ML21130A069

0 to Updated Final Safety Analysis Report, Section Viii, Electrical Power Systems

ML21130A069
Person / Time
Site:	Cooper
Issue date:	04/21/2021
From:	Nebraska Public Power District (NPPD)
To:	Office of Nuclear Reactor Regulation
Shared Package
ML21130A114	List: ML21130A062 ML21130A063 ML21130A064 ML21130A065 ML21130A066 ML21130A067 ML21130A068 ML21130A069 ML21130A070 ML21130A071 ML21130A072 ML21130A073 ML21130A074 ML21130A075 ML21130A076 ML21130A077 ML21130A078 ML21130A079 ML21130A080 ML21130A081 ML21130A082 ML21130A083 ML21130A084 ML21130A085 ML21130A086 ML21130A087 ML21130A088 ML21130A089 ML21130A090 ML21130A091 ML21130A092 ML21130A094 ML21130A095 ML21130A096 ML21130A097 ML21130A098 ML21130A099 ML21130A100 ML21130A101 ML21130A102 ML21130A103 ML21130A104 ML21130A105 ML21130A106 ML21130A107 ML21130A108 ML21130A110 ML21130A117 ML21130A118 ML21130A119 ... further results
References
NLS2021013
Download: ML21130A069 (59)

Text

USAR VIII - ELECTRICAL POWER SYSTEMS PAGE 1.0

SUMMARY

DESCRIPTION VIII-1-1 2.0 NORMAL AND STARTUP AC POWER SOURCES VIII-2-1 2.1 Normal AC Power Source VII I-2-1 2.1.1 Power Generation Objective VIII-2-1 2.1.2 Power Generation Design Basis VI II-2-1 2.1.3 Description VIII-2-1 2.1.4 Inspection and Testing VIII-2-2 2.2 Startup AC Power Source VIII-2-2 2.2.1 Safety Objective VIII-2-2 2.2.2 Safety Design Bases VIII-2-2 2.2.3 Power Generation Objective VIII-2-2 2.2.4 Power Generation Design Bases VIII-2-3 2.2.5 Description VIII-2-3 2.2.6 Safety Evaluation VIII-2-5 2.2.7 Inspection and Testing VIII-2-6 2.3 Transmission Line Design Considerations VIII-2-6

2. 3. 1 General VIII-2-6 2.3.2 Station Blackout Analysis VIII-2-6 2.3.3 Line Separation Analysis VI II-2-7 2.3.4 Analysis of a Transmission Line Break VIII-2-8 2.3.5 Redundant Guying System VIII-2-9 3.0 EMERGENCY AC POWER SOURCE VIII-3-1 3.1 Safety Objective VIII-3-1 3.2 Safety Design Bases VIII-3-1 3.3 Power Generation Objective VIII-3-1 3.4 Power Generation Design Basis VIII-3-1 3.5 Description VIII-3-1 3.6 Safety Evaluation VIII-3-3 3.7 Inspection and Testing VIII-3-3 4.0 AUXILIARY POWER DISTRIBUTION SYSTEM VIII-4-1 4.1 Safety Objective VIII-4-1 4.2 Safety Design Bases VIII-4-1 4.3 Power Generation Objective VIII-4-1 4.4 Power Generation Design Basis VII I-4-1 4.5 Description VIII-4-1 4.5.1 Arrangement of Auxiliary Buses VIII-4-1 4.5.2 System Components VIII-4-3 4.6 Safety Evaluation VIII-4-3 4.7 Inspection and Testing VIII-4-7 5.0 STANDBY A-C POWER SOURCE VIII-5-1 5.1 Safety Objective VIII-5-1 5.2 Safety Design Basis VIII-5-1 5.3 Description VIII-5-7 5.3.1 System Operation VIII-5-7 5.3.2 Diesel-Generator Protection VIII-5-8 5.3.3 Diesel Generator Reliability Assurance VIII-5-10 5.4 Safety Evaluation VIII-5-14

5. 4. 1 General VIII-5-14 5.4.2 Single Failure Analysis VIII-5-14 5.5 Inspection and Testing VIII-5-15 5.5.1 DG Vendor Inspection and Testing VIII-5-17 viii-1-1 12/30/19

USAR VIII - ELECTRICAL POWER SYSTEMS (Cont'd.)

PAGE 6.0 125/250 VOLT DC POWER SYSTEMS VIII-6-1 6.1 Safety Objective VIII-6-1 6.2 Safety Design Bases VIII-6-1 6.3 Description VIII-6-1 6.4 Safety Evaluation VIII-6-2 6.5 Inspection and Testing VIII-6-3 7.0 24 VOLT DC POWER SYSTEM VIII-7-1 7.1 Power Generation VIII-7-1 7.2 Power Generation Design Bases VIII-7-1 7.3 Description VIII-7-1 7.4 Inspection and Testing VIII-7-2 8.0 120/240 VOLT VITAL AC POWER SYSTEMS VIII-8-1 8.1 Power Generation Objectives VIII-8-1 8.2 Power Generation Design Bases VIII-8-1 8.3 Description VIII-8-1 8.4 Inspection and Testing VIII-8-2 9.0 OFF-SITE DISTRIBUTION POWER VIII-9-1 9.1 Power Generation Objective VIII-9-1 9.2 Power Generation Design Bases VIII-9-1 9.3 Description VIII-9-1 9.4 Inspection and Testing VIII-9-1

10.0 REFERENCES

FOR CHAPTER VIII VIII-10-1 viii-1-2 04/08/15

USAR LIST OF FIGURES (At End of Section VIII)

Figure No. Title VIII-2-3 345 kV Switchyard One Line Diagram viii-2-1 06/22/12

USAR LIST OF TABLES Table No. Title VIII-1-1 List of Major Electrical Equipment VIII-1-2 Normal, Startup and Emergency AC Power Sources VIII-1-2 List of Major Electrical Equipment VIII-1-3 Auxiliary Power System VIII-1-3 List of Major Electrical Equipment VIII-1-4 125/250 Volt DC Power Systems VIII-4-1 List of Major Loads VIII-4-4 Auxiliary Power System VIII-5-1 Diesel Generator Loading Table VIII-5-3 Standby AC Power System VIII-5-2 Standby Diesel Generator System VIII-5-6 Typical Sequential Loading of Diesel Generators VIII-5-3 Standby AC Power Source Equipment Nominal Ratings VIII-5-11 VIII-5-4 Abnormal Diesel Generator Disabling VIII-5-12 Conditions and Control Room Indication viii-3-1 02/28/00

USAR VIII - ELECTRICAL POWER SYSTEMS 1.0

SUMMARY

DESCRIPTION The station electrical power systems provide a diversity of dependable power sources which are physically isolated. The station electrical power systems consist of the normal and startup AC power source, the emergency AC power source, the 4160 volt and 480 volt auxiliary power distribution systems, standby AC power source, 125 and 250 volt DC power systems, 24 volt DC power system, 115/230 volt AC no break power system, and the 120/240 volt AC critical power system. (See Tables VIII-1-1, VIII-1-2, and VIII-1-3)

The normal AC power source provides AC power to all station auxiliaries and is the normal AC power source when the main generator is operating. The startup AC power source provides AC power to all station auxiliaries and is normally in use when the normal AC power source is unavailable.

The emergency AC power source provides AC power to emergency station auxiliaries. It is normally used to supply emergency station auxiliary loads when the main generator is shutdown and the startup AC power source is unavailable.

The station 4160 volt and 480 volt auxiliary power distribution systems distribute all AC power necessary for startup, operation, or shutdown of station loads. All portions of this distribution system receive AC power from the normal AC power source or the startup AC power source. The critical service portions of this distribution system also can receive AC power from the standby AC power source or the emergency AC power source.

The standby AC power source provides two independent 4160 volt DGs as the on-site sources of AC power to the critical service portions of the auxiliary power systems. Each DG provides AC power to safely shutdown the reactor, maintain the safe shutdown condition, and operate all auxiliaries necessary for station safety.

