ML20236T733

From kanterella
Jump to navigation Jump to search
Proposed Tech Specs Modifying DG Testing Requirements
ML20236T733
Person / Time
Site: Millstone Dominion icon.png
Issue date: 07/17/1998
From:
NORTHEAST NUCLEAR ENERGY CO.
To:
Shared Package
ML20236T731 List:
References
NUDOCS 9807280357
Download: ML20236T733 (29)
v • d • e


Text

_ - _ _ _ _ _ - _ _ - _ _ . _ _ - _ - _ _ _ _ _ . ._

Docket No. 50-336 B16537

)

l l

Attachment 3 Millstone Nuclear Power Station, Unit No. 2 Proposed Revision to Technical Specifications Diesel Generator Surveillance Requirements Marked Up Pages l

July 1998 l

9807280357 900717 T' PDR ADOCK 05000336:-

P PDR . a

3/4.8 ELECTRICAL POWER SYSTEMS

-11/22/95 3/4.8.1 A.C. $0llRCES i, OPERATING LINITING CONDITION FOR OPERATION 3.8.1.1 As a minimum, the following A.C. electrical power sources shall l be OPERABLE:

a. Two physically independent circuits between the offsite trans-mission network and the eitd;Q and dl4gf
b. Two separate and independent diesel generators each with a dis , ,-

separate fuel oil supply tank containing a minimum of 12,000 * '"

gallons of fuel.

APPLICABILITY: MODES, 1, 2, 3 and 4.

ACTION IAMERT I a. With o offsite circu inoperable, demon ate the OPERABILI of the maining A.C. so rces by performing surveillance l

Re trement 4.8.1.1 within I hour and t least once per 8 ours thereafte . If either diesel enerator has not be successfully tes ed within the past hours, demonstrat ts y OPERABILITY by erforming Surveill ce Requirement 4.8. 1.2.a.2 separately f each such diesel ! nerator within 24 ho rs. '

Restore th offsite circuit to ERABLE status withi 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> ** l or be in least HOT STANDBY ithin the next 6 ho s and in '

COLD SH DOWN within the foi owing 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

l l b. With ne diesel generator inoperable, demonstr e the OPERABILITY f i

th A.C. offsite source by performing Surve ance R utrement 4.8.1.1.1 ithin 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at ast once per 8 hou ereafter; and if e diesel generator ame inoperable due o any cause other than p eplanned preventative aintenance or testi g, demonstrate the ERABILITY of the rem ning OPERABLE diese generator by p forming Surveillance equirement 4.8.1.1.2 .2 within 24 hou *; restore the diese generator to OPERABL statut within 72 h rs or be in at least T STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> an, in COLD SHUTDOWN wit n the following 30 h rs.

i .

1 ,

  • T s test is r ired to be co eted regardle of $ en the A foperablel esel gener r is restored ) an OPERABLE tus. / -
    • gcept that onceJ6 ring the N17 stone Unit No.4 Cycle 15 Refuering Outage,] .

jA_ his 72 hour8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> A1)6wed Outage Tjde can be exteged to 7 days./

{

NILLSTONE - UNIT 2 3/48-1 AmendmentNo.U,T/7,M/

oan

Q o a INSERT A- Pace 3/4 8-1 Pace 1 of 3 Inoperable Eauloment Reauired Action l

l a. One offsite a.1 Perform Surveillance Requirement 4.8.1.1.1 for arcuit remaining offsite circuit within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once l per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

l AND a.2 Restore the inoperable offsite circuit to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. ~

b. One diesel b.1 Perform Surveillance Requirement 4.8.1.1.1 for the generator offsite circuits within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

AND b.2 Demonstrate Of'ERABLE diesel generator is not inoperable due to common cause failure within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or perform Surveillance Requirement 4.8.1.1.2.a.2 for the OPERABLE diesel generator within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

AND b.3 Restore the inoperable diesel generator to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

l I l l

f l lNSERT A - Pace 3/4 8-1 Pace 2 of 3 J

, l-

c. One offsite c.1 Perform Surveillance Requirement 4.8.1.1.1 for circuit remaining offsite circuit within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

AND AND One diesel generator c.2 Demonstrate OPERABLE diesel generator is not inoperable due to common cause failure within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> or perform Surveillance Requirement 4.8.1.1.2.a.2 for the OPERABLE diesel generator within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.

