ML021990388

Quad-Cities Units 1 & 2, Technical Specification Pages Re AC Sources - Operation 3.8.1 Surviellance Requirements

ML021990388
Person / Time
Site:	Quad Cities
Issue date:	07/17/2002
From:	Office of Nuclear Reactor Regulation
To:
References
Download: ML021990388 (14)

Text

Sources-Operating SC 3.8.1 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.1.7 Check for and remove accumulated water from 92 days each bulk storage tank.

SR 3.8.1.8 ------------------- NOTES ------------------

1. All DG starts may be preceded by an engine prelube period.

2. A single test of the common DG at the specified Frequency will satisfy the Surveillance for both units.

Verify each DG starts from standby 184 days condition and achieves:

a. In

• 13 seconds, voltage Ž 3952 V and frequency Ž 58.8 Hz; and

b. Steady state voltage Ž 3952 V and

• 4368 V and frequency Ž 58.8 Hz and

• 61.2 Hz.

SR 3.8.1.9 Verify manual transfer of unit power supply 24 months from the normal offsite circuit to the alternate offsite circuit.

(continued)

Quad Cities 1 and 2 3.8.1-8 Amendment No. 206/202

C Scurces-Ooera3.3.8.1 r

SURVEIILANCE REQUIREMENTS FREQUENCY SURVEI LLANCE SR 3.8.1.12 ------------------- NOTE -------------------

All DG starts may be preceded by an engine prelube period.

Verify on an actual or simulated loss of 24 months offsite power signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses; and

c. DG auto-starts from standby condition and:

1. energizes permanently connected loads in ! 13 seconds,

2. maintains steady state voltage

> 3952 V and

• 4368 V,

3. maintains steady state frequency

> 58.8 Hz and

• 61.2 Hz, and

4. supplies permanently connected loads for Ž 5 minutes.

(continued)

Amendment No. 206/202 Quad Cities 1 and 2 3.8.1-10

AC SoD:es-OperaU

• 3.8.1 IIP\IRII (ZHPV PT1I1AN('

ANflR P PFni ITPFMFNTr-,

PFOJITPFMRdTS SURVEILLANCE FREQUENCY t

SR 3.8.1.13 ------------------- NOTE -------------------

All DG starts may be preceded by an engine prelube period.

Verify on an actual or simulated Emergency 24 months Core Cooling System (ECCS) initiation signal each DG auto-starts from standby condition and:

a. In : 13 seconds after auto-start, achieves voltage Ž 3952 V and frequency Ž 58.8 Hz;

b. Achieves steady state voltage _ 3952 V and < 4368 V and frequency 2 58.8 Hz and

• 61.2 Hz; and

c. Operates for Ž 5 minutes.

SR 3.8.1.14 Verify each DG's automatic trips are 24 months bypassed on actual or simulated loss of voltage signal or iergency bus concurrent with - -al or simulated ECCS initiation signal except:

a. Engine overspeed; and

b. Generator differential current.

(continued)

Quad Cities 1 and 2 3.8.1-11 Amendment No. 206/202

<C Sour:es-Operat3 g 3.8.1 SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.1.16 ------------------- NOTES ------------------

1. This Surveillance shall be performed within 5 minutes of shutting down the DG after the DG has operated > 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> loaded > 2340 kW.

Momentary transients below the load limit do not invalidate this test.

2. All DG starts may be preceded by an engine prelube period.

3. A single test of the common DG at the specified Frequency will satisfy the Surveillance for both units.

Verify each DG starts and achieves: 24 months

a. In < 13 seconds, voltage >_3952 and I frequency > 58.8 Hz; and

b. Steady state voltage > 3952 V

_<4368 V and frequency _>58.8 hz *nd

<_61.2 Hz.

SR 3.8.1.17 Verify each DG: 24 months

a. Synchronizes with offsite power source Ahile loaded with emergency loads upon a simulated restoration of offsite power;

b. Transfers loads to offsite power source; and

c. Returns to ready-to-load operation.

(continued)

Quad Cities 1 and 2 3.8.1-13 Amendment No. 206/202

bOUfl2S-OP erat -IJ 3.8.1 SURVEILLANCE REQUIREMENTS FREQUENCY SURVE I LLANCE SURVEILLANCE REQUIREMENTSSURVEILLANCE I

SR 3.8.1.18 Verify interval between each sequenced load 24 months block is Ž 90% of the design interval for each load sequence time delay relay.

