1. High-available SIMATIC S7-400H Резервированный Simatic
Резервирование на базе PROFINET и PROFIBUS

2. High-available automation system SIMATIC S7-400H
Goals
Goals
Preventing expensive standstill times caused by controller failure (productivity)
Preventing high restart costs after plant failure (data loss)
Protecting plants and workpieces or material in the event of plant or machine standstill (investment protection)
24-hour operation without supervisory or maintenance personnel
System requirements
Easy replacement of all components during running operation
No data loss in the event of a fault – through event-controlled synchronization of controllers
Highest plant availability with early error detection and integrated diagnostic options
Configuration changes during running operation
Overview
Innovations
Redundant Periphery
Periphery
High-available communication
Safety & High availibility
Applications
References
FAQs
More Efficiency in the Production with less Standstill due to Ruggedness and Stability Architecture

3. High-available automation system SIMATIC S7-400H Properties
Goals
Simple project planning
Programming same as standard system
All S7 programming languages can be used
 Existing SIMATIC expertise can still be used
Scalable redundancy and scalable performance
Adapts to required availability through flexible architecture
Broad range of fail-safe controllers with tiered CPU range
Can be expanded with Safety, if necessary
High economic efficiency due to adaptation to required availability through flexible architecture
Event-controlled synchronization
Bumpless switchover
Overview
Innovations
Redundant Periphery
Engineering
Programming is possible, as in the case of a standard system, in all STEP 7 programming languages. The programs can easily be ported from standard systems to a redundant system and viceversa. When the program is loaded, it is automatically distributed onto the two redundant CPUs. The functions and configurations specific to redundancy are parameterized using S7 H-Systems package (integrated into STEP 7 Version 5.3 or higher). The planning engineer is free to concentrate solely on controlling the process.
I/O
Depending on the type of connection, the following I/O components can be used:
PROFIBUS:
• All PROFIBUS slaves for single-sided connection
• ET 200M and ET 200iSPfor switched and redundant connection
PROFINET:
• All PROFINET IO-Devices for single-sided connection
• ET 200M for system redundant connection
Synchronization
The method of event-driven synchronization supports fast and bumpless changeover to the redundant CPU in the event of a fault. It resumes processing at the point of interruption without any loss of information or interrupts. The operating system ensures that all commands, which if executed independently would produce different states in the two systems, operate in synchronism. No programming or parameterization
Periphery
High-available communication
Safety & High availibility
Applications
References
CPU A
CPU B
FAQs
Event
Synchronization
 Switchover without loss of information

4. High-available automation system SIMATIC S7-400H Overview
Goals
Central devices
There are two configuration options for central devices:
Design with split module rack
Design with two separate module racks if systems have to be completely separate from each other for reasons of availability. The distance between the systems can be up to 10 kilometers (16 miles). If a particularly high availability is required, you can use two redundant power supplies.
Connecting the I/O
You can connect the I/O via PROFIBUS and PROFINET.
You can also combine PROFIBUS and PROFINET configurations.
Communication
The fail-safe communication for redundant connections is already integrated in the S7-400H. High-available communication continues automatically and without being noticeable to users in case of an error.
Overview
Innovations
Redundant Periphery
Design
The central devices can be configured in two different ways: When the subunits have to be completely separated from each other for availability reasons, it is appropriate to use two standard racks (UR1 and UR2). Each rack accommodates one CPU and one power supply (PS).
If extremely high availability is required, two redundant power supply modules can be used.The distance between the two racks can be up to 10 km. Two CPUs, each with either a single or a redundant power supply, are plugged into the UR2-H rack with a segmented backplane bus. This supports an extremely compact configuration.
I/O
Depending on the type of connection, the following I/O components can be used:
PROFIBUS:
• All PROFIBUS slaves for single-sided connection
• ET 200M and ET 200iSPfor switched and redundant connection
PROFINET:
• All PROFINET IO-Devices for single-sided connection
• ET 200M for system redundant connection
Communications
High availability also applies to communication. Depending on the network topology, redundant connections can be created and activated automatically in the event of a fault.
Fault-tolerant communication is implemented in the S7-400H. In the event of a fault, the highly available communication link takes over
Periphery
High-available communication
Safety & High availibility
Applications
References
FAQs