AND c.3 Restore one inoperable A.C. source to OPERABLE status within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> or be in HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br /> AND c.4 Restore remaining inoperable AC. source to OPERABLE status following the time requirements of Action Statements a or b above based on the initial loss of the remaining inoperable A.C. source.

d. Two offsite d.1 Restore one of the inoperable offsite sources to circuits OPERABLE status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or be in HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

AND d.2 Following restoration of one offsite source restore remaining inoperable offsite source to OPERABLE status following the time requirements of Action Statement a above based on the initial loss of the remaining inoperable offsite source.

i l'

i I

i

. i

,1blSERT A - Pace 3/4 8-1 Pace 3 of 3

e. Two diesel e.1 Perform Surveillance Requirement 4.8.1.1.1 for the l generators offsite circuits within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 l hours thereafter.

l l

MD i

e.2 Restore one of the inoperable diesel generators to OPERABLE status within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or be in HOT l STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

AND l e.2 Following restoration of one diesel generator restore remaining inoperable diesel generator to OPERABLE status following the time requirements of Action Statement b above based on the initial loss of the remaining inoperable diesel generator.

l 1

i l

l l

L__________-_ __

-96/14/h

$tCTit1 CAL P0 Welt SYSTEMS '

ACTION fContinued) -

)

c. With one site circuit and one lesel generator i perable, /

demonst e the OPERABILITY of he remaining A.C. ources by performing Surve ance Requirement 4.8 .1.1 within I ho and at least once pe

' 8h rs thereafter; and if he diesel genera became inoperable d any cause other than eplannedprevent we maintenance or te

~

amonstrate the OPE TV of the remat g OPERABLE diesel gem rate-ing, by performing Surve ance Requiremen . .l.1.2.a.2 within 8Aiours*;

restore one of th noperable sources o OPERABLE status wi in 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> or be at least HOT ST BY within the next 6 urs and in COLD SHUTDOWN thin the followi 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. Restore other A.C.

power sourc offsite circuit dieselgenerator) PERABLE status l in accord ce with the provi ons of Section 3.8.1 Action Statement a I or b, as ppropriate, with he time requirement that Action State t based on the t of initial loss of he remaining inoperable A.C. over source. A ccessful test of di generator OPERABILITY pe Surveillance Reqp rement 4.8.1.1.2.a. ormed under this Action /

atement for an 0 ERABLE diesel generatp or a restored to OPERABLE lesel generator atisfies the diesel inerator test requirement of Action $tatene a or b.

I d., With two of he required offsite .C. circuits inoperable, d trate the OPE LITY of two diesel nerators by sequentially per raing Survell nee Requirement 4.8 .1.2.a.2 on both diesel gene tors within 8 ho ..unless the diesel enerators are already operat ng; restore l

on the inoperable of itssourcestoOPERABLEsta}v)swithin ._}

2 ours or be in at I st HOT STANDBY within the it 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

lowing restoratto of one offsite source, fell Action Statement a /

with the time req nt of that Action Statenje based on the time of initial loss of remaining inoperable off ite A.C. circuit. A of diesel generator CPE ILITY per Surveillance successful tes.. ( )1.2.a.2 performed unde Requirement this Action Statement for he OPERABLE di el generators satisfies diesel generator fut requireme of Action Statement a. *

e. With t of the above required sel generators inoperable, de trate the OPERABILITY of wo offsite A.C.' circuits by rforming Su 111ance Requirement 4.8 .1.1 within I hour and at le st once per ours thereafter; resto one of the inoperable diesel enerators to ERABLE status within 2 ours or be in at least MOT S DBY within the i mext 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in C0 SHtTTDOWN within the followin 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />. /

Following restoratio of one diesel generator unit.f ollow Action Statement b with t time requirement of that Action Statement based o the time of initia less of the remaining ino etable diesel generator A successful t ( of diesel generator OPERABI TY per Surveillance Requirement 4 .1.1.2.a.2 performed under thi Action Statement fo a restored to PERABLEdieselgeneratorsatisffesthedieselgener or test requi,rement of Action Statement b.

0 3170NE-UNIT 2 3/48-2 AmendmentNo.M,p

n ..

cr6ivoivs

(.-

SURVEILLANCE REQUIRDIENTS 4.8.1.1.1 op sica11y indepe ent circuits en the offs 1 ' 't ran ssion work and the tchyard shall on determined OP LE at lea per 24 ours by verify g correct brea alignments a indicated p er allabil y.

4.0,1.1.2 Each, diesel generator shall be demonstrated OPERABLE:

a. At least onc.e per 31 days on a STAGGERED TEST BASIS by, fee" 8"2 1. Verifying the fuel level in the fuel oil supply tank, f

f2. Verifyf the diesel starts m ambient conditi 'and 4

acce ates to 1 90% of r d speed and to 1 r d voltage in 115 s onds. of

3. Verifying the gene tor is synchrontz , loaded to 1 130 w in f 60 seconds, an operates for 1 60 nutes.

.Ts>SEI?T C P

l 4 All hsci chas my6 pau)<J dy ~ ~yme palube 9tned.

4# (Pu % <,,ee o f S n e,//e cc 6?q usa ~ + Y 7, t. t p , d

  • Sahsfjes ihr .% u r,// oar, Ryuurmrot.

