r -

C"G -..

.r l '.

JTHE CINCINNATI GAS & ELECTRIC COMPANY., C - ''

CINCIN N ATI OHIO 4 5208

Feb. 29, 1980

C. A. BORG M AN Nvsct ents.ote

United States Nuclear Regulatory CommissionRegion III799 Roosevelt RoadGlen Ellyn, Illinois 60137

ATTN: Mr. James G. KepplerDirector

RE: WM. H. ZIMMER NUCLEAR POWER STATION - U"'T 1I.E. BULLETIN 79-27, " LOSS OF NON-C'' P

INSTRUMENTATION AND CONTROL POWER S .u4 .

DURING OPERATION, W.O. 57300, JOB E-5590,FILE # 956, DOCKET # 50-358

Gentlemen:

This letter and attachments are in response to IE Bulletin No. 79-27concerning the loss of non-lE instrumentation and control power sys-tem bus during operations. We have completed the review of the ma-jor Class lE and Non-Class lE buses and reviewed the emergency pro-cedures for loss of power to each bus as directed by the bulletin.We feel that the results of the review completely answer the con-cerns of this bulletin. The results of this review for the WM. H.ZIMMER NUCLEAR POWER STATION - UNIT 1 are summarized in the followingitems.

1. REVIEW OF CLASS lE AND NON-CLASS lE BUSES:

The scope of this review encompassed those buses which supplysafety and non-safety related systems listed in Table 8.1-2and 8.1-3 of the FSAR for the WM. H. ZIMMER NUCLEAR POWER STA-TION - UNIT 1. These buses include the 4160V medium voltagebuses, 480V unit substations and 480 volt motor control centers.The 24/48V, 125V and 250V DC systems, 120V RPS buses 120V ACinstrument buses, and the 120V AC non-essential uninterruptiblepower supplies that serve these loads are also included in thereview scope.

A. REVIEW OF ALARMS AND/OR INDICATORS IN THE CONTROL ROOM:

The results of the review of alarms and indications pro-vided in the control room are summarized in the attach-ment A. This attachment is comprised of seven (7) majorsections. Each section is dedicated to a particular sys-tem utilized to bring the reactor to a cold shutdown con-dition. The individual sections identifies a bus compon-ent and lists the alarms and/or indications provided inthe control room for a loss of power. This table dem-onstrates that the operator is provided with adequate in-

.

MAR 3 1980 80032co W .z

.i4.E. BULLETIN 79-27**

Page 2

* .

. . . .-- , - -

indications, annunciator alarms and computer output to rec-ognize and identify a loss of power to each bus.

B. IDENTIFY INSTRUMENTATION AND CONTROL SYSTEM LOADS:

The instrumentation and control for those systems tabulatedin Table 8.1-2 and 8.1-3 connected to the bus have been iden-tified. The loss of any one of the buses serving these sys-tems and the resulting loss of control and instrumentationwill not affect the ability to achieve cold shutdown sinceredundant systems are supplied from independent buses.

The WM. H. ZIMMER NUCLEAR POWER STATION - UNIT 1 electricaldistribution system is described in Chapter 8 of the FSAR,portions of which are included as Attachment B to this re-sponse. Paragraph 8.3 of this section provides a detaileddescription of the onsite A-C power system. Each dieselgenerator set has ample capacity to supply the maximumload required from its associated division for safe shutdownof the unit under normal as well as accident conditions,including a loss-of-coolant accident. It also meets this re-quirement in the event that one of the two remaining divisionsof segregated power supply may be inoperative. ( 8 . 3 .1. 7 .1)Thus, the loss of any one complete A-C division will not pre-vent a safe shutdown of the plant.

C. RESULTS OF REVIEW AND DESIGN MODIFICATION:

Based on the results of this review we conclude that:

a. The operator has adequate information to identifya loss of power to buses which could affect theability to achieve cold shutdown.

b. The loss of any one of these buses will not affectthe ability to achieve a cold shutdown condition.

As a result of these conclusions, no design modificationsto control room indicators and alarms are required.

2. REVIEW OF EXISTING EMERGENCY OPERATING PROCEDURES:

Emergency Operating Procedures, OP.EOP.21, " Loss of All AuxiliaryPower ( AP) , " e .g . loss of all offsite power and OP.EOP.28, " Lossof DC Power" were reviewed to ensure that the operators couldachieve a cold shutdown condition, upon loss of' power to each class1-E and non-class 1-E bus supplying power to safety and non-safetyrelated instrument and control systems.

A. Section 1.0 of the above procedures lists the conditionswhich alert the operator to the fact that a specific elec-trical division has been lost. The conditions addressdiagnostics / alarms / indicators /symntoms, etc. which aidthe operator in determining the exact failure. The most

i

.'

-

1

. .8 .f.E. BULLETIN 79-27

Page 3

*.

--. .. ,

predominate indicators are listed first with othersnoted in decreasing order of importance.

The automatic actions are stated in Section 2.0 of theEOP's. These automatic actions are often classified asconditions or symptoms themselves because the operatorcan use this information to assess the problem and in-itiate the appropriate corrective action.

B. Once the condition is identified, the Immediate Actionsof each EOP, plus the necessary actions stipulated inthe Reactor Trip procedure OP.EOP.01, provide guidancein the use of alternate indication and control. Theseemergency procedures are being carefully reviewed withthe goal of providing the operator with clear and con-cise contingency plans based on equipment available to4

place the unit in cold shutdown. This phase of proced-ure review is targeted for completion by August, 1980.Additionally, operating procedures will be reviewedannually during the first several years of plant oper-ation to determine if changes are necessary or desirable.

Section 4.0 of each Emergency Operating Procedure addressesrestoring power to the bus.'

