Basic
10 min

Pump Alternation (Duty/Standby)

pumpsalternationduty-standbywaterfault
Pump Alternation (Duty/Standby) scenario preview

Ready to build this?

Sign up free — no credit card required. This scenario requires the Basic plan.

Sign up to play this scenario →

Already have an account? Log in

Briefing

A water/wastewater lift station uses two pumps in a duty/standby arrangement. The duty (lead) pump starts whenever the tank reaches the high level and stops when it drains to the low level. After each completed pump cycle the duty assignment swaps so both pumps accumulate equal runtime. If the duty pump fails (PUMP1_FAULT or PUMP2_FAULT asserted) the standby pump takes over immediately. If both pumps fault simultaneously, COMMON_FAULT latches and stays on until RESET_PB is pressed with both faults cleared.

Objectives

  • LEVEL_HIGH starts the duty pump; it keeps running until LEVEL_LOW stops it (hysteresis latch)
  • After each completed pump-down cycle (tank drained to LEVEL_LOW) the duty pump alternates: Pump 1 → Pump 2 → Pump 1 …
  • PUMP1_FAULT causes Pump 2 to become active immediately
  • PUMP2_FAULT causes Pump 1 to become active immediately
  • Both faults simultaneously latches COMMON_FAULT (cleared by RESET_PB once both faults clear)
  • PUMP1_LAMP and PUMP2_LAMP mirror their respective RUN outputs

Hints

  • Latch the pumping demand: SET a PUMP_DEMAND bit on LEVEL_HIGH, RESET it on LEVEL_LOW — gating the pump on LEVEL_HIGH alone makes it chatter at the high float
  • Use a DUTY_IS_2 bit (T-flipflop) that toggles on every rising edge of LEVEL_LOW (end of a pump-down cycle)
  • Effective duty: if DUTY_IS_2=0 → PUMP1 runs (unless PUMP1_FAULT, then PUMP2 takes over)
  • COMMON_FAULT: SET when PUMP1_FAULT AND PUMP2_FAULT; R= when RESET_PB AND NOT PUMP1_FAULT AND NOT PUMP2_FAULT
  • RUN output: PUMP1_RUN := PUMP_DEMAND AND (NOT DUTY_IS_2 OR PUMP2_FAULT) AND NOT PUMP1_FAULT AND NOT COMMON_FAULT
  • PUMP1_LAMP := PUMP1_RUN; PUMP2_LAMP := PUMP2_RUN

I/O Table

Inputs

LEVEL_HIGH

High level float switch (tank >90%)

BOOL · %I0.0

LEVEL_LOW

Low level float switch (tank <20%)

BOOL · %I0.1

PUMP1_FAULT

Pump 1 fault / overload

BOOL · %I0.2

PUMP2_FAULT

Pump 2 fault / overload

BOOL · %I0.3

RESET_PB

Common fault reset push-button

BOOL · %I0.4

Outputs

PUMP1_RUN

Pump 1 run contactor

BOOL · %Q0.0

PUMP2_RUN

Pump 2 run contactor

BOOL · %Q0.1

PUMP1_LAMP

Pump 1 running indicator lamp

BOOL · %Q0.2

PUMP2_LAMP

Pump 2 running indicator lamp

BOOL · %Q0.3

COMMON_FAULT

Common fault latch lamp/relay

BOOL · %Q0.4

Your program will be tested against:

All test cases run automatically when you submit. Assertions are hidden until you pass.

  1. #1Pump 1 (duty) starts on LEVEL_HIGH

    With no faults and tank rising, PUMP1_RUN asserts when physics raises LEVEL_HIGH

  2. #2Duty pump stops on LEVEL_LOW

    Once running, the pump stops when physics lowers the level to LEVEL_LOW

  3. #3Duty pump alternates after each cycle

    After one complete cycle (LEVEL_HIGH → LEVEL_LOW), Pump 2 becomes duty

  4. #4PUMP1_FAULT causes Pump 2 to take over

    When Pump 1 is duty and faults, Pump 2 starts immediately

  5. #5Both faults latch COMMON_FAULT

    PUMP1_FAULT AND PUMP2_FAULT simultaneously latches COMMON_FAULT; RESET_PB clears it

Ready to build this?