In addition, an on-site and independent 3250kW Supplemental Diesel Genera tor ( SDG) is available as a supplemental 4160 volt AC source able to power the F or G busses through the emergency station service transformer (ESST) bus in the event that the DGs and the ESST are unavailable.

The above power sources are integrated into the following protection scheme to insure that the CNS emergency loads will be supplied at all times: [ll The off site power sources at CNS are a startup station service transformer which connects to the CNS 161 kV switchyard and the 345/161 kV, 300 MVA auto-transformers connected to the 345 kV switchyard, and a separate emergency station service transformer energized by a 69 kV line connected to a 161/69 kV, 56 MVA auto-transformer in the 161 kV switchyard or the 69 kV subtransmission system. The 161 kV switchyard is connected to one 161 kV line which terminates in a switchyard near Auburn, Nebraska, and two 345/161 kV, 300 MVA auto-transformers which connect to the CNS 345 kV switchyard. The 34 5 kV swi tchyard has five ( 5) lines which terminate in swi tchyards near Tarkio, Missouri; Hallam, Nebraska; St. Joseph, Missouri; Fairport, Missouri, and Nebraska City, Nebraska. The emergency station service transformer is fed either by the CNS 161/69 kV auto-transformer or by a 69 kV line which is part of a subtransmission grid of another utility (OPPD) . If the normal station service transformer (powered by the main generator) is lost, the startup station service transformer, which is normally energized, will automatically energize 4160 volt buses lA and lB as well as their connected loads, including the critical buses. If the startup station service transformer fails to VI II-1-1 02/07/13

USAR TABLE VIII-1-1 LIST OF MAJOR ELECTRICAL EQUIPMENT NORMAL STARTUP AND EMERGENCY AC POWER SOURCES

1. Station Main Generator 983 MVA, 22 kV 0.85 power factor, 0.60 SCR

2. Transformers

a. Main Transformer Bank 4-287/410 MVA, ODAF1/ODAF2, 65°C, 345-20.9 kV, 3 ph, 60 Hz (3 normally in service-1 spare)

b. Normal Station Service 18/24/30 (33.6) MVA, OA/FA/FA, Transformer 55 (65)°C, 21-4.16/4.16 kV, 3 ph, 60 Hz

c. Startup Station Service 21.7/28.8/36 (40.5) MVA Transformer ONAN/ONAF/ONAF 55 (65) °C, 161-4.16/4.16 kV, 3 ph, 60 Hz

d. Emergency Station Service 9/10.08/12.6 MVA, OA/FA, Transformer 55/65°C, 67-4 .16 kV, 3 ph, 60 Hz

3. Isolated-Phase Bus

a. Main Generator Bus 22 kV, 28,000A, 3 ph, 60 Hz

b. Normal Station Service Bus 22 kV, 1200A, 3 ph, 60 Hz VIII-1-2 02/06/17

USAR TABLE VIII-1-2 LIST OF MAJOR ELECTRICAL EQUIPMENT AUXILIARY POWER SYSTEM

1. Switchgear

a. 4160 Volt (Normal Service) 250 MVA, 2000A Main Breakers Switchgear lA and lB 1200A Feeder Breakers

b. 4160 Volt (Normal Service) 250 MVA, 1200A Main Breakers Switchgear lC, lD, lE 1200A Feeder Breakers C. 4160 Volt (Critical Service) 250 MVA, 1200A Main Breakers Switchgear lF and lG 1200A Feeder Breakers

2. Load Centers

a. 480 Volt (Normal Service) Transf. 1500 KVA, 4160V - 480/

Load Centers lA and lB 277V, 3 ph, 1600A Feeder Breakers

b. 480 Volt (Normal Service) Transf. 750 KVA, 4160V - 480/

Load Center lE 277V, 3 ph, 600A Feeder Breakers

c. 480 Volt(Critical Service) Transf. 2000 KVA, 4160V - 480/

Load Centers lF and lG 277V, 3 ph, 1600A Feeder Breakers VIII-1-3 01/13/00

USAR TABLE VIII-1-3 LIST OF MAJOR ELECTRICAL EQUIPMENT 125/250 VOLT DC POWER SYSTEMS

1. Batteries

a. 125VDC: lA and lB 125 Volt, 58 cell, 1800 A-hr@ 8 hr rate

b. 250VDC: lA and lB 250 Volt, 120 cell, 1800 A-hr@ 8 hr rate

2. Battery Chargers

a. 125VDC: lA, lB, and lC 125 VDC, 200A

b. 250VDC: lA, lB, and lC 250 VDC, 200A

3. DC Buses

a. 125VDC: lA and lB 125 VDC, 1600A 25,000A Momentary

b. 250VDC: lA and lB 250 VDC, 1600A 25,000A Momentary VIII-1-4 01/13/00

USAR energize the critical buses, the emergency station service transformer , which is normally energized, will automatical ly energize both critical buses. If the emergency station service transformer were also to fail, the DGs would automatical ly energize their respective buses.

In the event that the DGs also fail to start, the SDG could be connected to the ESST bus through a motor operated disconnect switch (MODS) assembly which would disconnect the ESST and connect the SDG to the ESST bus.

This supplementa l power source is engaged manually through procedural control.

The SDG, though an available power source, is not considered part of the overall protection scheme.

The station 125 and 250 volt DC power systems each provide two independent on-site sources of DC power for startup operation, shutdown and all loads required for station safety.

The 24 volt DC system supplies the source and intermediat e range neutron monitors and their trip auxiliaries , selected process radiation monitors and the process radiation monitor trip auxiliaries and the safety system status panel.

The station 115/230 volt AC no break power system provides a versatile distributio n system to supply AC power to the instruments and control devices requiring uninterrupt ible power and other emergency instrumenta tion, monitoring, and communicati on systems. The PMIS (Plant Management and Information System) UPS (Uninterrup tible Power Supply) system provides uninterrupt ible power to the plant Process Computer, Annunciator System, and "Y" (Data Acquisition) Side Plant Data Network. The 120/240 volt AC instrument power system provides for critical services that are necessary for the operation of the station but are not critical to station safety.

VIII-1-5 05/16/11

USAR 2.0 NORMAL AND STARTUP AC POWER SOURCES This USAR section contains historical information as indicated by the italicized text. USAR Section I-3.4 provides a more detailed discussion of historical information.

2.1 Normal AC Power Source 2 .1.1 Power Generation Objective The station main generator, while supplying power to the 34 5 kV transmission system, shall also supply the necessary AC power to all station auxiliaries.

2 .1. 2 Power Generation Design Basis The station main generator shall be capable, through the normal station service transformer, of providing power to all station auxiliaries during normal operation.

2 .1. 3 Description The station main generator provides power through the isolated phase bus at 22 kV to both the main transformers and the normal station service transformer. The generator voltage is stepped up through the main transformers to 345 kV and power flows into the 345 kV switchyard which consists of a breaker-and-a-half scheme with 345 kV transmission lines to Atchison County, Nebraska City, St. Joseph, Fairport, and Mark T. Moore Substations and a 345/161 kV transformation connection to the CNS 161 kV substation. The generator voltage is reduced through the normal station service transformer to 4160 volts and power flows into the auxiliary power distribution system as described in Section VIII-4.

The main generator is rated at 983 MVA, 0.85 power factor, 0.60 short-circuit ratio, 60 psig hydrogen pressure, 1800 rpm, 22,000 volts, three-phase, 60 Hertz. The stator core and rotor conductors are hydrogen cooled. Excitation is from a self-excited, shaft-driven alternator with stationary rectifier banks to accomplish the AC to DC conversion. The generator is grounded through a grounding transformer with a secondary resistor. (See Burns and Roe Drawing 3001 for details of the excitation and protective relay systems for the generator. Use Burns and Roe Drawing 3070 for list of symbols.)