I SR 3.8.1.19 -------------------NOTE -------------------

All DG starts may be preceded by an engine prelube period.

Verify, on an actual or simulated loss of 24 months offsite power signal in conjunction with an actual or simulated ECCS initiation signal:

a. De-energization of emergency buses;

b. Load shedding from emergency buses; and

c. DG auto-starts from standby condition and:

1. energizes permanently connected loads in

• 13 seconds,

2. energizes auto-connected emergency loads including through time delay relays, where applicable,

3. maintains steady state voltage

Ž3952 V and

• 4368 V,

4. maintains steady state frequency

Ž 58.8 Hz and

• 61.2 Hz, and

5. supplies permanently connected and auto-connected emergency loads for Ž 5 minutes.

(conti nueG)

(continued)

Quad Cities 1 and 2 3.8.1-14 Amendment No. 206/202

-. Squrcns-Operat: ýq SURVEILLANCE REQUIREMENTS SURVEILLANCE FREQUENCY SR 3.8.1.20 ------------------- NOTE -------------------

All DG starts may be preceded by an engine prelube period.

Verify, when started simultaneously from 10 years standby condition, each DG achieves, in

_< 13 seconds, voltage >_3952 V and frequency > 58.8 Hz.

SR 3.8.1.21 ------------------- NOTE -------------------

When the opposite unit is in MODE 4 or 5, or moving irradiated fuel assemblies in secondary containment, the following opposite unit SRs are not required to be performed: SR 3.8.1.3, SR 3.8.1.10 through SR 3.8.1.12, and SR 3.8.1.14 through SR 3.8.1.17.

For required opposite unit AC electrical In accordance power sources, the SRs of the opposite with applicable unit's Specification 3.8.1, except SRs SR 3.8.1.9, SR 3.8.1.13, SR 3.8.1.18, SR 3.8.1.19, and SR 3.8.1.20, are applicable.

Quad Cities 1 and 2 3.8.1-15 Amendment No. 206/202

ECCS Irs:'rumen atý on B 3.3.5.I BASES BACKGROUND Diesel Generators (continued) monitored by four redundant differential pressure instruments and the Drywell Pressure-High variable is is monitored by four redundant pressure switches. The output of each switch/instrument is connected to relays whose contacts are connected to two trip systems. Each trip system is arranged in a one-out-of-two taken twice logic.

One trip system starts the unit DG and the other trip system starts the common DG (DG 1/2). The DGs receive their initiation signals from the CS System initiation logic. The DGs can also be started manually from the control room and locally from the associated DG room. Upon receipt of a loss of coolant accident (LOCA) initiation signal, each DG is automatically started, is ready to load in approximately 13 seconds, and will run in standby conditions (rated voltage and speed, with the DG output breaker open). The DGs will only energize their respective Essential Service System (ESS) buses if a loss of offsite power occurs (Refer to Bases for LCO 3.3.8.1).

APPLICABLE The actions of the ECCS are explicitly assumed in the safety SAFETY ANALYSES, analyses of References 1, 2, and 3. The ECCS is initiated LCO, and to preserve the integrity of the fuel cladding by limiting APPLICABILITY the post LOCA peak cladding temperature to less than the 10 CFR 50.46 limits.

ECCS instrumentation satisfies Criterion 3 of 10 CFR 50.36(c)(2)(ii). Certain instrumentation Functions are retained for other reasons and are described below in the individual Functions discussion.

The OPERABILITY of the ECCS instrumentation is dependent upon the OPERABILITY of the individual instrumentation channel Functions specified in Table 3.3.5.1-1. Each Function must have a required number of OPERABLE channels, with their setpoints within the specified Allowable Values, where appropriate. The actual setpoint is calibrated consistent with applicable setpoint methodology assumptions.

Table 3.3.5.1-1, footnote (b), is added to show that certain ECCS instrumentation Functions are also required to be OPERABLE to perform DG initiation.

• (continued)

B 3.3.5.1-9 Revi si on Quad Cities 1 and 2

4C SoQPrces-Oeratrg B 3.5.1 BASES LCO Each offsite circuit from the 345 kV switchyard must be (continued) capable of maintaining rated frequency and voltage, and accepting required loads during an accident, while connected to the 4160 V ESS buses. An offsite circuit to each unit consists of the incoming breaker and disconnect to the respective 12 and 22 RATs, RATs 12 and 22, and the respective circuit path including feeder breakers to 4160 V ESS buses. A qualified circuit does not have to be connected to the ESS bus (i.e., the main generator can be connected to the ESS bus) as long as the capability to fast transfer to the qualified circuit exists. The other qualified offsite circuit for each unit is provided by a bus tie between the corresponding ESS buses of the two units.