Sign up free — no credit card required. This scenario requires the Basic plan.

Sign up to play this scenario →

Already have an account? Log in

Runnable simulator field guide

Pump alternation PLC scenario: implementation, evidence and troubleshooting

Direct answer

Pump alternation PLC scenario becomes useful when it connects process demand, start and stop thresholds, hysteresis, duty state, alternation trigger, pump availability, command, run and flow proof, minimum on and off time, failover, alarm, manual mode and restart with level, pressure or schedule demand through hysteresis and duty selection to pump command, starter or drive response, run and flow feedback, process change, alarm and next-duty memory, then proves successive completed demand cycles alternate available pumps while each start obtains proof and each stop returns to a known state under normal, boundary, fault and recovery conditions. The objective is a repeatable engineering or learning result, not merely activity inside a page or tool.

This guide is written for pLC and process learners implementing lead rotation for two pumps with demand, availability, run proof, failover, minimum timing, alarms and manual controls. The intended result is specific: the learner can explain when duty changes, prove that only eligible equipment is selected and recover from a failed lead without losing demand control.

an instructor and technician validating chiller and duty-standby pump control on a stainless process training rig with visible instruments and feedback while studying duty-standby pump alternation, failover and evidence
The scene keeps duty-standby pump alternation, failover and evidence connected to a declared operating condition, observable evidence, safe boundaries and a result another person can reproduce.

System map / 02

Six concepts that control the result

Treat these as connected checkpoints. Each checkpoint has an expected state, an observable state and a boundary to the next part of the system. That structure prevents a software indication from being mistaken for physical proof.

NODE 01observable

Define the operating contract

process demand, start and stop thresholds, hysteresis, duty state, alternation trigger, pump availability, command, run and flow proof, minimum on and off time, failover, alarm, manual mode and restart. For duty-standby pump alternation, failover and evidence, record the initial condition, actor, requested change, observable result and stopping condition before selecting a tool or implementation.

NODE 02observable

Map the evidence path

level, pressure or schedule demand through hysteresis and duty selection to pump command, starter or drive response, run and flow feedback, process change, alarm and next-duty memory. Separate request, internal state, output or service, physical or user-visible result and independent feedback so each boundary can be inspected.

NODE 03observable

Prove normal operation

successive completed demand cycles alternate available pumps while each start obtains proof and each stop returns to a known state. Run more than one cycle from a known state and retain the values, timings or artifacts that demonstrate repeatability.

NODE 04observable

Exercise a boundary case

failed duty, unavailable standby, simultaneous demand, sensor chatter, no-flow proof, short cycling, manual override, alarm reset and power return. Choose minimum, maximum, simultaneous, delayed or restart conditions that reveal assumptions hidden by the happy path.

NODE 05observable

Diagnose a controlled fault

a demand, threshold, duty-memory, availability, selection, command, starter, pump, feedback, process, alarm or restart mismatch. Preserve the first symptom, divide the system at a measurable boundary and change one condition only after predicting the result.

NODE 06observable

Transfer and hand over

the sequence verified with target PLC, actual hydraulic system, equipment constraints, protection and approved operating and functional-test procedures. Restore normal state, remove temporary changes, repeat affected checks and document which claims remain limited to the learning environment.

Procedure / 03

A six-step practice and commissioning workflow

Run the steps in order the first time. Later, the same structure becomes a diagnostic loop: define the expected condition, observe the boundary, interpret the difference and choose one proving action.

  1. 01

    Write the acceptance case

    Convert process demand, start and stop thresholds, hysteresis, duty state, alternation trigger, pump availability, command, run and flow proof, minimum on and off time, failover, alarm, manual mode and restart into initial conditions, one stimulus and observable pass criteria.

    Evidence: Another person can repeat the case without guessing the intended result.

    Avoid: Using page completion or an animation as the acceptance criterion.

  2. 02

    Build the map

    Document level, pressure or schedule demand through hysteresis and duty selection to pump command, starter or drive response, run and flow feedback, process change, alarm and next-duty memory and name who owns each state or decision.

    Evidence: Every request and result has a source, destination and useful inspection point.

    Avoid: Using the same value as command, status and independent feedback.

