Guard I/O Ethernet/Ip Safety Modules: 1791Es-Ib8Xobv4, 1791Es-Ib16

User Manual
(Catalog Numbers 1791ES-IB8XOBV4, 1791ES-IB16)

Guard I/O EtherNet/IP Safety
Modules
Important User Information
Solid state equipment has operational characteristics differing from those of electromechanical equipment. Safety Guidelines for the
Application, Installation and Maintenance of Solid State Controls (publication SGI-1.1 available from your local Rockwell Automation sales
office or online at http://literature.rockwellautomation.com) describes some important differences between solid state equipment and hard-
wired electromechanical devices. Because of this difference, and also because of the wide variety of uses for solid state equipment, all
persons responsible for applying this equipment must satisfy themselves that each intended application of this equipment is acceptable.
In no event will Rockwell Automation, Inc. be responsible or liable for indirect or consequential damages resulting from the use or
application of this equipment.
The examples and diagrams in this manual are included solely for illustrative purposes. Because of the many variables and requirements
associated with any particular installation, Rockwell Automation, Inc. cannot assume responsibility or liability for actual use based on the
examples and diagrams.
No patent liability is assumed by Rockwell Automation, Inc. with respect to use of information, circuits, equipment, or software described in
this manual.
Reproduction of the contents of this manual, in whole or in part, without written permission of Rockwell Automation, Inc., is prohibited.
Throughout this manual, when necessary, we use notes to make you aware of safety considerations.
Allen-Bradley, ArmorBlock, CompactBlock, CompactBlock Guard I/O, GuardLogix, GuardPLC, Logix5000, Rockwell Automation, RSLogix 5000, RSLogix Guard Plus!, RSNetWorx, SmartGuard, and TechConnect are trademarks of
Rockwell Automation, Inc.
Trademarks not belonging to Rockwell Automation are property of their respective companies.
WARNING
Identifies information about practices or circumstances that can cause an explosion in a
hazardous environment, which may lead to personal injury or death, property damage, or
economic loss.
IMPORTANT
Identifies information that is critical for successful application and understanding of the product.
ATTENTION
Identifies information about practices or circumstances that can lead to personal injury or death,
property damage, or economic loss. Attentions help you identify a hazard, avoid a hazard, and
recognize the consequence
SHOCK HAZARD
Labels may be on or inside the equipment, for example, a drive or motor, to alert people that
dangerous voltage may be present.
BURN HAZARD
Labels may be on or inside the equipment, for example, a drive or motor, to alert people that
surfaces may reach dangerous temperatures.
3Publication 1791ES-UM001C-EN-P - April 2009 3
Summary of Changes
This publication contains revised information not in the last release.
Revised Information
See the table for a summary of the major revisions to this manual.
Change Bars
Change bars (as shown in this paragraph) show the areas in this manual that
are different from previous editions and indicate the addition of revised
information.
For Revised See
Safety Inputs
Typical Pulse Width and Period 21
Test Pulse in a Cycle 21
Safety Outputs
Typical Pulse Width and Period 29
Test Pulse in a Cycle 29
Dual-load Bipolar Safety Output Important
Statement
47
Updated important statement about the
values and states of tags
57
4 Publication 1791ES-UM001C-EN-P - April 2009
Summary of Changes
Notes:
Table of Contents
Preface What This Preface Contains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Who Should Use This Manual. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Common Techniques Used in This Manual . . . . . . . . . . . . . . . . . . . . . . 9
Additional Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
How To Use This Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
About the Specifications and Dimensions in This Manual . . . . . . . . . 10
Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Chapter 1
About the Modules What This Chapter Contains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Before You Begin. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Understand Suitability for Use. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Follow Precautions for Use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Precautions to Mount, Wire, and Clean . . . . . . . . . . . . . . . . . . . . . . . . 14
I/O Module Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
About Catalog Numbers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
About CIP Safety in EtherNet/IP Safety Architectures . . . . . . . . . . . 16
Identify Major Parts of the Module. . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Chapter 2
Understand the Operation of
Safety Functions
What This Chapter Contains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Self-diagnostic Functions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Configuration Lock . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
I/O Status Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Safety Inputs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Using a Test Output with a Safety Input . . . . . . . . . . . . . . . . . . . . 21
Set Dual-channel Mode and Discrepancy Time. . . . . . . . . . . . . . . 24
Dual-channels, Equivalent. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Dual-channels, Complementary . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Safety Input Fault Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Input Delays. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Safety Outputs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Safety Output with Test Pulse. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Dual-channel Setting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Safety Output Fault Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Controlling Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Safety Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Legislation and Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Europe . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
North America . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Japan. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
EC Directives . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
EMC Directive. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Compliance with EC Directives . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Publication 1791ES-UM001C-EN-P - April 2009
6 Table of Contents
Chapter 3
Install and Connect Your Modules What This Chapter Contains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Install the Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Connect the Ethernet Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Set Network (IP) Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Connect I/O Power and I/O Cables . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Chapter 4
Wiring Examples What This Chapter Contains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Examples of Wiring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Chapter 5
Configure Modules with
RSLogix 5000 Software
What This Chapter Contains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Use Help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Add Modules to the I/O Configuration Tree. . . . . . . . . . . . . . . . . . . . 49
Use the Module Properties and General Dialogs . . . . . . . . . . . . . . . . . 51
Input Data Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Input Status Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Output Data Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Values and States of Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Work with the Safety Dialog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Configuration Ownership - Reset Ownership . . . . . . . . . . . . . . . . 60
Configuration Signature. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Work with the Input Configuration Dialog . . . . . . . . . . . . . . . . . . . . . 62
Work with Test Output Configuration Dialog . . . . . . . . . . . . . . . . . . . 65
Work with the Output Configuration Dialog . . . . . . . . . . . . . . . . . . . . 66
Save and Download the Module Configuration . . . . . . . . . . . . . . . . . . 68
Chapter 6
Interpret Module Indicators What This Chapter Contains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Module Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Configuration Lock Indicator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Appendix A
Get Diagnostic Status from
Modules by Using Explicit
Messaging
What This Appendix Contains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Work with 1791ES-IB8XOBV4 Modules . . . . . . . . . . . . . . . . . . . . . . 74
Work with 1791ES-IB16 Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
I/O Data Supported by Each Module . . . . . . . . . . . . . . . . . . . . . . . . . 85
I/O Assembly and Reference Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Explicit Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
Table of Contents 7
Appendix B
Probability of Failure on Demand
(PFD), Probability of Failure per
Hour (PFH), and Mean Time
Between (MTBF) Data
Calculated Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Appendix C
Configuration Reference
Information
Understand Parameter Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Index
8 Table of Contents
Notes:
Preface
What This Preface Contains
This preface includes introductory information for this manual.
Who Should Use This
Manual
This manual is intended for users of Guard I/O modules.
Common Techniques Used
in This Manual
The following conventions are used throughout this manual.
Numbered lists provide sequential steps.
Bulleted lists provide information, not sequential steps.
Additional Resources
Refer to the following as needed for additional help when setting up
and using your modules. For specifications refer to the relevant
installation instructions. You can view or download publications at
http://literature.rockwellautomation.com. To order paper copies of
technical documentation, contact your local Rockwell Automation
distributor or sales representative.
How To Use This Manual
Read and understand this manual before using the described
products. Consult your Rockwell Automation representative if you
have any questions or comments. This manual describes how to use
Guard I/O modules.
Resource Description
CompactBlock Guard I/O EtherNet/IP Safety Modules Installation
Instructions, publication 1791ES-IN001
Provides detailed specifications and information related to
installation of Guard I/O modules.
GuardLogix Controller Systems Safety Reference Manual,
publication 1756-RM093
Provides safety reference information and describes the GuardLogix
controller system.
GuardLogix Controllers User Manual, publication 1756-UM020 Provides general information about using GuardLogix contollers.
GuardLogix Safety Application Instructions Safety Reference
Manual, publication 1756-RM095
Provides reference information describing the GuardLogix Safety
Application Instruction Set.
ODVA Media Planning and Installation Guide 00148-BR001 Describes the required media components and how to plan for and
install these required components.
10 Preface
About the Specifications
and Dimensions in This
Manual
Product specifications and accessories can change at any time based
on improvements and other reasons. Consult with your Rockwell
Automation representative to confirm actual specifications of
purchased product. Dimensions and weights are nominal and are not
for use for manufacturing purposes, even when tolerances are shown.
Terminology
Refer to the table for the meaning of common terms.
This Term Means
Connection Logical communication channel for communication between nodes. Connections are maintained and controlled
between masters and slaves.
EDS Acronym for electronic data sheet, a template that RSNetWorx software uses to display the configuration
parameters, I/O data profile, and connection-type support for a given I/O module. These are simple text files used by
RSNetWorx software for you to identify products and commission them on a network.
L- Output +24V dc common.
M Sinking output common channel, output switches to the common voltage.
MTBF Acronym for mean time between failure, the average time between failure occurrences.
ODVA Acronym for Open DeviceNet Vendor Association, a nonprofit association of vendors established for the promotion of
CIP networks.
P Sourcing output channel, output switches to the plus voltage.
PFD Acronym for probability of failure on demand, the average probability of a system to fail to perform its design function
on demand.
PFH Acronym for probability of failure per hour, the probability of a system to have a dangerous failure occur per hour.
Proof test Periodic test performed to detect failures in a safety-related system so that, if necessary, the system can be restored
to an as-new condition or as close as practical to this condition.
S+ Output +24V dc.
SNN Acronym for safety network number, which uniquely identifies a network across all networks in the safety system.
You are responsible for assigning a unique number for each safety network or safety sub-net within a system.
Standard Devices or portions of devices that do not participate in the safety function.
Chapter 1
About the Modules
What This Chapter Contains
This chapter includes important overview information and precautions
for use of the Guard I/O modules that implement the EtherNet/IP
safety protocol. Also included is an overview on how these I/O
modules are used within a safety system.
Before You Begin
Always observe the following when using a module, noting that in
this manual we use safety administrator to mean a person qualified,
authorized, and responsible to secure safety in the design, installation,
operation, maintenance, and disposal of the machine.
Thoroughly read and understand this manual before installing
and operating the module.
Keep this manual in a safe place where personnel can refer to it
when necessary.
Use the module properly according to the installation
environment, performance, and functions of the machine.
Verify that a safety administrator conducts a risk assessment on
the machine and determines module suitability before
installation.
Verify for CE LVD compliance, the external power supply that
provides power to the modules is safety extra-low voltage (SELV)
rated. Some Rockwell Automation Bulletin 1606 power supplies are
SELV-compliant. Verify Bulletin 1606 Installation Instructions.
Verify that the Guard I/O firmware version is correct prior to
commissioning the safety system, noting that firmware information
related to safety controllers is available at:
http://www.rockwellautomation.com/products/certification/safety
Understand Suitability for
Use
Rockwell Automation is not responsible for conformity with any
standards, codes, or regulations that apply to the combination of the
products in your application or use of the product.
Take all necessary steps to determine the suitability of the product for
the systems, machine, and equipment with which it is used.
Know and observe all prohibitions of use applicable to this product.
12 About the Modules
Never use the products for an application involving serious risk to life
or property without making sure that the system as a whole was
designed to address the risks and that the Rockwell Automation
product is properly rated and installed for the intended use within the
overall equipment or system.
Follow Precautions for Use

ATTENTION
Safety state of the inputs and outputs is defined as the off
state.
Safety state of the module and its data is defined as the off
state.
Use the Guard I/O module only in applications where the off
state is the safety state.
Serious injury may occur due to breakdown of safety outputs.
Do not connect loads beyond the rated value to the safety
outputs.
Serious injury may occur due to loss of required safety
functions. Wire the module properly so that supply voltages
or voltages for loads do not touch the safety outputs
accidentally or inadvertently.
ATTENTION
Use dc supply satisfying the following requirements to
prevent electric shock:
A dc power supply with double or reinforced insulation,
for example, according to IED/EN 60950 or EN 50178 or a
transformer according to IEC/EN 61558
A dc supply satisfies requirement for class 2 circuits or
limited voltage/current circuit stated in UL 508
Use an external power supply that is safety extra-low
voltage (SELV) rated
About the Modules 13