5. High-available SIMATIC S7-400H
ET 200M
ET 200M
ET 200M
PROFINET
CPU41x-5H
CPU41x-5H
Synchronisation

6. SIMATIC S7-400H с PROFINET ET 200M IM 153-4 PN (6ES7153-4BA00-0XB0)
H CPU
CPU 412-5H PN/DP
CPU 414-5H PN/DP
CPU 416-5H PN/DP
CPU 417-5H PN/DP
High-available CPUs
Three CPUs are available for the SIMATIC S7-400H to suit different performance requirements. Apart from high volumes, the H-CPUs are also characterized by high performance.
This is not only visible in a high processing speed, but also in a large communication output. Furthermore, an integrated memory type that detects and automatically corrects memory cells corrupted through external influences is also used. The H-CPUs now also permit a firmware update via the network.
Sync modules
The H CPUs are connected by means of fiber-optic cables and "Sync modules" that can be directly plugged into the CPU.
This means that no slot in the rack is lost and that communication is extremely fast. The Sync modules can be replaced with the voltage applied.
There are two types of Sync modules:
• For Sync cables up to 10 m in length
• For Sync cables up to 10 km in length for applications in which the subunits
have to be set up at some distance
Diagnostics/module replacement
Apart from the standard diagnostic functions, the following functions are also available:
• With the integrated self-diagnostics functions, the system detects and signals errors before they can affect the process. They enable the faulty components to be identified and replaced quickly which speeds up repairs.
• All components can be replaced during normal operation (online repair). When a CPU is replaced, all the current programs and data are automatically reloaded. It is also possible to modify the program during normal operation, e.g.changing and reloading of blocks
• Changes can also be made to the configuration during normal operation, e.g. adding or removing DP slaves or modules, changing the memory configuration of the CPU.
CPU 412-5H
CPU 414-5H
CPU 416-5H
CPU 417-5H
(Code/Data)
1MB
512kB/ 512KB
4MB
2MB/2MB
16MB
6MB/10MB
32MB
16MB/ 16MB
DP/MPI 1 DP
PN (nkl. 2port-Switch
Safety (optional) 
Max. Длина
10 km
IO – ET 200M
ET 200M IM PN
(6ES7153-4BA00-0XB0)
ET 200MP

7. High-available automation system SIMATIC S7-400H Innovations FW V6.0
Goals
Features
Overview
New middle-class controller CPU 416H
Increased performance
Increased resources for communication
Ethernet integrated (without additional CP)
Routing for integrated PROFIBUS interface
PROFINET System Redundancy
CPU 412-5H: Synchronization up to 10 Km
Innovations
Redundant Periphery
Periphery
High-available communication
Safety & High availibility
Applications
References
Benefits:
FAQs
Increased I/O quantity structure for each automation system
Reduced costs via internal Ethernet interface
Delivery start planned for 03/2012

8. High-available automation system SIMATIC S7-400H Performance improvment
Memory [ MB ]
CPU 417-5H 32
CPU 417-4H 30
CPU 416-5H
New 16
CPU 414-5H 4
CPU 414-4H
2,8
New AS 416H close cap between CPU 414H und CPU 417H
19% more I/O with innovated CPU 414-5H
CPU 416-5H nearly same level as CPU 417-4H
CPU 412-5H 1
CPU 412-3H
0,75 75 45
31,25
18,75 18
12,5
7,5
MPI/DP DP
Performance in ns [bit-operation, word operation, fixed-word operation]
PROFINET (2 port switch)

9. High-available automation system SIMATIC S7-400H Controller portfolio – technical data
Goals
Overview
Innovations
Redundant Periphery
Periphery
High-available communication
Safety & High availibility
Applications
References
FAQs