The isolated phase bus is rated at 22,000 volts, three-phase, 60 Hertz. The main bus from the generator to the main transformer is rated at 28,000 continuous amperes and 300,000 asymmetrical momentary amperes. The auxiliary bus from the main bus to the normal station service transformer is rated at 1200 continuous amperes and 430,000 asymmetrical momentary amperes.

The generator feeds three 410 MVA single-phase main power transformers with one 410 MVA single-phase transformer as a spare. Bus duct is provided to the spare transformer through open links. If a single-phase main transformer fails, by opening the links to the faulted transformer and closing the links on the spare transformer together with the quick disconnect connections on the 345 kV side and the control system connections the generator can be returned to service while the faulted transformer is repaired.

The main transformer bank is rated at 1230 MVA (3-410 MVA, single-phase transformers) , forced oil-forced air cooled, 65 ° C temperature rise, three-phase, 60 Hertz. The high voltage winding is rated at 345,000 volts, 1,175,000 BIL volts, and is connected in grounded wye. The low VIII-2-1 12/04/13

USAR voltage winding is rated 20,900 volts, 150,000 BIL volts, and is connected in delta.

The normal station service transformer is rated at 18/24/30 (33.6) MVA, OA/FA/FA, 55 (65)°C temperature rise, three-phase, 60 Hertz. The high voltage winding is rated 21,000 volts, 150,000 BIL volts, and is connected in delta. The two low voltage windings, X and Y, are each rated at 4160 volts, 75,000 BIL volts, and are connected in resistance-grounded wye.

The X winding feeds five 250 MVA switchgear buses and the Y winding feeds two 250 MVA switchgear buses. These buses are in the auxiliary power distribution system and are described in Section VIII-4.

2 .1. 4 Inspection and Testing

1. Inspection and testing at vendor factories and initial system tests were conducted to insure that all components are operational within their design ratings.

2. Periodic test/inspection of equipment is performed as defined in maintenance programs to determine equipment operability and functional performance.

2.2 Startup AC Power Source 2.2.1 Safety Objective The startup AC power source shall provide a source of off-site AC power to the critical service portion of the auxiliary power distribution system adequate for the safe shutdown of the reactor.

2.2.2 Safety Design Bases

1. The startup AC power source shall be capable of supplying all loads on the critical service portions of the auxiliary power distribution system. The ECCS loads are sequenced on to the critical bus under LOCA conditions.

2. The availability of the startup AC power source shall be monitored by indication provided in the main control room.

3. The startup AC power source shall be automatically connected to the auxiliary power distribution system including the critical service portion in the event that the normal AC power source is lost.

4. The startup AC power sources shall be as independent as possible from the emergency and normal AC sources within the constraints of the transmission system development.

5. The startup AC power source shall not be synchronized with the emergency AC power source except to permit live source transfers. The startup AC power source shall not be synchronized with the standby power source except to permit live source transfers and for standby power system performance tests.

2.2.3 Power Generation Objective The startup AC power source shall provide a source of off-site AC power to the entire auxiliary power distribution system adequate for the startup operation or shutdown of the station.

VIII-2-2 01/13/00

USAR 2.2.4 Power Generation Design Bases

1. The startup AC power source shall be capable of supplying all loads during normal station startup.

2. The startup AC power source shall be capable of supplying all loads during normal station shutdown.

2.2.5 Description The station is connected to the Southwest Power Pool (SPF) through 34 5 kV and 161 kV buses located in independent swi tchyards adjacent to the station. The 345 kV breaker-and-a-half scheme, and 161 kV ring bus scheme switchyard buses are connected to the following (refer to Figure VIII-2-3).

1. Generator main transformer bank, described in Section 2.1.

2. One Atchison County 34 5 kV transmission line to Atchison County switchyard.

3. One St. Joseph 345 kV transmission line to St. Joseph switchyard.

4. One Mark T. Moore 345 kV transmission line.

5. One Nebraska City 345 kV transmission line.

6. One Missouri, Iowa, Nebraska 345 kV transmission (MINT) line to the Fairport, Missouri switchyard.

7. One Auburn 161 kV transmission line.

8. Startup station service transformer (startup AC power source).

9. Two 345/161 kV auto-transformers connecting CNS 345 kV and 161 kV substations and each supplying a 13.8/12.5 kV transformer.

10. One 161/69 kV auto-transformer connecting the 161 kV substation to the 69 kV supply to the ESST.

Offsite AC power for station startup and shutdown is obtained from the 345 kV switchyard through either or both 345/16lkV auto-transformers to the CNS 161 kV substation and on to the plant through the startup transformer to the station auxiliary power distribution system. The five 345 kV transmission lines and one 161 kV line are individually or jointly capable of supplying power to the startup station service transformer.

The startup station service transformer supplies power to the station auxiliary power distribution system whenever the main generator is off-line. After the main generator has been synchronized to the 345 kV system and has been partially loaded, approximately 20%, [JJ most of the auxiliary power distribution system is manually transferred from the startup station service transformer to the normal AC power source (normal station service transformer).

Automatic fast-transfer capability is provided in the design to transfer 4160 volt buses lA and 1B, as well as their connected loads, to the startup AC power source (startup station service transformer) in the event that the normal AC power source is lost for any reason.

The breaker controls for the startup AC power source are arranged to prevent inadvertent interconnection with either the normal, standby or the VIII-2-3 02/07/13

USAR emergency AC power source. A momentary interconnection between two AC sources may occur for live source transfers. The normal or startup AC power source may be synchronized with one standby AC power source for standby AC power system performance tests. Procedural guidance backs up the breaker interlocks and assures that interconnection of the startup AC power and normal AC power sources occur only at low loads and for a short period of time.

The startup station service transformer is rated at 21.7/28.8/36 (40.5) MVA ONAN/ONAF/ONAF/ 55 (65)°C temperature rise, three-phase, 60 Hertz.

The high voltage winding is rated 161,000 volts, 750,000 BIL volts and is connected in grounded wye. The tertiary winding is connected in delta. The two low voltage windings, X and Y, are each rated 4160 volts, 110,000 BIL volts and are connected in resistance-grounded wye. The X winding feeds five 250 MVA switchgear buses through 2000 A breakers and the Y winding feeds two 250 MVA switchgear buses through 1200 A breakers. These buses are in the auxiliary power distribution system and are described in Section VIII-4.

A dual channel Open Phase Protection (OPP) System is installed on the startup station service transformer to detect open phase conditions that could adversely affect plant electrical loads. The OPP System annunciates in the main control room in the event that both OPP System channels detect an open phase condition. If one channel is non-functional, the remaining functional channel is also capable of annunciation in the main control room in the event that the OPP System detects an open phase condition. This system was installed in response to NRC Bulletin 2012-01, Design Vulnerability in Electric Power System, as well as the NEI Open Phase Condition Initiative.

The transmission system is protected in accordance with normal utility practice using carrier relaying with primary and secondary relays on the lines and high-speed differential protection with backup differential protection on the transformers. The 161 kV switchyard breakers are controlled by the NPPD Doniphan energy control center. The 345 kV switchyard main generator output breakers are controlled directly from the main control room.

All remaining 345 kV switchyard breakers are controlled by the NPPD Doniphan energy control center. Appropriate 345 kV breaker position, appropriate 345 kV transmission line voltages, startup station service transformer voltage, and other parameters are monitored in the main control room.

Control and protection power for the 345 kV breakers is supplied at 125 volt DC from two separate DC panels fed by two independent 125 volt battery systems in the 345 kV switchyard control house. Each 345 kV breaker is equipped with two independent trip coils and breaker failure protective relaying schemes fed by separate DC power sources. [4 l Control and protection power for the 161 kV breakers is supplied by a 125 volt DC battery system in the 161 kV switchyard control house. Each 161 kV breaker is equipped with two independent trip coils fed from one power source.

AC power for switchyard auxiliaries is provided from two separate 300 kVA 4160/480-277 V transformers located adjacent to the 345 kV switchyard control house, fed by independent 4160V feeders connected to station service buses lA and lB.