ATTENTION
Follow these precautions for safe use.
Wire conductors correctly and verify operation of the module
before placing the system into operation. Incorrect wiring
may lead to loss of safety function.
Do not apply dc voltages exceeding the rated voltages to the
module.
Apply properly specified voltages to the module inputs.
Applying inappropriate voltages causes the module to fail to
perform its specified function, which leads to loss of safety
functions or damage to the module.
Never use test outputs as safety outputs. Test outputs are
not safety outputs.
Note that after installation of the module, a safety
administrator must confirm the installation and conduct trial
operation and maintenance.
Do not disassemble, repair, or modify the module. This may
result in loss of safety functions.
Use only appropriate components or devices complying with
relevant safety standards corresponding to the required
safety category and safety integrity level.
Conformity to requirements of the safety category and
safety integrity level must be determined for the entire
system.
We recommend you consult a certification body
regarding assessment of conformity to the required
safety integrity level or safety category.
Note that you must confirm compliance with the applicable
standards for the entire system.
Disconnect the module from the power supply before wiring.
Devices connected to the module may operate unexpectedly
if wiring is performed while power is supplied.
Precautions to Mount,
Wire, and Clean
Observe these precautions to prevent operation failure, malfunctions,
or undesirable effects on product performance.
Follow these precautions when mounting modules.
Use DIN rail that is 35 mm (1.38 in.) wide to mount the module
into the control panel.
Mount modules to DIN rail securely.
Leave at least 15 mm (0.6 in.) around the module to allow
adequate ventilation and room for wiring.
Follow these instructions when wiring modules.
Do not place communication lines and I/O lines in the same
wiring duct or track as high voltage lines.
Wire correctly after confirming the signal names of all terminals.
Follow torquing specifications as indicated in the installation
instructions.
When cleaning modules, do not use the following:
Thinner
Benzene
Acetone
I/O Module Overview
The Guard I/O modules implement the CIP-safety protocol extensions
over EtherNet/IP networks and provide various features for a safety
system.
Use the modules to construct a safety-control network system that
meets the requirements up to Safety Integrity Level 3 (SIL 3) as
defined in IEC 61508, Functional Safety of Electrical, Electronic, and
Programmable Electronic Safety-related Systems, and the requirements
for Safety Category 4 of the EN 954-1 standard, Safety of machinery -
Safety related parts of control systems.
Remote I/O communication for safety I/O data are performed through
safety connections supporting CIP safety over an EtherNet/IP network,
and data processing is performed in the safety controller.
The status and fault diagnostics of the I/O modules are monitored by
a safety controller through a safety connection using a new or existing
EtherNet/IP network.
The following is a list of features common to Guard I/O modules:
CIP-safety and EtherNet/IP protocol conformance
Safety inputs
Safety devices, such as emergency stop push buttons, gate
switches, and safety light curtains, can be connected.
Dual-channel mode evaluates consistency between two input
signals (channels), which allows use of the module for Safety
Category 3 and 4.
The time of a logical discrepancy between two channels can
be monitored using a discrepancy time setting.
An external wiring short-circuit check is possible when inputs
are wired in combination with test outputs.
Independently adjustable on and off delay is available per
channel.
Test outputs
Separate test outputs are provided for short circuit detection
of a safety input (or inputs).
Power (24V) can be supplied to devices, such as safety
sensors.
Test outputs can be configured as standard outputs.
All Guard I/O modules have numerous test outputs, of which
some can be used for broken wire detection of a muting
lamp.
Safety outputs
Dual-channel mode evaluates consistency between two
output signals (channels).
Safety outputs can be pulse tested to detect field wiring shorts
to 24V dc and 0V dc.
I/O status data - In addition to I/O data, the module includes
status data for monitoring I/O circuits.
Removable I/O connectors - I/O connectors support mechanical
keying.
About Catalog Numbers
See the table for a listing of the types of Guard I/O modules.
Types of Guard I/O Modules
Catalog Number Description Enclosure
Type
Rating
Safety
Inputs
Test
Outputs
(1)
Safety Outputs
Solid State
1791ES-IB16 Safety input module Meets IP20 16 16 -
1791ES-IB8XOBV4 Safety I/O module with solid state outputs 8 8 4 bipolar pairs
(1)
Broken wires can be detected on the muting outputs.
About CIP Safety in
EtherNet/IP Safety
Architectures
Use Guard I/O modules in EtherNet/IP safety architectures as shown
in the figure. The Guard I/O family is a set of I/O modules that when
connected to an EtherNet/IP safety network are suitable for
applications up to SIL3, as defined in the IEC 61508 standard, and
Safety Category 4, as defined in the EN 954-1 standard.
Safety Interlocking and Control via CIP Safety
Safety controllers control the safety outputs. Safety or standard
controllers can control the standard outputs.
EtherNet/IP Network
ControlNet Network
DeviceNet Network
DeviceNet
Network
EtherNet
EtherNet RSLogix Software
RSView Software
ControlNet
Network
DeviceNet Network DeviceNet
Network
Standard Communication
Safety Communication
Identify Major Parts of the
Module
See the figure for module identification. For pin-out information refer
to the relevant installation instructions.
I/O Connectors
I/O Connectors
Power Connector
LED Status
Indicators
IP Address
Switch
EtherNet IP
Address Label
EtherNet
Connector
Network
Activity
Indicator
Notes:
Chapter 2
Understand the Operation of Safety Functions
Read this chapter for information related to the safety functions of the
modules. Also included is a brief overview on international standards
and directives that you should be familiar with.
The following status is the safety state of the Guard I/O modules.
Safety outputs: off
Safety input data to network: off

Safety Status
The module is designed for use in applications where the safety state
is the off state.
Self-diagnostic Functions
Self-diagnostics are performed when the power is turned on and
periodically during operation. If a fatal internal module error occurs,
the red module status (MS) indicator is illuminated, and the safety
outputs and input data and status to the network turn off.
Output Off Input
Inputs to Network Off
EtherNet/IP Network
Safety
Status
44076
20 Understand the Operation of Safety Functions
Configuration Lock
After configuration data has been downloaded and verified, the
configuration data within the module can be protected.
For GuardLogix systems, the LED indicator is not used. Reference
information about safety signatures in the GuardLogix Controller
Systems Safety Reference Manual, publication 1756-RM093.
I/O Status Data
In addition to I/O data, the module provides status data for
monitoring the I/O circuits. The status data includes the following
data, which can be read by the controllers. Note that 1 = ON/Normal
and 0 = OFF/Fault/Alarm.
Individual Point Input Status
Combined Input Status
Individual Point Output Status
Combined Output Status
Individual Test Output Status
Individual Output Readback (actual ON/OFF state of the
outputs)
Status data indicate whether each safety input, safety output, or test
output is normal (normal status: ON, faulted status: OFF). For fatal
errors, communication connections may be broken, so the status data
cannot be read.
Combined status is provided by an AND of the status of all safety
inputs or all safety outputs. When all inputs or outputs are normal the
respective combined status is ON. When one or more of them has an
error the respective combined status is OFF. This is known as the
combined safety input status or combined safety output status.
Safety Inputs
Read this section for information about safety inputs and their
associated test outputs. A safety input may be used with test outputs.
Safety inputs are used to monitor safety input devices.
Understand the Operation of Safety Functions 21
Using a Test Output with a Safety Input
A test output can be used in combination with a safety input for short
circuit detection. Configure the test output as a pulse test source and
associate it to a specific safety input.
The test output can also be used as a power supply to source 24V dc
for an external input circuit.
Example Use of a 1791ES-IB16 Module
Test Pulse in a Cycle
I8 I9 T8 T9 I10 I11 T10 T11M I12 I13 T12 T13 I14 I15 T14 T15M
I0 I1 T0 T1 I2 I3 T2 T3M I4 I5 T4 T5 I6 I7 T6 T7M
IN+ IN-
24V dc
24V dc Output with Test Pulse
External
Contact
Safety Input
Typical Pulse Width and Period
Attribute 1791ES-IB8XOBV4 1791ES-IB16
Pulse width 500 s 500 s
Period 150 ms 150 ms
44295
OUT
On
Off
Typical
500 s
Typical
150 ms
When the external input contact is closed, a test pulse is output from
the test output terminal to diagnose the field wiring and input
circuitry. Using this function, short-circuits between input signal lines
and the power supply (positive side), and short-circuits between input
signal lines can be detected.
Short-circuit Between Input Signal Lines

T0

IN0

24V
0V
24V

T1

IN1

IN+

IN-

External Contact
Short-circuit Between Input Signal Lines and
Power Supply (Positive Side)
External Contact
Short-circuit Between Input Signal Lines
44079
If an error is detected, safety input data and safety input status turns
off.
Normal Operation and Fault Detection (not to scale)
24V
0V
T0
Input Terminal 0
External Device
Fault
Detected
Remote
I/O
Data
ON
OFF
ON
OFF
ON
OFF
ON
OFF
24V
0V
ON
OFF
T0
Safety Input
Status 0
Fault Detection
Remote
I/O
Data
ON
OFF
ON
OFF
ON
OFF
Safety Input
Status 0
Safety Input 0
Safety Input 0
Input Terminal 0
Normal
Operation
External Device
Set Dual-channel Mode and Discrepancy Time
To support redundant channel safety devices, the consistency
between signals on two channels can be evaluated. Either equivalent
or complementary can be selected. This function monitors the time
during which there is a discrepancy between the two channels.
If the length of the discrepancy exceeds the configured discrepancy
time (065,530 ms in increments of 10 ms), the safety input data and
the individual-safety input status turns off for both channels.
IMPORTANT
The dual-channel function is used with two consecutive inputs
that are paired together, starting at an even input number, such
as inputs 0 and 1, 2 and 3, ...
IMPORTANT
Do not set the discrepancy time longer than necessary. The
purpose of the discrepancy time is to allow for normal
differences between contact switching when demands are
placed on safety inputs. For this testing to operate correctly,
only a single demand on the safety input is expected during the
discrepancy time. If the discrepancy time is set too high, and
multiple demands occur during this time, then both safety input
channels will fault.
The following table shows the relation between input terminal states
and controller input data and status.
Dual-channels, Equivalent
In Equivalent mode, both inputs of a pair should typically be in the
same (equivalent) state. When a transition occurs in one channel of
the pair, prior to the transition of the second channel of the pair, a
discrepancy occurs. If the second channel transitions to the
appropriate state prior to the discrepancy time elapsing, the inputs are
considered equivalent. If the second transition does not occur before
the discrepancy time elapses, the channels will fault. In the fault state
the input and status for both channels are set low (off). When
configured as an equivalent dual pair, the data bits for both channels
will always be sent to the controller as equivalent, both high or both
low.
Terminal Input Status and Controller I/O Data
Dual-channel Mode Input Terminal Controller Input Data and Status Dual-
channel
Resultant
Data
Dual-
channel
Resultant
Status
IN0 IN1 Safety
Input 0
Data
Safety
Input 1
Data
Safety
Input 0 Status
Safety
Input 1 Status
Dual-channels,
Equivalent
OFF OFF OFF OFF ON ON OFF Normal
OFF ON OFF OFF OFF OFF OFF Fault
ON OFF OFF OFF OFF OFF OFF Fault
ON ON ON ON ON ON ON Normal
Dual-channels,
Complementary
OFF OFF OFF ON OFF OFF OFF Fault
OFF ON OFF ON ON ON OFF Normal
ON OFF ON OFF ON ON ON Normal
ON ON OFF ON OFF OFF OFF Fault
Equivalent, Normal Operation and Fault Detection (not to scale)
Dual-channels, Complementary
In Complementary mode, the inputs of a pair should typically be in
the opposite (complementary) state. When a transition occurs in one
channel of the pair prior to the transition of the second channel of the
pair, a discrepancy occurs. If the second channel transitions to the
appropriate state prior to the discrepancy time elapsing, the inputs are
considered complementary.
ON
OFF
IN0
Safety Input 0
IN1
Fault Detected
Discrepancy Time
Remote
I/O
Data
ON
OFF
ON
OFF
ON
OFF
ON
OFF
ON
OFF
ON
OFF
IN0
Safety Input
Status 0, 1
IN1
Fault Detection
Remote
I/O
Data
ON
OFF
ON
OFF
ON
OFF
Discrepancy Time
Safety Input
Status 0, 1
Safety Input 1
Safety Input 1
Safety Input 0
Normal
Operation
If the second transition does not occur before the discrepancy time
elapses, the channels will fault. The fault state of complementary
inputs is the even numbered input turned off and the odd numbered
input turned on. Note that if faulted, both channel status bits are set
low. When configured as a complementary dual channel pair, the
data bits for both channels will always be sent to the controller in
complementary, or opposite states.
Complementary, Normal Operation and Fault Detection (not to scale)
ON
OFF
IN0
Safety Input 0
IN1
Fault Detected
Discrepancy Time
Remote
I/O
Data
ON
OFF
ON
OFF
ON
OFF
ON
OFF
ON
OFF
ON
OFF
IN0
Safety Input
Status 0, 1
IN1
Fault Detection
Remote
I/O
Data
ON
OFF
ON
OFF
ON
OFF
Discrepancy Time
Safety Input
Status 0, 1
Safety Input 1
Safety Input 1
Safety Input 0
Normal
Operation
Safety Input Fault Recovery
If an error is detected, the safety input data remains in the off state.
The procedure for activating the safety input data again is as follows.
1. Remove the cause of the error.
2. Place the safety input (or safety inputs) into the safety state.
The safety input status turns on (fault cleared) after the
input-error latch time has elapsed. The I/O indicator (red) turns
off. The input data can now be controlled.
Input Delays
On-delay - An input signal is treated as logic 0 during the on-delay
time (0126 ms, in increments of 6 ms) after the input contacts rising
edge. The input turns on only if the input contact remains on after the
on-delay time has elapsed. This helps prevent rapid changes of the
input data due to contact bounce.
On-delay
Off-delay - An input signal is treated as logic 1 during the off-delay
time (0126 ms, in increments of 6 ms) after the input contacts
falling edge. The input turns off only if the input contact remains off
after the off delay time has elapsed. This helps prevent rapid changes
of the input data due to contact bounce.
Off-delay
44094
ON
OFF
ON
OFF
Remote I/O
Data Safety
Input
Input Signal
ON-delay
On-delay
ON
OFF
ON
OFF
Input Signal
Remote I/O
Data Safety
Input
44094
OFF
ON
OFF Safety Input
Input Signal
OFF-delay
Remote I/O Data
44095
Remote I/O Data
Safety Input
Off-delay
Input Signal
ON
OFF
ON
OFF
Safety Outputs
Read this section for information about safety outputs.
Safety Output with Test Pulse
When the safety output is on, the safety output can be test pulsed, as
shown in the figure and table.
Using this function, short-circuits between output signal lines and the
power supply (positive side) and short-circuits between output signal
lines can be detected. If an error is detected, the safety output data
and individual-safety output status turns off.
Test Pulse in a Cycle

