Publication 1785-6.5.24 February 1999
Backup Concepts for the ControlNet PLC-5 Backup System 1-3
Qualification
When bringing the secondary processor of a backup system online, it
is important to ensure that it is in a state that will enable it to take over
the control of the system in the event of a primary failure or
switchover. This process of verifying and conditioning the state of
the secondary processor is known as qualification. Switchover will
not occur without a qualified secondary processor; the backup system
is not truly considered a backup system until the secondary processor
has successfully completed qualification.
The qualification phase includes several tests and verifications
between the primary and secondary processors, as well as data file
crossloading. You can tailor these tests, verifications, and data file
crossloads to ensure the level of system integrity required for your
application. These tests and verifications may cover:
• configuration file validity and integrity checking
• application program and data file structure equivalence checking
• I/O map structure comparison
• force table comparison
• status file comparison
Data file crossloading from the primary to the secondary processor
may include the transfer of integer values, floating point values,
timers, counters, PID values, and others you define.
Equivalence Checking
Backup systems are traditionally designed in a way such that both the
primary and secondary processors are programmed with identical
applications. This allows for the controlled process to continue with
normal production operation in the event of a primary processor
failure. Equivalence checks ensure that the primary and secondary
processors have identical ladder programs, data file structures, I/O
map structures, etc.. You, as the designer of the backup system,
require the ability to enforce equivalence checks between the primary
and secondary processors during the qualification process, and
periodically during normal production operation.
In some cases, you may want the secondary processor to have a
completely different application than the primary processor (e.g.,
“safe shutdown,” limited production, clean and wash, etc.). In that
case, equivalence checking may not be required. With the ControlNet
PLC-5 backup system, you can enable or disable equivalence
checking as required by your application. You must have a thorough
understanding of your application in order to make this
determination.