10. High-available automation system SIMATIC S7-400H Redundant periphery
Redundant periphery for maximum of availability
In addition to a fault of a CPU or a PROFIBUS line or the PROFINET ring, an additional fault of a signal module will be accepted.
H-CPU in Single Mode
H-CPU in Single Mode
System-redundante I/O
Switched I/O
Principle of redundant I/O
Redundant I/Os are input and output modules that are redundantly configured and operated. Maximum availability is offered by the implementation of redundant I/O because in this manner, failure of a CPU, a PROFIBUS line or a PROFINET ring and a signal module is compensated for.
During normal operation, both modules are active, i.e. in the case of redundant inputs, the values of the shared sensor are read in by two modules, the result is compared and made available to the user as a unified value for further processing.
In the case of redundant outputs, the value calculated by the user program is output by both modules.
In the event of a fault, e.g. if one of the two input modules fails, the defective module is no longer addressed, the fault is signaled and processing continues with the intact module only.
Following repair, which may be carried out online, both modules
can be addressed again.
PROFINET
Controller CPU 41x-5H
PROFIBUS
Periphery ET 200M
Low
High
Availability
Fault tolerance

11. High-available automation system SIMATIC S7-400H … Flexible Modular Redundancy (FMR) with PROFIBUS I/O
Goals
Scalable fault tolerance
Single or redundant connection
Can be mixed in one and same system
Advantage
Redundancy has to only be made available where it is actually needed.
 More cost-efficient solutions than conventional architectures with single design.
Overview DI
Master input
Innovations
Redundant
PROFIBUS
Redundant Periphery
Scalable availability
The availability is scalable in accordance with the redundant
I/O configuration:
1. Each module in a separate rack with redundant connection to PROFIBUS or
2. Each module in a separate rack with single connection to PROFIBUS
3. Both modules in one rack.
Redundant input DI
Periphery
availability DI
Master input
High-available communication
Redundant
PROFIBUS DI
Redundant input
Scalable
Safety & High availibility DI
Master input
Applications
Redundant
PROFIBUS
References
Redundant input DI
FAQs

12. High-available automation system SIMATIC S7-400H PROFINET and PROFIBUS in one system
PROFIBUS and PROFINET in one controller
One solution for PROFINET and PROFIBUS
Flexible system architecture with PROFIBUS and PROFINET
PROFIBUS and PROFINET complete themselves
Coexistence of both technologies
Routing support for internal PROFIBUS interface
Coexistence of PROFIBUS and PROFINET
Saving of additional CPs
Easy change of PROFIBUS to PROFINET
Gradual change possible
Bebefit PROFINET
Easy connection method via FastConnect fast assembly system
Low EMV interference sensibility
Up to 64 Kbytes of using data capacity per equipment
PROFINET and professional bus can be operated at the same time at the controller
Reduced Hardware need

13. High-available automation system SIMATIC S7-400H PROFINET IO portfolio
Goals
The single-sided connection (standard availability) or the system-redundant connection (increased availability) is available via PROFINET.
Overview
Innovations
Single-sided connection
System-redundant connection
Redundant Periphery
Periphery
PROFINET
§ Overview
§ PROFINET I/O
ET 200S
PN Device without SR
PN Device with SR
§ PROFIBUS I/O
High-available communication
ET 200M
ET 200M
PROFINET
Safety & High availibility
ET 200M
Subsystem 0 and 1 dedicated
ET 200pro
Applications
PN Device with SR
PN Device without SR
References
PROFINET Device
PN Device without SR
Only subsystem 0 or 1 dedicated
FAQs
PROFINET with system redundancy (SR)

14. More Efficiency in the Production with less Standstill due to Ruggedness and Stability of PROFINET Architecture
PROFINET
PROFINET
With Ring Topology (MRP – Media Redundancy Protocol)
With use of IE Switches
With System Redundancy
Parallel communication
Diagnostics
Eventual damage is limited to the defective device
No IT Engineering need
Use of the device integrated ports or also external IE Switches
In case of a fault, the telegrams are redirected in the other direction
Bumpless redundant controllers (with Automatic data synchronization)
High availability due to fault tolerant system
Communication may flow from both controllers