Typical Pulse Width and Period
Attribute 1791ES-IB8XOBV4
Pulse width 700 s
Period 600 ms
IMPORTANT
To prevent the test pulse from causing the connected device to
malfunction, pay careful attention to the input response time of
the device.
44096
OUT
On
Off
Typical
700 s
Typical
600 ms
Dual-channel Setting
When the data of both channels is in the on state, and neither channel
has a fault, the outputs are turned on. The status is normal. If a fault is
detected on one channel, the safety output data and individual safety
output status turn off for both channels.
Dual-channel Setting (not to scale)
Safety Output Fault Recovery
If a fault is detected, the safety outputs are switched off and remain in
the off state. The procedure for activating the safety output data again
is as follows.
1. Remove the cause of the error.
2. Place the safety output (or safety outputs) into the safety state.
The safety output status turns on (fault cleared) when the
output-error latch time has elapsed. The I/O indicator (red) turns
off. The output data can now be controlled.
ON
OFF
OUT0
Safety Output
Status 0, 1
OUT0
OUT1
OUT1
Safety Output
Status 0, 1
Fault Detection
Error
Detected
Remote
I/O
Data
Remote
I/O
Data
ON
OFF
ON
OFF
ON
OFF
ON
OFF
ON
OFF
Normal Operation
Controlling Devices
See the table for information about controlling devices.
ATTENTION
Use appropriate devices as indicated in the Controlling
Device Requirements table. Serious injury may occur due to
loss of safety functions.
Controlling Device Requirements
Device Requirement Allen-Bradley Bulletin Safety Components
Emergency stop
switches
Use approved devices with direct opening mechanisms
complying with IEC/EN 60947-5-1.
Bulletin 800F, 800T
Door interlocking
switches,
limit switches
Use approved devices with direct opening mechanisms
complying with IEC/EN 60947-5-1 and capable of switching
microloads of 24V dc 5 mA.
Bulletin 440K, 440G, 440H for interlock switch
Bulletin 440P, 802T for limit switch
Safety sensors Use approved devices complying with the relevant product
standards, regulations, and rules in the country where used.
Any Guardmaster product
Relays with forcibly-
guided contacts,
contactors
Use approved devices with forcibly-guided contacts
complying with EN 50205. For feedback purposes, use devices
with contacts capable of switching micro loads of
24V dc 5 mA.
Bulletin 700S, 100S
Other devices Evaluate whether devices used are appropriate to satisfy the
requirements of safety category levels.
-
Safety Precautions
Legislation and Standards
Read this section to familiarize yourself with related legislation and
standards information. Relevant international standards include the
following:
IEC 61508 (SIL 1-3)
IEC 61131-2
IEC 60204-1
IEC 61000-6-2
IEC 61000-6-4
The modules received the following certification from ODVA, when
product is marked.
EtherNet/IP Conformance
EtherNet/IP Safety Conformance
ATTENTION
As serious injury may occur due to loss of required safety function,
follow these safety precautions:
Do not use test outputs of the modules as safety outputs.
Do not use EtherNet/IP standard I/O data or explicit message
data as safety data.
Do not use LED indicators on the I/O modules for safety
operations.
Do not connect loads beyond the rated value to the safety
outputs.
Wire the Guard I/O modules properly so that 24V dc line does not
touch the safety outputs accidentally or unintentionally.
Clear previous configuration data before connecting devices to
the network.
Set suitable IP addresses before connecting devices to the
network.
Perform testing to confirm that all of the device configuration
data and operation is correct before starting system operation.
When replacing a device, configure the replacement device
suitably and confirm that it operates correctly.
When installing or replacing modules, clear any previous
configuration before connecting input or output power to the
device.
Europe
In Europe, the modules are subject to the European Union (EU)
Machinery Directive Annex IV, B, Safety Components, items 1 and 2.
The type approval of TUV-Rheinland addresses compliance to
applicable requirements of the following directives and standards:
EU legislation
Machinery Directive 98/37/EC
Low-voltage Directive 73/23/EEC
EMC Directive 89/336/EEC
European standards
EN 61508 (SIL1-3)
EN 954-1 (Category 4, 3, 2, 1, B)
EN 61131-2
EN 418
EN 60204-1
IEC 61000-6-2
IEC 61000-6-4
North America
In North America, the TUV-Rheinland type approval includes Guard
I/O compliance to the relevant standards and related information
including the following:
U.S. standards - ANSI RIA15.06, ANSI B11.19, NFPA 79
The modules are UL-certified functionally safe and carry the
NRGF label, when product is marked.
The modules received UL Listing to standards of U.S. and
Canada including the following, when product is marked.
Japan
In Japan, type test requirements are provided in Article 44 of the
Industrial Safety and Health Law. These requirements apply to
complete systems and cannot be applied to a module by itself.
Accordingly, to use the module in Japan as a safety device for press
machine or shearing tool pursuant to Article 42 of the
above-mentioned law, it is necessary to apply for testing of the entire
system.
EC Directives
These products conform to the EMC Directive and Low-voltage
Directive. For additional information refer to the relevant installation
instructions.
EMC Directive
Rockwell Automation devices that comply with EC directives also
conform to the related EMC standards so that they can more easily be
built into other devices or the overall machine. The actual products
have been checked for conformity to EMC standards. Whether they
conform to the standards in the system used by the customer,
however, must be confirmed by the customer.
EMC-related performance of Rockwell Automation devices that
comply with EC directives vary depending on the configuration,
wiring, and other conditions of the equipment or control panel in
which the Rockwell Automation devices are installed. The customer
must, therefore, perform the final check to confirm that devices and
the overall machine conform to EMC standards.
Compliance with EC Directives
EtherNet/IP products that comply with EC directives must be installed
as follows:
All Type IP20 EtherNet/IP units must be installed within control
panels.
Use reinforced insulation or double insulation for the dc power
supplies used for the communication power supply, internal-
circuit power supply, and the I/O power supplies.
EtherNet/IP products that comply with EC directives also
conform to the Common Emission Standard (EN 50081-2).
Radiated emission characteristics (10-m regulations) may vary
depending on the configuration of the control panel used, other
devices connected to the control panel, wiring, and other
conditions. You must confirm that the overall machine or
equipment complies with EC directives.
Chapter 3
Install and Connect Your Modules
This chapter explains the general procedures for installing the module
and setting the IP address.
ATTENTION
You can configure Test Outputs to be used as standard outputs.
You can connect actuators to Test Output points that are
expecting a Standard configuration.
Test Output points configured as Pulse Test or Power Supply
become active whenever you apply input power to the module.
These configured functions are independent of the I/O
connections to the module.
If a module with Test Outputs configured as Pulse Test or
Power Supply is incorrectly installed in an application where
actuators are connected to these Test Output points, the
actuators will be activated when input power is applied.
To prevent this possibility, follow these procedures.
When installing a module, be sure that the module is
correctly configured for the application or in the
out-of-box condition before applying input power.
When replacing a module, be sure that the module is
correctly configured for the application or in the
out-of-box condition before applying input power.
Reset modules to their out-of-box condition when
removing them from an application.
Be sure that all modules in replacement stock are in
their out-of-box condition.
36 Install and Connect Your Modules
Install the Module
IMPORTANT
Follow these instructions when installing a module.
Use the module in an environment that is within the general
specifications.
Use the module in an enclosure rated IP54 (IEC60529) or
higher.
Use DIN rail that is 35 mm (1.38 in.) wide to mount the module
in the control panel.
Always use an end plate on each end of the module to secure
it.
Place other heat sources an appropriate distance away from
the module to maintain ambient temperatures around the
module below specified maximums.
A 1791ES module can be installed either horizontally or
vertically.
Install and Connect Your Modules 37
Use DIN rail that is 35 mm (1.38 in.) wide to install the module in the
control panel. See the figure that shows required spacing.
Connect the Ethernet Cable
See the ODVA Media Planning and Installation Guide, publication
00148-BR001, for information about Ethernet cable.
Set Network (IP) Address
The module ships with the rotary switches set to 999 and DHCP
enabled.
W
i
r
i
n
g

D
u
c
t
1
5

m
m

(
0
.
6

i
n
.
)

M
i
n
35 mm (1.38 in.) DIN Rail
Use horizontal
or vertical
mounting. End Plate
W
i
r
i
n
g

D
u
c
t
1
5

m
m

(
0
.
6

i
n
.
)

