$GYDQW
&RQWUROOHU8VHU¶V*XLGH
6HFWLRQ 0HFKDQLFV
3BSE 002 415R701 Rev A 3-31
'XSOLFDWLRQIRU6HFXULW\
'$1*(5&$87,21
'XSOLFDWLRQRIFRQWUROV\VWHPIXQFWLRQVLVRQHZD\WRHQVXUHWKDWDOOWDVNVDUHSHUIRUPHG
FRUUHFWO\,WLVKRZHYHUYHU\LPSRUWDQWWRHPSKDVL]HWKDWWKHVHFXULW\LQDSURFHVVFRQWURO
V\VWHPZKHQLWFRPHVWRSHUVRQQHOVDIHW\PXVWQHYHUEHEDVHGRQGXSOLFDWLRQRIV\VWHP
IXQFWLRQVDORQH<RXPXVWDOZD\VFKHFNRWKHUPHDVXUHVDVZHOO.
In the most critical applications, a special design of the Advant OCS, the Advant Safety System,
is then applicable.
5HGXQGDQF\
$SSURSULDWH+DUGZDUHDQG6RIWZDUH
Redundancy is achieved by duplication of actual hardware modules.
Options for redundancy in Advant Controller 450 are described in Section 1.7.10.2,
Redundancy. It is not necessary to order extra software to support a duplication of hardware.
From the configuration viewpoint, a redundant pair of I/O modules are kept together by a
common data base element. Normally, the element used in a single application has the extra
parameters needed for a redundant application.
*XLGHOLQHV
• Always base your investment in redundancy on a relevant reliability and availability
analysis. Reflect on, for example:
– Not only the control system itself but also field instrumentation and other production
equipment.
– Costs of production stop vs. increased costs for a system with high availability.
– Vulnerability, price and performance with different alternatives.
• Separate redundant parts as far as possible to avoid common points of failure.
– Make use of separate I/O subracks for redundant I/O boards.
– Make use of separate submodule carriers for redundant communication interfaces.
• Be aware of the increased need for maintenance and spare parts to keep a high level of
availability.
0HFKDQLFV
See Chapter 2, Installation in this manual, Section 2.1, Site Planning Environment in particular.