Rockwell Automation T8311 Trusted TMR Expander Interface - Manual

SDS-8311
Trusted
TM Industrial Control System
Trusted TM TMR Expander Interface-T8311
Issue 5 Jan 2006
FRONT PANEL
T
83
11
T
ru
st
ed
E
xp
an
d
er
In
te
rf
ac
e
Healthy
Active
Standby
DESCRIPTION
The Trusted
TM TMR Expander Interface
module resides in the Trusted TM Controller
Chassis and provides the ‘master’ interface
between the Inter-Module Bus (IMB) in the
Controller Chassis and the Expander Bus. The
Expander Bus allows multiple chassis systems
to be implemented using UTP cable
connections whilst maintaining the fault
tolerant, high bandwidth IMB capabilities.
The module provides fault containment
for the Expander Bus, the module itself
and the IMB in the Controller Chassis,
ensuring that the effects of these
potential faults are localised and system
availability maximised. The module is
fault
tolerant with Hardware
Implemented Fault Tolerant (HIFT),
Triple
Modular Redundant (TMR)
architecture. Comprehensive
diagnostics, monitoring and testing
provide rapid fault identification. Hot
standby
and module sparing
configurations are supported, allowing
automatic and manual repair strategies.
Communication between the Expander
Interface and the TMR Processor is via
the IMB on the backplane of the
Controller Chassis. The IMB provides
fault tolerance and high bandwidth
communications between the Interface
Modules and the TMR Processor. All
transactions are voted, localising faults
to a Fault Containment Region (FCR)
within the IMB should they occur.
Communication between the Interface
Module and the TMR Expander
Processor in the Expander Chassis is
via the Expander Bus. The Expander
Bus
is triplicated, point-to-point
architecture. Each channel of the
Expander Bus comprises separate
command and response media. Voting
is provided at the Expander Bus
Interface to ensure that cable faults are
tolerated, and the remainder of the
Expander Processor operates in a fully
triplicated mode, even in case of cable
faults occurring.
The TMR Expander Interface Module
derives its internal voltages from dual
redundant +24V dc power supplied via
the
module connector from the
Trusted TM Controller Chassis
backplane. Each FCR derives the
required supplies independently.
Non-critical monitoring and module
status display functions (front panel
LEDs) are also provided.
FEATURES
Triple Modular
Redundant (TMR)
fault tolerant (3-2-0)
operation
Hardware
Implemented Fault
Tolerant (HIFT)
architecture
Dedicated hardware
and software test
regimes which
provide fast fault
recognition and
response times
Automatic fault
handling without
nuisance alarming
Hot replaceable
Front panel status
LEDs