M
i
n
44407
End Plate
38 Install and Connect Your Modules
To set the network address, you can:
adjust the switches on the front of the module.
use a Dynamic Host Configuration Protocol (DHCP) server, such
as Rockwell Automation BootP/DHCP Server Utility.
retrieve the IP address from nonvolatile memory.
The module reads the switches first to determine if the switches are
set to a valid number. You set the network address by adjusting the
three switches on the front of the module. Use a small-blade
screwdriver to rotate the switches. Line up the small notch on the
switch with the number setting you wish to use. Valid settings range
from 001254.
When the switches are set to a valid number, the modules IP address
is 192.168.1.xxx (where xxx represents the number set on the
switches). The modules subnet mask is 255.255.255.0 and the
gateway address is set to 0.0.0.0. When the module is reading the
network address set on the switches, the module does not have a host
name assigned to it or use any Domain Name System.
If the switches are set to an invalid number (such as 000 or a value
greater than 254), the module checks to see if DHCP is enabled. If
DHCP is enabled, the module asks for an address from a DHCP
server. The DHCP server also assigns other transport control protocol
(TCP) parameters.
If DHCP is not enabled, the module uses the IP address (along with
other TCP configurable parameters) stored in nonvolatile memory.
Example Network Address
Connect I/O Power and
I/O Cables
See installation instructions for specifications on wire type and size.
4
2
6
8
0
X100 X1
X10
4
2
6
8
0
4
2
6
8
0
This example shows the switches set at
163 with a network address being
192.168.1.163.
IMPORTANT
Note that I/O connectors are detachable.
Tighten the screws on the I/O connector to the specified
torque settings as shown in the installation instructions.
Since the I/O connector has a structure that helps prevent
incorrect wiring, make connections at the specified
locations corresponding to the terminal numbers.
Chapter 4
Wiring Examples
Read this chapter for information about wiring and safety categories.
See the tables that show input device connection methods and their
safety categories.
Connected Device and Safety Category
Connected
Device
Test Pulse
from Test
Output
Connection Schematic Diagram Safety
Category
Reset Switch No Connect the
switch between I0
and T0. T0 must
be configured as
24V power supply.
N/A
Connect the
switch between
24V dc and I0.
N/A
I0 I1 T0 T1
44275
I0 I1 T0 T1
24V dc
44276
40 Wiring Examples
Emergency stop
switch
Door monitor
Yes Connect the
switches between
I0 and T0, and
I1 and T1.
4
No Connect the
switches between
T0 and I0 and I1,
noting that T0 is
configured for 24V
power supply.
3
Connect the
switches between
24V dc and I0 and
I1.
Light Curtain Yes Connect the
OSSD1 and
OSSD2 to I0 and
I1, respectively.
Connect the 24V
power supply
commons.
3 or 4 based
on light
curtain
being used
Connected Device and Safety Category
Connected
Device
Test Pulse
from Test
Output
Connection Schematic Diagram Safety
Category
I0 I1 T0 T1
I0 I1 T0 T1
I0 I1 T0 T1
24V dc
O
S
S
D
2
O
S
S
D
1
I0 I1 T0 T1 In -
24V
dc
Com
O
S
S
D
2
O
S
S
D
1
44277
44278
44279
44280
Wiring Examples 41
Examples of Wiring
Read this section for examples of wiring by application. See catalog
number details for appropriate module.
Emergency Stop Switch Dual-channel Inputs with Manual Reset
This example shows wiring and controller configuration when using
the Guard I/O module. If used in combination with the programs in a
safety controller, this wiring is Safety Category 4 in accordance with
EN 954-1 wiring requirements.
Emergency Stop Switch Dual-channel Inputs with Manual Reset
Controller Configuration Parameter Name Configuration Setting
Safety Input 0 Safety Input 0 Channel Mode Test Pulse from Test Output
Safety Input 0 Test Source Test Output 0
Dual-channel Safety Input 0/1 Mode Dual-channel Equivalent
Dual-channel Safety Input 0/1 Discrepancy Time 100 ms (application dependent)
Safety Input 2 Safety Input 2 Channel Mode Used as standard input
Safety Input 2 Test Source Not Used
Dual-channel Safety Input 2/3 Mode Single Channel
Test Output 0 Test Output 0 Mode Pulse Test Output
Test Output 2 Test Output 2 Mode Power Supply Output
In + In -
FE I0 I1 T0 T1 I2 I3 T2 T3M
S2
PS1
PS1: User 24Vdc power supply
S1: Emergency Stop Switch
(Positive Opening Mechanism)
S2: Reset Switch
S1
44281
42 Wiring Examples
Two-hand Monitor

the Guard I/O module. If used in combination with the programs of a
safety controller, the wiring is Category 4 in accordance with EN 954-1
wiring requirements.
I0 I2
I1 I3
IN+ IN- T0
T1
E1
T1
T2
T1 T3
S11
31803-M
S12
- +
FE
Two-hand Monitor
Dual Channel Safety Input 0/1 Mode Dual Channel Complementary
Dual Channel Safety Input 0/1 Discrepancy Time 100 ms (application dependent)
Dual Channel Safety Input 2/3 Mode Dual Channel Complementary
Dual Channel Safety Input 2/3 Discrepancy Time 100 ms (application dependent)
Wiring Examples 43
Mode Select Switch
In + In -
T3M
PS1
S1-S5: Switch
FE I0 I1 T0 T1 I2 I3 T2 T7M I4 I5 T4 T5 I6 I7 T6
S1
S2
S3
S4
S5
44283
Mode Select Switch
Safety Input 0 Safety Input 0 Channel Mode Safety Input
Safety Input 0 Test Source None
Dual Channel Safety Input 0/1 Mode Single Channel
44 Wiring Examples
Muting Lamp Output

In + In -
PS1
L1: External Muting Lamp
L1
44284
Muting Lamp Output
Test Output 3 Test Output 3 Mode Muting Lamp Output
Wiring Examples 45
Limit Switch Dual-channel Inputs and a Manual Reset
the Guard I/O module with limit switch dual-channel inputs and a
manual reset. If used in combination with the programs of a safety
controller, the wiring is Category 4 in accordance with EN 954-1
wiring requirements.
Limit Switch Dual-channel Inputs and a Manual Reset
Dual-channel Safety Input 0/1 Mode Dual-channel Equivalent
Dual-channel Safety Input 0/1 Discrepancy Time 1000 ms (application dependent)
Safety Input 2 Safety Input 2 Channel Mode Used as Standard Input
Safety Input 2 Test Source Not Used
Test Output 2 Test Output 2 Mode Power Supply Output
In + In -
S2
(N.O.)
S1
(N.C.)
PS1
S1: Safety Limit Switch
(Positive Opening Mechanism)
S2: Safety Limit Switch
S3: Reset Switch
Safety
Guard
Close
S3
44285
46 Wiring Examples
Standard Inputs and Outputs
In + In -
PS1
L1: Lamp
S1: Switch
S1
L1
Standard Inputs and Outputs
Safety Input 1 Safety Input 1 Channel Mode Standard Input
Test Pulse 0 Test Output 0 Mode 1 Standard Output
44287
Wiring Examples 47
Dual-load Bipolar Outputs

The example shows wiring and configuration when using the Guard I/O
module with solid state outputs in Dual-channel mode.
Note that all safety outputs of this Guard I/O module are permanently
configured for use as Dual-channel mode only. When used in combination
with the programs of the safety controller, this circuit configuration is Safety
Category 4 in accordance with EN 954-1 requirements.
IMPORTANT
In order for the bipolar safety outputs to work correctly, you
must connect the devices that are being controlled as shown in
this figure. Connection of devices directly to 24V DC, 0V DC, or
Ground is strictly prohibited.
In + In -
PS1
PS1, PS2: User 24Vdc power supply
(A single power supply can be used
for both input and output power)
FE
O0
P
O1
M
L- S+
O2
P
O3
M
L- S+
Out
+
Out
-
PS2
K2
K1
K1
K2
M
k2 K1
44288
Dual-load Bipolar Outputs
Safety Output 0 Safety Output 0 Channel Mode Safety Pulse Test
Safety Output 1 Safety Output 1 Channel Mode Safety Pulse Test
48 Wiring Examples
Notes:
Chapter 5
Configure Modules with RSLogix 5000
Software
This chapter provides information about how to configure your
modules with RSLogix 5000 software.
Use Help
At the bottom of a dialog, click Help for information about how to
complete entries in the dialog. At the bottom of a warning dialog,
click Help to get information about that specific error.
Add Modules to the I/O
Configuration Tree
To add a module to the I/O configuration tree, follow these
guidelines.
1. From the I/O Configuration tree, right-click the EtherNet Bridge
module, as shown in the figure, and choose New Module.
50 Configure Modules with RSLogix 5000 Software
The Select Module dialog is displayed with a list that includes
Safety.
2. From the Select Module dialog, click the + next to Safety to see a
list of safety modules.
3. From the Select Module dialog, click the appropriate module,
such as 1791ES-IB16, and OK at the bottom of the dialog.
A list of safety modules
appears here.
Configure Modules with RSLogix 5000 Software 51
Use the Module Properties
and General Dialogs
To use the Module Properties and General dialogs to configure a
module, follow these guidelines.
1. From the I/O configuration tree, double-click the module, such
as the 1791ES-IB8XOBV4 module, to see the Module Properties
dialog.
2. From the Module Properties dialog, complete entries for the
General dialog.
A. For Name, type a unique name.
B. For IP Address, enter the IP address of the Guard I/O module.
C. For Description, if desired, type a description.
For a detailed explanation of the safety network number (SNN),
see the GuardLogix Controller Systems Safety Reference Manual,
publication 1756-RM093, noting that in most cases, you use the
default provided by the RSLogix 5000 software.
D. Click Change to see the Module Definition dialog.
E. From the Module Definition dialog, select values to configure
what data and status tags to generate implicitly for the safety
module, noting that you can configure Input Data, Input Status,
and Output Data.
Input Data Options
Choose from these options:
Safety - Selecting Safety creates these tags for the target module:
RunMode: Module mode
ConnectionFaulted: Communication status
Safety Data: Safety inputs from module
Safety-Readback - This selection is not available for input-only
safety modules. Selecting Safety-Readback creates both safety
and readback tags, with readback indicating the presence of 24V
on the output terminal.
Input Status Options
Choose from these options.
None - No status tags, only data for the inputs
Point Status-Muting - A muting status tag for test output T3/T7
with point status for each input and output point
IMPORTANT
Status data is not SIL 3 data. Do not use status data to directly
control a SIL 3 safety output.
Combined Status-Muting
A single BOOL tag represents an AND of the status bits for all
the input points. For example, if any input channel has a
fault, this bit goes LO.
(1)
A single BOOL tag represents an AND of the status bits for all
the output points.
(1)
A muting status tag for test output T3/T7.
Output Data Options
Choose from these options.
(1)
When using combined status, use explicit messaging to read individual point status for diagnostic purposes.
IMPORTANT
The standard outputs on the module must not be used for safety
purposes.
None - Selecting None results in an input only connection to the
module. Inputs and status are read, but no outputs are written.
Safety - Selecting Safety creates these safety tags and enables
these outputs for use in the safety task.
Test - Selecting Test creates these tags and enables the test
outputs on the module. These outputs are standard outputs and
must not be used for safety purposes.
Combined - Selecting Combined creates these tags and enables
all module outputs - safety and test.

