05000277/LER-2011-005

From kanterella
Jump to navigation Jump to search
LER-2011-005, Inoperability of Qualified Offsite Power Circuit due to Design Weakness
Peach Bottom Atomic Power Station (Pbaps) Unit 2
Event date:
Report date:
Reporting criterion: 10 CFR 50.73(a)(2)(i)(B), Prohibited by Technical Specifications
2772011005R00 - NRC Website

Unit Conditions Prior to the Discovery of the Event Unit 2 and Unit 3 were both in Mode 1 operating at approximately 100% rated thermal power when this event occurred in March 2010 and May 2010. There were no other structures, systems or components out of service that contributed to this event.

Description of the Event

On 11/16/11, Engineering personnel determined that a condition prohibited by Technical Specifications (TS) occurred as a result of two time periods within the last three years where the alignment of the two qualified circuits (EllS: EA) between the offsite transmission network and the onsite Class 1E AC electrical power distribution system did not comply with the NRC General Design Criterion (GDC) 17 (10CFR 50 Appendix A) concerning electric power systems.

This concern was initially identified by Engineering personnel on 10/26/11. Contrary to GDC 17, alignments of the two qualified circuits to the station credited for TS compliance did not minimize, to the extent practical, their simultaneous failure under postulated operating and environmental conditions. It was determined that a lack of separation occurred due to the auxiliary power supply (EllS: JX) to the two credited offsite power source transformers (i.e., the 00X011 and 00X005 transformers) being provided from a common power source. Therefore, when these two transformers (ENS: XFMR) were credited simultaneously for the two TS required offsite circuits, one of the transformers would have needed to be considered inoperable.

TS Limiting Condition for Operation (LCO) 3.8.1, AC Sources — Operating, requires that there be two qualified circuits between the offsite transmission network and the Unit 2 and Unit 3 on- site Class 1 E AC Electrical Power Distribution System. With one offsite circuit inoperable, the inoperable circuit must be returned to an operable status within 7 days or the unit must be brought to a hot shutdown condition with 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. Because the 00X011 and 00X005 transformers were simultaneously credited for the two TS operable offsite circuits for two time periods that exceeded 7 days (3/18/10 — 3/26/10 and 5/10/10 — 5/28/10), there were two occasions where TS compliance was not met. A third time period (during the last 3 years) existed between 3-7/10 — 3/8/10, but did not exceed the 7 days required action time for one qualified offsite circuit being inoperable.

Analysis of the Event

This report is being submitted pursuant to:

10CFR 50.73(a)(2)(i)(B) — Condition Prohibited by Technical Specifications — Because of the crediting of the 00X011 and 00X005 transformers for the two TS operable offsite circuits for two time periods that exceeded 7 days (3/18/10 — 3/26/10 and 5/10/10 - 5/28/10), there were two occasions where TS compliance was not met. TS LCO 3.8.1, Analysis of the Event, continued AC Sources — Operating, requires that there be two qualified circuits between the offsite transmission network and the Unit 2 and Unit 3 on-site Class 1 E AC Electrical Power Distribution System. With one offsite circuit inoperable, the inoperable circuit must be returned to an operable status within 7 days or the unit must be brought to a hot shutdown condition with 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br />. Because the two time periods (3/18/10 — 3/26/10 and 5/10/10 — 5/28/10) exceeded the allowed Required Action times of the TS, this event was determined to be a condition prohibited by TS.

Two qualified circuits between the offsite transmission network and the onsite Class 1E Distribution System and four separate and independent Diesel Generators ensure availability of the required power to shut down the reactor and maintain it in a safe shutdown condition after an abnormal operational transient or a postulated design basis event. There are three independent sources of offsite power. One source is an overhead 230 kV transmission line which is stepped down to 13 kV by the 2SU startup transformer (00X003). The second source is the 230 kV overhead transmission line that is stepped down to 13 kV by the 343 startup transformer (00X011). The third source is from the tertiary winding of the #1 autotransformer (which connects the 500 kV system to the 230 kV system transmission lines) that is stepped down to 13 kV by the 3SU startup transformer (00X005).

For limited time periods when using the 00X005 and 00X011 transformers as the startup sources to feed the two TS qualified offsite circuits, a GDC 17 separation concern existed. It was determined that a lack of separation occurred due to the auxiliary power supply to the two credited offsite power source transformers (i.e., the 00X011 and 00X005 transformers) being provided from a common power source. Therefore, when these two transformers were credited simultaneously for the two TS required offsite power circuits, one of the transformers would have needed to be considered inoperable. The auxiliary power operates the transformer load tap changers as well as the cooling fans and therefore, provides power to equipment that is required to maintain the transformers operable. However, this common auxiliary power supply is equipped with redundant feeds. In the event the normal feed was lost, automatic switchover to a backup auxiliary power feed would have occurred. Although this auxiliary power backup feature provides substantial assurance that a loss of auxiliary power would not happen concurrently to the 00X005 and 00X011 transformers, it could not be credited as meeting GDC 17 since separate auxiliary power feeds were not supplying the two transformers.

There were no actual safety consequences associated with this event. During the time periods of exposure, there were no design basis events and no challenges to the offsite power circuits.

Had a design basis event occurred during the time period of exposure, assurance exists that the control power would have been available due to the robust nature of the backup power to the auxiliary power bus.

Cause of the Event

The cause of the event was attributed to an inadequate design of the auxilliary power to the 00X011 transformer. In order to upgrade the reliability of the offsite sources, the 00X011 was installed in the mid-1990s to provide the station with a third independent offsite power source that could be made available to feed a TS offsite power circuit. Although the auxiliary power to the transformer was designed to have a robust backup, it was not designed in a manner that assured separation with the 00X005 transformer to minimize, to the extent practical, the likelihood of a simulataneous failure of the 00X005 and 00X011 transformers. This condition affected the auxiliary power power supply that feeds the load tap changers for the 00X005 and 00X011 transformers and not the separation of the transformers themselves.

Corrective Actions

Interim controls have been established to ensure that the 00X005 and 00X011 are not simulateously credited as part of the two TS operable offsite power circuits.

Procedural and / or design changes will be performed as part of the corrective action program to ensure that GDC 17 criteria is met.

Previous Similar Occurrences There were no previous events identified involving an inoperable offsite power circuit as a result of a design weakness.