3. RE-REVIEW OF I.E. CIRCULAR 79-02:

This circular concerned the failure of an uninterruptible powersupply (U.P.S.) to supply its load from the D.C. battery duringa degradation of the normal A.C. power supply. An investigationof the design of the non-essential UPS systems for the WM. H.ZIMMER NUCLEAR POWER STATION - UNIT 1 demonstrated that thesystems are of a different design than those described in cir-cular 79-02. The inverters have a rapid transient response whensubjected to load changes and are not affected as much as theSCI inverters apparently were. Additionally, a special testwas conducted according to special test procedure SU.SP.08 toverify factory settings of the D.C. undervoltage trip and thestatic transfer switch.

As a result of this investigation and test,we conclude that nodesign changes or administrative controls are required.

Normal surveillance and preventive maintenance is deemed adequatefor this equipment.

We believe that this response fully addresses all concerns of I.E.Bulletin 79-27 and that no further action is required by the Cin-cinnati Gas & Electric Company.

Very truly yours,THE CfNjC.NNA GAS & ELECTRIC COMPANY{{s - -M =

WPC/kjd E.A. BORGMANN, S ICE PRESIDENT~ ENCLOSUREScc: W.W. Schwiers H.C. Brinkmann W.D. Waymire(pink)

S.G. .Salay W.E. Smith ATTN: Gen. File -J.R. Schott R.J. Pruski USNRC,coOff o f T cr.y n vs___ __ _ . .

_ - _ _ _ _ _ _ _ - - - - - _ . __ .. . _ . _

,

' ~

ATTACHMENT A

RHR A & SUPPORTIVE SYSTEMS

LOSS OFDEVICES INDICATION ANNUNCIATION COMPUTER INPUT

I) RHR PUMP A 1) BREAKER POSITION 1) RHR PUMP TRIP RHR PUMP BREAKER*

BREAKER (lA007) INDICATION LIGHTS (OPEN/ CLOSED)

2) CURRENT METER 2) RHR SYSTEM OUT OFSERVICE ALARM

II) ESS SUB 1A-1 1) BREAKER POSITION 1) FEED BREAKER 4KV BREAKER 1A004FEED BREAKER (lA004) INDICATION LIGHTS TRIP ALARM (NORM / TRIP)

2) VOLT & CURRENT METERS,

III) ESS SUB 1A-2FEED BREAKER (lA006) 1) BREAKER POSITION 1)" FEED BREAKER 4KV BREAKER lA006INDICATION LIGHTS TRIP" ALARM (NORM / TRIP)

2) VOLT & CURRENT METERS

IV) 125VDC MAIN SUPPLY 1) LOSS OF POSITION 1)SWITCHGEAR 1A DC SWITCHGEAR 1A DCTO SWITCHGROUP 1A INDICATION LIGliTS ON CONTROL POWER CONTROL POWER FAILURE,

! ALL SWITCHGEAR lA FAILURE ALARM (NORM / FAIL)BREAKERS

V) 480V ABMCClA 1) LOSS OF INDICATION 1) LOSS OF POWER ALARMS ABMCClA FEED BREAKERFEED BREAKER (IAIN16) LIGHTS TO ALL VALVES, FOR VALVES (CLOSED / TRIP)PUMPS, ETC. FEED OFFTHIS MCC

!

! VI) 480V ABMCClF 1) LOSS OF INDICATION 1) LOSS OF POWER ALARMS ABMCClF FEED BREAKERFEED BREAKER (lA2Nll) LIGHTS TO ALL VALVES, FOR VALVES (CLOSED / TRIP)! PUMPS, ETC. FEED OFFTHIS MCC

VII) 125VDC DISTRIBUTIONI RHRA 125VDC RELAYPANEL 1A FEED TO LOGIC POWER FAILURERHR CONTROL LOGIC ALARM

ii

!

_ _ _ ____ _ _______ _ ____ _

.

. ..

B. RCIC AND SUPPORTIVE SYSTEMS

LOSS OFDEVICE INDICATION ANNUNCIATION COMPUTER INPUT*

I) ENTIRE 250VDC 1) LOSS OF POWER ALARM 1) 250VDC BATTERYMAIN DISTRIBUTION TO DC VALVES, PUMPS, CHARGER 1A/lBPANEL 1A ETC. FEED OFF TilIS BREAKER (NORM / TRIP

DISTRIBUTION PANEL

2) 250V BATTERY 2) 250V BATTERYCilARGER AC POWER CHARGER 1A/lBFAILURE ALARM (NORM / FAIL)

3) 250VDC DISTRIBUTION 3) 250V BATTERYPANEL BREAKER CHARGER A/B VOLTTRIP ALARM (NLOW/ LOW)

4) 250V BATTERY 4) 250V BATTERYCIIARGER 1A/lB CHARGER A/B VOLTDISTRIBUTION PANEL (NilIGil/!!IGil)OV/UV/GND ORBATTERY CilARGER 1ALO/ IMP ALARM

5) 250VDC BUS 1A(NGND/GND)

6) 250VDC BATTERYLOW /IMBAL(NLOW/ LOW)

II) 250VDC RXMCClA 1) LOSS OF POWER ALARMS 1) 250VDC RXMCClAFEED BREAKER TO DC VALVES, PUMPS BREAKER (CLOSE/ TRIP)

ETC. FEED OFF TilIS MCC

III) 250VDC RXMCClB 1) LOSS OF POWER ALARMS 1) 250VDC RXMCClBFEED BREAKER TO DC VALVES, PUMPS BREAKER (CLOSE/ TRIP)

ETC. FEED OFF TilIS MCC

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - - _ _ _ _ _ - -

.

. ..