Values and States of Tags
This table shows the values and states of the tags.
Data Description
Input data Safety Input Data
SAFETY
Indicates the ON/OFF status of each input circuit.
ON: 1 OFF: 0
Combined Safety Input Status
SAFETY
An AND of the status of all input circuits.
All circuits are normal: 1
An error was detected in one or more input circuits: 0
Individual Safety Input Status
SAFETY
Indicates the status of each input circuit.
Normal: 1 Fault (Alarm): 0
Combined Safety Output Status
SAFETY
An AND of the status of all safety output circuits.
An error has been detected in one or more output circuits: 0
Individual Safety Output Status
SAFETY
Indicates the status of each safety output circuit.
Muting Lamp Status
SAFETY
Indicates the status when circuit T3 is configured as the muting lamp output.
Output Readback
STANDARD
Monitors the presence of 24V on the output circuit. Readback is ON (1) if 24V is on
output terminal.
ON: 1 OFF: 0
STANDARD
Indicates the status of each of the test output circuits.
Output data Safety Output Data
SAFETY
Controls the safety output.
ON: 1 OFF: 0
Standard Output Data
STANDARD
Controls the test output when Test Output mode is set to a standard output.
ON: 1 OFF: 0
IMPORTANT
Safety denotes information the controller can use in
safety-related functions. Standard denotes additional
information that must not be relied on for safety functions.
Work with the Safety
Dialog
Read this for information about how to complete entries when you
click the Safety tab.
1. From the Module Properties dialog, click the Safety tab to see
the Safety dialog.
2. Configure Requested Packet Interval (RPI) and Configure
Connection Reaction Time Limit (CRTL) by following step 3.
3. From the Safety dialog, click Advanced to see the Advanced
Connection Reaction Time Limit Configuration dialog.
Make sure that input RPI is set to match the need. The smallest
input RPI allowed is 6 ms. Selecting small RPI's consumes
network bandwidth and may cause nuisance trips because other
devices can't get access to the network.
As an example, a safety input module with only ESTOP switches
connected to it generally may work well with settings of
50100 ms. An input module with a light curtain guarding a
hazard may need the fastest response that is possible.
Selecting appropriate RPI's will result in a system with maximum
(best) performance.
IMPORTANT
Analyze each safety channel to determine what is appropriate. The
default timeout multiplier of 2 and network delay multiplier of 200 will
create an input connection reaction time limit of four times the RPI
and an output connection reaction limit of three times the RPI.
Changes to these parameters should be approved by a safety
administrator.
We suggest that you keep the
Time-out Multiplier and
Network Delay Multiplier at
their default values of 2
and 200.
See GuardLogix Controllers
User Manual, publication
number 1756-UM020, for more
information about the CRTL.
A connection status tag exists for every connection.
If the RPI and CRTL for the network are set appropriately, then
this status tag should always remain HI. Monitor all connection
status bits to verify that they are not going LO intermittently due
to timeouts.
Configuration Ownership - Reset Ownership
The connection between the owner and the Guard I/O module is
based on the following:
Guard I/O EtherNet IP address
Guard I/O safety network number
GuardLogix slot number
GuardLogix safety network number
Path from GuardLogix controller to Guard I/O module
Configuration signature
If any of these change, the connection between the GuardLogix
controller and the Guard I/O module is lost, and the yellow yield in
the RSLogix 5000 tree appears. Reset ownership to reestablish the
connection using this procedure.
1. From within RSLogix 5000 software, open the safety I/O module
properties.
2. Click the Safety tab.
3. From the dialog, click Reset ownership.
Connection
Faulted
Configuration Signature
The configuration signature is created by RSLogix 5000 software and
verified by the safety module. The configuration signature provides
SIL 3 integrity of the configuration of a Guard I/O module.
When a GuardLogix controller first connects to an
unconfigured Guard I/O module, the complete configuration
is downloaded to the I/O module.
Any time the GuardLogix controller attempts to connect to a
Guard I/O module, if the configuration signatures are the
same, then the configuration does not need to be
downloaded, because they already match.
Any time the GuardLogix controller attempts to connect to a
Guard I/O module and the signatures do not match, the
module checks the IP address and safety network number. If
these are all correct, the controller will attempt to configure
the module.
Work with the Input
Configuration Dialog
See the table that shows typical safety input parameters, referring to
Chapter 2 for related information.
Typical Safety Input Parameters
Parameter Name Value Description
Input Point Operation Type Single Channel Inputs are treated as single channel.
Dual-channel Equivalent Inputs are treated as a dual-channel pair. The channels must match (be
equal) within the discrepancy time or a fault is generated.
Dual-channel
Complementary
Inputs are treated as a dual-channel pair. The channels must disagree (be
opposite) within the discrepancy time or a fault is generated.
Input Point Mode Not Used The input is disabled. It remains logic 0 if 24V is applied to the input terminal.
Safety Test Pulse Pulse testing is performed on this input circuit. A test source on the 1791ES
module must be used as the 24V source for this circuit. The test source is
configured using the test source pulldown. The pulse test will detect shorts
to 24V and channel-to-channel shorts to other inputs.
Safety A safety input is connected but there is no requirement for the 1791ES
module to perform a pulse test on this circuit. An example is a safety device
that performs its own pulse tests on the input wires, such as a light curtain.
Standard A standard device, such as a reset switch, is connected. This point cannot be
used in dual channel operation.
Safety Input Test Source None If pulse testing is being performed on an input point, then the test source that
is sourcing the 24V for the input circuit must be selected.
If the incorrect test source is entered, the result is pulse test failures on that
input circuit.
Test Output 0
Test Output 1
Test Output 2
Test Output 3
Test Output 415
(1)
Input Delay Time
Off -> On
0126 ms (in
increments of 6 ms)
Filter time is for OFF to ON transition. Input must be high after input delay has
elapsed before it is set logic 1.
Input Delay Time
On -> Off
0126 ms (in
increments of 6 ms)
Filter time is ON to OFF transition. Input must be low after input delay has
elapsed before it is set logic 0.
Safety Input Error Latch Time 065,530 ms (in
increments of 10 ms)
Default is 1000 ms. The purpose for latching input errors is to make sure that
intermittent faults that may only exist for a few milliseconds are latched long
enough to be read by the controller. The amount of time to latch the error
should be based on the RPI, the safety task watchdog, and other
application-specific variables.
(1)
There are eight test outputs on 1791ES-IB8XOBV4 modules.
Follow this procedure to complete entries from the Input
Configuration Dialog that you see when, from the top of the Module
Properties dialog, you click Input Configuration.
1. For Point Operation Type, choose one of these values and a
value for Discrepancy Time if set to Equivalent or
Complementary:
Single
Inputs are treated as single channels. Note that in many cases,
dual-channel safety inputs are configured as two individual
single channels. This does not affect pulse testing because it
is handled on an individual channel basis.
Equivalent
(1)

Inputs are treated as a dual-channel pair. The channels must
match within the discrepancy time or an error is generated.
Complementary
(1)
Inputs are treated as a dual-channel pair. They must be in
opposite states within the discrepancy time or an error is
generated.
(1)
Be aware that configuring discrepancy time on safety I/O modules masks input inconsistent faults from the
GuardLogix safety instructions. Status can be read by GuardLogix to obtain this fault information.
2. For Point Mode, choose one of these values for each point,
referring to the Safety Input Parameters table for additional
information:
Not Used - Safety input channel is disabled
Safety Pulse Test - Safety input is configured for pulse test
operation
Safety - The safety input is used with a safety field device
Standard - Safety input has a standard field device wired to it
3. Complete entries, noting the following:
For each safety input on the module, you can define if the
input will be pulse tested. If the inputs will be pulse tested,
select which test source to use.
Off -> On and On -> Off delay times can be configured per
channel with each channel specifically tuned to match the
characteristics of the field device for maximum performance.
Input Error Latch Time is the time the module holds an error
to make sure the controller can detect it. This provides you
more reliable diagnostics and enhances the chances that a
nuisance error is detected.
4. Click OK at the bottom of the dialog or a tab at the top of the
dialog.
Work with Test Output
Read this for information about how to work with the Test Output
Configuration dialog, referring to the table that provides information
on configuring test outputs.
Complete entries on the Test Output dialog, referring to the figure.
Test Output Parameters
Parameter Name Value Description Default
Test Output Mode Not Used The test output is disabled. Not Used
Standard The output point is enabled for use by the GuardLogix controller.
Pulse Test The test output is being used as a pulse test source.
Power Supply A constant 24V is placed on the output terminal. It can be used to provide
power to a field device.
Muting Lamp Output
(Terminal T3/T7 only)
An indicator lamp is connected to the output. When this lamp is energized, a
burned-out bulb, broken wire, or short to GND error condition can be
detected. Typically, the lamp is an indicator used in light curtain applications.
Work with the Output
Read this for a guideline on how to configure safety outputs by using
the information in the table and completing the entries referring to the
figure.
Safety Output Parameters
Parameter
Name
Value Description Default
Point Operation
Type
Dual The 1791ES module treats the outputs as a pair. It always sets them HI to LO as a
matched pair.
Safety logic must set both of these outputs ON or OFF at the same time or the module
will declare a channel fault.
Dual-channel
Point Mode Not Used The output is disabled. Not Used
Safety The output point is enabled, and it does not perform a pulse test on the output.
Safety Pulse Test The output point is enabled and performs a pulse test on the output.
When the output is energized, the output pulses LO briefly. The pulse test detects if
24V remains on the output terminal during this LO pulse due to a short to 24V or if the
output is shorted to another output terminal.
Output Error
Latch Time
065,530 ms (in
increments of 10
ms)
The purpose for latching output errors is to make sure that intermittent faults that
may only exist for a few milliseconds are latched long enough to be read by the
controller. The amount of time to latch the errors will be based on the RPI, the safety
task watchdog, and other application-specific variables.
1000 ms
Follow this procedure to complete entries from the Output
Configuration dialog.
1. For Point Operation, all safety outputs are Dual mode only.
The Guard I/O module always sets them high or low as a
pair.
You must always match the two outputs as a pair in software
as well.
2. For Point Mode, select Not Used, Safety, or Safety Pulse Test,
referring to the Safety Output Parameters table for additional
information.
3. Select a value for Output Error Latch Time. Output Error Latch
Time is the time the module holds an error to make sure the
controller can detect it. This provides you more reliable
diagnostics and enhances the changes that a nuisance error is
detected.
4. Click Apply from the bottom of the dialog.
Save and Download the
Module Configuration
We recommend that after a module is configured you save your work.
If after downloading the program the MS and NS LED indicators on
the Guard I/O module are not both solid green, this may be due to
loss of ownership. The ownership is based on the following:
Guard I/O EtherNet IP address
Guard I/O safety network number
GuardLogix slot number
GuardLogix safety network number
Path from GuardLogix controller to Guard I/O module
Configuration signature
If any of these change, the connection between the GuardLogix
controller and the Guard I/O module is lost, and the yellow yield in
the RSLogix 5000 tree appears. Reset ownership to reestablish the
connection using this procedure.
1. From within RSLogix 5000 software, open the safety I/O module
properties.
2. Click the Safety tab.
3. From the dialog, click Reset ownership.
Chapter 6
Interpret Module Indicators
This chapter includes an explanation of the meaning of module
indicators.
Module Indicators
See the figure and tables for information on how to interpret LED
module indicators.