  3. 03

    Run the baseline

    Apply successive completed demand cycles alternate available pumps while each start obtains proof and each stop returns to a known state from a clean start and record the expected evidence.

    Evidence: Repeated runs produce the same bounded result.

    Avoid: Changing several parameters before a baseline exists.

  4. 04

    Challenge assumptions

    Test failed duty, unavailable standby, simultaneous demand, sensor chatter, no-flow proof, short cycling, manual override, alarm reset and power return without changing the acceptance contract.

    Evidence: Limits, timing and restart behavior reach defined states.

    Avoid: Testing only one ideal sequence.

  5. 05

    Isolate one failure

    Introduce or analyse a demand, threshold, duty-memory, availability, selection, command, starter, pump, feedback, process, alarm or restart mismatch and locate the first disagreement.

    Evidence: The proving action distinguishes the leading hypotheses.

    Avoid: Resetting, forcing or replacing before evidence is retained.

  6. 06

    Close the evidence loop

    Complete the sequence verified with target plc, actual hydraulic system, equipment constraints, protection and approved operating and functional-test procedures and repeat the affected regression cases.

    Evidence: A run is complete only when the requested behavior, stop behavior, fault response and recovery are observable from a fresh initial condition.

    Avoid: Treating an acknowledged message or one successful rerun as handover.

Diagnostic matrix / 04

Symptoms, proving points and next actions

The table is a reasoning aid, not a parts-replacement chart. Preserve the initial symptom, inspect the named boundary and use the interpretation to choose the next controlled test. Site safety procedures and equipment manuals remain authoritative.

Diagnostic symptoms, inspection points, interpretations and next actions for Pump alternation PLC scenario: implementation, evidence and troubleshooting
Observed symptomInspectInterpretationNext proving action
The expected result is unclearRequirement, initial state, actor, stimulus, units and pass conditionThe operator, programmer and reviewer may be solving different versions of the task.Rewrite one observable acceptance case before continuing.
Internal state changes but the outcome does notRequest, final owner, output or service boundary and independent feedbackA software or interface indication proves intent at one layer, not the complete outcome.Trace the first boundary after the changing state.
Normal case passes but an edge case failsLimits, timing, simultaneous events, reset and restart assumptionsThe implementation contains a hidden assumption exposed by the changed condition.Add the failed boundary as a permanent regression case.
The failure disappears after resetOriginal symptom, histories, diagnostics, timestamps and active causeReset changed evidence or state without proving the initiating cause.Reproduce under a controlled condition and preserve pre/post-event data.
Simulator and target disagreeModel boundary, software version, task timing, I/O behavior, data types and configurationA learning model and the intended target do not share one of the recorded assumptions.Reduce the case and verify against current target documentation.
The result cannot be explainedPrediction, observation, proving action, alternative hypotheses and limitationsActivity occurred but the evidence is not yet transferable or reviewable.Have the learner defend the signal path and repeat a changed case.

Product evidence / 05

What the browser practice can actually demonstrate

The browser runtime joins editable control state to visible I/O and machine or process behavior, allowing the same initial conditions and stimuli to be replayed.

Where simulation stops

The model cannot size pumps or piping, predict hydraulics, validate protection or process risk, or commission real starters, drives, valves and instruments.

Commissioning notebook / 06

Six cases that turn the concepts into evidence

Use these as written briefs rather than click-through instructions. For every case, state the expected condition before acting, retain the first useful observation and explain why the final result proves the requirement. A different program or component choice can still be correct when it produces the same bounded behavior and evidence.

Case 01

predict → observe → prove

Prove define the operating contract

Engineering context. process demand, start and stop thresholds, hysteresis, duty state, alternation trigger, pump availability, command, run and flow proof, minimum on and off time, failover, alarm, manual mode and restart. For duty-standby pump alternation, failover and evidence, record the initial condition, actor, requested change, observable result and stopping condition before selecting a tool or implementation. Begin with a written normal condition and identify which request, state, physical result or communication value will provide independent confirmation. Do not begin by changing the configuration; the initial state is part of the evidence and should remain reproducible.