15. High-available automation system SIMATIC S7-400H with PROFINET I/O System Redundancy (SR)
Goals
Automatic switchover in the event of a fault
Event-controlled synchronization of both stations makes for fast and bumpless switchover in the event of a fault. The redundant CPU picks up processing at the interruption point without loss of information and alarms. All components can be replaced during running operation (hot swapping).
When replacing a CPU, it is automatically loaded with the latest programs and data.
ET 200M
Overview
Innovations
Redundant Periphery
Periphery
§ Overview
§ PROFINET I/O
Open ring architecture
§ PROFIBUS I/O
Sync wiring
SR support for PROFINET through H-CPUs and ET 200M
High-available communication
Data synchronization
Guarantee of functionality in the case of an error in a CPU or a ring node or a bus error
CPU 41x-5H
CPU 41x-5H
Safety & High availibility
Failure of an IO device (ET 200M) is limited to the damaged ring node
Switch
PROFINET
Switch
Switch
Applications
Cable break between two devices does not affect functionality of the system
References
Failure of a CPU does not affect functionality of the redundant system
FAQs
Automatic synchronization after replacement of faulty component
ET 200M
ET 200M
ET 200M
E 200M

16. High-available automation system SIMATIC S7-400H …with PROFINET I/O and divided racks
Single-sided connection With a single-sided connection, the IO modules are addressed by only one central device via the integrated PROFINET interface.
Fault tolerance Information that is read in on only one device is available to both central devices as long as the central device that addresses the IO is working correctly. In the event of a failure of the central device that controls the IO, the data is maintained so that the controller can start exactly where it stopped once the device has been replaced.
Industrial Ethernet
Sync wiring
2x CPU 41x-5H +
PROFINET -
ET 200M
ET 200M
ET 200M

17. High-available automation system SIMATIC S7-400H …with PROFINET I/O and divided racks
System-redundant connection With a system-redundant connection, the IO modules are designed with only one channel and are addressed by only one of the two central devices via the integrated PROFINET interface.
Error tolerance The controller function is not interrupted in the event of a fault or failure of a central device or an IO station or in the case of a cable break.
In the event of a failure of the master central device, the second central device takes over control of the IO modules.
In the event of a failure of the IO station or in the case of a cable break, the central devices each control the respective IO stations that they can reach.
Industrial Ethernet
ISO-on-TCP
Sync wiring
2x CPU 41x-5H +
PROFINET
ET 200M
ET 200M
ET 200M

18. High-available automation system SIMATIC S7-400H …with PROFINET I/O and separated racks
System-redundant connection With a system-redundant connection, the IO modules are designed with only one channel and are addressed by only one of the two central devices via the integrated PROFINET interface.
Error tolerance The controller function is not interrupted in the event of a fault or failure of a central device or an IO station or in case of a cable break.
In the event of a failure of the master central device, the second central device takes over control of the IO modules.
In the event of a failure of the IO station or in case of a cable break, the IO stations that can be reached by each central device are controlled.
Availability can be increased even more if both CPUs are set up completely separate from each other. The distance between the systems can be up to 10 kilometers (16 miles). .
Industrial Ethernet
Sync wiring
2x CPU 41x-5H +
PROFINET -
ET 200M
ET 200M
ET 200M

19. High-available automation system SIMATIC S7-400H …with PROFIBUS I/O
Goals
The single-sided connection (standard availability) or single-channel connection (increased availabiliuty) or the switched connection (high availability) is available via PROFIBUS
Overview
Single-sided connection
Single-channel connection
Switched connection
Innovations
Redundant Periphery
/O interface
The I/O can be connected to suit the availability requirements.
The following types of connection are available:
1. Single-sided connection (normal availability) for all PROFIBUS slaves, e.g. ET 200M, ET 200S, ET 200eco
2. Switched connection (increased availability) for ET 200M an ET 200iSP
3. Redundant connection (fault-tolerant) for ET 200M
These configurations can also be mixed.
Periphery
§ Overview
§ PROFINET I/O
§ PROFIBUS I/O
High-available communication
ET 200S
ET 200S
ET 200M
ET 200iSP
ET 200iSP
PROFIBUS
Safety & High availibility
ET 200M
ET 200M
PROFIBUS
PROFIBUS
Applications
PROFIBUS PA
ET 200pro
ET 200pro
References
FAQs
ET 200eco
ET 200eco
ET 200iSP
PROFIBUS Normslave
PROFIBUS Normslave

