Rockwell Automation 440R MSR300 Modular Safety Control System - Manual (Page 14)

MSR300 Safety System Manual
Rockwell Automation
MSR300 Manual.doc Pg 14 of 85
Muting lamps are deployed to indicate that muting is existent. Special safety controls are
necessary to ensure that muting lamps operate correctly and safely. The MSR329 Muting
Lamp Controller is expressly designed for this purpose. Details of this module are given
later in this document.
3.2 MSR300
System: Overview
The MSR300 System is a modular safety control system with extended functions, and is
intended for monitoring and safety control of:
• 1-, 2-, or 3-channel emergency stops
• Safety gates and doors
• Light curtains
• Safety mats
• Two-hand control
An MSR300 System is made up of a combination of the following MSR300 Series
Modules:
• MSR310 Base Module
• MSR320 Input Module
• MSR330 Output Module
• MSR329 Muting Lamp Module:
An MSR300 System is constituted as follows:
• One MSR310 Base Module
• At least one MSR320 Input Module
• At least one MSR330 Output Module
• One MSR329 Muting Modules may be optionally included if needed (provided one
MSR320 Input Module is configured for the robot function).
MSR320 and MSR329 Modules are daisy-chain connected to the left bus interface
connector of the MSR310 Base Module. Up to ten MSR 320 Input Modules can be
included in an MSR300 System, for a maximum of 20 input circuits.
MSR330 Output Modules are daisy-chain connected to the right bus interface connector
of the MSR310 Base Module. Up to six MSR330 Output Modules can be included in an
MSR300 System, for a maximum of 18 N/O safety outputs plus 6 N/C auxiliary outputs.
The integrity of all safety inputs are constantly checked by means of feedback of the
safety loops. Dynamic (pulse frequency) excitation signals are generated by the MSR310
Base Module. These signals are fed (as a star-connected bus) to monitor the contact(s)
of every safety sensing device connected to the MSR 300 System. The signals are then
feed back to the Input Module to which each corresponding safety contact input is
connected. If a safety-sensing device is defective the system will detect non-valid signals
or signal sequences on the Inputs. This causes a fail-safe fault response by the MSR300
System.
Every input can be connected to a separate input switching circuit.
Input modules can be freely assigned to any output group module.