LADX
Start free
← Resources
Practice·7 min read·

Motor control logic that survives a real plant

The rungs beyond start and stop: interlocks, permissives, run feedback and the fault that nobody plans for.

Short answer

Beyond the seal-in, a production motor needs a permissive chain that must be true to start, interlocks that stop it while running, run feedback to confirm it actually started, and a failure-to-start timer. The distinction that matters most is between a permissive, which is checked at start, and an interlock, which is checked continuously.

Safety does not run through the PLCE-StopStart / StopSafety relayrated, redundantStandard PLCnot ratedContactorThe safety path can drop the contactor on its own. The PLC cannot override it.

A seal-in starts and stops a motor. Everything else in a production rung is about what happens when something is wrong.

Permissives and interlocks are different things

A permissive must be true to start, and does not stop a running motor. Lube pressure established. Guards closed at the moment of starting.

An interlock stops the motor whenever it goes false. Overload trip. Guard opened. Downstream conveyor stopped.

Treating a permissive as an interlock produces nuisance stops. Treating an interlock as a permissive produces a machine that keeps running when it should not, which is worse.

Run feedback is not optional

Commanding a contactor is not the same as the motor turning. Without an auxiliary contact or a current sensor, a welded contact and a healthy motor look identical to the program.

Failure to start

Command the motor, start a timer, and if run feedback has not appeared within a couple of seconds, drop the command and raise a fault. Without it, a motor that cannot start is commanded indefinitely and the first symptom is a burnt coil.

Stopping is not one thing

Normal stop, fault stop and emergency stop should be distinguishable in the logic and in the alarm history. When somebody asks why the line stopped, 'it stopped' is not an answer.

Common questions

What is the difference between an interlock and a permissive?
A permissive must be true to start but does not stop a running motor: lubrication pressure established, guards closed at start. An interlock stops the motor whenever it goes false: overload trip, guard opened, downstream conveyor stopped. Confusing them produces either nuisance stops or unsafe running.
Why do I need run feedback from a motor starter?
Because commanding a contactor is not the same as the motor running. Without feedback, a welded contact, a tripped breaker or a failed contactor coil all look like a healthy motor to the program, and downstream logic proceeds as though material is moving when it is not.

Keep reading