Description
Bently Nevada 3500/33 SIL2-01-00 16-Channel Relay Module
The Bently Nevada 3500/33 SIL2-01-00 is a highly reliable, 16-channel, non-highly configurable relay module designed for integration within the Bently Nevada 3500 machinery protection system. This specific variant is engineered and certified to meet IEC 61508 Safety Integrity Level 2 (SIL 2) requirements, providing deterministic, hardware-based emergency shutdown capability or alarm annunciation for critical rotating machinery (such as steam turbines, gas compressors, and high-power pumps).
The SIL2-01-00 configuration features standard 16-channel relay outputs, utilizing a specialized functional safety termination block to ensure independent contact isolation and predictable fail-safe behavior.
Model Suffix Code Breakdown
To prevent system mismatch during hot-swaps or turnarounds, verify the exact suffix options printed on the module side label:
-
3500/33: 16-Channel Relay Module Architecture
-
SIL2: Safety Integrity Level 2 Certified Variant (requires matching functional safety backplane)
-
-01: 16-Channel Output Termination Block with functional safety terminal configurations
-
-00: Standard internal approvals / Non-hazardous location standard rating (verify regional compliance suffixes if installing in Class I Div 2 spaces)
Technical Specifications
| Parameter | Value / Specification |
| Model Number | 3500/33 SIL2-01-00 |
| Product ID Component | 149986-02 (Main Module) / 149992-01 (I/O Module) |
| Relay Channels | 16 independent Single-Pole, Double-Throw (SPDT) relays |
| Contact Type | Form C (Normally Open, Normally Closed, and Common pins) |
| Contact Ratings (Resistive) | Max 5 A at 24 V DC / 120 V AC; Max 2 A at 240 V AC |
| Switching Voltage | Max 250 V AC / 125 V DC |
| Minimum Contact Load | 10 mA at 5 V DC |
| Relay Response Time | $\le$ 15 milliseconds (from internal backplane command to contact state change) |
| Power Consumption | 6.0 W typical |
| Insulation Resistance | 100 M$\Omega$ minimum at 500 V DC |
| Dielectric Strength | 1,500 V AC RMS between contact coils and terminal circuits |
| Operating Temperature | −30 to +65 °C (−22 to +149 °F) continuous |
| Storage Temperature | −40 to +85 °C (−40 to +185 °F) |
Commercial and Logistics Status
-
Condition: New Original (Factory Sealed in anti-static ESD packaging) or tested New Surplus.
-
Warranty: 12-month comprehensive depot warranty covering parts and functional performance.
-
Availability: In stock. Standard engineering inspection and dispatch window is 1 to 2 business days.
-
Lead Time: 3 to 5 business days worldwide via expedited international couriers (DHL, FedEx, UPS).
-
Pricing Note: Prices for SIL-certified modules depend on secondary market conditions and firmware revisions. Contact our procurement team for a binding, itemized quote.
Functional Safety and Voting Logic Integration
The 3500/33 SIL2 module receives processed vibration, position, or temperature alarms directly from the 3500 system backplane via the 3500/01 Rack Configuration Software. It executes complex voting logic independent of the plant main DCS or PLC, protecting against mechanical catastrophic failure.
[ 3500/22M Transient Data Interface ]
|
+-----------------+-----------------+
| 3500 Backplane High-Speed Data Bus|
+-----------------+-----------------+
|
+------------------+------------------+
| 3500/42M or 3500/45 Monitor Cards | <-- Processes Raw Proximity/Seismic Inputs
+------------------+------------------+
|
(Over-Speed / High-Vibe Alarm)
|
+------------------+------------------+
| 3500/33 SIL2-01-00 Relay Card | <-- Computes Hardware Voting Logic
+------------------+------------------+
| | | | | |
[CH1] [CH2] [CH3] [CH4] [CH5] [CH16] <-- Form C Contacts configured for failsafe
| | | | | |
+-----+-----+-----+-----+-----+
|
(To Emergency Trip Solenoid)
Programmable Logic Configurations
Channels can be programmed individually or grouped to perform precise logical operations:
-
1oo2 (1-out-of-2): Trips the relay if either assigned monitor channel hits an alarm threshold. Optimized for high safety availability.
-
2oo3 (2-out-of-3): Triple modular redundant configuration designed to prevent nuisance or false machine trips due to a single broken proximity probe or loose field wire.
Technical and Field Constraints
Firm Requirement for SIL Backplanes
The SIL2 designated module must be mounted in a 3500 chassis utilizing the functional safety specific termination backplane.
Safety Architecture Constraint: Inserting a 3500/33 SIL2 module into a standard, non-SIL 3500/33 backplane will prevent the configuration software from verifying the loop integrity. The card will fail its self-test initialization routine, illuminate the front panel Not OK LED, and won’t drive its output contacts during an alarm state.
Energized vs. De-energized Configuration
For safety-critical emergency shutdown systems (ESD), the relays must be configured as Normally Energized (NE).
-
In an NE configuration, the relay coil remains energized during normal machine operation.
-
If a major vibration event occurs, or if the 3500 rack suffers a complete loss of 24 V DC control power, the relay coils drop out immediately, opening the contact circuit and shutting down the prime mover.
-
Always verify that current consumption profiles do not exceed the auxiliary rack power supply budget when all 16 relays are energized simultaneously.
Frequently Asked Questions
Can the 3500/33 SIL2-01-00 be hot-swapped while the machine is running?
Yes, the module supports online hot-swapping. However, removing the I/O module or the main card will break the continuity of the associated relay loops. If your output channels are wired to an active turbine trip circuit, you must bypass the trip circuit externally or put the control loop into manual override before extraction to prevent an immediate, un-intended machine shutdown.
What is the mechanical difference between standard terminal blocks and the “-01” terminal option?
The -01 terminal block option utilizes high-density, secure screw terminals optimized for wire gauges from 0.2 to 2.5 mm² (24 to 12 AWG). It is engineered with robust electrical isolation barriers between adjacent channels to handle mixed voltages (e.g., using 24 V DC on Channel 1 and 120 V AC on Channel 2) safely without electromagnetic crosstalk.
How do you clear a latching relay state after a machine trip?
If the relay logic was programmed via the 3500/01 software as “Latching,” the contacts will remain in their tripped state even if the machine stops vibrating and the monitor data falls back below the alert/danger setpoints. The state can be cleared by sending a digital reset command via the 3500/22M TDI module, shorting the external “Rack Reset” pin on the utility module backplane, or clicking the software reset button within the operator interface.