Controlled setup. Use the “Write the acceptance case” stage of the workflow: convert process demand, start and stop thresholds, hysteresis, duty state, alternation trigger, pump availability, command, run and flow proof, minimum on and off time, failover, alarm, manual mode and restart into initial conditions, one stimulus and observable pass criteria. The acceptance record should show this result: another person can repeat the case without guessing the intended result. Record initial conditions, the exact stimulus and the observation point so another learner can repeat the case without relying on your memory.

Fault challenge. Introduce or analyse “The expected result is unclear” as one bounded deviation. Inspect requirement, initial state, actor, stimulus, units and pass condition The working interpretation is that the operator, programmer and reviewer may be solving different versions of the task. The next proving action is to rewrite one observable acceptance case before continuing. Change only one condition before observing the result, and preserve timestamps or measurements where timing matters.

Review and recovery. The most common trap here is using page completion or an animation as the acceptance criterion. After restoring the cause, repeat the normal case and at least one stop, timeout, disconnect or restart boundary relevant to this topic. Remove temporary forces and bypasses, return the model to a known state and retain the evidence that both operation and recovery are deliberate.

Explain it aloud: How do you alternate two pumps with a PLC? A defensible short answer is: Retain a duty state, change it at a declared event such as successful cycle completion, skip unavailable equipment and require command and process proof.

Case 02

predict → observe → prove

Prove map the evidence path

Engineering context. level, pressure or schedule demand through hysteresis and duty selection to pump command, starter or drive response, run and flow feedback, process change, alarm and next-duty memory. Separate request, internal state, output or service, physical or user-visible result and independent feedback so each boundary can be inspected. Begin with a written normal condition and identify which request, state, physical result or communication value will provide independent confirmation. Do not begin by changing the configuration; the initial state is part of the evidence and should remain reproducible.

Controlled setup. Use the “Build the map” stage of the workflow: document level, pressure or schedule demand through hysteresis and duty selection to pump command, starter or drive response, run and flow feedback, process change, alarm and next-duty memory and name who owns each state or decision. The acceptance record should show this result: every request and result has a source, destination and useful inspection point. Record initial conditions, the exact stimulus and the observation point so another learner can repeat the case without relying on your memory.

Fault challenge. Introduce or analyse “Internal state changes but the outcome does not” as one bounded deviation. Inspect request, final owner, output or service boundary and independent feedback The working interpretation is that a software or interface indication proves intent at one layer, not the complete outcome. The next proving action is to trace the first boundary after the changing state. Change only one condition before observing the result, and preserve timestamps or measurements where timing matters.

Review and recovery. The most common trap here is using the same value as command, status and independent feedback. After restoring the cause, repeat the normal case and at least one stop, timeout, disconnect or restart boundary relevant to this topic. Remove temporary forces and bypasses, return the model to a known state and retain the evidence that both operation and recovery are deliberate.

Explain it aloud: What happens if the duty pump fails? A defensible short answer is: A defined sequence should remove or alarm the failed command, confirm standby eligibility, start the standby when permitted and preserve evidence of the initiating failure.

Case 03

predict → observe → prove

Prove prove normal operation

Engineering context. successive completed demand cycles alternate available pumps while each start obtains proof and each stop returns to a known state. Run more than one cycle from a known state and retain the values, timings or artifacts that demonstrate repeatability. Begin with a written normal condition and identify which request, state, physical result or communication value will provide independent confirmation. Do not begin by changing the configuration; the initial state is part of the evidence and should remain reproducible.

Controlled setup. Use the “Run the baseline” stage of the workflow: apply successive completed demand cycles alternate available pumps while each start obtains proof and each stop returns to a known state from a clean start and record the expected evidence. The acceptance record should show this result: repeated runs produce the same bounded result. Record initial conditions, the exact stimulus and the observation point so another learner can repeat the case without relying on your memory.

Fault challenge. Introduce or analyse “Normal case passes but an edge case fails” as one bounded deviation. Inspect limits, timing, simultaneous events, reset and restart assumptions The working interpretation is that the implementation contains a hidden assumption exposed by the changed condition. The next proving action is to add the failed boundary as a permanent regression case. Change only one condition before observing the result, and preserve timestamps or measurements where timing matters.

Review and recovery. The most common trap here is changing several parameters before a baseline exists. After restoring the cause, repeat the normal case and at least one stop, timeout, disconnect or restart boundary relevant to this topic. Remove temporary forces and bypasses, return the model to a known state and retain the evidence that both operation and recovery are deliberate.

