Silencing Burner Alarm Buzzer with Push Button Ladder Logic

Overview

Industrial burner control systems rely on audible and visual alarms to alert operators of unsafe conditions such as flame failure, air pressure loss, ignition failure, or limit-trip events. The sequence controller driving these alarms — whether a Siemens LFL 1.333 oil-burner sequencer or a Honeywell EC7850 microprocessor-based burner control — typically presents a permanent fault output that energizes a fault lamp or buzzer through a dry-contact terminal.

While the fault indication must be unmistakable, sustained nuisance buzzer activation during troubleshooting or transient upsets degrades operator response. The standard remediation is an acknowledge / silence circuit implemented in the supervisory PLC: a normally-open push button latches an internal memory bit that parallels the alarm contact and drives the buzzer. The latch holds the buzzer OFF as long as the alarm contact remains closed, and resets automatically once the alarm clears and the operator presses reset, or alternatively re-arms with the next alarm edge.

This article walks through the burner-control hardware, the buzzer-silence ladder pattern, multi-platform implementations (Siemens S7-200/S7-1200, Allen-Bradley MicroLogix/CompactLogix, Schneider Modicon M340), wiring practices, commissioning checks, and a troubleshooting matrix. Field-proven conventions for fail-safe behavior on burner safety chains are highlighted because silencing the annunciator must never silence the safety interlock itself.

Burner Control Alarm Architecture

Both the Siemens LFL family and the Honeywell EC78xx family expose a dedicated alarm terminal. Understanding what that terminal represents is the first step in designing a correct acknowledge circuit.

Siemens LFL 1.333 Sequence Controller

The Siemens LFL 1.333 is an oil-burner sequence controller designed for intermittent operation in accordance with EN 230 and EN 298. It performs the classic burner startup sequence:

1. Pre-purge (t1) with air-pressure proving
2. Pre-ignition (t3)
3. Pilot ignition (t3′)
4. Main flame establishment (t4)
5. Run (operating position)
6. Lockout on flame failure, air-pressure failure, or limit-trip

On lockout, terminal 9 (alarm output) closes to terminal 11 (line/ground), supplying a permanent fault signal that is intended to drive a remote buzzer or fault lamp through a series load. Because this output is permanent until manual reset at the LFL unit, any PLC-based silence circuit must treat the LFL alarm contact as a non-volatile fault indicator that must not be interlocked into the safety path itself.

Honeywell EC7850 Burner Control

The Honeywell EC7850 belongs to the 7800 SERIES burner control family. The EC7850 supports modulation, parallel positioning, and incorporates a non-volatile lockout memory. The alarm output is available at the keyboard display module (S7800) or via the optional Q7800A/B sub-base wiring terminals (typically terminal 3 or 5 depending on configuration). Like the LFL, the EC7850 alarm contact is closed during lockout and opens only on manual reset or successful restart.

The standard published circuit in Honeywell literature for an EC7850 / EC7850A burner system drives the alarm buzzer directly off this contact with no acknowledge. Adding a PLC-managed acknowledge requires only that the buzzer be sourced through a PLC output driven by the acknowledge logic, while the alarm contact itself feeds a PLC input.

Why a Latch is Required

A naive implementation — Alarm NOT AND PB — does not work because the alarm contact remains closed during the entire lockout condition. The push button would only silence the buzzer while pressed. The accepted field pattern uses an OR-latch (set-dominant or reset-dominant memory bit) that:

• Sets when the operator presses the silence PB
• Resets when the alarm clears AND the operator presses reset, OR
• Resets when a fresh alarm edge arrives (operator must re-acknowledge)

Prerequisites

Before programming the silence circuit, verify the following:

1. PLC platform confirmed — Identify the supervisory PLC controlling the burner. The original LFL 1.333 + burner control panels are commonly paired with Siemens S7-200 (CPU 224/226), S7-1200 (CPU 1214C/1215C), Allen-Bradley MicroLogix 1100/1400, CompactLogix 5380, or Schneider Modicon M340 BMX series.
2. Alarm I/O mapped — The LFL or EC7850 alarm contact is wired to a digital input (e.g., I0.0 on S7-200, %I0.1.0 on Modicon M340, or local:1:I.Data.0 on CompactLogix).
3. Silence push button wired — A normally-open momentary push button wired to a digital input. Use a maintained PB only if your safety review accepts it; momentary is preferred for fail-safe behavior.
4. Buzzer output available — A discrete output rated for the buzzer coil (typically 24 VDC at 50–200 mA, or 115 VAC at the LFL terminal strip).
5. Reset push button wired — Optional but recommended. A second NO PB that re-arms the latch when the alarm clears.
6. Documentation — Obtain the latest revision of the burner control installation instructions and the PLC project documentation. Ladder changes affecting burner annunciation should be reviewed by the plant's combustion safety officer.

Ladder Logic Implementation

The canonical acknowledge circuit is a 3-rung network. Rung 1 sets the latch on either alarm or silence PB. Rung 2 resets the latch when alarm is clear and reset PB is pressed. Rung 3 drives the buzzer output through the negated latch bit.