B. RCIC AND SUPPORTIVE SYSTEMS (CON'T)LOSS OFDEVICE INDICATION ANNUNCIATION COMPUTER INPUT

IV) 125VDC CONTROL 1) LOSS OF POSITION LIGHTS -

FEED TO 250VDC FOR ALL 250VDC MOTORRXMCClA & IB OPERATED VALVES & PUMPS

V) 125VDC DISTRIBUTION 1) RCIC LOGIC BUSPANEL lA FEED TORELAY LOGIC POWERRCIC CONTROL LOGIC FAILURE ALARM,

VI) DAMPERS 1) DAMPER POSITION 1) LOSS OF POWER TO MCC 1) RXMCCIAlVYO9Y INDICATION LIGHTS IS ALARMED BY VALVES' FEED BREAKERIVYllYLOSS OF POWER CLOSED / TRIPlVY14Y

FEED FROM ESS MCClA

VII) CSCS-RCIC 1) PUMP STATUS 1) OVERLOAD, LOSS OF,

EQUIPMENT ROOM INDICATION LIGHTS POWER AND PUMP OUTCOOLING FAN (1VYO3C) OF SERVICE ALARMVIII)

RBCC HEAT EXCHANGER AND PUMPS ARE DESCRIBED IN SECTION A OF RHR AND SUPPORTIVE SYSTEMS.

.

e

9

l

i

l

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ - _ _ _ _ _ _ _ _ _ . _ _ _ - - _ - -

- _ . _ _ _ _ _ _ _ _ _ _ _ _ _

,

. .

! RHR B SYSTEM & SUPPORTIVE SYSTEMSI

.

THE RHR B SYSTEM HAS THE SAME INDICATION, ANNUNCIATION AND COMPUTER INPUTS FOR THE 4KV LEVEL TO480V BUS LEVEL AND DUPLICATE SUPPORTIVE SYSTEMS AS ARE SIIOWN IN THE RHR A TABLE EXCEPT THERHR B SYSTEM IS DIVISION II.

.

O

%

.

O

_ _ _ _ _ _ _ _

_ _ _ _ _ _ - _ _ _ - _ _ _ _ _ _._

, o

RX VARIABLE MONITORING,

LOSS OF DEVICE INDICATION ANNUNCIATION COMPUTER INPUT

'

ENTIRE 120VAC LOSS OF STATUS LOSS OF POWER 1) 120 VOLT INSTRUMENTINSTRUMENT BUS 1A LIGHTS ON VARIOUS ALARMS AT VARIOUS BUS lA POWER(FEEDS RX PRESS & MCR PANELS MCR PANELS NORM / FAIL)LVL RECORDERSDIVISION I)

2) 120 VOLT INSTRUMENT'

BUS lA 480V FEED(CLOSED / TRIP)

ENTIRE 120VAC LOSS OF STATUS LOSS OF POWER 1) 120 VOLT INSTRUMENTINSTRUMENT BUS 1B LIGHTS ON VARIOUS ALARMS AT VARIOUS BUS 1B POWER(FEEDS RX PRESS MCR PANELS MCR PANELS& LVL RECORDERS) (NORM / FAIL)DIVISION II)

2) 120 VOLT INSTRUMENTBUS 1B 480V FEED(CLOSED / TRIP)

.

O

_ _ _ _ _ _ _ _ _ _ _ _ - . . _ _ - -- - - . . _ . - - - _ - - -

. _ ._ .,_.

.*

TURBINE BYPASS VALVES

.

LOSS OF DEVICE INDICATION ANNUNCIATION COMPUTER INPUT

120V FEED FROM 1) DEH POWER SUPPLY 1) DEH POWER SUPPLYUNINTERRUPTIBLE TROUBLE ALARM (NORM / FAIL)DISTRIBUTION CABTO TURBINE BYPASSVALVE CONTROLLER

ENTIRE 120V 1) LOSS OF STATUS 1) LOSS OF POWER ALARMSUNINTERRUPTIBLE LIGHT AT NUMEROUS ON SOME OF THE PANELSBUS MCR PANELS FED FROM BUS

2) UPS T1100BLE ALARM*

(FROM INVERTEREQUIPMENT)

4

- - _ _ _ _ _ _ . __ - _ _ _ _ _ _ . _ _ _ _ _ _ _ _ _ _ _ _ _ _ . _ _ _ _ _ _ _ _ _ . _

. - - _ _ - - - _ _ _ _ _ _ _- .

,

. .

HPCS SYSTEM & SUPPORTIVE SYSTEMS

THE-HPCS SYSTEM HAS THE SAME INDICATION, ANNUNCIATION AND COMPUTER INPUTS FOR THE 4KV LEVEL TO480V BUS LEVEL AND DUPLICATE SUPPORTIVE SYSTEMS AS ARE SHOWN IN THE RHR A TABLE, BUT THE HPCS

,

SYSTEM IS DIVION III. THE ONLY EXCEPTION IS THERE IS NOT A DIVISION III INSTRUMENT BUS.

.

h

.

i

- - - - - - - - - . _

I

ATTACHMENT B'

ZPS-1 REVISION 12.

JUNE 1975

'

8.3 ONSITE POWER SYSTEM

8.3.1 Onsite A-C power System

8.3.1.1 Descriction

The ZPS-1 onsite A-C power system receives its power during operationfrcm the unit auxiliary transfor=er or reserve auxiliary transformer

,

21 or 22. In addition, three standby diesel generators are availableshould offsite power not be available.

Onsite a-c power for all safety-related and non-safety-related systersis supplied by two 6900-volt and three 4160-volt switchgear assemblies.The connections f rom the offsite power supplies to the switchgear areshown in Figure 8.3.1.

8.3.1.2 6.9-kV Switchgear

The 6900-volt switchgear consists of two indoor metal-clad asse=bliesequipped with drawout type air circuit breakers located at elevation510 feet 6 inches in the auxiliary building (see Figure 1.2-4 for -

location).

Main supply breakers for connection to the offsite power supplies arerated either 2000 or 3000 amperes, 7.2-kV nominal, 500 or 1000 MVA.Feeder breakers are rated 1200 amperes, 7.2-kV, 500 M7A.

The 6900-volt switchgear supplies the reactor recirculation pumps, con-denser circulating water pumps, and condensate booster pumps. The 12switchgear has been qualified to IEEE 323 and 344-1971 although it

'does not supply any Class 1E loads.

8.3.1.3 4160-volt Switchgear .

