继续学习

5.1.3 Redundancy criteria

冗余准则

A redundancy toggle between Primary and Secondary is forced when the self-test diagnosis reveals the following conditions:

当自建诊断显示以下情况时，强制在主（控制器）和备（控制器）之间发生冗余切换。

• a module fault has occurred (a module fault is also detected, when a fieldbus module is switched off),
• 模块故障发生(当现场总线模块关闭时，也检测到模块故障)
• an equipment fault has been detected on the fieldbus module
• 现场总线模块上检测到模块故障
• the watchdog has responded due to a controller hardware error
• 看门狗相应控制器硬件错误
• a power fail of the power supply is reported
• 报告电源故障
• a network fault has occurred
• 发生网络故障
• a “fatal software error” has occurred
• 发生致命软件错误

If the redundant link is interrupted, a redundancy toggle is initiated. The previous Primary remains in the “no operating system“ status. When the redundancy link is re-established, a reset must be initiated in the Secondary.

如果冗余链路断开，则启动冗余切换。之前的Primary仍然处于“无操作系统”状态。当冗余链路重新建立时，必须在从备（控制器）启动复位。

 

If the Ethernet interface for the redundancy link on the Secondary fails, no redundancy toggle is performed. When the Ethernet interface for the redundancy link on the Secondary operates again, a reset must be initiated in the Secondary. 

如果冗余链路的以太网接口故障，冗余切换不会执行。当备控制器上的冗余链路以太网接口再次运行时，必须从备控制器复位操作。