24V dc Input Power Indicator
Module Status
Indicator
Configuration Lock Indicator 24V dc Output Power Indicator
(1791ES-IB8XOBV4 modules only)
I0I15 - Safety Input Status Indicator
T0T15 - Test Output Status indicator
0007 - Safety Output Status Indicator (1791ES-IB8XOBV4 module)
Network Status Indicator
Network
Activity
Indicator
24V dc Input Power Indicator
State Status Description Recommended Action
Off No power No power is applied. Apply power to this section.
Solid green Normal operation The applied voltage is within specifications. None.
Solid yellow Input power out of specification The input power is out of specification. Check your connectors, wiring, and
voltages.
70 Interpret Module Indicators

24V dc Output Power Indicator
Off No power No power is applied. Apply power to this section.
Solid green Normal operation The applied voltage is within specifications. None.
Solid yellow Output power out of specification The output power is out of specification. Check your connectors, wiring, and
voltages.
Module Status Indicator
Off No power No power is applied to the power connector. Apply power to this connector.
Solid green Normal operation The module is operating normally. None.
Solid red Unrecoverable fault The module detected an unrecoverable fault. Cycle power to the module. If problem
persists, replace the module.
Flashing red
and green
Module is unconfigured Module needs commissioning due to missing,
incomplete, or incorrect configuration.
Reconfigure the module. For additional
information, inspect Network Status
indicator.
Device in self test The module is performing its power-cycle
diagnostic tests.
Wait for the module to complete its
power-cycle diagnostics.
Flashing
green
Idle Idle, waiting for connection from scanner. Establish connection.
Flashing red Recoverable fault The module has detected a recoverable fault. Cycle power to the module or reset the
module.
User-initiated firmware update in
progress
User-initiated firmware update is in progress. Wait for firmware update to complete.
Network Status Indicator
Off Module not online The module does not have an IP address. Verify your network is working
properly.
Flashing
green
Module online with no
connections in established state
The module has acquired an IP address, but no
connections are established.
Verify your network and module
configuration.
Solid green Module online with connections in
established state
The module is operating normally. None.
Flashing
red
One or more I/O connections in
timed-out state
The module detected a recoverable network fault. Verify your network and module
configuration.
User-initiated firmware update User-initiated firmware update is in progress. Wait for firmware update to
complete.
Solid red Critical link failure The module detected an error that prevents it from
communicating on the network, such as duplicate IP
address has been detected.
Cycle power to the module.
Check network IP addressing.
Flashing
red and
green
Self test The module is performing its power-cycle diagnostic test. Wait for the module to complete
its power-cycle diagnostics.
Interpret Module Indicators 71

Network Activity Indicator
State Status Recommended Action
Off No link established Establish link.
Flashing Green Transmit or receive activity None.
Steady Green Link established None.
Safety Input Status Indicator
Off Safety input off The safety input is off or the channel is configured
for not used.
Turn the safety input on or reconfigure
the channel, if desired.
Solid yellow Safety input on The safety input is on. None.
Solid red Fault detected A fault in the external wiring or input circuit
detected.
Check configuration, field wiring, and
devices. If no problem found, replace
module.
Flashing red Partner fault detected A fault in the partner input circuit of a dual-input
configuration detected.
Check the field wiring and verify your
configuration for the partner circuit. If
no problem found, replace module.
Test Output Status Indicator
Off Test output off The test output is off or the channel is configured
for not used.
Turn the test output on or reconfigure the
channel, if desired.
Solid yellow Output on Output is on. None.
Solid red Fault detected A fault in the external wiring or input circuit
detected.
Check field wiring. If no problem found,
replace module. For outputs configured
for muting could indicate undercurrent or
burned-out lamp.
Safety Output Status Indicator (1791ES-IB8XOBV4 only)
Off Safety output off The safety output is off or the channel is
configured for not used.
Turn the safety output on or reconfigure
the channel, if desired.
Solid yellow Safety output on The safety output is on. None.
Solid red Fault detected A fault in the output circuit was detected. Check the circuit wiring and end device. If
no problem found, replace module.
Both tags in a dual channel circuit do not have the
same value.
Make sure logic is driving tag values to
the same state (off or on).
Flashing red Partner fault detected A fault in the partner output circuit of a dual
output configuration was detected.
Check the circuit wiring and end device of
the partner. If no problem found, replace
module.
72 Interpret Module Indicators
Configuration Lock
Indicator
Configuration lock indicator is not supported by RSLogix 5000
software.

Appendix A
Get Diagnostic Status from Modules by Using
Explicit Messaging
What This Appendix
Contains
This appendix provides information about how to use CIP Generic
Message instructions (sometimes called explicit messaging) to get
diagnostic status information from the modules.
You can implicitly obtain individual point status of the Guard I/O
module from the Module Definition dialog by choosing Pt. Status from
the Input Status pull-down menu.
74 Get Diagnostic Status from Modules by Using Explicit Messaging
Another choice is to obtain overall status implicitly from the Module
Definition dialog by choosing Combined Status from the Input Status
pull-down menu.
If the Combined Status changes, use explicit messaging to obtain the
point level status.
Work with
1791ES-IB8XOBV4 Modules
To work with 1791ES-IB8XOBV4 modules, follow this procedure.
1. In the Module Definition dialog, from the Input Status pull-down
menu, choose Combined Status.
Get Diagnostic Status from Modules by Using Explicit Messaging 75
This creates a two-byte input assembly, as shown for the
1791ES-IB8XOBV4 module.
2. Use the CombinedInputStatus and CombinedOutputStatus bits to
detect if one or more of the I/O points on the module have a
fault.
If any input or output status bit goes to a value of 0 (0=error,
1=no error), use the InputStatus and OutputStatus bits to
condition your msg rungs as follows.
Note that the second rung can be used to read the status on
mode transition and once a fault is detected, continue reading
until the fault is corrected.
Place these rungs in the standard task.
Reference the figures below that show the MSG instruction
parameters for reading Instance 852 from the 1791ES-IB8XOBV4
module.
Instance 852 (354 Hex) is 5 bytes in length, so the Destination
Tag MSGdata must be at least 5 bytes in length to hold this data.
The size is DINT[2] or 8 bytes.
See the figure that shows the layout of Instance 852 (354 Hex).
354 (852) 1791ES-
IB8XOBV4
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 7
Status
Safety
Input 6
Status
Safety
Input 5
Status
Safety
Input 4
Status
Safety
Input 3
Status
Safety
Input 2
Status
Safety
Input 1
Status
Safety
Input 0
Status
2 Safety
Output 7
Status
Safety
Output 6
Status
Safety
Output 5
Status
Safety
Output 4
Status
Safety
Output 3
Status
Safety
Output 2
Status
Safety
Output 1
Status
Safety
Output 0
Status
3 Safety
Output 7
Monitor
Safety
Output 6
Monitor
Safety
Output 5
Monitor
Safety
Output 4
Monitor
Safety
Output 3
Monitor
Safety
Output 2
Monitor
Safety
Output 1
Monitor
Safety
Output 0
Monitor
4 Reserved Reserved Input
Power
Error
(1)
Output
Power
Error
(1)
Reserved Reserved Muting
Lamp 7
Status
Muting
Lamp 3
Status
From the top of the Message Configuration dialog, click the
Communication tab. This dialog requires the path to the module.
Click Browse to browse to the module that the MSG will read.
From the top of the Message Configuration dialog, click Tag to
see this dialog.
When the explicit message reads the data from the
1791ES-IB8XOBV4 module, the data appears in the MSGdata
tags as shown.
The first 32 bits of the instance are in MSGdata[0].031, and the
final 8 bits are in MSGdata[1].07. These 40 bits must be
mapped according to Instance 852. An easy method to do this
mapping is to create a user defined tag (UDT) for Instance 852.
Once complete, it appears as follows.
Work with 1791ES-IB16
Modules
To work with 1791ES-IB16 modules, follow this procedure.
1. In the Module Definition dialog, from the Input Status pull-down
menu, choose Combined Status.
This creates a three-byte input assembly, as shown, for the
1791ES-IB16 module.
2. Use the CombinedInputStatus bit to detect if one or more of the
I/O points on the module have a fault.
If any input status bits go to a value of 0 (0 = bad; 1 = good)
use an explicit message to determine which individual data
points have faulted.
Note that you can use the second rung to read the status on
mode transition and once a fault is detected, continue reading
until the fault is corrected.
Place these rungs in the standard task.
See the figures that show the MSG instruction parameters for reading
Instance 869 from the 1791ES-IB16 module. See Appendix D of this
manual for a layout of possible instances.
Instance 869 (365 Hex) is 7 bytes in length, so the Destination
Tag IB16MSGdata must be at least 7 bytes in length to hold this
data. The size is DINT[2] or 8 bytes.
The layout of Instance 869 (365 Hex) is as follows.
From the top of the Message Configuration dialog, click the
Communication tab. This dialog requires the path to the module.
Click Browse to browse to the module that the MSG will read.
.
365 1791ES-
IB16
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 15
Safety
Input 14
Safety
Input 13
Safety
Input 12
Safety
Input 11
Safety
Input 10
Safety
Input 9
Safety
Input 8
2 Safety
Input 7
Status
Safety
Input 6
Status
Safety
Input 5
Status
Safety
Input 4
Status
Safety
Input 3
Status
Safety
Input 2
Status
Safety
Input 1
Status
Safety
Input 0
Status
3 Safety
Input 15
Status
Safety
Input 14
Status
Safety
Input 13
Status
Safety
Input 12
Status
Safety
Input 11
Status
Safety
Input 10
Status
Safety
Input 9
Status
Safety
Input 8
Status
4 Safety
Output 7
Status
Safety
Output 6
Status
Safety
Output 5
Status
Safety
Output 4
Status
Safety
Output 3
Status
Safety
Output 2
Status
Safety
Output 1
Status
Safety
Output
0 Status
5 Safety
Output 15
Status
Safety
Output 14
Status
Safety
Output 13
Status
Safety
Output
12 Status
Safety
Output 11
Status
Safety
Output
10 Status
Safety
Output 9
Status
Safety
Output
8 Status
Power
Error
(1)
Output
Power
Error
(1)
Muting
Lamp 15
Status
Muting
Lamp 11
Status
Muting
Lamp 7
Status
Muting
Lamp 3
Status
From the top of the Message Configuration dialog, click Tag to
see this dialog.
When the explicit message reads the data from the 1791ES-IB16
module, the data appears in the MSGdata tags as shown.
The first 32 bits of the instance are in IB16MSGdata[0].031, and
the final 24 bits are in IB16MSGdata[1].023. Map these 56 bits
according to Instance 869. An easy method to do this mapping
is to create a user defined tag (UDT) for Instance 869. Once
you complete this, it appears as follows.
I/O Data Supported by Each
Module
See the table that shows a summary of default I/O data by module.
The tables show the I/O data supported by each module. Refer to I/O
Assembly Data for data arrangements.
Default I/O Data
Module RSLogix 5000 Software
Safety Connection Assembly Instance (Hex)
1791ES-IB16 Safety 225 and 23
1791ES-IB8XOBV4 Safety 204 and 234
For I/O data, safety connections for up to four items, including one
output, can be allocated for the master unit. Also, standard
connections for up to two items can be allocated for the master unit.

