Before replacing a Bently Nevada 3500/32 125712-01, preserve the output behavior, not only the module number.
The Alarm Drive Logic for each relay, its normal energized or de-energized state, the rear I/O terminal arrangement, and the receiving field circuit must remain aligned. A mismatch can operate the wrong annunciator, interlock, or shutdown input. Control engineers, electrical maintenance teams, commissioning personnel, and MRO buyers should prepare four records before approval: hardware identity, relay logic and states, point-to-point circuit mapping, and channel test results. Plant trip philosophy and setpoint changes remain outside this replacement scope.
The 3500/32 converts selected status information inside a 3500 rack into discrete relay-contact outputs for external systems. Depending on the approved site design, those contacts may feed an annunciator, DCS input, ESD input, interlock, or shutdown circuit.
The current OEM documentation describes the 3500/32M as a four-output relay module. Each output has its own Alarm Drive Logic, which can combine Alert, Danger, Not OK, and individual PPL inputs from monitor channels using AND and OR expressions. The logic is configured in the 3500 Rack Configuration Software. See the current Bently Nevada 3500/32M datasheet.
That function creates three distinct layers that must not be confused:
A replacement check must follow the signal through all three layers. Seeing a relay LED change does not prove that the correct terminal changed state or that the intended DCS or ESD point received it.
The Rack OK relay is a separate function. The 3500 System Datasheet locates that relay on the Transient Data Interface I/O module, describes it as normally energized, and limits it to general annunciation rather than automatic machinery shutdown. Do not treat Rack OK wiring as one of the four 3500/32 protection outputs, and do not use a Rack OK test as evidence that the configured 3500/32 relay paths work.
Part number 125712-01 identifies a legacy 3500/32 four-channel relay module in the installed base. Identification should begin with the physical label, but it cannot end there. A complete replacement requirement must connect the front module to its rear I/O hardware, rack position, configuration record, and approval basis.
Capture these fields from the installed equipment before issuing an RFQ:
| Identity field | Evidence to capture | Decision it supports |
|---|---|---|
| Front module | Full faceplate and side-label photos; 3500/32; 125712-01; serial and revision markings | Confirms the exact legacy unit being replaced |
| Rack position | Rack identifier and slot number | Links the module to the correct configuration and rear position |
| Rear I/O module | Complete label, part number, approval markings, connector and terminal arrangement | Prevents a front-card-only match from hiding an I/O mismatch |
| Installed configuration | Controlled configuration export, file revision, and approval reference | Establishes the actual relay logic to be preserved |
| Field documentation | Current wiring drawing, termination sheet, loop or cable schedule, and cause-and-effect reference | Establishes where each contact goes and what it is intended to do |
| Service requirements | Hazardous-area, functional-safety, electrical-rating, and site engineering requirements | Determines which documentation and hardware options require formal review |
The current OEM datasheet uses the model designation 3500/32M and lists 149986-02 as the spare four-channel relay control module. It separately lists 125720-01 as a spare four-channel relay output module available for repair only and 125720-02 as the output module for hazardous-area and functional-safety systems. Those current ordering entries do not, by themselves, prove that any one of those items is an unrestricted replacement for 125712-01 or for the rear I/O installed at a particular site.
Use the manual revision applicable to the installed rack. The OEM 3500 manuals index identifies document 129771 for the 3500/32 and 3500/32M four-channel relay modules and document 130432 for 3500 field wiring diagrams. If the physical labels, controlled drawings, configuration records, and applicable OEM documents do not agree, place the replacement on engineering hold. Do not resolve the difference by dropping a suffix or by choosing the nearest current catalog number.
Export or capture the installed Alarm Drive Logic before removing the module. A useful record must show more than a screenshot of a relay name. It should allow another qualified engineer to reconstruct why each output changes state.
