ICS Triplex AADvance控制器处理器冗余模块

Introduction 

The TrustedTM TMR Expander Interface module resides in the TrustedTM Controller Chassis and provides the ‘master’ interface between the Inter-Module Bus (IMB) in the Controller Chassis and the Expander Bus. The Expander Bus allows multiple chassis systems to be implemented using UTP cable connections whilst maintaining the fault tolerant, high bandwidth IMB capabilities. The module provides fault containment for the Expander Bus, the module itself and the IMB in the Controller Chassis, ensuring that the effects of these potential faults are localised and system availability maximised. The module is fault tolerant with HIFT TMR architecture. Comprehensive diagnostics, monitoring and testing provide rapid fault identification. Hot standby and module spare slot configurations are supported, allowing automatic and manual repair strategies.

Features

 • Triple Modular Redundant (TMR), fault tolerant (3-2-0) operation 

• Hardware Implemented Fault Tolerant (HIFT) architecture 

• Dedicated hardware and software test regimes which provide very fast fault recognition and response times 

• Automatic fault handling without nuisance alarming 

• Hot replacement 

• Front panel indicators that show module health and status. 

• T2V Certified IEC 61508 SIL 3

Notice 

The content of this document is confidential to ICS Triplex Technology Ltd. companies and their partners. It may not be given away, lent, resold, hired out or made available to a third party for any purpose without the written consent of ICS Triplex Technology Ltd.

This document contains proprietary information that is protected by copyright. All rights are reserved. Microsoft, Windows, Windows 95, Windows NT, Windows 2000, and Windows XP are registered trademarks of Microsoft Corporation. 

The information contained in this document is subject to change without notice. The reader should, in all cases, consult ICS Triplex Technology Ltd. to determine whether any such changes have been made. From time to time, amendments to this document will be made as necessary and will be distributed by ICS Triplex Technology Ltd. Information in this documentation set may be subject to change without notice and does not represent a commitment on the part of ICS Triplex Technology Ltd. 

The contents of this document, which may also include the loan of software tools, are subject to the confidentiality and other clause(s) within the Integrator Agreement and Software License Agreement. No part of this documentation may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording, for any purpose, without the express written permission of ICS Triplex Technology Ltd. 

Disclaimer 

The illustrations, figures, charts, and layout examples in this manual are intended solely to illustrate the text of this manual. 

The user of, and those responsible for applying this equipment, must satisfy themselves as to the acceptability of each application and use of this equipment. 

This document is based on information available at the time of its publication. While efforts have been made to be accurate, the information contained herein does not purport to cover all details or variations in hardware or software, nor to provide for every possible contingency in connection with installation, operation, or maintenance. Features may be described herein which are present in all hardware or software systems. ICS Triplex Technology Ltd. assumes no obligation of notice to holders of this document with respect to changes subsequently made. 

ICS Triplex Technology Ltd. makes no representation or warranty, expressed, implied, or statutory with respect to, and assumes no responsibility for the accuracy, completeness, sufficiency, or usefulness of the information contained herein. No warranties of merchantability or fitness for purpose shall apply.

Description

Overview 

The TMR Expander Interface is a fault tolerant design based on TMR architecture arranged in a lockstep configuration. Figure 1 shows, in simplified terms, the basic structure of the TMR Expander Interface. The module has three main fault containment regions (FCR A, B and C). Each of the main FCRs contains interfaces to the Expander Bus and Inter-Module Bus (IMB), an active/standby interface to the other TMR Expander Interface in the chassis, control logic, communications transceivers and power supplies. Communication between the module and the TMR Processor is via the IMB on the backplane of the Controller Chassis. The IMB provides fault tolerance and high bandwidth communications between the Interface Modules and the TMR Processor. All transactions are voted, localising faults to the IMB should they occur. Communication between the Interface Module and the TMR Expander Processor in the Expander Chassis is via the Expander Bus. The Expander Bus is triplicated, point-to-point architecture. Each channel of the Expander Bus comprises separate command and response media. Voting is provided at the Expander Bus Interface to ensure that cable faults are tolerated, and the remainder of the Expander Processor operates in a fully triplicated mode, even in case of cable faults occurring. A fourth FCR (FCR D) provides the non-critical monitoring and display functions and is also part of the inter-FCR Byzantine voting structure. Isolation is provided between FCRs wherever interfaces are required, to ensure that faults can not propagate between them. 

 Power Distribution The TMR Expander Interface Module derives its internal voltages from dual redundant +24V dc power supplied via the module connector from the TrustedTM Controller Chassis backplane. Each FCR derives the required supplies independently.

Module Installation 

The Expander Interface Modules may reside in any of the I/O slots within the Controller Chassis. The modules are installed in pairs with the left-hand module occupying an odd numbered slot. The Expander Interface must NOT be installed in these other module locations, as this may cause damage to the module. The two Interface slots must be interconnected using the Expander Interface Adaptor Unit T8312. The Expander Interface Modules are connected to the Expander Processor Modules by the Expander Interface Hot Link Cable TC-301 via the TrustedTM Expander Interface Adaptor Unit T8312. The connection to remote Expander Chassis is via the TrustedTM Fibre Optic Tx/Rx Unit using the Expander Interface Adaptor to Fibre Tx/Rx Unit (Remote Expanders) Cable TC-302.

Module Insertion and Removal CAUTION: THE MODULE CONTAINS STATIC SENSITIVE PARTS. STATIC HANDLING PRECAUTIONS MUST BE OBSERVED. SPECIFICALLY ENSURE THAT EXPOSED CONNECTOR PINS ARE NOT TOUCHED. UNDER NO CIRCUMSTANCES SHOULD THE MODULE HOUSING BE REMOVED. Before installation, visually inspect the module for damage. Ensure that the module housing appears undamaged and inspect the I/O connector at the back of the module for bent pins. If the module appears damaged or any pins are bent, do not install the module. Do not try to straighten bent pins. Return the module for replacement. Ensure that the module is of the correct type. Record the module type, revision and serial number of the module before installation. If the module is to reside in a new chassis, or the system is being configured for the first time, ensure that the chassis address has been set correctly before installing the modules. See Controller Chassis Product Description (PD-8100) for further details. To install the module: 1. Ensure that the cable assembly is correctly located. 2. Release the ejector tabs on the module using the release key. Ensure that the ejector tabs are fully open. 3. Holding the ejectors, carefully insert the module into the intended slot. 4. Push the module fully home but pressing on the top and bottom of the module fascia. 5. Close the module ejectors, ensuring that they click into their locked position.

Module Replacement 

The replacement module must be inserted in to the vacant processor slot, ensuring that the module is correctly located and the ejector tabs are closed (see 2.2). The newly installed module will perform its power-up sequence. Ensure that the LED indicators on the newly installed module are as follows: LED 1 Healthy A Steady Green LED 2 Healthy B Steady Green LED 3 Healthy C Steady Green If the original module has reported faults, the TMR Processor may automatically initiate the changeover to the newly installed module. Manual changeover may be initiated either using the ejector tabs on the original module or using commands via the diagnostic interface. To initiate the changeover using the ejector tabs use the following sequence: 1. Release both the top and bottom ejector tabs on the original module using the ejector release tool. DO NOT remove the module. 2. Wait until the original module indicates that it is in the standby mode of operation and the newly installed module is in the active mode. 3. Remove the original module.