MI l ci LLSTONE i - WIT 2 3/48-ta AmendmentNoIh e

INSERT B - Paae 3/4 8-2a l

l Verify correct breaker alignment and indicated power available for each required offsite circuit at least once per 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

INSERT C - Pace 3/4 8-2a

2. Verifying the diesel starts from standby conditions and accelerates to 2 90 %

of rated speed and to 2 97 % of rated voltage." A modified start involving idling and gradual acceleration to synchronous speed may be used as recommended by the manufacturer.

3. Verifying the generator is synchronized and loaded in accordance with the manufacturer's recommendations to 21300 kW and operates with a load 2 1300 kW for2 60 minutes."

l l

l l

I

-Sege Ler 20, 1966-k ELECTRICAL POWER SYSTEMS

_ SURVEILLANCE REQUIREMENTS l Continued) b' At least once per 92 days b

@In DYo&

from each of the three verifying that a sample of diesel fuel accordance with -ASTH-527 uel oil storage tanks, obtained in is within the acceptable limits specified water and sediment. in Table 1 of ASTM D975Qen checked for viscosity,

c. At least once per 18 months 1.

Subjecting the diesel to an inspection in accordance with procedures prepared in conjunction with its manufacturer's recommendations for this class of standby service.

2. Verifying that the automatic time delay sequencer OPERABLE with the following settings: is 1

Sequence Sten Time After Closing of Diesel Generator

, Outout Breaker (Seconds)

Minimum Maximum 1 (T )

1.5 2 (T ) T + 5.5 2.2 3 (T ) T + 5.5 8.4 4 (T ) T + 5.5 14.6 .

20.8 3.

Verifying and maintain the generator capability to reject a load of 2 250 kw voltage at 4160 60 1 3 Hz. 500 volts and frequency at 4.

Verifying the generator capability to reject a load of 1300 Kw without exceeding the overspeed trip setpoint. j

5. l Simulating injection actuation a loss of offsiteand:

signal, power in conjunction with a safety a) Verifying deenergization of the emergency busses and load shedding from the emergency busses, b) gag es,Q Verifying the diesel starts from -Wnt ::f.ditten on the autostart signal, energizes the emergency busses with permanently connected loads, energizes the auto-connected emergency loads through t.he load sequencer and operates for 2 5 minutes while its generator is loaded with the emergency loads.

b .

t MILLSTONE - UNIT 2 3/.4 a-3 ="""r'TNo.A

F. ,

. 02 4 4 5 4--

EliCTRICAL POWER SYSTEMS .

l SURVEILLANCE REQUIR.EMENT (Continued) c) Verifying that on the safety injection actuation signal, all diesel generator trips, except engine overspeed, generator differential current restraint overcurrent, and low lube oil pr,essurevoltage (2 out of 3) are automatically bypassed.

6.

Verifying the diesel generator operates for 160 minutes while loaded to 12750 kw.

7.

Verifying that the auto-connect loads to each diesel generator kw. do not exceed the 2000 hour0.0231 days <br />0.556 hours <br />0.00331 weeks <br />7.61e-4 months <br /> rating of 3000 8.

Verifying that on an actual or simulated Safety Injection I Actuation Signal (SIAS) without a loss of offsite power: ,

r*

a. )

[h],fyw hy The diesel generator start on the auto-start signal

b. and operates on Standby for greater than 5 minutes; The generator frequency and voltage shall reach 58.8 to 61.2 Hertz, and 3740 to 4580 VAC, and be maintained during this test; c.

The diesel start time (time to reach 90% of rated speed and 97% of rated voltage) shall be less than or equal to 15 seconds.

ME2T D t

')

o gt,tS1ont-us112 3/4.-. amendmentno.pp,igy,///

~ ~

]

( INSERT D - Pace 3/4 8-4 I

1

d. At least once per 184 days by:
1. Verifying the diesel starts from standby conditions and accelerates to E 90 %

of rated speed and to 2 97 % of rated voltage within 15 seconds after the i start signal.

2. Verifying the generator is r, synchronized and loaded in accordance with the manufacturer's recoiwiendations to 21300 kW and operates with a load 2 1300 kW for2 60 minutes.

l l

l l

g. .

!!.rj 0, '.000 L, rtretareat povra systrus SEf7DOW L1RITING CONDITION FOR OPERATION 3.8.1.1 i

be OPERABLE: As a minimus, the following A.C. electrical power sources shall a.

Onecircuitbetweentheoffsitetrodsmissionnetworkandthe 1

ltchy. y and
b. One diese1 Mg minimum of 12,000 gallons of fuel.ter with a fuel oil supply tank containi APPticAllt fTY: MODES 5 and 6.