Build one logic record per relay with the following fields:
| Logic field | What to record |
|---|---|
| Relay channel | Relay 1, 2, 3, or 4, using the installed naming convention |
| Logic expression | Complete approved AND/OR expression, including grouping |
| Source points | Rack slot, monitor channel, measurement or state name |
| Input type | Alert, Danger, Not OK, or PPL, exactly as configured |
| Voting or normal/true selection | The configured behavior and its approved design reference |
| Latching and reset behavior | Whether the relay latches, how it is reset, and who is authorized to reset it |
| Relay mode | Normally energized or normally de-energized as found |
| Configuration evidence | Export file, screenshot identifier, revision, date, and reviewer |
Do not simplify (A AND B) OR C to a prose note such as “high vibration trip.” The shortened description removes the very structure that determines how the relay behaves. Also record any unused or forced input, active inhibit, maintenance override, or logic discrepancy as an exception. Do not silently correct it during a supposedly like-for-like replacement.
After capturing the logic source, trace the output side. Use a point-to-point map that links the relay channel to the receiving system rather than a general note such as “goes to DCS.”
| Relay | Rear terminal/contact pair | Wire or cable ID | External source | Receiving system and point | Field function | Drawing revision |
|---|---|---|---|---|---|---|
| 1 | Record as found | Record as found | Identify AC/DC source or dry sensing circuit | DCS/ESD/annunciator tag | Approved function | Controlled reference |
| 2 | Record as found | Record as found | Identify AC/DC source or dry sensing circuit | DCS/ESD/annunciator tag | Approved function | Controlled reference |
| 3 | Record as found | Record as found | Identify AC/DC source or dry sensing circuit | DCS/ESD/annunciator tag | Approved function | Controlled reference |
| 4 | Record as found | Record as found | Identify AC/DC source or dry sensing circuit | DCS/ESD/annunciator tag | Approved function | Controlled reference |
The completed map exposes common replacement risks: wires landed on the correct terminal number but the wrong relay channel, an undocumented interposing relay, a shared external supply, a stale receiving-system tag, or a rear I/O module whose contact arrangement differs from the drawing.
“Normally open” and “normally closed” are not enough to describe the intended field behavior. The contact drawing may show the de-energized hardware state, while the process design may keep a relay energized during healthy operation. Power loss, a false logic result, and a true alarm demand can therefore produce different field interpretations.
Create a state-transition matrix before the swap. Fill it from the approved logic narrative, drawings, configuration, and controlled observations, not from assumptions.
| Test state | Logic result expected | Coil state expected | Contact pair expected | Receiving point expected | Acceptance reference |
|---|---|---|---|---|---|
| Rack powered, process normal | Site-defined | Site-defined | Site-defined | Normal/healthy indication | Cause-and-effect or logic narrative |
| Selected alarm input true | Site-defined | Site-defined | Site-defined | Alarm, interlock, or trip demand as designed | Approved test case |
| Input returns normal | Site-defined | Site-defined | Site-defined | Reset or remain latched as designed | Reset philosophy |
| Module or source Not OK | Site-defined | Site-defined | Site-defined | Fault response as designed | Protection design record |
| Rack or module power lost | Not assumed | De-energized | Verify actual contact result | Fail-safe or fault indication as designed | Electrical and cause-and-effect drawings |
| Bypass, inhibit, or test state | Site-defined | Site-defined | Site-defined | Controlled maintenance response | Approved maintenance procedure |
This matrix answers the question that a wording-only comparison cannot: will the receiving circuit see the same state during normal operation, a commanded alarm, a reset, a detected fault, and loss of power?
Relay output terminals can be connected to externally powered circuits even when the 3500 rack is de-energized. Before touching the rear I/O module or conductors, identify every source, obtain the required permit, apply the site's isolation and verification procedure, and prove the circuit state using approved test equipment.
The work pack should address:
Do not copy a voltage or contact-current value from a current 3500/32M datasheet into a legacy 125712-01 work order without confirming that the document, rear output module, approval option, load type, and installed application match. The current datasheet applies special restrictions to hazardous-area and functional-safety arrangements. The applicable manual and site engineering review must determine the permitted circuit values.
The system datasheet also distinguishes front modules from their corresponding rear I/O modules and states that I/O modules are not hot-swappable. No removal sequence is provided here. Follow the applicable OEM manual, the site's electrical-safety procedure, and the approved job plan for the exact rack configuration.
Stop the job if a wire identity is missing, two drawings disagree, an external source cannot be isolated, or the rear module label does not match the approved replacement basis. Photographs are helpful evidence, but they are not a substitute for verified wire and terminal identification.