The 4160-volt switchgear consists of three indoor metal-clad assemblieslocated at elevation 510 feet, 525 feet, and 546 feet of the auxilinryb uilding. Main supply breakers are rated 2000 or 3000 amperes, 4.16-kV,350 MVA. Feeder breakers are rated 1200 amperes , 4.16-kV, 350 MVA. The=ax1=um interrupting capacity is 50,000 a= peres r=s. Rated short circuitcurrent at 4760-volts is 42,400 ampere rms sy= metrical.

Each switchgear asse=bly supplies one division of safety-related Class1E loads as well as non-Class lE loads. Loads 250 hp and larger aresupplied directly from the 4160-volt switchgear. Loads smaller than250 hp are fed f rom Class lE and non-Class lE unit substatiens and motorcontrol centers. Small loads of h hp or less are fed from 120-vclepanels.

The three 4160-volt switchgear asse=blies are physically and elec'tricallyseparate from each other. In addition, each switchgear assembly hasassigned to it a diesel engine generator set for onsite standby power.g

8.3-1

a . .

ZPS-1 REVISION 16-

SEPTEMEE2 1976

'.The arrangement of the 4160-volt buses is shown in Figure 8.3-2.

Relay protection is shown in Tabic 0.3-10.

The load tabulation and division assignment are shown in Tables 8.3-2,8.3-3, and 8.3-4.

8.3.1.4 480-vole Unit Substations

There are 15 480-volt unit substations, 5 of which supply Class lEsystems.

Each unit substation consists of a 750/1000-kVA 4160-volt to 480-voltdry type transformer connected to 600-vole metal-enclosed drawoutcircuit breakers.

Breakers are rated 600-volt and 600 amperes, with a symmetrical inter-rupting rating of 30,000 amperes at 480 volts.

The load tabulations for the Class 1E unit substations are shown inTables 8.3-5 through 8.3-9.

8.3.1.5 Motor Control Centers

Ten of the thirty-three motor control centers supply power to Class 1Esystems. (Five motor control centers, including two for Class 1E systems,were added in the last year.)

Epch motor control center consists of circuit breaker ev.ain ;f on

starters in NEMA sizes 1 to 3. The breakers are rated 600-volt, F.,000ampere rms symmetrical interrupting capacity. Where i!0-volt panels areincluded in the motor control center, the breakers are rated 7500 ampereinterrupting capacity.

The load tabulation is shown in Table 8.3-10 for the Class IE motorcontrol centers.

3.3.1.6 120-Vac Panels

Power to the Class 1E instruments in Divisions 1 and ! is supplied by120-Vae panels. The breakers used in chase panels are molded case aircircuit breakers rated 10,000 (1-pole) , and 22,000 (2-pole) ampere inter-rupting capacity at 120-volts. These are shown in Figure 8.3-3 andTable 8. 3-28.

8.3.1.7 Diesel Engine Generators

ZPS-1 has three tandem diesel-engine-driven generate: sets capable ofsupplying onsite standby power to 4160-volt buses IA.13, and IC.

|Each diesel generator is located in a separate room that is part of the(,j Seismic Category I diesel engine generator building (see Figure 1.2-3) .

8.3-2

.ZPS-1 REVISION 12. .

<

JUNE 1976

The diesel-generator sets are designed so that each can be paralleledwith the plant auxiliary system for exercising and test purposes.

All auxiliaries directly associated with each diesel-generator unitsuch as cooling pumps, lube oil pumps, fuel supply pumps and ventilatingfans, etc. , are powered f r'om the essential pcwer supply divition withwhi h the diesel-generator unit is associated. All electrical power

required for the diesel-generater unit is supplied from the 125-Vdcsystem serving that division.

Other auxiliaries which are required to serve more than one diesel-generator unit are provided with a redundant counterpart arranged tooperate from an alternate power supply division. An example of thisis the service water pump system. Four service water pumps are pro-vided. Three are required for normal plant operation. A minimum ofany one of the four pumps is required for safe shutdown. One pump issupplied from bus 1A, two pumps f rom bus 13, and one pump from bus IC.For automatic operation from the standby diesel-generator system, pro-vision is made for the start of two service water pu=ps from separate

power supply divisions.

8.3.1.7.1 Rating

Each diesel-generator set has a=ple capacity to supply the maximum loadrequired from its associated division for safe shutdewn of the unit undernormal as well as accident conditiona, including a loss-of-coolant

accident. It also meets this requirement in the event that one of the'

two remaining divisions of segregated power supply may be inoperative.

The diesel-generator sets are sir.ed so that the loss of one diesel will 12

not restrict the availability of adequate power to carry the ECCS powerrequirements of the unit for 8000 hours continuously, or that powernecessary to safely shutdown the unit and maintain it in a safe shut-down condition. -

The diesel-generator sets are rated as indicated in Table 8.3-11. Theyhave adequate load pickup capability for starting all essential loadsrequired for the safe shutdown under both normal and LOCA conditions.Other essential loads are arranged to start sequentially as required soas to avoid exceeding the load pickup capability of the diesel-generatorset. This sequential loading is shova in Tables 8.3-12 through 8.3-15.

8.3.1.7.2 Starting Systems

The starting systems are described in Subsection 9.5.6.

8.3.1.7.3 control Power

Control power for the diesel-generator sets is supplied from independent125-volt storage battery systems. Three such bartery systems areprovoded, each serving central power requirements for one of the threesegregated divisions of the auxiliary power supply. l

'

_- 1

8,3-3

ZPS-1 REVISION 12* "

,

JUNE 1976

8.3.1.7.4 Automatic Starting

The onsite diesel generators are a standby source of power and are usedonly if all other sources are not available. However, when required, itwill take a maximum of 10 seconds from the time they are given the signalto start, until they are ready to accept load. For this reason, any timean abnormal condition exists which involves any of the other sources ofpower, the diesel generators will be automatically started. The othersources of power are:

a. unit auxiliary transformer,

b. 345-kV reserve auxiliary transformer 21, and'

c. 69-kV reserve auxiliary transformer 22..