The breakers connecting the buses must be capable of closure. For Unit 1, LCO 3.8.1.a is met if RAT 12 is capable of supplying ESS buses 13-1 and 14-1 and if RAT 22 (or UAT 21 on backfeed) can supply ESS bus 13-1 via ESS bus 23 and 23-1 and the associated bus tie or ESS bus 14-1 via ESS bus 24 and 24-1 and the associated bus tie. For Unit 2, LCO 3.8.1.a is met if RAT 22 can supply ESS buses 23-1 and 24-1 and if RAT 12 (or UAT 11 on backfeed) can supply ESS bus 23-1 via ESS bus 13 and 13-1 and the associated bus tie or ESS bus 24-1 via ESS bus 14 and 14-1 and the associated bus tie. For Unit 1, LCO 3.8.1.c is met if RAT 22 (or UAT 21 on backfeed) is capable of supplying ESS bus 29 to support equipment requi.cd by LCO 3.6.4.Z. For Unit 1, LCO 3.8.1.c is met if RAT 12 (or UAT 11 on backfeed) is capable of supplying ESS bus 19, to support equipment required by LCO 3.6.4.3, and supplying ESS bus 18, to support equipment required by LCO 3.7.4 and LCO 3.7.5.

The respective unit DG and common DG must be capable of starting, accelerating to rated speed and voltage, and connecting to its respective 4160 V ESS bus on detection of bus undervoltage. This sequence must be accomplished within 13 seconds. Each respective unit DG and common DG must also I be capable of accepting required loads within the assumed loading sequence intervals, and must continue to operate until offsite power can be restored to the 4160 V ESS buses.

These capabilities are required to be met from a variety of initial conditions, such as DG in standby with the engine hot and DG in standby with the engine at ambient condition.

Additional DG capabilities must be demonstrated to meet required Surveillances. Proper sequencing of loads, including tripping of nonessential loads, is a required function for DG OPERABILITY.

(continued)

B 3.8.1-5 Revi si on Quad Cities 1 and 2

AC Sources-Operating B 3.8.1 BASES LCO The opposite unit's DG must be capable of starting, (continued) accelerating to rated speed and voltage, and connecting to its Division 2 Class 1E AC electrical power distribution subsystem on detection of bus undervoltage. This sequence must be accomplished within 13 seconds and is required to be met from the same variety of initial conditions specified for the respective unit and shared DGs. For Unit 1 to meet LCO 3.8.1.d, DG 2 must be capable of supplying ESS bus 24-1 on a loss of power to the bus in order to supply ESS bus 29 to support equipment required by LCO 3.6.4.3. Similarly, for Unit 2 to meet LCO 3.8.1.d, DG 1 must be capable of supplying ESS bus 14-1 on a loss of power to the bus in order to supply ESS bus 19, to support equipment required by LCO 3.6.4.3, and to supply ESS bus 18, to support equipment required by LCO 3.7.4 and 3.7.5.

In addition, fuel oil storage and fuel oil transfer pump requirements must be met for each required DG.

The AC sources must be separate and independent (to the extent possible) of other AC sources. For the DGs, the separation and independence are complete. For the offsite AC sources, the separation and independence are to the extent pract4cal. A qualified circuit may be connected to both divisions of either unit, with manual transfer capability to the other circuit OPERABLE, and not violate separation criteria. A qualified circuit that is not connected to the 4160 ESS buses is required to have OPERABLE manual transfer capability to the 4160 ESS buses to support OPERABILITY of that qualified circuit.

APPLICABILITY The AC sources are required to be OPERABLE in MODES 1, 2, and 3 to ensure that:

a. Acceptable fuel design limits and reactor coolant pressure boundary limits are not exceeded as a result of AQOs or abnormal transients; and

b. Adequate core cooling is provided and containment OPERABILITY and other vital functions are maintained in the event of a postulated DBA.