20. High-available automation system SIMATIC S7-400H …with PROFIBUS I/O and divided rack
Single connection With a single connection, the IO modules are designed with only one channel and are addressed by only both central devices.
For PROFIBUS, the single-channel connection takes place via Y link. The Y link forms the network transition from a redundant PROFIBUS master system to a single-channel PROFIBUS DP master system.
Communication Communication with single plant bus via the internal PN interface.
Fault tolerance Information that is read in on only one device is available to both central devices as long as the central device that addresses the IO is working correctly.
In the event of a fault
the switchover of the entire IO branch takes place bumpfree.
if the IO modules of the affected central device are not working, the data is still available on the redundant central device and will be available again once the device has been replaced.
Y link
With the help of the Y link, a subordinate I/O station with various field devices can be easily connected to a redundant PROFIBUS DP system, e.g. an S7-400H with two DP master systems.
In the event of a fault, the Y link switches over the complete I/O line bumplessly to
Industrial Ethernet
Sync wiring
2x CPU 41x-5H +
PROFIBUS
DP/PA link
PROFIBUS PA
Y-Link
ET 200M
ET 200iSP

21. High-available automation system SIMATIC S7-400H …with PROFIBUS I/O and divided rack
Switched connection With a switched connection, the IO modules are connected with both central devices via two interface modules. Both central devices are active during fault-free operation.
When writing the outputs, the data from both channels is accepted but only the data of the preferred channel is forwarded to the outputs.
Fault tolerance The function of the system stays completely intact even if, for example, a central device and/or the connected PROFINET network and/or one or several of the interface modules in the ET 200 connected to this network fail.
The failure of a central device can be tolerated regarding communication.
Industrial Ethernet
ISO-on-TCP
Sync wiring
2x CPU 41x-5H + + -
PROFIBUS
DP/PA link
PROFIBUS PA
ET 200M
ET 200M
ET 200iSP

22. High-available automation system SIMATIC S7-400H …with PROFIBUS I/O and separated racks
Switched connection With a switched connection, the IO modules are connected with both central devices via two interface modules. Both central devices are active during fault-free operation.
When writing the outputs, the data from both channels is accepted but only the data of the preferred channel is forwarded to the outputs.
Communication Communication with single plant bus via the internal PN interface.
Fault tolerance The function of the system stays completely intact even if, for example, a central device and/or the connected PROFINET network and/or one or several of the interface modules in the ET 200 connected to this network fail.
The failure of a central device can be tolerated regarding communication.
Availability can be increased even more if both CPUs are set up completely separate from each other. The distance between the systems can be up to 10 kilometers (16 miles).
Industrial Ethernet
Sync wiring
2x CPU 41x-5H + + -
PROFIBUS
DP/PA link
PROFIBUS PA
ET 200M
ET 200M
ET 200iSP

23. High-available communication …in alliance with PROFINET I/O
High-available communication with standard bus
- via one communication processor (CP)
The bus is safety installed and not risk of failure. Failure of one component per system will be tolerated.
Industrial Ethernet
ISO-on-TCP
Sync wiring
2x CPU 41x-5H und 2 x CP443-1 +
PROFINET -
ET 200M
ET 200M
ET 200M

24. High-available communication …in alliance with PROFINET I/O
High-available communication with redundant bus
- via redundant communication processors (CP)
The bus is redundant installed. In this case. Failure of the bus and one more component per system will be tolerated.
Industrial Ethernet
ISO-on-TCP
Sync wiring
2x CPU 41x-5H und 4 x CP443-1 +
PROFINET -
ET 200M
ET 200M
ET 200M