The twelve power circuit breakers are rated at 345 kV, either 2000 or 3000 ampere, three-phase, 25,000 MVA and are installed in the circuit to separate the eight connections to the 345 kV buses. Disconnect switches are provided on each side of each circuit breaker. A line disconnect switch is provided on each of the five 345 kV lines.

There are five 161 kV power circuit breakers rated 3000 ampere, three phase, and are installed to separate the five connections to the 161 kV bus. Disconnect switches are provided on each side of each circuit breaker. A line disconnect switch is provided on each of the five connections.

The transmission line design considerations are provided in Section VIII-2.3.

VIII-2-4 12/30/19

USAR 2.2.6 Safety Evaluation The 345 kV transmission system and breaker-and-a-half scheme swi tchyard are arranged so that an electrical fault on any line will not result in the loss of the main generator, the other 34 5 kV lines, or the startup station service transformer. Any one transmission line is capable of carrying the full station output and of supplying the startup station service transformer. The startup station service transformer rating is large enough that the critical service loads are sequentially connected under accident conditions while the buses are supplying normal plant loads. [43 l A high degree of reliability in the transmission system is provided so that the station output is available to the Missouri Basin System power grid and a continuous power source is assured to the startup station service transformer.

Automatic fast-transfer capability is provided in the design to transfer 4160 volt buses lA and lB, as well as their connected loads, to the startup AC power source ( startup station service transformer) in the event that the normal AC power source is lost for any reason. This satisfies Safety Design Bases 1.

Appropriate 345 kV breaker position, appropriate 345 kV transmission line voltages, startup station service transformer voltage, and other parameters are monitored in the main control room. This satisfies Safety Design Bases 2.

The generator and startup station service transformer have direct connections to the five transmission lines corning from the north, south, east, and west. The transmission lines do not run adjacent to each other.

In the event of a forced outage of one of the 345 kV transmission lines, the two adjacent power circuit breakers in the present breaker-and-a-half scheme will open to disconnect the affected line. The main generator and the startup station service transformer are unaffected and still connected to the other four transmission lines and the 345/161 kV auto-transformers and station operation are unaffected. To ensure security of the breaker and a half scheme, the remote direct transfer trip can be actuated only by a power line carrier or the NPPD Microwave System. [lJ In the event of main generator loss, both generator power circuit breakers will open, but the startup station service transformer will still receive power from the 161 kV bus from the transmission lines.

With the 161 kV ring bus scheme, it is possible to lose the startup station service transformer on a second contingency outage in either of two situations involving breaker failure: (1) loss of the T-2 345/161 kV auto-transformer combined with failure of breaker 1604 to open or (2) loss of the T-5 345/161 kV auto-transformer combined with failure of breaker 1606 to open. Either case would isolate the startup AC source and cause the emergency station service transformer automatically to energize critical buses lF and lG.

If the main generator were off-line prior to loss of one of the 345/161 kV auto-transformers and one of the 161 kV breakers failed, the loss of the startup AC power source (startup station service transformer) would automatically connect the emergency power source and initiate the standby AC power source, described ~n Section VIII-5. The startup AC power source would be restored to service, as soon as practical, by opening the two 161 kV breaker disconnects and line switch to isolate the failed breaker and the de-energized transmission line or transformer and then manually transfer the startup station service transformer back to the operating element.

VIII-2-5 12/30/19

USAR The startup AC power source is in conformance with 10CFR50 Appendix A, GDC 1 7. The physical independence of the 161 kV off site power source from the 69 kV emergency AC power source is described in Section VIII-2.3. This satisfies Safety Design Bases 3 and 4.

The breaker controls for the startup AC power source are arranged to prevent inadvertent interconnection with either the normal, standby or the emergency AC power source. A momentary interconnection between two AC sources may occur for live source transfers. The normal or startup AC power source may be synchronized with one standby AC power source for standby AC power system performance tests. Procedural restrictions back up the breaker interlocks and assure that interconnection of the startup AC power and normal AC power sources occur only at low loads and for a short period of time.

Based on the above, it is concluded that the safety design bases for the startup AC power source are met.

2.2.7 Inspection and Testing

1. Inspection and testing at vendor factories and initial system tests were conducted to insure that all components are operational within their design ratings.

2. Periodic tests of the equipment and the system are conducted to determine the operability and functional performance of the startup and emergency station service transformers, relays, switches, and buses as defined in IST and maintenance programs.

3. The startup station service transformer provides the first choice for pref erred AC power. Control circuitry is arranged so that upon opening of 4160 volt switchgear breaker contacts for normal station service transformer supply, the breakers for startup station service transformer supply automatically close on fast transfer. Testability can be demonstrated by control switch operation to open the normal station service transformer breaker.

2.3 Transmission Line Design Considerations 2.3.1 General The five 345 kV and one 161 kV transmission lines, as well as those with which they interconnect, are designed to equal or exceed the requirements for heavy loading districts, Grade B construction. These load requirements are four pounds per square foot wind on one half inch radial ice on cable, and 30 pounds per square foot wind on 1.5 faces of the towers with one half inch ice cover, with the National Electrical Safety Code overload factors. The five transmission lines are designed to equal or exceed the requirements for traverse hurricane wind of 25 pounds per square foot on bare cable at 60°F, and 40 pounds per square foot on 1.5 faces of the tower with an overload factor of 1.25. The design is such that lightning should cause less than one outage per one hundred miles per year.

2.3.2 Station Blackout Analysis The offsite power source has been evaluated using the methodology of NUMARC 87-00, Rev. 1 as input into the required station blackout coping duration. Based on:

a) the susceptibility of grid-related loss of offsite power (LOOP) events, b) estimated LOOP frequency due to severe and extremely severe weather, and c) the degree of independence of the offsi te power source transmission lines, the off site Power Design Characteristic Group Pl-Il/2.

VIII-2-6 12/30/19

USAR 2.3.3 Line Separation Analysis [5 l There are five 345 kV transmission lines emanating from the swi tchyard. Each line is on a separate right-of-way and each right-of-way contains only one circuit per tower line. Al though all 34 5 kV lines are in close proximity at the switchyard location, the routings diverge immediately after leaving the switchyard area in order to minimize the possibility of loss of more than one line during any single storm or weather conditions. The routings of the five 345 kV transmission lines are shown in more detail and in relation to each other on NPPD Drawing NC29546.

Two 345/161 kV auto-transformers in the 345 kV switchyard interconnect the 161 kV substation to the 345 kV substation.

The routes of the 161 kV lines are: (1) from the East side of the 34 5 kV swi tchyard to the North side of the 161 kV swi tchyard, ( 2) from the West side of the 345 kV switchyard to the South side of the 161 kV switchyard (3) from the 161 kV switchyard to the startup station service transformer, and (4) from the 161 kV switchyard to the Auburn Substation.

The route of the 69 kV line follows roads within the plant area and only at the 161 kV switchyard and near the termination point at the plant building does the 69 kV line approach the 161 kV line. See NPPD Drawing NC29546.

To maintain the independence of the two off-site power circuits in conformance with 10CFR50, Appendix A General Design Criteria 17, separate bus supporting structures are provided for the 4160 volt buses connecting the 161 kV-4160 V and 69kV-4160 V transformers on the low voltage side to the onsite electric distribution system.

On the high voltage side of the offsite transmission circuits the 69 kV enters the 161 kV switchyard from the South approximately 70' east of the easterly phase of 161 kV transmission line 1962 and exits the 161 kV swi tchyard to the East approximately 57' South of the southerly phase of 161 kV transmission line 1961. Line 1961 diverges to the northeast, while the 69 kV line transits East and then Southeast. The 69 kV transmission line enters the site from the southwest to a point 28'6" from the southerly phase of the 161 kV line 1961 near the SSST. A steel, self-supporting turning tower is then utilized to direct the line eastward to the transformer yard. The turning tower is located between two steel, self-supporting dead-end towers.