Explain it aloud: What should I learn first about duty-standby pump alternation, failover and evidence? A defensible short answer is: Start with the operating contract and evidence path: process demand, start and stop thresholds, hysteresis, duty state, alternation trigger, pump availability, command, run and flow proof, minimum on and off time, failover, alarm, manual mode and restart, followed by level, pressure or schedule demand through hysteresis and duty selection to pump command, starter or drive response, run and flow feedback, process change, alarm and next-duty memory. Add advanced features only after the baseline is predictable.

Case 04

predict → observe → prove

Prove exercise a boundary case

Engineering context. failed duty, unavailable standby, simultaneous demand, sensor chatter, no-flow proof, short cycling, manual override, alarm reset and power return. Choose minimum, maximum, simultaneous, delayed or restart conditions that reveal assumptions hidden by the happy path. Begin with a written normal condition and identify which request, state, physical result or communication value will provide independent confirmation. Do not begin by changing the configuration; the initial state is part of the evidence and should remain reproducible.

Controlled setup. Use the “Challenge assumptions” stage of the workflow: test failed duty, unavailable standby, simultaneous demand, sensor chatter, no-flow proof, short cycling, manual override, alarm reset and power return without changing the acceptance contract. The acceptance record should show this result: limits, timing and restart behavior reach defined states. Record initial conditions, the exact stimulus and the observation point so another learner can repeat the case without relying on your memory.

Fault challenge. Introduce or analyse “The failure disappears after reset” as one bounded deviation. Inspect original symptom, histories, diagnostics, timestamps and active cause The working interpretation is that reset changed evidence or state without proving the initiating cause. The next proving action is to reproduce under a controlled condition and preserve pre/post-event data. Change only one condition before observing the result, and preserve timestamps or measurements where timing matters.

Review and recovery. The most common trap here is testing only one ideal sequence. After restoring the cause, repeat the normal case and at least one stop, timeout, disconnect or restart boundary relevant to this topic. Remove temporary forces and bypasses, return the model to a known state and retain the evidence that both operation and recovery are deliberate.

Explain it aloud: How do I practise duty-standby pump alternation, failover and evidence effectively? A defensible short answer is: Use short cases with known initial conditions, a written prediction, one action and an observable result. Then alter a boundary or fault and explain why the evidence changed.

Case 05

predict → observe → prove

Prove diagnose a controlled fault

Engineering context. a demand, threshold, duty-memory, availability, selection, command, starter, pump, feedback, process, alarm or restart mismatch. Preserve the first symptom, divide the system at a measurable boundary and change one condition only after predicting the result. Begin with a written normal condition and identify which request, state, physical result or communication value will provide independent confirmation. Do not begin by changing the configuration; the initial state is part of the evidence and should remain reproducible.

Controlled setup. Use the “Isolate one failure” stage of the workflow: introduce or analyse a demand, threshold, duty-memory, availability, selection, command, starter, pump, feedback, process, alarm or restart mismatch and locate the first disagreement. The acceptance record should show this result: the proving action distinguishes the leading hypotheses. Record initial conditions, the exact stimulus and the observation point so another learner can repeat the case without relying on your memory.

Fault challenge. Introduce or analyse “Simulator and target disagree” as one bounded deviation. Inspect model boundary, software version, task timing, I/O behavior, data types and configuration The working interpretation is that a learning model and the intended target do not share one of the recorded assumptions. The next proving action is to reduce the case and verify against current target documentation. Change only one condition before observing the result, and preserve timestamps or measurements where timing matters.

Review and recovery. The most common trap here is resetting, forcing or replacing before evidence is retained. After restoring the cause, repeat the normal case and at least one stop, timeout, disconnect or restart boundary relevant to this topic. Remove temporary forces and bypasses, return the model to a known state and retain the evidence that both operation and recovery are deliberate.

Explain it aloud: What counts as proof of competence? A defensible short answer is: A repeatable artifact or system result plus an explanation of the signal path is stronger than time spent, screenshots or a copied answer. Physical competence requires separate supervised evidence.