Siemens S7-200 / S7-1200 Implementation (STEP 7-Micro/WIN or TIA Portal)

|     Alarm     Silence_PB          M_Silence       |
|----| |--------| |-----------------(S)-------------|
|                                              M0.0|

|     M_Silence     Alarm_INV       Reset_PB        |
|----| |------------| / |-----------| |------------(R)-----|
|                                                M0.0|

|     NOT Alarm     NOT M_Silence               Buzzer|
|----| / |----------| / |-----------------------( )-----|
|                                          Q0.0       |

Symbol table:

Note: Rung 3 uses both NOT Alarm AND NOT M_Silence as a permissive. This means the buzzer is silent when either the alarm is acknowledged or the fault has cleared. This is the recommended field practice because it prevents the buzzer from re-sounding on every alarm edge without operator intervention, but still auto-restores annunciation if a new fault condition appears after the operator has reset.

Allen-Bradley MicroLogix / SLC 500 (RSLogix 500)

        I:1/0        I:1/1                B3:0/0
------| |----------| |----------------( L )------
        B3:0/0       I:1/2        I:1/3
------| |----------| |----------| |----( U )------
        I:1/0       B3:0/0                   O:2/0
------|/|----------|/|--------------------( )------

The (L) instruction is the RSLogix 500 latching output (equivalent to OTL); (U) is unlatch (OTU). MicroLogix 1100/1400 processors accept this instruction set identically. For CompactLogix on RSLogix 5000 / Studio 5000, the equivalent uses an OTE within an OR-latch subroutine or a single ONS with seal-in logic:

        Local:1:I.Data.0      Local:1:I.Data.1
------| |------------------| |------+--------+
        SilencePB_ONS                             |
------| |---------------------------------(OTL)----|
                                         Silence_Latch

        Local:1:I.Data.0     Local:1:I.Data.2
------|/|------------------| |-----------------+
        Silence_Latch                             |
------| |---------------------------------(OTU)----|

Schneider Modicon M340 / M221 (Unity Pro / EcoStruxure Control Expert)

|     %I0.1.0     %I0.1.1            %M0       |
|----| |----------| |--------------( S )-------|
|                                         %M0|

|     %M0         %I0.1.0     %I0.1.2        |
|----| |----------|/|----------| |----------( R )-----|
|                                          %M0|

|     %I0.1.0     %M0                       |
|----|/|----------|/|-------------( )-------|
|                                  %Q0.5.0  |

Unity Pro's S and R coils are the standard set/reset bifunctional coils; they correspond to the IEC 61131-3 idioms. EcoStruxure Control Expert (formerly Unity Pro) on Windows or the M221 SoMachine Basic / EcoStruxure Machine Expert Basic uses identical operand syntax.

Step-by-Step Procedure (S7-1200 / TIA Portal)

1. Create a project in TIA Portal V17 or later for the target S7-1200 CPU. Add the device configuration matching the rack.
2. Define PLC tags in the PLC tag table. Add Alarm_IN (Bool, %I0.0), Silence_PB (Bool, %I0.1), Reset_PB (Bool, %I0.2), Silence_Latch (Bool, %M0.0), and Buzzer_OUT (Bool, %Q0.0).
3. Create FB100 "Buzzer_Ack" with the input/output interface as described. This encapsulates the logic and allows reuse across multiple burner zones.
4. Insert the three rungs as shown in the Siemens ladder example above. Verify the S and R coils are bound to Silence_Latch.
5. Configure the buzzer output as a PNP sourcing output on the SM1223 module if the buzzer is 24 VDC. For 115 VAC buzzers, use an interposing relay (e.g., Phoenix Contact PLC-OSC-24DC/230AC) driven by Q0.0.
6. Compile and download the program. Perform a STOP-to-RUN transition and verify the I/O mapping in the online view.
7. Force-test the logic: Force Alarm_IN = TRUE and observe the buzzer sounds. Press the silence PB; the buzzer should silence. Release the PB; the buzzer remains off. Clear Alarm_IN and press reset; the latch should release and the circuit re-arms.

Wiring and Interfacing to the Burner Control

Most field installations isolate the LFL or EC7850 alarm terminal from the PLC input with a small interposing relay to avoid ground loops and to provide a clean 24 VDC signal back to the PLC. The recommended wiring topology:

For 24 VDC buzzer coils drawing under 400 mA, the PLC output can source directly. For higher-current or 115 VAC buzzers, the PLC output drives an interposing relay whose contacts switch the buzzer supply. Never place the silence PB or latch logic in series with the LFL safety output — that output is reserved for the burner control's own internal safety chain.