1791ES-IB8XOBV4 Modules
Input Data Input Status Assembly Instance
Safety None
204
(2)
(2)
Default for input data.
Point Status - Muting 334
Combined Status - Muting 324
Safety - Readback Point Status - Muting 354
Point Status - Muting - Test Output 374
Output Data Assembly Instance
Safety
234
(1)
(1)
Default for output data.
Test 22
Combined 2C4
None C7
1791ES-IB16 Modules
Input Data Input Status Assembly Instance
Safety None 205
Point Status - Muting 335
Point Status - Muting - Test Output 365
Combined Status - Muting 315
Point Status 225
Output Data Assembly Instance
Test 23
None C7
I/O Assembly and
Reference Data
See the tables for I/O assembly and reference data. The bits in the tag
definitions of RSLogix 5000 software are different than those shown in
the following section. The following defines the name associations for
clarification with the programming software.
See these tables for reference data concerning input and output data.
Bit Definitions and RSLogix 5000 Tag Names
Bit Definitions RSLogix 5000 Tag Name
Safety Input 0 Pt00Data
Safety Input 15 Pt15Data
Safety Input 0 Status Pt00InputStatus
Safety Input 15 Status Pt15InputStatus
Safety In Status InputStatus
Muting Lamp Status MutingStatus
Safety Output 0 Pt00Data
Safety Output 7 Pt07Data
Standard Output 0 Test00Data
Standard Output 15 Test15Data
Safety Output 0 Status Pt00OutputStatus
Safety Output 7 Status Pt07OutputStatus
Safety Out Status OutputStatus
Safety Output 0 Monitor Pt00Readback
Safety Output 7 Monitor Pt07Readback
Test Output 0 Status Pt00TestOutputStatus
Test Output 15 Status Pt15TestOutputStatus
Input Data
Instance
Hex(De-
cimal)
Module Connection
Type
Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
204 (516) 1791ES-
IB8XOBV4
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
205 (517) 1791ES-
IB16
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 15
Safety
Input 14
Safety
Input 13
Safety
Input 12
Safety
Input 11
Safety
Input 10
Safety
Input 9
Safety
Input 8
224 (548) 1791ES-
IB8XOBV4
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 7
Status
Safety
Input 6
Status
Safety
Input 5
Status
Safety
Input 4
Status
Safety
Input 3
Status
Safety
Input 2
Status
Safety
Input 1
Status
Safety
Input 0
Status
225 (549) 1791ES-
IB16
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 15
Safety
Input 14
Safety
Input 13
Safety
Input 12
Safety
Input 11
Safety
Input 10
Safety
Input 9
Safety
Input 8
2 Safety
Input 7
Status
Safety
Input 6
Status
Safety
Input 5
Status
Safety
Input 4
Status
Safety
Input 3
Status
Safety
Input 2
Status
Safety
Input 1
Status
Safety
Input 0
Status
3 Safety
Input 15
Status
Safety
Input 14
Status
Safety
Input 13
Status
Safety
Input 12
Status
Safety
Input 11
Status
Safety
Input 10
Status
Safety
Input 9
Status
Safety
Input 8
Status
300 (768) 1791ES-
IB16
Standard
Only
0 Reserved Reserved Reserved Reserved Reserved Reserved Reser-
ved
Input
Power
Error
301 (769) 1791ES-
IB8XOBV4
Standard
Only
0 Reserved Reserved Reserved Reserved Reserved Reserved Output
Power
Error
Input
Power
Error
315 (789) 1791ES-
IB16
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 15
Status
Safety
Input 14
Status
Safety
Input 13
Status
Safety
Input 12
Status
Safety
Input 11
Status
Safety
Input 10
Status
Safety
Input 9
Status
Safety
Input 8
Status
2 Combined
Safety In
Status
Reserved Input
Power
Error
(1)
Reserved Muting
Lamp 15
Status
Muting
Lamp 11
Status
Muting
Lamp 7
Status
Muting
Lamp 3
Status
324 (804) 1791ES-
IB8XOBV4
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Combined
Safety In
Status
Combined
Safety
Out
Status
Input
Power
Error
(1)
Output
Power
Error
(1)
Lamp 7
Status
Muting
Lamp 3
Status
334 (820) 1791ES-
IB8XOBV4
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 7
Status
Safety
Input 6
Status
Safety
Input 5
Status
Safety
Input 4
Status
Safety
Input 3
Status
Safety
Input 2
Status
Safety
Input 1
Status
Safety
Input 0
Status
Power
Error
(1)
Output
Power
Error
(1)
Lamp 7
Status
Muting
Lamp 3
Status
Input Data
Instance
Hex(De-
cimal)
Module Connection
Type
335 (821) 1791ES-
IB16
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 15
Safety
Input 14
Safety
Input 13
Safety
Input 12
Safety
Input 11
Safety
Input 10
Safety
Input 9
Safety
Input 8
2 Safety
Input 7
Status
Safety
Input 6
Status
Safety
Input 5
Status
Safety
Input 4
Status
Safety
Input 3
Status
Safety
Input 2
Status
Safety
Input 1
Status
Safety
Input 0
Status
3 Safety
Input 15
Status
Safety
Input 14
Status
Safety
Input 13
Status
Safety
Input 12
Status
Safety
Input 11
Status
Safety
Input 10
Status
Safety
Input 9
Status
Safety
Input 8
Status
Power
Error
(1)
Reserved Muting
Lamp 15
Status
Muting
Lamp 11
Status
Muting
Lamp 7
Status
Muting
Lamp 3
Status
344 (836) 1791ES-
IB8XOBV4
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 7
Status
Safety
Input 6
Status
Safety
Input 5
Status
Safety
Input 4
Status
Safety
Input 3
Status
Safety
Input 2
Status
Safety
Input 1
Status
Safety
Input 0
Status
2 Safety
Output 7
Status
Safety
Output 6
Status
Safety
Output 5
Status
Safety
Output 4
Status
Safety
Output 3
Status
Safety
Output 2
Status
Safety
Output 1
Status
Safety
Output 0
Status
Power
Error
(1)
Output
Power
Error
(1)
Lamp 7
Status
Muting
Lamp 3
Status
354 (852) 1791ES-
IB8XOBV4
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 7
Status
Safety
Input 6
Status
Safety
Input 5
Status
Safety
Input 4
Status
Safety
Input 3
Status
Safety
Input 2
Status
Safety
Input 1
Status
Safety
Input 0
Status
2 Safety
Output 7
Status
Safety
Output 6
Status
Safety
Output 5
Status
Safety
Output 4
Status
Safety
Output 3
Status
Safety
Output 2
Status
Safety
Output 1
Status
Safety
Output 0
Status
3 Safety
Output 7
Monitor
Safety
Output 6
Monitor
Safety
Output 5
Monitor
Safety
Output 4
Monitor
Safety
Output 3
Monitor
Safety
Output 2
Monitor
Safety
Output 1
Monitor
Safety
Output 0
Monitor
Power
Error
(1)
Output
Power
Error
(1)
Lamp 7
Status
Muting
Lamp 3
Status
Input Data
Instance
Hex(De-
cimal)
Module Connection
Type
364 (868) 1791ES-
IB8XOBV4
Safety and
Standard
0 Safety
Input 7
Status
Safety
Input 6
Status
Safety
Input 5
Status
Safety
Input 4
Status
Safety
Input 3
Status
Safety
Input 2
Status
Safety
Input 1
Status
Safety
Input 0
Status
1 Safety
Output 7
Status
Safety
Output 6
Status
Safety
Output 5
Status
Safety
Output 4
Status
Safety
Output 3
Status
Safety
Output 2
Status
Safety
Output 1
Status
Safety
Output 0
Status
2 Test
Output 7
Status
Test
Output 6
Status
Test
Output 5
Status
Test
Output 4
Status
Test
Output 3
Status
Test
Output 2
Status
Test
Output 1
Status
Test
Output 0
Status
Power
Error
(1)
Output
Power
Error
(1)
Lamp 7
Status
Muting
Lamp 3
Status
365 (869) 1791ES-
IB16
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 15
Safety
Input 14
Safety
Input 13
Safety
Input 12
Safety
Input 11
Safety
Input 10
Safety
Input 9
Safety
Input 8
2 Safety
Input 7
Status
Safety
Input 6
Status
Safety
Input 5
Status
Safety
Input 4
Status
Safety
Input 3
Status
Safety
Input 2
Status
Safety
Input 1
Status
Safety
Input 0
Status
3 Safety
Input 15
Status
Safety
Input 14
Status
Safety
Input 13
Status
Safety
Input 12
Status
Safety
Input 11
Status
Safety
Input 10
Status
Safety
Input 9
Status
Safety
Input 8
Status
4 Test
Output 7
Status
Test
Output 6
Status
Test
Output 5
Status
Test
Output 4
Status
Test
Output 3
Status
Test
Output 2
Status
Test
Output 1
Status
Test
Output 0
Status
5 Test
Output 15
Status
Test
Output 14
Status
Test
Output 13
Status
Test
Output 12
Status
Test
Output 11
Status
Test
Output 10
Status
Test
Output 9
Status
Test
Output 8
Status
Power
Error
(1)
Output
Power
Error
(1)
Muting
Lamp 15
Status
Muting
Lamp 11
Status
Muting
Lamp 7
Status
Muting
Lamp 3
Status
374 (884) 1791ES-
IB8XOBV4
Safety and
Standard
0 Safety
Input 7
Safety
Input 6
Safety
Input 5
Safety
Input 4
Safety
Input 3
Safety
Input 2
Safety
Input 1
Safety
Input 0
1 Safety
Input 7
Status
Safety
Input 6
Status
Safety
Input 5
Status
Safety
Input 4
Status
Safety
Input 3
Status
Safety
Input 2
Status
Safety
Input 1
Status
Safety
Input 0
Status
2 Safety
Output 7
Status
Safety
Output 6
Status
Safety
Output 5
Status
Safety
Output 4
Status
Safety
Output 3
Status
Safety
Output 2
Status
Safety
Output 1
Status
Safety
Output 0
Status
3 Safety
Output 7
Monitor
Safety
Output 6
Monitor
Safety
Output 5
Monitor
Safety
Output 4
Monitor
Safety
Output 3
Monitor
Safety
Output 2
Monitor
Safety
Output 1
Monitor
Safety
Output 0
Monitor
4 Test
Output 7
Status
Test
Output 6
Status
Test
Output 5
Status
Test
Output 4
Status
Test
Output 3
Status
Test
Output 2
Status
Test
Output 1
Status
Test
Output 0
Status
Power
Error
(1)
Output
Power
Error
(1)
Lamp 7
Status
Muting
Lamp 3
Status
Input Data
Instance
Hex(De-
cimal)
Module Connection
Type
385 (901) 1791ES-
IB16
Standard
Only
0 Reserved Reserved Reserved Reserved Reserved Reserved Reser-
ved
Input
Power
Error
1 Test
Output 7
Status
Test
Output 6
Status
Test
Output 5
Status
Test
Output 4
Status
Test
Output 3
Status
Test
Output 2
Status
Test
Output 1
Status
Test
Output 0
Status
2 Test
Output 15
Status
Test
Output 14
Status
Test
Output 13
Status
Test
Output 12
Status
Test
Output
11 Status
Test
Output 10
Status
Test
Output 9
Status
Test
Output 8
Status
394 (916) 1791ES-
IB8XOBV4
Standard
Only
Power
Error
Input
Power
Error
1 Test
Output 7
Status
Test
Output 6
Status
Test
Output 5
Status
Test
Output 4
Status
Test
Output 3
Status
Test
Output 2
Status
Test
Output 1
Status
Test
Output 0
Status
3A4 (932) 1791ES-
IB8XOBV4
Standard
Only
Power
Error
Input
Power
Error
1 Safety
Output 7
Monitor
Safety
Output 6
Monitor
Safety
Output 5
Monitor
Safety
Output 4
Monitor
Safety
Output 3
Monitor
Safety
Output 2
Monitor
Safety
Output 1
Monitor
Safety
Output 0
Monitor
2 Test
Output 7
Status
Test
Output 6
Status
Test
Output 5
Status
Test
Output 4
Status
Test
Output 3
Status
Test
Output 2
Status
Test
Output 1
Status
Test
Output 0
Status
(1)
This data is diagnostic data only and does not have safety integrity.
Output Data
Instance
(hex)
Module Connection
Type
22 (34) 1791ES-
IB8XOBV4
Safety and
Standard
0 Standard
Output 7
(1)

Standard
Output 6
Standard
Output 5
Standard
Output 4
Standard
Output 3
Standard
Output 2
Standard
Output 1
Standard
Output 0
23 (35) 1791ES-
IB16
Safety and
Standard
0 Standard
Output 7
Standard
Output 6
Standard
Output 5
Standard
Output 4
Standard
Output 3
Standard
Output 2
Standard
Output 1
Standard
Output 0
1 Standard
Output 15
Standard
Output 14
Standard
Output 13
Standard
Output 12
Standard
Output 11
Standard
Output 10
Standard
Output 9
Standard
Output 8
234 (564) 1791ES-I
B8XOBV4
Safety Only 0 Safety
Output 7
Safety
Output 6
Safety
Output 5
Safety
Output 4
Safety
Output 3
Safety
Output 2
Safety
Output 1
Safety
Output 0
2C4 (708) 1791ES-
IB8XOBV4
Safety Only 0 Safety
Output 7
Safety
Output 6
Safety
Output 5
Safety
Output 4
Safety
Output 3
Safety
Output 2
Safety
Output 1
Safety
Output 0
1 Standard
Output 7
Standard
Output 6
Standard
Output 5
Standard
Output 4
Standard
Output 3
Standard
Output 2
Standard
Output 1
Standard
Output 0
(1)
Standard output signifies a Test Output configured as a standard output.
Input Data
Instance
Hex(De-
cimal)
Module Connection
Type
Explicit Messages
Explicit messaging can also be used to read individual channel status
for safety inputs, safety outputs, test outputs, and power status.
Communication error settings can also be configured and monitored
for test outputs as well.
Reading the Cause of the Safety Input Error
Explicit
Message
Service Function Command (hex) Response (hex)
Service
Code
Class
ID
Instance
ID
Attribute
ID
Data Size
Safety Input
Cause of
Error (Fault)
Information
Read
Get
Attribute
Single
Reads the cause
for the status bit
(1n), specified
by the Instance ID,
turning OFF.
0E 3D 01n 6E - 0: No error
01: Configuration invalid
02: External test signal error
03:Internal input error
04: Discrepancy error
05: Error in the other dual
channel input
Reading the Cause of the Safety Output Error
Explicit
Message
Service
Code
Class
ID
Instance
ID
Attribute
ID
Data Size
Safety Output
Cause of
Error (Fault)
Information
Get
Attribute
Single
Reads the cause
for the status bit
(1n) , specified
by the Instance ID,
turning OFF.
0E 3B 01n 6E - 0: No error
01:
Configuration invalid
02:
Over current detected
03:
Short circuit detected
04:
Output ON error
05:
Error in the other dual channel
output
08:
Output data error
09:
Short circuit detected at
safety output