The following discussion shows that, from a practical standpoint, the turning tower cannot fail in a manner to interact with the incoming 161 kV line. Turning tower design criteria are, in general, considerably more stringent than standard transmission towers. And specifically, the turning tower utilized on the 69 kV line was designed to be self-supporting under high (80 mph) wind conditions, heavy icing, and with the dead-end tension of the transmission lines, although the dead-end tension of the transmission lines is currently absorbed by the dead-end towers.

The following represents design data concerning the 69 kV turning tower:

A. Weight of structure - 10,000 lbs.

B. Weight of equipment on tower - 900 lbs.

C. Weight of maximum ice and snow load on tower - 5500 lbs.

D. Designed to withstand a wind velocity of 80 mph.

The following data describes the conductors (3) and shield wires (2) on one span of the 69 kV transmission line.

VIII-2-7 02/07/13

USAR Ultimate Ice and Normal Strength Wind Load 120°F Load One 69 kV conductor 8420 lbs. 1932 lbs. 192 lbs.

One shield wire 6000 lbs. 1500 lbs. 250 lbs.

Total all five lines 37,260 lbs. 8796 lbs. 1076 lbs.

From the above data, it is evident that, in addition to its inherent design capabilities, the turning tower has the added support of 37,000 lbs. from either a southwesterly or easterly direction. Any one of the five wires comprising the 69 kV transmission line can be considered equivalent in strength to a guy wire.

Postulating the worst accident or environmental condition (i.e.,

tornado, seismic, etc.) wherein both northerly legs fail, it would be impossible for the tower to fall northward. The entire tower, even with heavy icing conditions, weighs only 16,400 lbs. while the transmission line exerts a force of 37,000 lbs. toward the southwest and 37,000 lbs. toward the east.

Therefore, the 69 kV turning tower, having been designed as self-supporting with a significant factor of safety, and having the equivalent of five guy wires to the southwest and five to the east, cannot fail in a manner to cause interaction with the 161 kV line.

2.3.4 Analysis of a Transmission Line Break[ 6 J CNS is provided with a 69 kV transmission line for emergency shutdown and a 161 kV line for startup. These lines run parallel over the span from the 69 kV turning tower east to the 69 kV dead end tower. The possibility of the two transmission lines coming into contact with each other in the event one breaks is discussed below.

Load on the wires due to ice would make the wires fall straight down more readily than horizontally. Therefore, this load condition was removed from further consideration. "Snapping" action of the wires would be very small at the small loads shown above. Assuming a wire broke, any snapping reaction would tend to prevent the wires from coming into contact. The worst possible case entails the breakage of a normally loaded wire, following which the wire is blown by the wind into the opposing transmission line.

The lines are protected from the wind on the north by the Reactor Building and on the east by the Turbine Generator Building and Machine Shop.

This protection eliminates the possibility that the 161 kV lines could be blown southward into the 69 kV lines. A calculation has been completed for the worst possible case, which consists of the northerly 69 kV shield wire breaking where it attaches to the 69 kV turning tower and being blown northward into phase C of the 161 kV transmission line. The shield wire was chosen because it weighed less than the conductors and its point of attachment to the turning tower was at a greater elevation.

VIII-2-8 02/13/17

USAR The calculation indicated that a 74 mph wind from the south was required to blow the shield wire into phase C of the 161 kV transmission line.

Reference was made to the National Climate Center in Asheville, North Carolina, whose records for Lincoln, Nebraska (nearest major city to CNS), show a 73.7 mph wind in August, 1956, and a 76 mph wind in June, 1946.

These records cover the period from 1878 until preparation of the calculation and indicate a near zero frequency of occurrence for winds over 70 mph. This, plus the fact that the wire must break (by some tremendous outside force, a wind could not break the wire) at the same instant the wind is blowing 74 mph from the south, forces the probability of the two transmission lines crossing to almost zero. In addition, conservative assumptions were made in the calculation which indicate that it can be safely assumed that the 69 kV and 161 kV lines are located such that they will not contact each other in the event of one's breakage.

The normal load on the shield wire is 250 lbs. At this small load the shield wire would fall almost as a thin rod. Very little "snapping" action would be exhibited. The calculation is based on the following assumptions:

1. The shield wire is assumed to break at the turning tower and pivot at the dead end tower attaching point.

2. The shield wire falls as a thin rod.

3. Wind force acts at right angles to wire at all times ( a conservative assumption, since this would require less wind force to blow the shield wire into phase C of the 161 kV line).

4. The component of gravity force normal to the wire at the initial position will be used as a constant at all times. (This is a conservative assumption because this force increases as the wire falls.)

5. Forces are located at the center of percussion, which is 2/3 of the distance from the pivot point at the dead end tower to the breaking point of the 69 kV shield wire.

2.3.5 Redundant Guying System [6 J In order to provide redundancy of design against failure of the 69 kV turning tower into the adjacent 161 kV line, the District has installed an independent cable wire rope guying system. This guying system is installed such that the wire rope guy is oriented in a southerly direction from the 69 kV turning tower. The tower guy is attached as near as possible to the tower's uppermost point and from thence to an intermediate pole from which two (2) guy wires in turn connect to two (2) concrete anchors. The interpositioning of a pole between the 69 kV turning tower and the concrete anchors is necessary to insure maintenance of proper clearance above the adjoining road and railroad.

The elevation of the guy wire from the 69 kV turning tower has also considered all requirements necessary to maintain proper electrical clearance from the adjoining phase wires. Since the guying wire from the 69 kV turning tower is also oriented in a southerly direction, this system assures the prevention of any part of the tower from falling northward toward the incoming 161 kV lines. In addition, the section of the horizontal guy from the turning tower to the intermediate pole is constructed with a sag of about eight ( 8) feet. This large sag creates relatively low horizontal and vertical reactions on the 69 kV turning tower when considering the normal everyday cable loadings.

VIII-2-9 01/13/00

USAR In the event the 69 kV turning tower fails at a point at or close to its base, the aforementioned eight (8) foot sag will permit the top of the tower to deflect northward approximately 2 to 3 feet. At this point, the guy will become taut and prevent the tower from continuing any further failure in the northerly direction. Therefore, by use of the above described guying system, prevention of a possible failure of the 69 kV turning tower in such a manner as to cut any of the adjoining incoming 161 kV line wires has been assured.

VIII-2-10 01/13/00

USAR 3.0 EMERGENCY AC POWER SOURCE This USAR section contains historical information as indicated by the italicized text. USAR Section I-3.4 provides a more detailed discussion of historical information.

3.1 Safety Objective To provide an additional source of power to the critical service portion of the auxiliary power distribution system to back up the normal and startup sources and to permit portions of the 345 kV system to be removed from service for inspection, testing, and maintenance.

3.2 Safety Design Bases

1. The emergency AC power source shall be capable of providing electric power to all equipment which is required for the safe shutdown of the reactor.

2. The emergency AC power source shall be as independent as possible from the startup AC power source within the constraints of the transmission system.

3.3 Power Generation Objective The emergency AC power source shall provide a source of off-site AC power to the critical buses which shall distribute power to the equipment which is required for the safe shutdown of the reactor.

3.4 Power Generation Design Basis The emergency AC power source shall distribute power to all station auxiliaries necessary for the safe shutdown of the reactor and distribute power to critical services such as emergency lighting, battery charging, turbine turning gear and other necessary power requirements during the shutdown period.

Emergency AC power is also utilized as an alternate power feed for various temporary applications when operating within an emergency operating procedure.

3.5 Description (Refer to Burns and Roe Drawings 3001 and 3002)

The emergency AC power source is connected to a 69 kV transmission system operated in the nearby geographic area by OPPD and NPPD. [7 l The 69 kV network has six sources as listed.

