Mitsubishi Electric MELSEC iQ-R Series Safety Manual page 50

Safety refresh monitoring time
Safety refresh monitoring time is the time that the receiving station monitors in each connection to detect the following safety
communication errors.
• Stopping of sending safety data due to an error on the sending station
• Stopping of safety communications due to an error on the transmission path, such as cable disconnection or hub failure
Set the safety refresh monitoring time to safety station (active side) so that the calculation formula described below can be
met. The active side and the passive side use the same safety refresh monitoring time.
• Safety refresh monitoring time [ms]  TMact + (TMpas  2) + (LS  2) - a
• Safety refresh monitoring time [ms]  (TMact  2) + TMpas + (LS  2) - c
• Safety refresh monitoring time [ms] > TMact
• Safety refresh monitoring time [ms] > TMpas
TMact: Transmission interval monitoring time for a station set as Active
TMpas: Transmission interval monitoring time for a station set as Passive
LS: Link scan time for the CC-Link IE Field Network
a: If a station is set to the active side is RJ71GF11-T2, then a = TMact - b. For other cases, a = 0.
b: Value rounds up the calculation results of the TMact  2 to a multiple of the safety cycle time of the master station.
c: If a station is set to the passive side is either RJ71GF11-T2 or NZ2GFSS2-32D, then c = TMpas - d. For other cases, c = 0.
d: Value rounds up the calculation results of the TMpas  2 to a multiple of the safety cycle time of the local station (if NZ2GFSS2-32D, safety refresh response
processing time)
For specific examples, refer to the following.
Page 234 Calculating Safety Response Time for System Configured with a Safety CPU, Page 242 Calculating Safety
Response Time for System Connected to Multiple Safety CPUs
For details, refer to the following.
 MELSEC iQ-R CPU Module User's Manual (Application)
 CC-Link IE Field Network Remote I/O Module (With Safety Functions) User's Manual
Safety timer
Do not use the same safety timer (as a coil) (OUT SA\T instruction) more than one time in a safety program. If more than
one time of the same safety timer (as a coil) (OUT SA\T instruction) is described, they cannot be accurately measured,
since each safety timer coil (OUT SA\T instruction) updates the current value of the safety timer.
The maximum response accuracy of the safety timer is "safety cycle time + timer limit setting". If setting the timer with a
shorter time than the safety cycle time, the contact turns on when performing safety time coil (OUT SA\Tinstructions).
For details, refer to the following.
 MELSEC iQ-R CPU Module User's Manual (Application)
Version management of engineering tool project file
Fill in the created date and author at the top of program using the statement function of engineering tool. When modifying a
program, manage revision history. When managing revision history, write the date modified, your name, and description of the
modification at the modified location using the statement function.
And manage the data which was written to the Safety CPU by storing the hard disk of personal computer or CD.
User authentication
Define the user who handles the corresponding project, then register the user information and authorization required for the
logon in the project and Safety CPU. For the user authentication function, refer to the following.
 GX Works3 Operating Manual
4 PRECAUTIONS FOR USE OF SAFETY PROGRAMMABLE CONTROLLER
48
4.2 Precautions for Programming