Since any serious abnormal plant condition will cause a unit trip whichin turn will cause the loss of the unit auxiliary transformer, thediesel generators will be automatically started, and will run under noload until it is certain they will not be required. The diesel genera-tors will start automatically on LOCA signal.

8.3.1.7.5 Manus 1 Starting

Complete control of the diesel generators is provided at two separatelocations. The locations are:

.

a. main control room, and.

b. local diesel-generator panels.

Controls are provided in the main control room for normal operatingconditions . Controls are also provided on the local diesel-generatorpanel to facilitate testing and maintenance.

The following diesel-generator control equipment is provided at themain control board:

a. diesel-generator start and stop control switch,

b. breaker control switch,

c. synchronizing ruitch,

d. synchro-check relay,

e. synchroscope with voltmeters and lights,

f. auto-manual synchronizing selector switch,

g. voltage adjust control switch, and

# h. speed adjust control switch.

8.3-4

..

ZPS-1 REVISION 12JUNE 1976

.

The diesel generator can be started and manually synchronized to thebus from the main control room. With the =anual-automatic synchronizingswitch in the " manual" position, the operator will start the dieselgenerator by turning the control switch. The synchronizing switch willthen be closed and the voltage and speed adjusted to match that of therunning system. The diesel-generator breaker can then be closed. If

the operator has made an error, the synchrocheck relay will prevent thebreaker f rom closing.

The diesel generator can also be started and automatically synchronizedfrom the main control room. The manual-automatic synchronizingselector switch should be set ot the " auto" position and the dieselgenerator started. The synchronizing switch must then be closed. Theautomatic synchronizer located at the local diesel-generator panel willautomatically close the diesel-generator breaker. The operator willthen get an " auto-close" alarm for the diesel-generator breaker. He willremove this alarm by turning the breaker control switch to the "af terclose" position.

The controls provided at the local diesel-generator panel are similarto those provided at the main control board. The procedures for manu-ally and automatically synchronizing will be similar.

The following conditions are alarmed in the main control room:

a. diesel-generator breaker automatically closed;~ ~

b. diesel-generator breaker locally closed; and12

c. diesel-generator breaker automatically tripped.

8.3.1.7.6 Protection and Supervision

!

The protective interlocking and protective devices that will be usedwith the diesel generators can be separated into several basic cate-gories based upon the action that must be taken. These categories areas follows:

a. signals that trip the diesel-generator breaker and theengine - emergency condition;

b. signals that trip the diesel-generator breaker and theengine - test condition only, ,

Isignals that trip the diesel-generator breaker only, and )c.

d. signals that alarm only.'

Signals that trip the diesel-generator breaker and the engine (emergency ,

condition): the following signals trip the diesel-generator breaker and jthe engine: )

' a. generator differential,*

8.3-5

..ZPS-1 REVISION 12

JUNE 1976

.

b. overspeed, and

c. manual engine trip.

Generator differential: The initiating device is a relay located at thelocal diesel-generator panel. This relay simultaneously trips thediesel-generator breaker and actuates the engine trip relay. The diesel-generator breaker is locked out so that neither manual nor automaticaction can reclose it until the lockout relay is reset.

Overspeed: The engine is tripped by a shaft-mounted, mechanical deviceat 115% nominal speed. This condition is alarmed at the local diesel-generator panel. Another contact from the local diesel-generator panelis used to trip and lock out the diesel-generator breaker.

Manual engine trip: A =anual engine trip is initiated by pushbuttons atthe local diesel-generator panel or the control switch at the main con-trol board. The engine is tripped and the diesel-generator breaker istripped if it is not already open; however, for this case, the diesel-generator breaker is not locked out. It can be reclosed by a =anual orautomatic signal without any reset operation.

The following signals trip the diesel-generator breaker and the engine(test condition only):

a. ground fault,,

b. reverse power,

c. engines 1 and 2 high coolant temperature,12

d. engines 1 and 2 low oil pressure, and

e. failure to start (ove rcrank) .

The above signals will trip the diesel-generator and breaker onlyduring a test condition. If there is a LOCA or a load shed of any kind,

these trip signals will be bypassed. Only the alares will remain.

Signals that trip the diesel-generator breaker only: The followingsignals trip the diesel-generator breaker only while leaving theengine running under no load:

signal indicating parallel supply lost while exercisinga.

diesel generator, and

b. manual diesel-generator breaker trip.

Signal indicating parallel supply lost while exercising diesel genera-tor: In the event the diesel generator is being exercised, and theparallel supply is lost, the diesel. generator will not be able to carryall the loads. This circuit immediately trips the diesel-generatorbreaker, and thus allows a reserve source a chance to reenergize the''

8.3-6

- - .

.. .

ZPS-1 REVISION 12'

JL'5E 1976

.

bus. When load shed occurs, the bus lockout relay disables this tripcircuit so that, if the reserve scurces are not available, the diesel-generator breaker is able to ac*o=atically reclose and pick up emer-gency loads.

Manual diesel-generator breaker trip: The diesel-generator breakercan be tripped manually f rem the main control board switch, or fromthe local diesel-generator panel. The diesel-generator breaker is tripped,but not locked out, and the engine is left running. The engine is then

shut down manually.

Signals that alarm only: A local annunciator is provided at the localdiesel-generator panel in addition to the main annunciator in the con-trol room. For any alarm oniv condition, the action required is lef tto the discretion of the operator, taking into account the status of

~

diesel-generator operation (test or emergency), as well as the statusof the plant in general.

Local annunciator: The following signals actuate the local annunciator:lubricating oil, icw-high pressure, Engines 1 and 2;a.

b. lubricating oil. low-high te=perature, Engines 1 and 2;

c. high coolant te=perature, Engines 1 and 2;

d. low coolant level, Engines 1 and 2;

.

' ' e. starting air, low pressure; 12

f. cooling water, low pressure, Engines 1 and 2;

g. low fuel level;

h. failure to start;

i. oil filter dif ferential, Engines 1 and 2; and

J. overspeed trip.

Control room annunciator: The following signals are alar =ed in themain control room:

a. ground fault alarm,

b. diesel-generator bri 'er auto-trip,-

1

c. diesel-generator breaker auto-close,Id. diesel-generator breaker locally closed,

e. diesel-generator trouble(operates for any local alars),

8.3-7

*..