Monitoring the Test Output Point
Explicit
Message
Service
Code
Class
ID
Instance
ID
Attribute
ID
Data
Size
Test Output
Cause of Error
(Fault)
Information
Get Attribute
Single
Reads the cause for
the status bit (1n),
specified by the
Instance ID, turning
OFF.
0E 09 01n 76 - 0 = No error
01:
Configuration invalid
02:
Overload detected
05:
Output ON error
06:
Undercurrent detected for
muting lamp
Setting Hold/Clear for Communication Errors (Test Output)
Explicit
Message
Service Function Command (hex) Response
(hex)
Service
Code
Class
ID
Instance
ID
Attribute
ID
Data Size
Setting for
Output State
(Hold or Clear)
after
Communication
Error
Get
Attribute
Single
Reads whether hold or clear is set as
the output state after a
communication error for a test output
specified by the instance ID. The
setting can be read for a specified
number of points.
0E 09 0108 05 - 1 byte
00: Clear
01: Hold
Setting for
Output State
(Hold or Clear)
after
Communication
Error
Set
Attribute
Single
Sets whether hold or clear as the
output status after a communication
error for an output specified by the
instance ID. Sets whether a test
output should hold its state or clear
(turn off) after a communication error.
10 09 0108 05 1 byte
00: Clear
01: Hold
Notes:
Appendix B
Probability of Failure on Demand (PFD),
Probability of Failure per Hour (PFH), and
Mean Time Between (MTBF) Data
What This Appendix
Contains
This appendix lists calculated values for probability of failure on
demand, probability of failure per hour, and mean time between
failure.
Calculated Values
See the table that shows the values. Reference information in the
GuardLogix Controller Systems Safety Reference Manual,
publication 1756-RM093.
Calculated values of probability of failure on demand and probability
of failure per hour appear in the table and must be calculated for the
devices within the system to comply with the SIL level required for
application.
Within the proof test interval, every I/O module must be functionally
tested by individually toggling each input point and verifying that it is
detected by the controller.
Additionally, each output point must be individually toggled by the
controller and user-verified that the output point changes state.
96 Probability of Failure on Demand (PFD), Probability of Failure per Hour (PFH), and Mean Time Between (MTBF) Data
Calculated Values for Probability of Failure on Demand (PFD), Probability of
Failure per Hour (PFH), and Mean Time Between Failure (MTBF)

PFD vs Proof Test Interval
1.00E-07
1.00E-06
1.00E-05
1.00E-04
1.00E-03
1.00E-02
0 1 2 3 4 5 6 7 8 9 10 11
Proof Test Interval [years]
PFD
1% of SIL 3 Limit
10% of SIL 3 Limit
SIL 3 Limit
1% of SIL 2 Limit
Model Proof Test Interval PFD (1/hour) PFH (1/hour) MTBF (hour)
Year Hour
1791ES-IB16 1 8760 8.27E-07 1.89E-10 2.76E+06
2 17520 1.65E-06
5 43800 4.14E-06
10 87600 8.27E-06
1791ES-IB8XOBV4 1 8760 8.51E-07 1.94E-10 2.55E+06
2 17520 1.70E-06
5 43800 4.26E-06
10 87600 8.51E-06
Appendix C
Configuration Reference Information
What This Appendix
Contains
This appendix provides information about configuration settings.
Understand Parameter
Groups
The modules have these parameter groups: general parameters, safety
input, test output, safety output.
See the tables for the settings in each parameter group. All parameters
are set using RSLogix 5000 software.
General Parameters
Safety Output Error Latch Time 065,530 ms
(in increments of 10 ms)
Safety output errors are latched for this time. 1000 ms
Safety Input Error Latch Time 065,530 ms
(in increments of 10 ms)
Safety input or test output errors are latched for this time. 1000 ms
Safety Input Parameters
Parameter Name Value Description
Input Point Operation Type Single Channel Use as single channel.
Dual-channel Equivalent Use as dual-channel. Normal when both channels are ON or OFF.
Dual-channel
Complementary
Use as dual-channel. Normal when one channel is ON and the other channel
is OFF.
Input Point Mode Not Used External input device is not connected.
Safety Test Pulse Use with a contact output device and in combination with a test output.
Using this setting, short-circuits between input signal lines and the power
supply (positive side) and short-circuits between input signal lines can be
detected.
Safety A solid-state output safety sensor is connected.
Standard A standard device, such as a reset switch, is connected.
Safety Input Test Source Not Used The test output that is used with the input.
n is dependent on the module catalog number.
Test Output 0 to n
Input Delay Time
Off -> On
0126 ms (in
increments of 6 ms)
Filter time for OFF to ON transition
Input Delay Time
On -> Off
0126 ms (in
increments of 6 ms)
Filter time for ON to OFF transition
IMPORTANT
When configuring a test output for Pulse Test mode, verify the
corresponding safety input is configured for safety pulse test.
98 Configuration Reference Information
Test Output Parameters
Test Output Mode Not Used An external device is not connected. Not Used
Standard The output is connected to a standard device.
Pulse Test A contact output device is connected. Use in combination
with a safety input.
Power Supply The power supply of a Safety Sensor is connected. The
voltage supplied to I/O power (V, G) is output from the test
output terminal.
Muting Lamp Output
(Terminal T3 or T7 only)
An indicator is connected and turned ON to detect broken
lines in an external indicator.
Safety Output Parameters
Output Point Mode Not Used An external output devices is not connected. Not Used
Safety When the output is ON, the test pulse is not output (remains
ON).
Safety Pulse Test Using this function, short-circuits between output signal lines
and the power supply (positive side) and short-circuits between
output signal lines can be detected.
Output Point Operation Type Single Channel Use as single channel. Dual-channel
Dual-channel Use as dual-channel. When both channels are normal, outputs
can be turned ON.
Configuration Reference Information 99

Safety and Standard Data
Data Description
Input data Safety Input Data
Safety
Indicates the ON/OFF status of each input circuit.
ON: 1
OFF: 0
Combined Safety Input Status
Safety
An AND of the status of all input circuits.
An error was detected in one or more input circuits: 0
Individual Safety Input Status
Safety
Indicates the status of each input circuit.
Normal: 1
Fault (Alarm): 0
Combined Safety Output Status
Safety
An AND of the status of all safety output circuits.
An error has been detected in one or more output circuits: 0
Individual Safety Output Status
Safety
Indicates the status of each safety output circuit.
Normal: 1
Fault (Alarm): 0
Muting Lamp Status
Safety
Indicates the status when circuit T3 is configured as the muting lamp output.
Normal: 1
Fault (Alarm): 0
Safety Output Monitor
Standard
Monitors the outputs of the safety output circuits.
ON: 1
OFF: 0
Standard
Indicates the status of each of the test output circuits.
Normal: 1
Fault (Alarm): 0
Output data Safety Output Data
Safety
Controls the safety output.
ON: 1
OFF: 0
Standard Output Data
Standard
Controls the test output when test output mode is set to a standard output.
ON: 1
OFF: 0
100 Configuration Reference Information
Notes:
Index
A
about catalog numbers 15
additional resources 9
administrator, safety 11
architectures, safety 16
B
before you begin 11
BootP/DHCP 38
C
catalog numbers 15
certification 32
cleaning 14
common terms 10
compliance with EC directive 34
configuration
reference information 97
settings 97
configure the module 49
conformity
codes 11
regulations 11
standards 11
controlling devices 31
conventions used in this manual 9
D
dialog
General 51
Input Configuration 62
Output Configuration 66
Safety 58
Test Output Configuration 65
DIN rail 14
directives 33
discrepancy time 24
door interlocking switches 31
dual-load bipolar outputs 47
dynamic host configuration protocol 38
E
EC directives 14
electronic data sheet 10
EMC directives 34
emergency stop switch 31, 41
Europe 33
F
fault recovery 28, 30
forcibly-guided contacts 31
G
get point status information 73
glossary 10
Guardmaster product 31
H
help button 49
how to use this manual 9
I
I/O
configuration tree 49
module overview 14
input configuration dialog 62
international standards 32
IP address 38
J
Japan 33
L
legislation 32
limit switches 31
M
mean time between failure 10, 95
model types 15
module properties dialog 51
mounting 14
MTBF
See mean time between failure.
muting lamp output wiring 44
N
network (IP) address 37
node address setting 37
North America 33
102 Index
O
ODVA 10, 32
off-delay function 28
on-delay function 28
out-of-box condition 35
output configuration dialog 66
P
parameter groups 97
PFD
See probability of failure on demand.
PFH
See probability of failure per hour.
point status information 73
precautions for use 12
probability of failure on demand 10, 95
probability of failure per hour 10, 95
publications, related 9
R
related publications 9
replace units 32
replacement stock 35
rotary switches 37
RSLogix 5000 software 49
S
safety architectures 16
safety dialog 58
safety functions
safety input 20
safety output 29
safety network number 10, 51
safety precautions 32
self-diagnostics 19
set network (IP) address 37
SNN
See safety network number.
standards 33
T
terminology 10
test output
configuration dialog 65
transport control protocol 38
two-hand monitor 42
U
understand the operation of safety
functions 19
V
ventilation 14
W
who should use this manual 9
wire the module 14
wiring examples 39
Index 103
Notes:
Publication 1791ES-UM001C-EN-P - April 2009 108
Supersedes Publication 1791DS-UM001B-EN-P - June 2008 Copyright 2009 Rockwell Automation, Inc. All rights reserved. Printed in the U.S.A.
Rockwell Automation
Support
Rockwell Automation provides technical information on the Web to assist you in
using its products. At http://support.rockwellautomation.com, you can find technical
manuals, a knowledge base of FAQs, technical and application notes, sample code and
links to software service packs, and a MySupport feature that you can customize to
make the best use of these tools.
For an additional level of technical phone support for installation, configuration, and
troubleshooting, we offer TechConnect Support programs. For more information,
contact your local distributor or Rockwell Automation representative, or visit
http://support.rockwellautomation.com.
Installation Assistance
If you experience a problem with a hardware module within the first 24 hours of
installation, please review the information that's contained in this manual. You can
also contact a special Customer Support number for initial help in getting your module
up and running.
New Product Satisfaction Return
Rockwell tests all of its products to ensure that they are fully operational when shipped
from the manufacturing facility. However, if your product is not functioning, it may
need to be returned.
United States 1.440.646.3434
Monday Friday, 8 a.m. 5 p.m. EST
Outside United
States
Please contact your local Rockwell Automation representative for any
technical support issues.
United States Contact your distributor. You must provide a Customer Support case
number (see phone number above to obtain one) to your distributor in
order to complete the return process.
Outside United
States
Please contact your local Rockwell Automation representative for
return procedure.

Guard I/O Ethernet/Ip Safety Modules: 1791Es-Ib8Xobv4, 1791Es-Ib16

Uploaded by

Copyright:

Available Formats

Guard I/O Ethernet/Ip Safety Modules: 1791Es-Ib8Xobv4, 1791Es-Ib16

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Guard I/O Ethernet/Ip Safety Modules: 1791Es-Ib8Xobv4, 1791Es-Ib16

Uploaded by

Copyright:

Available Formats

User Manual

(Catalog Numbers 1791ES-IB8XOBV4, 1791ES-IB16)

You might also like