(continued)

B 3.8.1-6 Revi si on Quad Cities 1 and 2

BASES SR 3.8.1.2 and SR 3 .8. 1 .8 (continued)

SURVEILLANCE REQUIREMENTS the In order to reduce stress and wear on diesel engines, start in which the manufacturer has recommended a modified is limited to this starting speed of DGs is limited, warmup to lower speed, and the DGs are gradually accelerated synchronous speed prior to loading. These start procedures are the intent of Note 2 of SR 3.8.1.2.

the DG SR 3.8.1.8 requires that, at a 184 day Frequency, and achieves required voltage starts from standby conditions The 13 second start and frequency within 13 seconds.

basis requirement supports the assumptions in the design 6.3 (Ref. 14). The LOCA analysis of UFSAR, Section SR 3.8.1.2 13 second start requirement is not applicable to modified start procedure (see Note 2 of SR 3.8.1.2), when a If a modified start is not as described above is used.

SR 3.8.1.8 applies.

used, the 13 second start requirement of it is more Since SR 3.8.1.8 does require a 13 second start, in lieu restrictive than SR 3.8.1.2, and it may be performed of SR 3.8.1.2.

In add DG is required to maintain proper voltage The and frequency limits after steady state is achieved.

within voltage and frequency limits are normally achieved The time for the DG to reach steady state 13 seconds.

is employed, operation, unless the modified DG start method the trend evaluated to is periodically monitored and identify degradation of governor and voltage regulator performance.

SR 3.8.1.2 To minimize testing of the common DG, Note 3 of single test of the common and Note 2 of SR 3.8.1.8 allow a unit) to satisfy the DG (instead of two tests, one for each since the main requirements for both units. This is allowed the performing purpose of the Surveillance can be met by practicable, test on either unit. However, to the extent If the DG the tests should be alternated between units.

be fails one of these Surveillances, the DG should on both units, unless the cause of the considered inoperable failure can be directly related to only one unit.

with The 31 day Frequency for SR 3.8.1.2 is consistent The 184 day Frequency for Regulatory Guide 1.9 (Ref. 10).

(continued) 0 in 10.O.1-Revision Quad Cities 1 and 2

'j BASES SURVEI LLANCE SR 3.8.1.11 ,cont inueC REQUI REMDENTS This SR is modified 0t e s nte. g of i zit eisettestn DG the common DG, Note I allows a single test of the common the (instead of two tests, one for each onit' to satisfy requirements for both units. This is allowed since the main purpose of the Surveillance can be met by performing the test on either unit. If the DG fails one of these on Surveillances, the DG should be considered inoperable failure can be directly both units, unless the cause of the related to only one unit. Note 2 modifies this Surveillance by stating that momentary transients outside the voltage limit do not invalidate this test.

SR 3.8.1.12 Consistent with Regulatory Guide 1.9 (Ref. 10),

as paragraph C.2.2.4, this Surveillance demonstrates the loss designed operation of the standby power sources during of the offsite source. This test verifies all actions encountered from the loss of offsite power, including of the shedding of the nonessential loads and energization loads from the DG. It emergency buses and respective further demonstrates the capability of the DG to automatically achieve the required voltage and frequency within the specifies time.

The DG auto-start and energizati on ved of permanently connected from requirements of the loads time of 13 seconds is deri to a design basis large I

accident analysis for responding illance should be continued break LOCA (Ref. 14). The Surve der to demonstrate that all for a minimum of 5 minutes in or and stability has been starting transients have decayed achieved.

The requirement to verify the connection and power supply of permanently connected loads is intended to satisfactorily show the relationship of these loads to the DG loading logic. In certain circumstances, many of these loads cannot or actually be connected or loaded without undue hardship potential for undesired operation. For instance, a component or system may be out-of-service and closure of its (continued)

B 3.8.1-26 Revision Quad Cities 1 and 2

AC Soces-Operatflg AC S*D-rces-Operating B 3.8.I BASES SURVEILLANCE SR 3.8.1.12 (continued)

REQUI REMENTS associated breaker during this test may damage the component or system. In lieu of actual demonstration of the connection and loading of these loads, testing that adequately shows the capability of the DG system to perform these functions is acceptable. This testing may include any series of sequential, overlapping, or total steps so that the entire connection and loading sequence is verified.

The Frequency of 24 months takes into consideration plant conditions required to perform the Surveillance, and is intended to be consistent with expected fuel cycle lengths.

This SR is modified by a Note. The reason for the Note is to minimize wear and tear on the DGs during testing. For the purpose of this testing, the DGs shall be started from standby conditions, that is, with the engine coolant and oil being continuously circulated and temperature maintained consistent with manufacturer recommendations.