Verification and Commissioning

Every change to burner annunciation must be verified against a documented test procedure. The following checks are recommended at commissioning and after any program revision:

1. Power-up self-test: With the burner in a safe (off, no lockout) state, verify the buzzer is silent and the silence/reset PB inputs read FALSE in the PLC online monitor.
2. Forced alarm test: Force Alarm_IN = TRUE from the PLC. Confirm the buzzer sounds within one PLC scan (≤50 ms for S7-1200, ≤100 ms for MicroLogix).
3. Silence test: While the alarm is forced active, press the silence PB. The buzzer must silence and remain silent for at least 30 seconds after the PB is released.
4. Reset / re-arm test: Clear the forced alarm, press reset, confirm the latch releases. Then re-trigger the alarm and confirm the buzzer sounds again without requiring a second silence press.
5. Real LFL lockout test: With the burner safely cool and fuel isolated, induce a real lockout (e.g., remove flame signal). Confirm the PLC sees the LFL alarm contact close, the buzzer sounds, and the silence logic behaves as designed. Restore the LFL by pressing the manual reset on the LFL unit.
6. Power-loss test: Remove power to the PLC. Restore power. The silence latch must default to FALSE so the buzzer is re-armed. If non-retentive behavior is required (recommended for burner annunciation), the latch must reside in a non-retentive (M) memory area, not in a retentive area, unless explicitly required otherwise.

Troubleshooting Matrix

Safety Considerations

Several points warrant explicit attention because they fall outside the programming task but are routinely encountered during field installation:

• Do not place the silence latch inside the burner safety chain. The LFL or EC7850 manages flame proving, air-pressure proving, and fuel valve interlocks. The PLC silence circuit must only suppress the audible annunciator; it must never inhibit the lockout function of the burner controller itself.
• Use a latching silence, not a muting one. If the design calls for the buzzer to mute only while the PB is held, an operator who releases the PB will be startled by the loud alarm, which can cause unsafe actions near live burner equipment. The recommended approach is a memory-bit latch that holds silence until reset.
• Document the change in the combustion safety file. Plant insurance carriers and authority-having jurisdictions (NFPA 85, NFPA 86, EN 50156-1) require that any modification affecting burner annunciation be reviewed and approved by a competent combustion engineer. The ladder change should be filed with the plant's Management of Change (MOC) record.
• Verify fail-safe wiring. If the silence PB is wired such that a wire break silences the buzzer, the operator may not be alerted to a fault. Wire the silence PB so that loss of the PB signal defaults to the buzzer ON, and only an explicit closed PB sets the latch. For Siemens S7-1200, this can be implemented using the negated input contact in rung 1 of the set logic.
• Retentive vs non-retentive behavior. For burner annunciation, non-retentive is preferred: a power loss followed by restoration should re-arm the alarm system, not preserve a stale silence state.

Alternate Patterns and Extensions

Multiple Alarm Inputs with Priority

Many burner installations accumulate more than one fault source — flame failure, high gas pressure, low air pressure, high temperature limit. A scalable pattern uses an OR-gate of all alarm contacts driving a single Alarm_Any tag, which then feeds the silence latch. This keeps the acknowledge logic simple while preserving the alarm-specific fault memory elsewhere in the program.

Silence with Timeout

If plant policy requires the buzzer to re-sound after a fixed period (for example, 30 minutes) so the operator is reminded of the unresolved fault, add an off-delay timer to the reset rung:

      Silence_Latch                 Silence_TON_DB
-----| |--------------------------[TON]---(IN)
                                     PT := T#30m
        Silence_Latch     Silence_TON_DB.Q    Reset_PB
-----| |-----------------| |----------------| |----(R)
                                              Silence_Latch

After 30 minutes the timer expires, Silence_TON_DB.Q asserts, and the latch resets — the buzzer sounds again until the operator re-acknowledges or the underlying alarm clears.

HMI Integration

Most modern burner panels include an HMI — for example, a Siemens KTP700 Basic on a S7-1200 system, a PanelView Plus 7 on a CompactLogix system, or a Magelis HMISTU on a Schneider system. Expose Silence_Latch, Alarm_Any, and a "Silence Active" indicator on the HMI so the operator can confirm the silence state visually without relying solely on audible feedback.

Field-Proven Caveats

Three issues show up repeatedly in field service reports that are worth calling out explicitly:

1. Push button contact bounce. Industrial PB contacts bounce for 5–20 ms. S7-1200 default input filter of 6.4 ms handles this, but MicroLogix 1100/1400 at default 8 ms is at the edge. If the silence logic is observed to latch and immediately unlatch, increase the input filter to 20 ms or add an ONS (one-shot rising) instruction in front of the S coil.
2. Cross-talk from VFD cables. Burner installations frequently share the cabinet with the air-handler VFD. Route the silence PB and alarm input conductors in shielded cable, grounded at the PLC end only, and keep at least 150 mm of separation from VFD output conductors.
3. Buzzers drawing inrush current. Piezo buzzers typically present a high inrush that can weld the contacts of small interposing relays. Specify an interposing relay rated for at least 10 A inrush, or use a solid-state relay (SSR) such as the Phoenix Contact PLC-OSC series or Schneider Harmony SSL.