*

ZpS-1 REVISION 12- *

JUNE 1976

.

f. diesel-generator cranking, and

g. diesel-generator running(operates at normal running speed).

8.3.1.7.7 Fuel Systems

The fuel oil storage and transfer systems are described in Subsection9.5.4.

8.3.1.7.8 Lubrication Svstems

The lubrication syste=s are described in Subsection 9.5.7.

8.3.1.7.9 cooling Syste=s

The ecoling systems are described in Subsection 9.5.5.

8.3.1.7.10 Load Secuencing

Sequencing of leads supplied from the standby diesel-generator systemfor safe shutdown is required to prevent exceeding the motor startingand dead load pickup capability of a diesel-generator unit. Therefore,provision is made for automatic sequencing of all loads arranged forautonatic start from the diesel-generator system. Automatic sequencingis done in severs 1 steps to prevent jeopardizing operation of the diesel-

'_ generator system by exceeding motor-starting capability. In so doing,

those loads which must start within 30 seconds are started first,for example, the emergency core cooling system loads. Other loadswhich must start promptly but which can tolerate a time delay arestarted in the following starting sequences. These loads are started

12within a time period of 30 to 90 seconds after initiation of startsignal to the standby diesel-generator system. Service water pumps andreactor building closed cooling water pu=ps are started in the secondstarting sequence. Remaining loads are picked up in a similar mannerafter the second starting sequence. Under design conditions in whichall three power supplies are operable, redundant auxiliaries which arenot required to operate may be shut down by operator action, in whichcase loading of the standby diesel-generator system will be accordinglyreduced.

In addition to supplying the loads listed, the diesel-generator systemis available, on a manual basis, to feed other loads connected to the4160-V systems. The connections of other such loads are =ade withregard to overload restrictions.

8.3.1.8 operating configurations

If the offsite power s:urces are available then the preferred configura-tion is to have the 345-kV reserve auxiliary transformer 21 as the

primary power source and the 69-kV reserve auxiliary transfor=er 22as the secondary power source. If no offsite power is available,( ',the diesel generators are the source.

8.3-8

. .

'" ZPS-1 REVISION 12'

JUNE 1976

'' 8.3.1.9 Source Transfers - General

Power is required at all times to operate the various auxiliary systa=s.Some of these systems are required only when the unit is operating;some are required only when it is shut down; others are required onlyfor emergencies. Since engineered safety feature syste=s fall into eachof these categories, it is essential to have auxiliary power at alltimes.

Dupending on the condition of the unit at any given time (operating,shut down, pestaccident, etc.), certain sources 'of power may not beavailable. This means that power source transfers are required to keepthe auxiliary buses energized at all times. The transfer =ay be eitherautomatic or manual. If an abnor=al occurrence exists, then any neces-sary transfer is co=pleted automatically.

8.3.1.9.1 Manual Source Transfers

All manual sour:e transfers are " live" transf ers, i.e. , the inco=ing

source breaker is closed before the running source breaker is tripped.This assares that the buses are never without power during manualtrans fe r.

Manual transfer is nc"mally acco=plished by paralleling incoming supplywith the running supply, and then tripping the running supply. Pro-visions are =ade to auto =atically trip the running supply breaker,1second after the incoming supply breaker is closed. The 1-second delayis provided to assure that the incoming breaker latches. If it does

'

not latch, no automatic trip takes place. 12

Provisions are also made to check and bring the incoming supply insynchronism with running supply before making the manual transfer.

8.3.1.9.2 Automatic Fast Source Transfers

The only automatic fast transfer that is permitted is from the unitauxiliary transformer to the 345-kV reserve auxiliary transformer -

(see Figure Q221.47-1). Both sources are full capatity, and both arealways in phase with each other. Automatic fast transfer is accom-plished in approximately five cycles.

8.3.1.9.3 Automatic Slow d'urce Transfers"

,

There are several automatic slow transfers possible (see FigureQ221.47-1). They are as follows:

a. unit auxiliary transfor=er to 69-kV reserve auxiliarytransformer (345-kV reserve cuxiliary transformer notavailable) ,

b. unit auxiliary transfor=er to dier21 generators (345-kVreserve auxiliary transformer and 69-kV reserve auxiliary

'' transformer not available) ,

8.3-9

._ . --

*| ,' 2pS-1 REVISION 12JUNE 1976

c. 345-kV reserve auxiliary transformer to 69-kV reserve*

auxiliary transformer,

d. 345-kV reserve auxiliary transformer to diesel generators(69-kV reserve auxiliary transformer tot available),

*

e. 69-kV reserve auxiliary transfor=er tc 345-kV reserveauxiliary transfor=er, and

f. 69-kV reserve auxiliary transfor=er to diesel generator(345-kV reserve auxiliary transfor=er not available) .

A fast transfer to or from 69-kV reserve auxiliary transformer isnot attempted even though it is a full-capacity source because there isa possibility that it may be out of phase with the running supply.

All automatic slew transfers are accomplished within 3 seconds, andwill be done on a load-shed basis. Anytime there is a load shed, all'

, nonessential loads are tripped and locked out, and required essentialloads are automatically started in the sequence shewn in Tables 8.3-3through 8.3-5.

8.3.1.9.4 Source Transf er Peraissives and Source Availability

The various reserve power sources are listed in order of preference,starting with the most desirable reserve source as follows:

a. first choice - 345-kV reserve auxiliary transfor=er 21(full capacity source),

b. second choice - 69-kV reserve auxiliary transformer 22(full capacity source), and

c. third choice - diesel generators (e=ergency source) .