Engt $[/, ,

ilth less than the above minimum required A.C. electrical power so CPERABLE, suspend all operations involving CORE ALTERATIONS or reactivity changes or movernent of irradiated fuel assemblies.

" [

SURVE!LLMcE REQUIREMENTS 4.5.1.1 The above required A.C. electrical power scurces shall be demonstrated OPERABLE per Surveillance Requirements 4.8.1.1.1 and 4.8.1.1.2.a.3, 4.8.1.1.E.c.t. 44d 4.8.1.1.t.c.4.8.1.1.2, except fo l

nod 4,9,l. /. 2,d. a i

. i r

L MI c3.L.LSTONE - 151T 2 3/485 AmendmentNo.[k

3/4.8 ELECTRICAL POWER SYSTEMS -11/22/% -

BASES The OPERABILITY of the A.C. and D.C. power sources and associated distribution systems during operation ensures that sufficient power will be available to su) ply the safety related equipment required for 1) the safe shutdown of tle facility and 2) the mitigation and control of accident conditions within the facility. The minimum specified indepen- I dent and 'redundant A.C. an~d D.C. power sources and distribution systems  !

satisfy the requirements of General Design Criteria 17 of Appendix "A" I to 10 CFR 50.

l The ACTION requirements specified for the levels of degradation of the power sources provide restriction upon continued facility operation commensurate with the level of degradation. The OPERABILITY of the power sources are consistent with the initial condition assumptions of the accident analyses and are based upon maintaining at least one of each of the onsite A.C. and D.C. power sources and associated distribution systems OPERABLE during accident conditions coincident with an assumed loss of offsite power and sinale failure of the other onsite A.C. source.

4-The OPERABILI s?sr h

  • of the minimum specified A.C.and D.C. power sources and associated distribution systems during shutdown and refueling ensures that 1) the facility can be maintained in the shutdown or refueling condition for extended time periods and 2) sufficient instrumentation l and control capability is available for monitoring and maintaining the facility status. 6 l

The non-safety grade 125V D.C. Turbine Battery is required for accident mitigation for a main steam line break within containment with a coincident loss of a vital D.C. bus. The Turbine Battery provides the alternate source of power for Inverters 1 & 2 respectively via non-safety grade Inverters 5 & 6. For the loss of a D.C. event with a coincident steam line break within containment, the feedwater regulating valves are required to close to ensure containment design pressure is not exceeded.

The feedwater regulating valves require power to close. On loss of a l vital D.C. bus, the alternate source of power to the vital A.C. bus via the Turbine Battery ensures power is available to the affected feedwater regulating valve such that the valve will isolate feed flow into the faulted generator. The Turbine Battery is considered inoperable when bus l

l

  • A proba istic safety dessmenthasex ined the off t of extending t allow outage time seven (7) day for the ele rical cross-tie om Uni 1 to Unit 2 d ng the Unit I fueling Outa 15. The resul show t t the risk negligible pr ided that t diesel gen rs are .

available.

NILLSTONE - UNIT 2 B 3/4 8-1 AmendmentNo.Jpp,M[

oazz

JNSERT E - Paos B 3/4 8-1 (Pace 1 of 2)

The required circuits between the offsite transmission network and the onsite Class l 1E distribution system (Station Busses 24C, 24D, and 24E) that satisfy Technical

! . Specification 3.8.1.1.a (MODES 1,2,3, and 4) consist of the foliowing:

i

! 1. At least two of the four 345 kV transmission lines (310 Line, 348 Line, 371 Line, and 383 Line) that tie the switchyard to the grid are in service with their switchyard breakers closed.

AND

2. The foliowing circuits from the switchyard to the onsite electrical distribution system:
s. Station safeguards busses 24C and 24D via the Unit 2 Reserve Station Service Transformer and bus 24G; and
b. Station bus 24E via the Unit 1 Reserve Station Service Transformer or Unit 1 Normal Station Service Transformer (backfeeding) and bus 14H.

The required circuit between the offsite transmission network and the onsite Class 1E distribution system (Station Busses 24C, 24D, and 24E) that satisfies Technical Specification 3.8.1.2.a (MODES 5 and 6) consists of the following:

1. At least one of the four 345 kV transmission lines (310 Line, 348 Line, 371 Line, and 383 Line) that tie the switchyard to the grid are in service with their switchyard breakers closed.

AND 1

2. The following circuit from the switchyard to the onsite electrical distribution ]'

system:

a. Station safeguards bus 24C or 24D via the Unit 2 Reserve Station Service Transformer and bus 24G; or
b. Station bus 24E via the Unit 1 Reserve Station Service Transformer or Unit 1 Normal Station Service Transformer (backfeeding) and bus j 14H.

, INSERT E - Pace B 3/4 8-1 (Pace 2 of 2)

When the plant is operating with the main generator connected to the grid, the l output of the main generator will normally be used to supply the onsite Class 1E distribution system. During this time the required offsite circuits will be in standby, ready to supply i power to the onsite Class 1E distribution system if the main generator is not available.