25. High-available communication …in alliance with PROFINET I/O
High-available communication with ring bus
- via one communication processor (CP)
In this configuration, fault tolerance of the bus is achieved using a ring structure. Failure of one additional component can also be tolerated
Industrial Ethernet
ISO-on-TCP
Sync wiring
2x CPU 41x-5H und 2 x CP443-1 +
PROFINET -
ET 200M
ET 200M
ET 200M

26. High-available communication …in alliance with PROFINET I/O
High-available communication with ring bus
- via redundant communication processors (CP)
In this configuration, fault tolerance of the bus is achieved using a ring structure. Failure of one bus and one additional component can also be tolerated.
Industrial Ethernet
ISO-on-TCP
Sync wiring
2x CPU 41x-5H und 4 x CP443-1 +
PROFINET -
ET 200M
ET 200M
ET 200M

27. High-available communication …in alliance with PROFIBUS I/O
High-available communication with standard bus
- via internal Ethernet interface
The bus is safety installed and not risk of failure. Failure of one component per system will be tolerated
Industrial Ethernet
ISO-on-TCP
Sync wiring
2x CPU 41x-5H + + -
PROFIBUS
DP/PA link
PROFIBUS PA
ET 200M
ET 200M
ET 200iSP

28. High-available communication …in alliance with PROFIBUS I/O
High-available communication with redundant bus
- via internal Ether interface and one communication processor (CP)
The bus is redundant installed. In this case, failure of the bus and one more component per system will be tolerated.
Industrial Ethernet
ISO-on-TCP
Sync wiring
2x CPU 41x-5H und 2 x CP443-1 + + -
PROFIBUS
DP/PA link
PROFIBUS PA
ET 200M
ET 200M
ET 200iSP

29. High-available automation system SIMATIC S7-400H …in alliance with PROFIBUS I/O
High-available communication with ring bus
- via internal Ethernet interface
In this configuration, fault tolerance of the bus is achieved using a ring structure. Failure of one additional component can also be tolerated
Industrial Ethernet
ISO-on-TCP
Sync wiring
2x CPU 41x-5H + + -
PROFIBUS
DP/PA link
PROFIBUS PA
ET 200M
ET 200M
ET 200iSP

30. High-available communication …in alliance with PROFIBUS I/O
High-available communication with ring bus
- via internal Ethernet interface and one communication processor (CP)
In this configuration, fault tolerence of the bus is achieved using a ring structure. Failure of one bus and one additional component can also be tolerated.
Industrial Ethernet
ISO-on-TCP
Sync wiring
2x CPU 41x-5H und 2 x CP443-1 + + -
PROFIBUS
DP/PA link
PROFIBUS PA
ET 200M
ET 200M
ET 200iSP

31. Fail-safe & High-available SIMATIC S7-400FH
Goals
High-available systems
High-available & Fail-safe systems
Overview
Offer highest availability for plant and process.
Are set up redundantly and switchover takes place automatically without data loss in the event of a fault caused by a hardware problem.
Monitor themselves independently
Detect errors independently
Enter a safe state as soon as an error occurs and stay in this state.
Innovations
Redundant Periphery
Periphery
High-available communication
Safety & High availibility
§ Overview
§ Controller
§ Periphery
§ Engineering
The SIMATIC S7-400FH combines high availability and safety in one system.
Applications
References
FAQs

32. Fail-safe & High-available SIMATIC S7-400FH
Goals
The fail-safe SIMATIC S7-400FH is based on
S7-400H CPUs
Engineering fail-safe systems
Fail-safe modules of the ET 200
Fail-safe communication via PROFIsafe.
If a safety-related error occurs, only the affected safety circuit assumes a safe state while the rest continues working.
The architecture of SIMATIC S7-400FH tolerates errors while maintaining safety.
The S7-400FH is TÜV-certified and meets all relevant standards.
Overview
Innovations
Redundant Periphery
Periphery
High-available communication
Safety & High availibility
§ Overview
§ Controller
§ Periphery
§ Engineering
Applications
S7-400H + S7 F-Systems = S7-400FH
References
FAQs