Case 06

predict → observe → prove

Prove transfer and hand over

Engineering context. the sequence verified with target PLC, actual hydraulic system, equipment constraints, protection and approved operating and functional-test procedures. Restore normal state, remove temporary changes, repeat affected checks and document which claims remain limited to the learning environment. Begin with a written normal condition and identify which request, state, physical result or communication value will provide independent confirmation. Do not begin by changing the configuration; the initial state is part of the evidence and should remain reproducible.

Controlled setup. Use the “Close the evidence loop” stage of the workflow: complete the sequence verified with target plc, actual hydraulic system, equipment constraints, protection and approved operating and functional-test procedures and repeat the affected regression cases. The acceptance record should show this result: a run is complete only when the requested behavior, stop behavior, fault response and recovery are observable from a fresh initial condition. Record initial conditions, the exact stimulus and the observation point so another learner can repeat the case without relying on your memory.

Fault challenge. Introduce or analyse “The result cannot be explained” as one bounded deviation. Inspect prediction, observation, proving action, alternative hypotheses and limitations The working interpretation is that activity occurred but the evidence is not yet transferable or reviewable. The next proving action is to have the learner defend the signal path and repeat a changed case. Change only one condition before observing the result, and preserve timestamps or measurements where timing matters.

Review and recovery. The most common trap here is treating an acknowledged message or one successful rerun as handover. After restoring the cause, repeat the normal case and at least one stop, timeout, disconnect or restart boundary relevant to this topic. Remove temporary forces and bypasses, return the model to a known state and retain the evidence that both operation and recovery are deliberate.

Explain it aloud: Why test faults and restart behavior? A defensible short answer is: Because a demand, threshold, duty-memory, availability, selection, command, starter, pump, feedback, process, alarm or restart mismatch or failed duty, unavailable standby, simultaneous demand, sensor chatter, no-flow proof, short cycling, manual override, alarm reset and power return can expose assumptions that never appear during ideal startup and steady operation.

Answer surface / 07

Questions people ask about Pump alternation PLC scenario

These concise answers define the operating, training and product boundaries most often missed in broad summaries. The full workflow and diagnostic table above provide the evidence behind them.

How do you alternate two pumps with a PLC?

Retain a duty state, change it at a declared event such as successful cycle completion, skip unavailable equipment and require command and process proof.

What happens if the duty pump fails?

A defined sequence should remove or alarm the failed command, confirm standby eligibility, start the standby when permitted and preserve evidence of the initiating failure.

What should I learn first about duty-standby pump alternation, failover and evidence?

Start with the operating contract and evidence path: process demand, start and stop thresholds, hysteresis, duty state, alternation trigger, pump availability, command, run and flow proof, minimum on and off time, failover, alarm, manual mode and restart, followed by level, pressure or schedule demand through hysteresis and duty selection to pump command, starter or drive response, run and flow feedback, process change, alarm and next-duty memory. Add advanced features only after the baseline is predictable.

How do I practise duty-standby pump alternation, failover and evidence effectively?

Use short cases with known initial conditions, a written prediction, one action and an observable result. Then alter a boundary or fault and explain why the evidence changed.

What counts as proof of competence?

A repeatable artifact or system result plus an explanation of the signal path is stronger than time spent, screenshots or a copied answer. Physical competence requires separate supervised evidence.

Why test faults and restart behavior?

Because a demand, threshold, duty-memory, availability, selection, command, starter, pump, feedback, process, alarm or restart mismatch or failed duty, unavailable standby, simultaneous demand, sensor chatter, no-flow proof, short cycling, manual override, alarm reset and power return can expose assumptions that never appear during ideal startup and steady operation.

Can browser practice replace official software or hardware?

No. It can build concepts and diagnostic reasoning. Exact firmware, I/O electrical behavior, networking, safety and commissioning require current official tools, documentation and target equipment.

How should progress be documented?

Keep the requirement, initial state, program or configuration, observed values, fault hypothesis, proving action, recovery result and a concise limitations statement.

Real plc pump alternation footage

See this exact skill in the working simulator.

Watch the real browser product respond to the task on this page, then try the same practical workflow yourself. No slides, concept mockups, install, or credit card.

Try this in the browser
PLC Pump Alternation — Duty and Standby Control