During any automatic transfer, these three power sources are automati-cally checked for availability by means of undervoltage relays.Timing circuits are used to give the.more desirable reserve sources thefirst t ry at reenergizing the buses. If any source is not available(no voltage), thrt source is blocked from closing and the next sourceis given a chanct to reenergize the bus. If neither of the transformersupplies close, tne diesel generators reenergize the buses. As soonas any reserve source closes, all other sources are blocked, sequenc-ing of essential loads is initiated, and the transfer circuitry isautomatically reset so it is ready if called upon again.

If a fault occurs on a bus, all automatic closing circuits are blocked.This prevents the transfe:. circuitry from alternately feeding thereserve sources to a faulted bus, thereby avoiding possible damage tothe reserve supplies.

s .

8.3-10

__-

- - . .

... .

HtrM *

a e -

$Q&e* L .. we..c +-c

P. . ;,v:., :; -

h % ia' .

". $ .$ o $.s.: ar g .a a y y

i %, *; EI @ ^i ( % 3

w= 2 ;2 x,. . e .5 g .r . e -

75E 9 I ( j$ 3 I 35'N *;P +

- *)C,| |, { O * ''S *M

n e* .-^3 5,'dM 4 I! a!q'' c.o

h~b 4 's - , 45x-

.k kf 5 %I

: .{P O ,j OW je !* g Ej *'

i ,L*g 7. , *q s . :: 3 v_,

S 's ; g 'g w; - c.ts| ;* o g- i* .3*

4: e -| m .w -=a, :-r, .

, ~ -~ . ..

t 5 h. 20i' i! E, $ ''; i e : <"

.

A

''l, Q^&v J

D{ 5: '>-0 CMP W< e

. .s

. m. >' I O W i .M r - s'

:, . k h .' k**~ ?-:*isa

., o j .A dCtt l

1 E7'- , t

- * 'm -

31 e.2*. O O- >

h ed 7 2.CD*

3u ] 0~$ 5s ..

A ^-

' 4 CMD W C>d>

f ?[ .1 - ,

. )h I )( o,

]; ;~h$s( e ".:s c je'1 *

tg.pl g* 31r. c* 1

kI@ i E,$y5 ~l a s D. ! ,r :-,~. --. -.

C$% 47 fil$ $ "$'*1 ',

E**.* 3 **A *s-q -,

'l {d * $- '":. :. ,

r.2 s --,.

o :q : .1 $a

< % s- ~

a -1 3t 3 t ::-

s te- .;} .- {"

a E= :: 5 e*

e < G. "r~f* * $ 2

m m a n . 1

E.p 2 -e up ek. .- > <-em <

l ,A~

-. . , ,

T M. ., ,a e'

...,

4 i ; o e,*''

7J 5 'm O

gi% [ 1e*I2 g {3> ! ^3 g

} % h. {. - INe: : e.

- -. .

- f "fh he3 4 N *

n e=

i:tn < --o.. - -

i 3 L# l'g - di'", y $ [ $!! ) *o !,.i+c s r2 g i3,._ -.

.d. o: . > C a

!g;' ,'' * o- 'p ,- <>- --o'~b,-o^o- EY. -t( ,I . ' ' = 4 > MC2,

.I . h j q eJn r .- , o ou n ,

y, 4 e N o % lae

N e YO!.1 m a t ytcoc 2

LLb o)f [E AO$'

DMD *D hr - -

,

AtVI51&I 29.MEf 1917

o

4 &o v MJPPL Y 9 tow seertysno w **v I s mown swe e

( ggs swagra sa-s) ( sgs svag t. e. a)

'4,

!

asov ....e o___ D=V e

-

2 Gov 1 tsovew e r c e= - g.,y gnga

8A ~~~ gg

s

'3 Qi2mA ) w o.N C.

<

rusc

: -

1 1 iM ) )

- -p 9

(< 3 ,_.

,VP

* 'L n L> w se 9

MSS uoits.,

%v o........c-..,...e...................I~" E*a v s a ,o a.3.a,c,g a , o , ,,, e , ,(,, ,,,,q,,, q ,

?) SE I POINISI UNDf M VOLT AGE M t AY 210 V ** M a=a** * nuce e a= coman svar.n . s ., e' OVI H W4 TAti REL AY 2nov * * * * * * * " * a-=.** * * * =

bf if 2Pitt it.1 - 4

250- Vik l'1WIR D151RIBLIll0N SYSIlM

e

s .

* .

__ _ ___ _ _ _ - _ _ _ _ _

' i; d.' .

.

. .m .

f** .o

h, E Esi !: ih, k.b.1 c~V: , E .s - 1

---

?!! - 2%b t5gu n 2

-. *

- M - gI:. :;t !.

-

Ij ;!t. t;zy'lii $ .

*: ,,

p !,

c8 9 f ; #g ,;

'' 'f ! p * s,s

cy; m

. !, : *e.' ,, . *

h > l iflf!'%

> ~ **,. . . .

t @ui .- '

$'

Y~

Uf f rI =.'(m m a-p.

| 'Ik . .a;--4-

-

,

.,

gk

fj 'I.

- *

v. ; dye>s. > >J8a3 -

f2g

? ) 5m

> le '

>s gI" 4 , f fN 6I

Cr<--

$e f# U-.1*

., d 3b ~

L' '# o-\ ;-

>-rb *l ';'l"5 I t|@f t'> f!,

i!$t' -

If-

I, r ." f, r;i! 3, , . T 3 .' :..i .,* - :' s

a. cil 21''p- ::i

,

.h j %d!!!,3 ;*

.

-

&'

) E5 $ -I ,i.

.s '

, n*[ !!s na 5

. } 3:'

c. 7* ;a-

<

4 +, > 4 _. g> |

J >> !e, a 2* .m

,. ,

. t || d' sit s* $ |* #

.: :: 't>> I'-

'

,

- ,| Gk- -

~4|

< p :=

,I *bSo J, 3| :. nb '

<w p''*% ,' $ f,$

n esi-

%-t ? titl+| & , =c

'; wR Q *s ;"

. "L' $

r e..2.

= =^ ? $ ~g U ; <$ ~a

.-

|

'b 7 *C% e ,*

% V C. *w r>s- =< ^

le: 3, r, *I f3

f. av

.,.