33. Single channel connection
Fail-safe & High-available SIMATIC S7-400FH … with PROFINET and/or PROFIBUS I/O
SIMATIC ET 200 PROFIsafe modules
Broad range for connection of fail-safe sensors and actuators
Integrated signal tests (cable break, short circuit …)
IP 20 incl. ExZone 1, IP 65/67
Connection options
Single channel connection
Switches connection
Single-sided connection
System-redundant connection
PROFINET
PROFIBUS
ET 200M
PROFIBUS
PROFIBUS PA
ET 200iSP

34. Fail-safe & High-available SIMATIC S7-400FH Engineering
Goals
S7 F-Systems - For configuration of hardware and safety-related application.
Configuration of the fail-safe safety program can take place either with CFC or Safety Matrix
Makes for easier creation of safety program by making available a fail-safe command library with preassembled and TÜV-certified blocks in accordance with SIL3 IEC 61508
Simplifies documentation of the safety program, e.g. by managing the signatures
Overview
Innovations
Redundant Periphery
Periphery
High-available communication
Safety & High availibility
§ Overview
§ Controller
§ Periphery
§ Engineering
Applications
References
FAQs

35. Continuous Function Chart (CFC)
Fail-safe & High-available SIMATIC S7-400FH Configuring instead of programming
Goals
Continuous Function Chart (CFC)
For processes with dynamic behavior
By means of CFC, certified blocks of the F-library of S7 F-systems can be interconnected.
Supports user libraries
Safety Matrix
For processes that require safety responses to defined states and can be easily configured with a Cause & Effect matrix
Uses the F-library integrated in S7 F-systems
Overview
Innovations
Redundant Periphery .
Periphery
High-available communication
Safety & High availibility
§ Overview
§ Controller
§ Periphery
§ Engineering
Applications
References
FAQs

36. Fail-safe & High-available SIMATIC S7-400FH Examples for use of fail-safe & high-available controllers
Goals
S7-400H
S7-400FH
Overview
Transportation (e.g. tunnel automation)
Logistics (e.g. high-bay storage system control)
Control of
waterworks/water treatment plants
traffic flows in power generation and distribution
Chemical/petrochemical
Airport automation
Fill level and temperature control
...
Burner control
Oil industry
Chemical
...
Innovations
Redundant Periphery
Periphery
High-available communication
Safety & High availibility
Applications
References
FAQs

37. References Semiconductors (utilities) Exhaust gas incineration
Goals
Airports (luggage handling & runway lighting)
Munich, Duesseldorf, Venice, Madrid, Madeira,…
Pusan, Korea (Automated Airport Lighting)
Tunnel (ventilation, lighting and signals)
Mont Blanc (F), Spoor tunnel (NL),…
Automobile industry and other transportation
Audi AG (motor production), Transrapid switch control
Daimler Chrysler, Smart (body bumper)
Special machine engineering
Atlas Copco Energas GmbH
Shipbuilding
Kawasaki Heavy Industry
Turbine control
Data Systems & Solutions UK (formerly Rolls Royce)
Passenger transport
La Vanoise Express aerial railway
Saalbach-Hinterglemm aerial railway
Semiconductors (utilities)
Samsung, SSMC Singapore
Exhaust gas incineration
Armstrong DLW AG, Alstom Power (Bremen public utilities)
Water treatment
EarthTech UK
Chemical/petrochemical
Al Jubail Petrochemical Co. in S.A. (Petronik Trier), ECI Elektro-Chemie GmbH, Ibbenbüren (liquid gas shipping)
Glass industry
Vegla
Power generation
Hanwha Energy (Korea)
Overview
Innovations
Redundant Periphery
Periphery
High-available communication
Safety & High availibility
Applications
References
§ Tunnel
§ Logistic
§ Water & Wastewater
§ Energy
§ Additional
FAQs

38. High-available automation system SIMATIC S7-400H
Thank you for your attention!
Ulrich Kaus
Marketing Manager
I IA & DT AS S MP3
Phone: (+49)