When shut down, only one of the offsite circuits will normally be used to' supply the onsite l Class 1E distribution system. The other offsite circuit, if required, will be in standby.

Verification of the required offsite circuits consists of checking control power to the breakers (breaker indicating lights), proper breaker position for the current plant configuration, and voltage indication as appropriate for the current plant configuration.

l

I INSERT F - Pace B 3/4 8-1 (Pace 1 of 2) l l

l Technical Specification 3.8.1.1 Action Statements b and c provide an allowance to l avoid unnecessary testing of the o'.her OPERABLE diesel generator. If it can be ,

l determined that the cause of the inoperable diesel generator does not exist on the l OPERABLE diesel generator, Surveillance Requirement 4.8.1.1.2.a.2 does not have to be I

! performed if the cause of inoperability exists on the other OPERABLE diesel generator, the other OPERABLE diesel generator would be declared inoperable upon discovery, Action Statement a would be entered, and appropriate actions will be taken. Once the failure is corrected, the common cause failure no longer exists, and the required Action Statements (b, c, and e) will be satisfied.

If it can not be determined that the cause of the inoperable diesel generator does not exist on the remaining diesel generator, performance of Surveillance Requirement 4.8.1.1.2.a.2, within the allowed time period, suffices to provide assurance of continued OPERABILITY of the diesel generator. If the inoperable diesel generator is restored to OPERABLE status prior to the determination of the impact on the other diesel generator, evaluation will continue of the possible common cause failure. This continued evaluation is no longer under the time constraint imposed while in Action Statement b or c.

I The determination of the existence of a common cause failure that would affect the remaining diesel generator will require an evaluation of the current failure,and the applicability to the remaining diesel generator. Examples that would not be a common cause failure include, but are not limited to:

1. Preplanned preventive maintenance or testing, or l
2. An inoperable support system with no potential common mode failure for the remaining diesel generator, or
3. An independently testable wrwient with no potential common mode failure for the remaining diesel generator.

4

INSERT F - Paae B 3/4 8-1 (Paae 2 of 2)

! i l During performance of Surveillance Requirements 4.8.1.1.2.a.2 and 4.8.1.1.2.d.2, l the diesel generators shall be started by using one of the following signals:

l 1. Manual;

2. Simulated loss of offsite power in conjunction with a safety injection actuation 4

signal;

3. Simulated safety injection actuation signal alone; or l
4. Simulated loss of power alone.

The diesel generator surveillance requirements specify that the diesel generators are started from a standby condition. Standby conditions for a diesel generator means the 1 diesel engine coolant and oil are being circulated and temperature is being maintained consistent with manufacturer recommendations.

l l

l

6 Docket No. 50-336 B16537 Attachment 4 Millstone Nuclear Power Station, Unit No. 2 Proposed Revision to Technical Specifications Diesel Generator Surveillance Requirements Retyped Pages i

I July 1998

7-

, 3/4.8 ELECTRICAL POWER SYSTENS 3/4.8.1 A.C. SOURCES

, OPERATING l

LINITING CONDITION FOR OPERATION 3.8.1.1 As a minimum, the following A.C. electrical power sources shall be OPERABLE:

a. Two physically independent circuits between the offsite trans-mission network and the onsite Class IE distribution system, and l
b. Two separate and independent diesel generators each with a separate fuel oil supply tank containing a minimum of 12,000 gallons of fuel.

APPLICABILITY: MODES 1, 2, 3 and 4.

j ACTION:

Inoperable Equipment Required Action

a. One offsite a.1 Perform Surveillance Requirement 4.8.1.1.1 l circuit for remaining offsite circuit within 1 (

hour and at least once per E, hours thereafter.

AND a.2 Restore the inoperable offsite circuit to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

b. One diesel b.1 Perform Surveillance Requirement 4.8.1.1.1 generator for the offsite circuits within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

AND I l

b.2 Demonstrate OPERABLE diesel generator is not inoperable due to common cause failure ,

within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or perform Surveillance j Requirement 4.8.1.1.2.a.2 for the OPERABLE diesel generator within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

AND l b.3 Restore the inoperable diesel generator to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> or be in H0T STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30

{

hours. j MILLSTONE - UNIT 2 3/4 8-1 Amendment No. JJ, J//, JJ7, 0353

as ELECTRICAL POWER SYSTEH1 ACTION (Continued)

Inoperable Equipment Required Action

c. One offsite c.1 Perform Surveillance Requirement 4.8.1.1.1 circuit for remaining offsite circuit within I hour and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

AND AND One diesel generator c.2 Demonstrate OPERABLE diesel generator is not inoperable due to common cause failure within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> or perform Surveillance Requirement 4.8.1.1.2.a.2 for the OPERABLE diesel generator within 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />.

