industrial security concept for the entire plant or machine. Any third-party products that may be in use
must also be taken into account.
Please find further information at: http://www.siemens.com/industrialsecurity

Thank you for your attention!
Safety Integrated Systems Support

I IA AS S SUP FA 3
siemens.com/safety-integrated


S7-1500F Hardwareconfig

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

S7-1500F Hardwareconfig

Uploaded by

Copyright:

Available Formats

Safety Integrated Systems Support (SISS)

Unrestricted / © Siemens AG 2015. All Rights Reserved. siemens.com/safety-integrated

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Choose firmware version

Unrestricted / © Siemens AG 2015. All Rights Reserved.

PROFIsafe monitoring time

Unrestricted / © Siemens AG 2015. All Rights Reserved.

PROFIsafe monitoring time

Unrestricted / © Siemens AG 2015. All Rights Reserved.

The default protection Every user can read and ► Protection

level is “No protection” change the hardware ► Diagnostic

configuration and the blocks ► ET 200SP

A separate password protection

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Timestamp of the last

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Unrestricted / © Siemens AG 2015. All Rights Reserved.

S7-1500 integrated ► F-Parameters

• No additional blocks necessary as

• Easy configuration of the alarm

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Always enabled ► Protection

Less configuration effort

Unrestricted / © Siemens AG 2015. All Rights Reserved.

S7-1500 S7-300/400 ► Configuring

Availability PLC – “STOP” PLC – “RUN”

Influence regarding No influence high

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Investment protection + High availability +

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Hot swapping multi single multi

Media redundancy (MRP)

Unrestricted / © Siemens AG 2015. All Rights Reserved.

potential group? ► F-PM-E

BaseUnits with additional

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Opens a new potential group for

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Overview – safety-related parameters of the F-I/O modules

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Has to be configured with ► F-PM-E

“Assign failsafe address” ► 1 F-RQ

CRC across all parameters

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Open the context menu of

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Checks all modules for

Checks only one module

Start the procedure by

Unrestricted / © Siemens AG 2015. All Rights Reserved.

The operator has to

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Confirm the serial

Unrestricted / © Siemens AG 2015. All Rights Reserved.

Unrestricted / © Siemens AG 2015. All Rights Reserved.

• With PROFIsafe communication errors between F-CPU and F-I/O ► BaseUnit

• By setting the parameter PASS_ON = 1 in the F-I/O DB ► 4 F-DQ

Passivation means ► F-CM AS-i Safety