OPPD Sub 906 (Omaha), 161-69 kV OPPD Sub 1263 (Brock), 161-69 kV OPPD Sub 974 (Sterling), 115-69 kV NPPD Humboldt Substation, 161-69 kV OPPD Sub 1214 (Ashland), 115-69 kV NPPD CNS 161 kV Substation, 161-69 kV The T6 source will not be connected to the other five sources as a parallel supply unless switching between the sources. The supply from the CNS 161 kV substation will be used or the other five interconnected sources will be used. A brief interconnection to switch sources is allowed. The CNS 161/69 kV auto-transformer is rated at 56 MVA. This is sufficient to supply the 12,800 KVA (10,240 KW*) maximum momentary load** which is adequate to handle the emergency load in addition to the village of Peru, Nebraska if both are not connected to the OPPD 69 kV OPPD Substation.

When supplied from the CNS 161 kV substation source, with the 161 kV ring bus scheme, it is possible to lose the emergency station service transformer on a second contingency outage in either of two situations: (1) loss of the Auburn line combined with breaker 1610 failure to open, ( 2) loss of the TS 34 5/161 kV auto-transformer with breaker 1608 failure to open. Either case would isolate the emergency station service transformer. If the ESST was supplying either critical bus, the associated EOG would start automatically to energize critical Buses lF and lG.

VIII-3-1 02/07/13

USAR All sources, except the T6 auto-transformer, operate continuously interconnected through the transmission network. CNS is served over a

21. 4 mile line segment direct from one of the sources, Brock Substation.

Capacity at the Brock Substation is sufficient for the plant safety feature loads.

NPPD has a Wheeling Service Agreement for Station Power Service with OPPD. This agreement states that OPPD will maintain a continuously energized source of supply to supply a 10,000 KVA (8000 KW*) maximum sustained or 12,800 KVA (10,240 KW*) maximum momentary load** at the OPPD 69 kV connection to CNS which is adequate to handle the emergency load.

• Power Factor= .8

• • The 12,800 KVA maximum momentary load is defined by contract as being supplied for at least 10 minutes.

The 10,000 KVA maximum sustained load on the OPPD 69 kV line is equal to the combined capacity of the two DGs.

Since the 69 kV power source is continuously energized, no prior communication with OPPD personnel is required in order to utilize this power source.

This agreement is good until October 16, 2004, and thereafter until terminated by four years prior written notice given by either party.

During this time, OPPD agrees to maintain adequate transmission capacity in its facilities between its Omaha substation 1206 and the CNS delivery point to deliver the agreed power and energy to CNS at voltage levels of not less than 90% of the nominal voltage.

The Brock to CNS 69 kV line is continuously monitored by recording ammeters. Weekly readings taken by OPPD are used to monitor load growth and assure that the required power availability to CNS is maintained. NPPD will review OPPD's load growth data on an annual basis to verify that the required power availability to CNS is maintained. The Omaha to Brock 69 kV breakers are under OPPD direct supervisory control.

The voltage is reduced from 69 kV to 4160 volts by the emergency station service transformer which can be connected to 4160 volt critical buses lF and lG through 1200 A breakers.

The emergency station service transformer is rated at 9/10. 08/12. 6 MVA, 55°C/65°C, OA/FA cooled, 3-phase, 60 Hertz, with a 67,000 volt high voltage winding and a 4160 volt low voltage winding.

A dual channel Open Phase Protection (OPP) System is installed on the emergency station service transformer to detect open phase conditions that could adversely affect plant electrical loads. The OPP System annunciates in the main control room in the event that both OPP System channels detect an open phase condition. If one channel is non-functional, the remaining functional channel is also capable of annunciation in the main control room in the event that the OPP System detects an open phase condition. This system was installed in response to NRC Bulletin 2012-01, Design Vulnerability in Electric Power System, as well as the NEI Open Phase Condition Initiative.

The breaker controls for the emergency AC power source are arranged to prevent inadvertent interconnection with either the normal AC power source, the startup AC power source or the standby AC power source.

These controls are backed up by procedural guidance.

VIII-3-2 12/30/19

USAR 3.6 Safety Evaluation In order to insure continued availability of the emergency AC power source, the cable feeders from one critical power bus are physically separated from the cable feeders of the other critical bus. All 480 volt and 4160 volt power cables connected to the critical buses are installed in rigid conduit. The cable routing and the installation of power cables in rigid conduit localizes any electrical fault, makes one system of emergency power completely independent of the second system and makes both systems free from mechanical accidents.

The emergency AC power source and the on-site distribution system are of sufficient capacity and capability to automatically start as well as operate all required safety loads within their voltage ratings in the event of: a) an anticipated transient (such as a unit trip) orb) an accident (such as a LOCA) . rsi In order to insure that the supply of emergency AC power would not be compromised by the loss of CNS, a grid stability analysis was performed.[ 9 l The CNS 161 kV and 345 kV switchyards are connected through transmission lines to adjacent systems in Kansas, Iowa, Missouri, and Nebraska. The 345 kV interconnections reach Minneapolis, Kansas City, Wichita, and St. Louis.

The grid stability analysis showed that if CNS instantaneously dropped off-line, the rest of the interconnecting system would not become unstable. Therefore, CNS would still be supplied with off-site 69 kV and 161 kV power[ 4 0J.

The emergency AC power source is in conformation with 10CFR50 Appendix A, GDC 17. The physical independence of the 69 kV off site power source from the 161 kV power source is described in Section VIII-2.3 It is concluded that the design satisfies the safety design basis.

3.7 Inspection and Testing

1. Inspection and testing at vendor factories and initial system tests were conducted to insure that all components are operational within their design ratings.

2. Periodic tests/ inspections of equipment is performed as defined in maintenance programs to determine equipment operability and functional performance.

3. The emergency station service transformer provides the second choice for preferred AC power. Control circuitry is arranged so that upon opening of 4160 volt switchgear breaker contacts for incoming normal or startup supply to the 4160 volt critical bus, the breaker for emergency station service transformer supply automatically closes. Testability can be demonstrated by control switch operation to open the incoming breaker to the critical bus.

Provision is also made in the under-voltage protective scheme for the 4160 volt switchgear on critical buses lF and lG for automatic assumption of critical loads by the emergency station service transformer before standby AC power is used. This function can be tested during normal operation.

VIII-3-3 12/30/19

USAR 4.0 AUXILIARY POWER DISTRIBUTION SYSTEM This USAR section contains historical information as indicated by the italicized text. USAR Section I-3.4 provides a more detailed discussion of historical information.

4.1 Safety Objective The critical service portion of the auxiliary power distribution system shall under all transient and accident conditions, distribute AC power required to safely shutdown the reactor, maintain the safe shutdown condition, and operate all auxiliaries necessary for station safety.

4.2 Safety Design Bases

1. The critical service portion of the auxiliary power system shall distribute power to the station auxiliaries and all loads which are necessary for plant safety.

2. The auxiliary power system, normal and critical service portions, shall be arranged so that a single failure will not prevent or impair the operation of critical station safety functions.

3. The critical service portions of the auxiliary power system shall be supplied from both off-site and on-site AC power sources.

4. The critical service portion of the auxiliary power system shall be in accordance with the "IEEE 308 Criteria for Class lE Electrical Systems for Nuclear Power Generating Station," issued in 1970.

4.3 Power Generation Objective The entire auxiliary power distribution system, normal and critical service portions, shall distribute AC power to all station AC auxiliaries required for startup, operation, and shutdown of the station.

4.4 Power Generation Design Basis The auxiliary power distribution system shall distribute power to all the station auxiliaries necessary for normal station operation.

4.5 Description (Refer to Burns and Roe Drawing 3001) 4.5.1 Arrangement of Auxiliary Buses (See list of major auxiliary equipment on Table VIII-1-2)

There are seven 4160 volt buses (lA, lB, lC, lD, lE, lF, and lG) in the station auxiliary power distribution system. The seven buses are divided into critical service and normal service buses. The two critical service buses, lF and lG, supply power to critical loads required during abnormal operational transients and accidents. The five normal service buses, lA, 1B, lC, lD, and lE, supply power to other station auxiliaries requiring AC power during planned operations.