AND c.3 Restore one inoperable A.C. source to OPERABLE status within 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> or be in HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

AND C.4 Restore remaining inoperable A.C. source to OPERABLE status following the time requirements of Action Statements a or b above based on the initial loss of the remaining inoperable A.C. source.

d. Two offsite d.1 Restore one of the inoperable offsite circuits sources to OPERABLE status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or be in HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />.

AND d.2 Following restoration of one offsite source restore remaining inoperable offsite source to OPERABLE status following the time requirements of Action Statement a above based on the initial loss of the remaining inoperable offsite source.

l NILLSTONE - UNIT 2 3/4 8-2 Amendment No. Jp7, J77, 0353

ELECTRICAL POWER SYSTEMS

" J

  • . . ACTION (Continued)

I I

1 Inoperable Equipment Required Action '

l e. Two diesel e.1 Perform Surveillance Requirement 4.8.1.1.1 l generators for the offsite circuits within I hour and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafter.

AND e.2 Restore one of the inoperable diesel generators to OPERABLE status within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or be in HOT STANDBY within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and COLD SHUTDOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

AND e.3 Following restoration of one diesel generator restore remaining inoperable diesel generator to OPERABLE status following the time requirements of Action Statement b above based on the initial loss of the remaining inoperable diesel generator.

SURVEILLANCE REQUIREMENTS 4.8.1.1.1 Verify correct breaker alignment and indicated power available for each required offsite circuit at least once per 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

4.8.1.1.2 Each required diesel generator shall be demonstrated OPERABLE:*

a. At least once per 31 days on a STAGGERED TEST BASIS by:
1. Verifying the fuel level in the fuel oil supply tank, l
2. Verifying the diesel starts from standby conditions and accelerates to 1 90% of rated speed and to 1 97% of rated vol t age . ** A modified start involving idling and gradual acceleration to synchronous speed may be used as recommended by the manufacturer.
3. Verifying the generator is synchronized and loaded in accordance with the manufacturer's recommendations to 1 1300 kW and operates with a load 1 1300 kW for 1 60 minutes.**

! Requirement.

MILLSTONE - UNIT 2 3/4 8-2a Amendment No. J77, 0353

1 .

ELECTRICAL POWER SYSTENS l

$ SURVEILLANCE REQUIREMENTS (Continued)

I

b. At least once per 92 days by verifying that a sample of diesel fuel from each of the three fuel oil storage tanks, obtained in accordance with ASTM D4057, is within the acceptable limits specified in Table 1 of ASTM D975 when checked for viscosity, water and sediment,
c. At least once per 18 months by: l l
1. Subjecting the diesel to an inspection in accordance with procedures prepared in conjunction with its manufacturer's recommendations for this class of standby service.
2. Verifying that the automatic time delay sequencer is OPERABLE with the following settings:

Sequence Time After Closing of Diesel Generator Steo Outout Breaker (Seconds)

Minimum Maximum 1 (T )

i 1.5 2.2 2 (T,) T + 5.5 3 8.4 3 (T3) T3 + 5.5 14.6 4 (T4) T3+ 5.5 20.8

3. Verifying the generator capability to reject a load of 1250 kw and maintain voltage at 4160 500 volts and frequency at 60 3 Hz.
4. Verifying the generator capability to reject a load of 1300 Kw without exceeding the overspeed trip setpoint.
5. Simulating a loss of offsite power in conjunction with a safety injection actuation signal, and:

a) Verifying deenergization of the emergency busses and load shedding from the emergency busses, b) Verifying the diesel starts from standby conditions on the l autostart signal, energizes the emergency busses with permanently connected loads, energizes the auto-connected emergency loads through the load sequencer and operates for 15 minutes while its generator is loaded with the emergency loads.

NILLSTONE - UNIT 2 3/4 8-3 Amendment No. 17J.

0353

_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ __ l

ELECTRICAL POWER SYSTEMS l SURVEILLANCE REQUIREMENT (Continued) l l

c) Verifying that on the safety injection actuation signal, all diesel generator trips, except engine overspeed, generator differential current, voltage restraint l overcurrent, and low lube oil pressure (2 out of 3) are l automatically bypassed.

6. Verifying the diesel generator operates for 160 minutes while loaded to 1 2750 kw.
7. Verifying that the auto-connect loads to each diesel generator do not exceed the 2000 hour0.0231 days <br />0.556 hours <br />0.00331 weeks <br />7.61e-4 months <br /> rating of 3000 kw.
8. Verifying that on an actual or simulated Safety Injection l Actuation Signal (SIAS) without a loss of offsite power:
a. The diesel generator starts from standby conditions on l i the auto-start signal and operates on Standby for greater than 5 minutes;
b. The generator frequency and voltage shall reach 58.8 to 61.2 Hertz, and 3740 to 4580 VAC, and be maintained during this test;
c. The diesel start time (time to reach 90% of rated speed and 97% of rated voltage) shall be less than or equal to 15 seconds.
d. At least once per 184 days by:

l 1. Verifying the diesel starts from standby conditions and L accelerates to 1 90% of rated speed and to 1 97% of rated voltage within 15 seconds after the start signal.