SR 3.8.1.13 Consistent with Regulatory Guide 1.9 (Ref. 10), paragraph C.2.2.5, this Surveillance demonstrates that the DG automatically starts and achieves the required voltage and frequency within the specified time (13 seconds) from the design basis actuation signal (LOCA signal). In addition, the DG is required to maintain proper voltage and frequency limits after steady state is achieved. The time for the DG to reach the steady state voltage and frequency limits is periodically monitored and the trend evaluated to identify degradation of governor and voltage regulator performance.

The DG is required to operate for > 5 minutes. The 5 minute period provides sufficient time to demonstrate stability.

The Frequency of 24 months takes into consideration plant conditions required to perform the Surveillance, and is intended to be consistent with the expected fuel cycle lengths.

(continued)

B 3.8.1-27 Revi si on Quad Cities 1 and 2

AC Sources-Operaling B 3.8.1 BASES SURVEILLANCE SR 3.8.1.15 (continued)

REQU IREM ENTS purpose of the Surveillance can be met by performing the test on either unit. If the DG fails one of these Surveillances, the DG should be considered inoperable on both units, unless the cause of the failure can be directly related to only one unit.

SR 3.8.1.16 This Surveillance demonstrates that the diesel engine can restart from a hot condition, such as subsequent to shutdown from normal Surveillances, and achieve the required voltage and frequency within 13 seconds. The 13 second time is derived from the requirements of the accident analysis for In responding to a design basis large break LOCA (Ref. 14).

addition, the DG is required to maintain proper voltage and frequency limits after steady state is achieved. The time for the DG to reach the steady state voltage and frequency to limits is periodically monitored and the trend evaluated identify degradation of governor and voltage regulator performance.

The 24 month Frequency takes into consideration the plant conditions required to perform the Surveillance, and is intended to be consistent with the expected fuel cycle lengths.

This SR is modified by three Notes. Note 1 ensures that the test is performed with the diesel sufficiently hot. The requirement that the diesel has operated for at least 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> at approximately full load conditions prior to performance of this Surveillance is based on manufacturer recommendations for achieving hot conditions. Momentary transients due to changing bus loads do not invalidate this test. Note 2 allows all DG starts to be preceded by an engine prelube period to minimize wear and tear on the diesel during testing. To minimize testing of the common of DG, Note 3 allows a single test of the common DG (instead two tests, one for each unit) to satisfy the requirements for both units. This is allowed since the main purpose of (continued)

B 3.8.1-30 Revi si on Quad Cities 1 and 2

AC Sourc-es-Sh-tdcvn B 3.8.2 BASES LCO assuming a loss of the offsite circuit. Together, (continued) OPERABILITY of the required offsite circuit and DG ensures the availability of sufficient AC sources to operate the plant in a safe manner and to mitigate the consequences of postulated events during shutdown (e.g., fuel handling accidents and reactor vessel draindown).

The qualified offsite circuit(s) must be capable of maintaining rated frequency and voltage while connected to their respective ESS bus(es), and of accepting required loads during an accident. Qualified offsite circuits are those that are described in the UFSAR and are part of the licensing basis for the unit. The offsite circuit from the 345 kV switchyard consists of the incoming breakers and disconnects to the 12 or 22 reserve auxiliary transformer (RAT), associated 12 or 22 RAT, and the respective circuit path including feeder breakers to 4160 kV ESS buses required by LCO 3.8.8. Another qualified circuit is provided by the bus tie between the corresponding ESS buses of the two units.

The required DG must be capable of starting, accelerating to rated speed and voltage, connecting to its respective 4160 V ESS bus on detection of bus undervoltage, and accepting required loads. This sequence must be accomplished within 13 seconds. Each DG must also be capable of accepting required loads within the assumed loading sequence intervals, and must continue to operate until offsite power can be restored to the 4160 V ESS buses. These capabilities are required to be met from a variety of initial conditions such as DG in standby with engine hot and DG in standby with engine at ambient conditions. Additional DG capabilities must be demonstrated to meet required Surveillances. Proper sequencing of loads, including tripping of nonessential loads, is a required function for DG OPERABILITY. The necessary portions of the DG Cooling Water System capable of providing cooling to the required DG is also required.

It is acceptable for divisions to be cross tied during shutdown conditions, permitting a single offsite power circuit to supply all required divisions.

(continued)

Quad Cities 1 and 2 B 3.8.2-3 Revision