Power is distributed to the seven 4160 volt station auxiliary buses during normal operation from either the normal station AC power or the startup AC power source. The startup AC power source is used to supply 4160 volt buses during normal startup and shutdown. After the main generator has been synchronized to the 345 kV system and a minimum stable load established (approximately 20% of full output), the 4160 volt buses may be individually transferred from the startup AC power source to the normal AC VIII-4-1 01/13/00

USAR power source. This is done automatically by manually closing the normal AC power source supply breaker (after synchronization checks), to an individual 4160 volt bus while it is still energized from the startup AC power source.

The startup AC power source supply breaker to this bus is then automatically opened and the transfer is complete. This results in the temporary interconnection of the startup AC power source (startup station service transformer) and the normal AC power source (normal station service transformer) through a single 4160 volt auxiliary bus.

This process is repeated until all required 4160 volt buses have been individually transferred from the startup AC power source to the normal AC power source. 4160 volt bus lE is sub fed from either bus lA or lB.

Procedural guidance and synchronization switch interlocks assure that the 4160 volt buses are individually transferred. The startup and normal AC power sources are paralleled through one 4160 volt bus only for the short period required to verify that the normal AC power source supply breaker has closed before the startup AC power source supply breaker is automatically opened.

Automatic fast transfer is provided to restore 4160 volt buses lA and lB, as well as their connected loads, to the startup AC power source in the event that the normal AC power source is lost. The startup AC source supply breakers to 4160 volt buses lA and lB close automatically whenever the normal AC power source supply breaker to the bus opens, and there is no fault on the buses, thus maintaining power to all station auxiliaries connected to that bus. The fast transfers of individual 4160 volt buses from the normal AC power source to the startup AC power source will not interfere with normal station operation. Each bus is transferred individually and in one direction only, from the normal power source to the startup AC power source.

The 4160 volt critical service buses, lF and lG, receive power from 4160 volt buses lA and lB respectively. Buses lF and lG can also be supplied from the emergency AC power source or the standby AC power source.

In the event that both the normal AC power source and the startup AC power source are lost, the emergency AC power source is automatically connected to buses lF and lG. In case the emergency AC power source is not available then the standby AC power source re-energizes buses lF and lG within ~14 seconds.

The emergency AC power source may also be manually connected to the 4160 volt critical service buses. The standby AC power sources are capable of being independently synchronized for parallel operation with the emergency AC power source. This synchronization will be done manually for live source transfers.

The breaker controls for the emergency AC power source are arranged to prevent inadvertent interconnection with either the normal, the startup, or the standby AC power sources.

The five, 480 volt buses, lA, lB, lE, lF, and lG, are also divided into normal service buses and critical service buses. The critical 480 volt auxiliaries required during abnormal operational transients and accidents are all supplied from the two critical service buses, lF and lG. The three normal service buses lA, lB, and lE supply power to other 480 volt auxiliaries required during plant operations. The 480 volt critical service buses lF and lG receive power from the 4160 volt critical buses lF and lG respectively.

AC power for switchyard auxiliaries is obtained from two separate 300 KVA 4160-480 volt transformers adjacent to the switchyard control house, fed by independent 4160 volt feeders connected to station service 4160 volt buses lA and lB. [4 l Power from the 4160 volt switchgear buses is fed directly to 300 hp and larger motors and to load center transformers feeding the 480 volt load center buses. Power from the 4 8 0 volt load centers is fed directly to motors from 125 hp through 250 hp and to MCCs. Power from the MCCs is fed VIII-4-2 01/13/00

USAR directly to motors from1/2 hp through 100 hp, through motor operators. The MCCs also feed power panels. (See Burns and Roe Drawings 3003, 3004, 3005, 3006, 3007 and 3401).

The list of major loads of the auxiliary power system is shown in Table VIII-4-1.

4. 5. 2 System Components All of the 4160 volt switchgear are of the metal-clad, indoor drawout type. The circuit breakers that are electrically operated three-pole breakers with stored energy closing mechanism operated from the 125 volt DC station batteries described in Section VIII-6.

All 4 8 0 volt load centers consist of low voltage switchgear and transformers. All of the switchgear are of the metal enclosed indoor drawout type. Each of the sealed dry type transformers is rated at 750 to 2000 KVA, 150°C temperature rise, three-phase, 60 Hertz. The circuit breakers are electrically or manually operated three-pole breakers.

The 4 60 volt MCCs used to feed all loads are NEMA Type I, or greater, manually operated fused disconnects or molded case circuit breakers.

Overcurrent protection is provided on all phases.

Cables have adequate flame-resistant properties, and are designed to resist high temperature and high humidity levels in the area in which they are installed, as specified in Contract E-69-1 7, page G-35. Insulation and components of all 5 kV, 1000 volt, and 600 volt cable makeups are capable of withstanding 1.0 x 10 7 rads inside the drywell and 1.0 x 10 6 rads outside the drywell, integrated over a 4 0 year life. [29 i Power and control cables to safeguard equipment within the primary containment are designed to withstand the environmental conditions caused by any accident during which the equipment they are supplying is assumed to operate, as specified in Contract E-69-1 7.

Normal continuous operating conditions in the drywell are 150°F at 100%

humidity. [29 l The current carrying capacity of all power cables is conservatively calculated to preclude thermal overloads. Cables used within the containment penetration sealed canisters meet additional insulation material and current carrying capacity restrictions.

Cables and components of redundant circuits are physically separated by means of space and fire barriers to* assure maximum independence of redundant channels. The 4160 volt cables are installed in conduits. The 480 volt power cables and control cables are installed in conduit and metal trays.

4.6 Safety Evaluation Provisions to assure continued availability of AC power to the critical service portions of the auxiliary power distribution system have been made in the design. The multiplicity of off-site and on-site sources feeding these buses, the redundancy of transformers and buses within the plant, and the division of critical loads between buses yields a system that has a high degree of reliability. The physical separation of buses and service components provides independence to limit or localize the consequences of electrical faults or mechanical accidents occurring at any point in the system. Safety design bases criteria 1 and 2 are satisfied.

VIII-4-3 05/07/12

USAR TABLE VIII-4-1 LIST OF MAJOR LOADS AUXILIARY POWER SYSTEM

1. Loads on 4160 Volt Switchgear Buses (Normal Service)

a. Bus lA Circ. Water Pump lA 1750 hp Circ. Water Pump lB 1750 hp Condensate Booster Pump lA 2500 hp Condensate Pump lA 800 hp 480 V Sta. Serv. Substa. lA 1500 KVA 4160 V Critical Bus lF 5000 KVA 345 kV Swyd. Service Transf. (Normal) 300 KVA

• 4160 V Swgr. Bus lE

b. Bus lB Circ. Water Pump lC 1750 hp Circ. Water Pump 1D 1750 hp Condensate Booster Pump lB 2500 hp Condensate Pump lB 800 hp 480 V Sta. Serv. Substa. lB 1500 KVA 4160 V Critical Bus lG 5000 KVA 345 kV Swyd. Service Transf. (Backup) 300 KVA

• 4160 V Swgr. Bus lE

c. Bus lC Reactor Recirc. M-G Set lA Motor 7000 hp

d. Bus 1D Reactor Recirc. M-G Set lB Motor 7000 hp

e. Bus lE Condensate Booster Pump lC 2500 hp Condensate Pump lC 800 hp Intake Struct. 480 V Substa. lE 750 KVA Screen Wash Pump lC 400 hp Screen Wash Pump 1D 400 hp

2. Loads on 4160 Volt Switchgear Buses (Emergency Service)

a. Bus lF 480 V Swgr. Critical Bus lF 2000 KVA Station Serv. Water Pump lA 300 hp Station Serv. Water Pump lC 300 hp RHR Serv. Water Booster Pump lA 1000 hp RHR Serv. Water Booster Pump lC 1000 hp RHR Pump lA 1250 hp RHR Pump lB[ll] 1250 hp Core Spray Pump lA 1250 hp

b. Bus lG Station Serv. Water Pump lB 300 hp Station Serv. Water Pump 1D 300 hp RHR Serv. Water Booster Pump 1B 1000 hp RHR Serv. Water Booster Pump 1D 1000 hp RHR Pump lC[ll] 1250 hp RHR Pump 1D 1250 hp Core Spray Pump 1B 1250 hp 480 V Swgr. Critical Bus lG 2000 KVA

• 4160 V Swgr. Bus lE is included with both lA and lB since it may be supplied power from either source.