2. Verifying the generator is synchronized and loaded in accordance with the manufacturer's rer. commendations to 1 1300 kW and operates with a load 1 1300 kW for 1 60 minutes.

I MILLSTONE - UNIT 2 3/4 8-4 Amendment No. # , 191, J//

0353

1 ELECTRICAL POWER SYSTEMS sNuToo.

LINITING CONDITION FOR OPERATION 3.8.1.2 As a minimum, the following A.C. electrical power sources shall be OPERABLE:

a. One circuit between the offsite transmission network and the onsite Class IE distribution system, and
b. One diesel generator with a fuel oil supply tank containing a minimum of 12,000 gallons of fuel.

APPLICABILITY: MODES 5 and 6.

ACTION:

With less than the above minimum required A.C. electrical power sources OPERABLE, suspend all cperations involving CORE ALTERATIONS or positive reactivity changes or movement of irradiated fuel assemblies.

SURVEILLANCE REQUIREMENTS 4.8.1.2 The above required A.C. electrical power sources shall be demonstrated OPERABLE per Surveillance Requirements 4.8.1.1.1 and 4.8.1.1.2, except for testing pursuant to Surveillance Requirements 4.8.1.1.2.a.3, 4.8.1.1.2.c.2, 4.8.1.1.2.c.5, and 4.8.1.1.2.d.2. l l

i I

MILLSTONE - UNIT 2 3/4 8-5 Amendment No. #7, 0353

_ - _ _ - _ _ - _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ l

- - - _ - _ - _ _ _ _ _ _ _ - _ _ _ - _ _ _ _ _ - _ _ _ _ _ _ _ _ _ _ - . _ _ _ _ . _ _ = _ . _ _ _ _ _

,, , ,3/4.8 ELECTRICAL POWER SYSTEMS SASES 1

The OPERABILITY of the A.C. and D.C. power sources and associated distribution systems during operation ensures that sufficient power will be available to supply the safety related equipment required for 1) the l safe shutdown of.the-facility and 2) the mitigation and control of l

l accident conditions within the facility. The minimum specified indepen-dent and redundant A.C. and D.C. power sources and distribution systems satisfy the requirements of General Design Criteria 17 of Appendix "A" to 10 CFR 50.

The required circuits between the offsite transmission network and the onsite Class IE distribution system (Station Busses 24C, 24D, and 24E) that satisfy Technical Specification 3.8.1.1.a (MODES 1, 2, 3, and 4) consist of the following:

1. At least two of the four 345 kV transmission lines (310 Line, 348 Line, 371 Line, and 383 Line) that tie the switchyard to the grid.

are in service with their switchyard breakers closed.

AND

2. The following circuits from the switchyard to the onsite electrical distribution system:
a. Station safeguards buses 24C and 24D via the Unit 2 Reserve Station Service Transformer and bus 24G; and
b. Station bus 24E via the Unit 1 Reserve Station Service Transformer or Unit 1 Normal Station Service Transformer ,

(backfeeding) and bus 14H. j The required circuit between the offsite transmission network and the onsite Class IE distribution system (Station Busses 240, 240, and 24E) that satisfies Technical Specification 3.8.1.2.a (MODES 5 and 6) consists of the following:

1. At least one of the four 345 kV transmission lines (310 Line, 348 Line, 371 Line, and 383 Line) that tie the switchyard to the grid are in service with their switchyard breakers closed.

AND

2. .The following circuit from the switchyard to the onsite

. electrical distribution system:

a. . Station safeguards bus 24C or 24D via the Unit 2 Reserve

! Station Service Transformer and bus 24G; or

{

b. Station bus 24E via the Unit 1 Reserve Station Service Transformer or Unit 1 Normal Station Service Transformer (backfeeding) and bus 14H.

I MILLSTONE - UNIT 2 B3/48-1 Amendment No. 177,177, m l l

,, *[,3/4.8 ELECTRICAL POWER SYSTEMS I BASES When the plant is operating with the main generator connected to the grid, the output of the main generator will normally be used to supply the onsite Class IE distribution system. During this time the required offsite circuits will be in standby, ready to supply power to the onsite Class IE distribution system if the main generator is not available. When shut down, only one of the offsite circuits will normally be used to supply the onsite Class IE distribution system. The other offsite circuit, if required, will be in standby. Verification of the required offsite circuit consists of checking control power to the breakers (breaker indicating lights), proper breaker position for the current plant configuration, and voltage indication as appropriate for the current plant configuration.

