Mitsubishi Electronics Q25HCPU ユーザーズマニュアル
9 - 5 9 - 5
MELSEC-Q
9 LOADING AND INSTALLATION
(3) Fail-safe measures against failure of the PLC
Failure of a CPU module or memory can be detected by the self-diagnosis
function. However, failure of I/O control area may not be detected by the CPU
module.
In such cases, all I/O points turn ON or OFF depending on a condition of
problem, and normal operating conditions and operating safety cannot
sometimes be maintained.
Though Mitsubishi PLCs are manufactured under strict quality control, they may
cause failure or abnormal operations due to unspecific reasons. To prevent the
abnormal operation of the whole system, machine breakdown, and accidents,
fail-safe circuitry against failure of the PLC must be constructed outside the PLC.
Examples of a system and its fail-safe circuitry are described below:
<System example>
Po
w
e
r s
u
p
p
ly
mo
d
u
le
CP
U m
o
du
le
In
p
u
t 1
6
poi
nt
s
V
a
cant
In
p
u
t 1
6
poi
nt
s
In
p
u
t 1
6
poi
nt
s
In
p
u
t 1
6
poi
nt
s
O
u
tp
ut
16
po
in
ts
Y8
0
to
Y
8
F
O
u
tp
ut
16
po
in
ts
O
u
tp
ut
16
po
in
ts
O
u
tp
ut
16
po
in
ts
O
u
tp
ut
16
po
in
ts
Output module for
fail-safe purpose 1
fail-safe purpose 1
Po
w
e
r s
u
p
p
ly
mo
d
u
le
1: The output module for fail-safe purpose should be loaded in the last slot of
the system. (Y80 to Y8F in the above system.)
<Fail-safe circuit example>
Internal program
SM412
T1
ON delay timer
1s
T2
OFF delay timer
1s
L
L
MC
T2
T1
+
-
24V DC
Y80
Y81
Y8F
24V
0V
Y80
Y80
External load
0.5s
0.5s
CPU module
MC
Output module
2
2: Y80 repeats turning ON and then OFF at 0.5s intervals.
Use a no-contact output module (transistor in the example shown above).