.

.

k[i||t?" X:

. %' & S,!

',

uke

I* 'N ' .

. [N . ' . ).. "s 4'-t

. :. $ $9.1,t M 7. ;.P.

.

.fjr-)] '1,. ek4 *.

**5r %2 af() y ,;f~t . g

.:3 ee4 = '' -e

hf.I.k,1 $ ::_ 4 'ti "Ef04d*1 ',1 $~

, ' ';/,t I i 5: _$ fi*.

** +.sMr tG y: ; #~

./ 'd 1; 4f:g s , >=

%'d I =i 4I, I !I "

. . ,pr, z-

?.C i*i '; 3s: . ,

'wk','y ''. t I s*, : 1wI4 .

'i II #

M,' *

T. I< .t j t sE

*- 3 *

~ ?. ' ' '

t. 3 g:v '. Illd , d, i I ,'

h. - ' < .~ ,'' 4

* o 3p .. 9 fj 3: 9 ,$

,

- A .- ;&,eeOg , {~

0~E *~ ,

, -s jw^o- g}:u _

t,j

- O ,,,

,'

-

f1' #. v''E* *f

4 . <4 L,, a>y ~6y e'' '

I -[ t g*Iy;

}"Y

} FC")J DEF g &1 t ->:' -

e 9$A*- t Q fiL-hI rag%--fa i 'L- 32 s

.

+ :/.,1 ~~~- 2Wh,M e[ - L,*7 s,i*%%,.} { - I I *

d w !O5g*,gr e

,' )l.

3~O%~ **0$ * ,5 $

-

.)4 j' 382 t2

to .c~o--{"j *k

-,

#. +3

. l *' I 1.

. J , , s -5 ,I 2 1 aeI7t t f d,- *

b, i til,;et 5

.1 < _ --

js

I wvL<g;-- 1}.

. 3 et.ec :5,

) w:>ro ~ l > A} . - 4:'hin9<

f*

o 2-4

r = ~t; ,4 " 4 4-' ~C+Y ' Io 5. .

y rr '$s ti G(~$n

fn .s L9"" ,, 5*I

-s | F -- ~' $|EE*--

; -

I'! **, -oEu

iY~,..! k 4

t sI nd

- j -|[ * e --. o--[ p-o'o- (G I 2

- ' rI 53 $

*

Oi*

1% t. t.. -

5 i ';$-e-- .:. ;

~M @(e..

y ' > -.,. e.a * C:-sg. { x

n *9,. *

hl; aplip i,

i G 3

k.i; s., r

; e. 1..

.- :

:1

&.."

.' " ' '

.

.

-r

- -

a -

*.

ZPS-1 REVISION 12*

JUNE 1976

.

TABLE 8.1-2

SAFETY-RELATED SYSTEMS THAT REQUIRE CLASS IE POWER

SYSTD1 SAFET. FUNCTION POWER SOURCE *

HPCS/high-pressure Core cooling 4160-V, 480-Vac| 12core spray

LPCS/ low-pressure Core cooling 4160-V, 480-Vaccore spray

pMR/ residual heat Core cooling 4160-V, 480-Vac,| 12removal 250 Vdc

SSWS/ station service Support nuclear 4160-V, 480-Vacwater systems safety functions

ADS / automatic depres- Reactor vessel 125-Vdcsurization system pressure relief

RCIC/ reactor core isola- Core cooling 250-Vdction cooling

SGTS/ standby gas treat- Limit offsite 480-Vacment systems accident doses

Control room HVAC Support nuclear 480-Vacsystems safety functions

Unit Class IE ac power Support nucicar 125-Vdcsystem safety functions

Unit Class IE de power Support nuclear Nonesystem safety functions

"Diesel Generator Support nuclear 480-Vacventilation systems safety functions

Reactor building closed Support nuclear 480-Vaccooling water system safety functions

Essential switchgear Support nuclear 480-Vacheat removal systems safety functions

ECCS equipment area Support nuclear 480-Vacheat removal systems safety functions

NSSS/ nuclear steam supply Limit offsite 480-Vac, 125-Vde,

system shutoff system accident dose 250-Vdc

* Power source (s) required for system to perfor n its safety function..

8.1-4

*'

ZPS-1 REVISION 12JUNE 1976

s

TABLE 8.1-2 (Cont'd)2

SYSTEM SAFETY FUNCTION POWER SOURCE *

Primary containment Limit offsite 480-Vac, 250-Vde,isolation control system accident dose 125-Vdc

Isolation valve sealing Support nuclear 480-Vacsystem safety functions

Standby liquid control Support nuclear 480-Vacsystem safety functions

12

?

|

* Power source (s) required for system to perform its safety function.

8.1-5

_ .-. - . - ,

. . _ _ _

*ZPS-1 REVISION 12,

JUNE 1976

.

TABLE 8.1-3

NON-SAFETY-RELATED SYSTEMS THAT REQUIRE CLASS lE POWER

SYSTEM COMPONENT SAFETY FUNCTION POWER SOURCE *

Control rod Containment isolation 480-Vacdrive

Process radiation Monitoring fuel cladding 120-Vac, 24/48-Vdcmonitoring integrity

RWCU/ reactor water Containment isolation 480-Vac, 250-Vdccleanup

NN/ nuclear boiler Containment isolation 480-Vac, 250-Vdc

Drywell chilled Containment isolation 480 Vacwater

| 12Instrument air Containment isolation 125-Vde, 480-Vac

Service air Containment isolation 125-Vde, 480-Vac

Drywell floor Containment isolation 125-Vde, 480-Vac | 12drains

Drywell equipment Containment isolation 125-Vde, 480-Vac | 12,

drains

Emergency lighting Supporting safety function 480-Vac, 125-Vdc

Communications Supporting safety function 125-Vdc

Reactor protection Supporting safety function 120-Vacsystem

| 12

.

|

|

* Power source (s) required for component to perform its safety function.,

|

|

8.1-6

||

|