Test one relay path at a time under an approved commissioning procedure. The purpose is to demonstrate that the documented source condition produces the expected logic result, physical contact transition, and receiving-system indication. It is not necessary or appropriate for every maintenance test to operate a final shutdown device; that boundary must be defined by the asset owner before the test begins.
A disciplined sequence is:
Record actual observations rather than “relay tested OK.” A useful channel record looks like this:
| Relay/test case | Source condition applied | Expected contact transition | Measured contact result | Receiving point result | Reset/result | Witness and time | Status/exception |
|---|---|---|---|---|---|---|---|
| 1 | Approved case ID | From state matrix | Actual observation | Actual tag/status | Actual behavior | Name/date/time | Pass or documented exception |
| 2 | Approved case ID | From state matrix | Actual observation | Actual tag/status | Actual behavior | Name/date/time | Pass or documented exception |
| 3 | Approved case ID | From state matrix | Actual observation | Actual tag/status | Actual behavior | Name/date/time | Pass or documented exception |
| 4 | Approved case ID | From state matrix | Actual observation | Actual tag/status | Actual behavior | Name/date/time | Pass or documented exception |
If the contact changes but the receiving point does not, keep the result open and troubleshoot the field circuit, interposing devices, power source, and receiving input. If the wrong relay changes, stop and compare the logic assignment, rack slot, and terminal map. A partial success must not be converted into full acceptance.
The supplier package should answer a relay-specific question: which four-channel unit is being supplied, which rear I/O hardware is included, and what contact behavior was actually observed before shipment? It must not imply that a loose-module test proves the site's Alarm Drive Logic or field circuit.
Specify the required package as a set of linked deliverables:
| Deliverable | Relay-specific content required | How the plant uses it |
|---|---|---|
| Offered-unit identity sheet | 125712-01, all visible revision markings, serial number, and photographs of the exact front card and connectors | Compares the received card with the approved earlier 3500/32 requirement |
| Inclusion statement | Front card only, or the exact rear I/O module and terminal hardware included; no implied accessories | Prevents the buyer from assuming the field termination assembly is part of the offer |
| Four-channel bench record | Relay 1 through Relay 4 listed separately; test fixture or setup; observed contact state before and during actuation; result, date, and unit serial number | Shows what was physically checked without extending the result to site logic |
| Exception record | Repair or refurbishment status and any label, connector, card-edge, relay-channel, or packaging exception | Directs incoming inspection to the condition that could affect installation or acceptance |
| Quotation release data | Available quantity, commercial condition, warranty/return basis, dispatch basis, and the evidence supplied before shipment | Aligns the purchase release with the actual offered unit rather than a catalog image |
The bench record should state its boundary plainly: observed contact operation is not proof of the installed Alarm Drive Logic, terminal wiring, external supply, receiving-system indication, or shutdown action. Those results belong in the site's channel test record.
For a useful RFQ, send us clear images of the installed 125712-01 front label and the rear output-module label, plus the rack slot, required approvals, quantity, destination country, and required-on-site date. If engineering review is requested, also provide the relay mapping and non-confidential configuration identifiers needed to compare the requirement. Do not send passwords or uncontrolled plant-sensitive files through an ordinary sales channel.
Use our 3500/32 125712-01 inquiry page to send the requirement. We will confirm the offered unit's availability, condition, included I/O, revision information, test scope, warranty, and shipping basis in the quotation.
You can also browse our Bently Nevada parts catalog or contact our team.
Use one end-to-end trace for each of the four outputs:
source condition -> Alarm Drive Logic -> relay command -> energized/de-energized state -> rear contact -> field wire -> receiving-system point
Every step needs an as-found reference and an as-left result. A matching 125712-01 label does not preserve the configured expression. A correct expression does not prove the contact is landed on the intended circuit. A bench contact test does not demonstrate the DCS, ESD, annunciator, interlock, or shutdown input.
Approve the replacement only when the front and rear hardware identities agree with the engineering basis, each output follows the documented state matrix, and the observed receiving point matches the point-to-point map. Any broken link in that chain remains an open commissioning exception.
Leave Your Comment