Lenze E94AxPExxxx - Manual (Page 407)

Lenze · 9400 Servo PLC· Reference manual · DMS 4.0 EN · 11/2013 · TD05/06
407
11 Safety engineering
11.1 Integration into the application
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
11.1 Integration into the application
If a safety function is requested, the safety engineering activates a corresponding safe monitoring
function. The standstill function, however, is only executed directly if the "Safe torque off" function
(STO) is activated. For the other safety functions, an action of the controller is required, which is
safely monitored. The implementation of the corresponding action (e.g. braking, braking to
standstill, holding of the standstill position) must be carried out by the application.
System block "LS_SafetyModuleInterface"
For the transmission of the control and status information from the safety module to the
application, the LS_SafetyModuleInterface system block is provided. ( 408)
"LS_Limiter" system block/basic function "Limiter"
Furthermore, the LS_Limiter system block which contains the basic function "
Limiter " is provided for
the connection of safety engineering to the application. ( 536)
For one thing, the basic function "Limiter" provides a parameterisation interface in »Engineer« for a
comfortable setting of limit positions, limited speeds, and limit values, and for another it enables
the drive to be braked specifically after request through the safety module.
Basic workflow
1. Activation of the safety function on the safety module (e. g. SS1 - safe stop 1).
 Monitoring starts.
2. The safety module informs the controller via a control word that the safety function has been
activated.
3. The application evaluates the control word and starts the required motion sequence (e.g.
braking).

Note!
If communication to the controller is interrupted, e.g. by switching off the controller, the
safety module responds as follows:
• Fault stop with STO is activated.
• "Warning" error message is transmitted.
• The LED "ME" is blinking.
The required error acknowledgement (AIE) is possible via terminal or safety bus.