Control

The Emergency Stop switch, written into the simulated emergency stop device. The device drives its own interlock and contactor 1, the EMS reads both over Modbus and stops every operation while the switch is at STOP. The page shows what the devices report, not what was clicked.

Unknown — device not readable

Device state: UNKNOWN · switch position — · contactor 1 UNKNOWN · read at 21:10:40

Only the switch register is written. Opening the contactor, releasing it, the EMS shutdown and the EMS recovery are consequences the device and the EMS reach for themselves, so this page can never disagree with the hardware it simulates.

Emergency stop device

The emergency stop device could not be found: the EMS settings named no register file for it and the simulator is not serving one either.

Contactor 1

The contactor 1 device could not be found: the EMS settings named no register file for it and the simulator is not serving one either.

What the switch does

  1. STOP. The switch register is written to 0. The emergency stop device activates, then opens contactor 1, then publishes its permissive so nothing may close it again while the switch is at STOP. The EMS sees the device over Modbus and stops every operational mode, charging and discharging, and refuses new start, power and mode commands until the switch is ON.
  2. ON. The switch register is written to 1. The device clears its emergency stop only when the switch is ON, its wiring is healthy and the interlocks permit; only then is the permissive set and contactor 1 closed. The EMS returns to IDLE and waits for a new start command.
  3. Recovery is never automatic. Releasing the emergency stop does not restart the mode that was running before it; the operator starts it again deliberately.
  4. When the state cannot be read. Contactor 1 stays open and the EMS blocks new power operations rather than assuming normal operation.

This switch is a software switch for integration and testing. In a real BESS installation the emergency stop must be an independent, appropriately rated, fail-safe hardware circuit. The EMS guard is additional protection and does not replace that circuit.

Live state is read from the devices every 2000 ms.