The ACTION requirements specified for the levels of degradation of the power sources provide restriction upon continued facility operation commensurate with the level of degradation. The OPERABILITY of the power sources are consistent with the initial condition assumptions of the accident analyses and are based upon maintaining at least one of each of the onsite A.C. and D.C. power sources and associated distribution systems OPERABLE during accident conditions coincident with an assumed loss of offsite power and single failure of the other onsite A.C. source.

Technical Specification 3.8.1.1 Action Statements b and c provide an allowance to avoid unnecessary testing of the other OPERABLE diesel generator. If it can be determined that the cause of the inoperable diesel generator does not exist on the OPERABLE diesel generator, Surveillance Requirement 4.8.1.1.2.a.2 does not have to be performed. If the cause of inoperability exists on the other OPERABLE diesel generator, the other OPERABLE diesel generator would be declared inoperable upon discovery, Action Statement e would be entered, and appropriate actions will be taken.

Once the failure is corrected, the common cause failure no longer exists, and the required Action Statements (b, c, and e) will be satisfied.

If it cannot be determined that the cause of the inoperable diesel generator does not exist on the remaining diesel generator, performance of Surveillance Requirement 4.8.1.1.2.a.2, within the allowed time period, suffices to provide assurance of continued OPERABILITY of the diesel generator. If the inoperable diesel generator is restored to OPERABLE status prior to the determination of the impact on the other diesel

- generator, evaluation will continue of the possible common cause failure.

This continued evaluation is no longer under the tinie constraint imposed while in Action Statement b or c.

l The determination of the existence of a common cause failure that l would affect the remaining diesel generator will require an evaluation of the current failure and the applicability to the remaining diesel generator. Examples that would not be a common cause failure include, but are not limited to:

1. Preplanned preventive maintenance or testing, or
2. An inoperable support system with no potential common mode failure for the remaining diesel generator, or MILLSTONE - UNIT 2 8 3/4 8-la Amendment No. Jpp, Jpg, 0364

l + . . . .

3/4.8 ELECTRICAL POWER SYSTEMS BASES l

3. An independently testable component with no potential common mode failure for the remaining diesel generator.

During performance of Surveillance Requirements 4.8.1.1.2.a.2 and 4.8.1.1.2.d.2, the diesel generators shall be started by using one of the i following signals:

1. Manual;
2. Simulated loss of offsite power in conjunction with a safety injection actuation signal;
3. Simulated safety injection actuatinn signal alone; or
4. Simulated loss of power alone.

The diesel generator surveillance requirements specify that the diesel generators are started from a standby condition. Standby conditions for a diesel generator means the diesel engine coolant and oil are being circulated and temperature is being maintained consistent with manufacturer recommendations.

The OPERABILITY of the minimum specified A.C.and D.C. power sources and associated distribution systems during shutdown and refueling ensures that 1) the facility can be maintained in the shutdown or refueling condition for extended time periods and 2) sufficient instrumentation and control capability is available for monitoring and maintaining the facility status. l The non-safety grade 125V D.C. Turbine Battery is required for accident mitigation for a main steam line break within containment with a coincident loss of a vital D.C. bus. The Turbine Battery provides the alternate source of power for Inverters 1 & 2 respectively via non-safety grade Inverters 5 & 6. For the loss of a D.C. event with a coincident steam line break within containment, the feedwater regulating valves are required to close to ensure containment design pressure is not exceeded.

The feedwater regulating valves require power to close. On loss of a vital D.C. bus, the alternate source of power to the vital A.C. bus via the Turbine Battery ensures power is available to the affected feedwater regulating valve such that the valve will isolate feed flow into the faulted generator. The Turbine Battery is considered inoperable when bus MILLSTONE - UNIT 2 B 3/4 8-lb Amendment No. Jpp, Jp1, cas4

s.

..F .. s Docket No. 50-336 B16537 Attachment 5 Millstone Nuclear Power Station, Unit No. 2 Proposed Revision to Technical Specifications Diesel Generator Surveillance Requirements NNECO Commitments

)

l July 1998 i

i l

2 *, U.S. Nuclear Regulatory Commission B16537/ Attachment 5/Page 1 Proposed Revision to Technical Specifications Diesel Generator Surveillance Requirements List of Regulatory Commitments The following table identifies those actions committed to by NNECO in this document.

Please notify the Manager - Regulatory Compliance at Millstone Unit No. 2 of any ,

questions regarding this document or any associated regulatory commitments.

I Commitment committed cate or Outage l NONE N/A l

_x--_-___-----_____. _ - - - - _ _ - - - - _ . _ - - - --

Retrieved from "https://kanterella.com/w/index.php?title=ML20236T733&oldid=3172817"