VIII-4 4 01/21/21

USAR The 4160 volt critical service buses, lF and lG, receive power from 4160 volt buses lA and lB respectively. Buses lF and lG can also be supplied from the emergency AC power source or the standby AC power source. In the event that both the normal AC power source and the startup AC power source are lost, the emergency AC power source is automatically connected to buses lF and lG. In case the emergency AC power source is not available then the standby AC power source re-energizes buses lF and lG within ~14 seconds. The emergency AC power source may also be manually connected to the 4160 volt critical service buses. The standby AC power sources are capable of being independently synchronized for parallel operation with the emergency AC power source. This synchronization will be done manually for live source transfers.

The breaker controls for the emergency AC power source are arranged to prevent inadvertent interconnection with either the normal, the startup, or the standby AC power sources. This satisfies safety design basis 3.

During normal operation the facility auxiliary loads are carried by the station generator. The generator voltage is maintained essentially constant by the automatic voltage regulator and, as a result, the auxiliary bus voltage remains constant.

In accordance with ANSI C84.1-1970, p. 9, the safety related motors and non-safety motors can operate continuously over a range from 3600 V to 4400 V. At 3000 V the following events are subject to occur.

a. Failure of motor starters to close, and the subsequent failure of the respective motors to start.

b. Blowing of control fuses in AC control circuits for motor starters.

c. Overheating of motors due to excessive current drawn by the motor operating at low voltage.

In order to preclude damage to motors on critical equipment due to undervoltage conditions, the 4160 volt critical buses lF and lG are provided with two levels of protection. rioi Normally these buses operate in a voltage range of approximately 3950 to 4400 volts.

The first level of undervol tage protection is a loss of voltage scheme. Voltages on 4160 volt critical bus lF ( lG) are monitored by relays 27/lFl (27/lGl) and 27/lFAl (27/lGBl). Upon loss of voltage, relay 27/lFl (27/lGl) will initiate the following:

1. A start signal to DGl (DG2)

2. Load shedding of all motors on 4160 volt critical bus lF (lG). Relays 27Xl/1F (27Xl/1G) and 27X2/1F (27X2/1G) perform this function.

3. Load shedding of the non-essential Motor Control Centers (MCC), with the exception of MCC-L and MCC-T, and non-essential motors fed from critical 480V bus lF (lG). Relay 27X2/1F (27X2/1G) and time delay relay 27X18/1F (27X18/1G) perform this function. The time delay of approximately 5.5 seconds will prevent the load shedding of these 480V loads if the bus is transferring to the emergency station service transformer which is capable of supplying these loads in addition to the ECCS loads. If the emergency station service transformer does not energize 4160 volt critical bus lF (lG), DGl (DG2) will be connected to the bus. The time delay of approximately 5.5 seconds will ensure that the loads will shed prior to transferring to DGl (DG2).

VIII-4-5 11/28/16

USAR The other first level undervol tage relay 27 /lFAl ( 27 /lGBl) will trip breaker lFA (1GB) a short time later (1/2 to 1 second).

The first level undervoltage relays are time undervoltage relays with inverse time characteristics ( the lower the voltage, the faster the actuation) . The relays have a tap plug setting which corresponds to about 2870 volts, which assures timely operation for a loss of voltage condition, but doesn't spuriously operate during momentary voltage dips created by motor starts. The relays operate along a time-voltage curve defined by the time dial setting of the relay. A relay is tested at various voltage levels and the time delay is checked at each level to assure the relay is operating on its defined curve.

The Technical Specification setting for the first level undervoltage (loss of voltage) relays is 2300 volts+/- 5%, 0~T~5 seconds, where Tis the time delay. This window sectionalizes an area of the relay curves which corresponds to the median of voltage levels tested during surveillance testing. In this fashion, the relays are checked to assure they function as designed and are operating within Technical Specification limits.

The second level of undervoltage protection is a sustained undervoltage scheme. Voltages on 4160 volt critical bus lF (lG) are monitored by relays 27/1F2 (27/1G2) and 27/1FA2 (27/1GB2). When bus lF (lG) is energized from bus lA (1B), low voltages on each bus will be sensed by two relays 27/1F2 (27/1G2) and 27/1FA2 (27/1GB2). When bus lF (lG) is energized from the emergency station service transformer, low voltages on each bus will be sensed by only one relay 27 /1F2 ( 27 / 1G2) . Any momentary voltage dips caused by starting of large motors will not operate undervoltage relays. When bus lF ( lG) is powered from either the startup or normal station service transformer via bus lA (1B), a low voltage on bus lF (lG) below 3880 volts for 12.5 +/- 1.3 seconds will trip the tie breaker lFA (1GB) unless a RHR initiation seal-in is present, in which case breaker lFA (1GB) would trip on a low voltage on bus lF (lG) below 3880 volts for 7.5 +/- 0.8 seconds. When bus lF (lG) is powered from the emergency station service transformer, a low voltage on bus lF (lG) for 15 +/- 1.5 seconds will trip breaker lFS (lGS). After the tie breaker lFA (1GB) trips on low voltage, the associated DG starts and the first level undervoltage protection will trip all 4160 volt motor breakers. After the emergency station service transformer breaker lFS ( lGS) trips on low voltage, the associated DG starts and the first level undervol tage protection will trip all 4160 volt motor breakers and non-essential MCC breakers, with the exception of MCC-L and MCC-T.

Additionally, lockout of load shedding on bus lF (lG) (i.e.,

blocking the trip function of motor breakers due to undervoltage) occurs if the tie breaker lFA (1GB) is open and bus lF (lG) is energized from its DG.

Forty-one seconds after breaker EGl (EG2) closes, the load shedding from the first level undervoltage protection is automatically restored.

Bus lF ( lG) low voltage is alarmed in the control room at two voltage levels; relay 27 /1F2 (27 /1G2) alarms when the voltage drops below 3880V, and relay 27/lFl (27/lGl) alarms when voltage drops below 2870V.

Startup station service transformer low voltage is alarmed in the control room at two voltage levels; relay 27 /STX-2 alarms when the voltage drops below 3675 V, and relay 27 /STX-1 alarms when the voltage drops below 2870 V.

Emergency station service transformer low voltage is alarmed in the control room when the voltage drops below 2870 volts, which is monitored by relay 27ET1.

VIII-4-6 11/28/16

USAR The 27ET3 (27/ET4) relays have an alarm and a permissive function.

The permissive function is via the 27X14 lF(lG) relays, which prevent automatic closure of the lFS(lGS) breakers if the unloaded emergency station service transformer secondary voltage is below 4328 volts. An alarm function is provided to identify that breaker lFS(lGS) automatic closure is not permitted if the emergency station service transformer secondary voltage is below 4328 volts.

The entire discussion satisfies safety design criteria 4.

Therefore, it is concluded that the design satisfies the safety design basis.

4.7 Inspection and Testing

1. Inspection and testing at vendor factories and initial system tests have been conducted to insure that all components are operational within their design ratings.

2. Periodic tests of the equipment and the system are conducted to:

a. Detect the deterioration of equipment in the system toward an unacceptable condition.

b. Demonstrate the capability of normally de-energized equipment to perform properly when energized.

VIII-4-7 08/31/09

USAR 5.0 STANDBY AC POWER SOURCE This USAR section contains historical information as indicated by the italicized text. USAR Section I-3.4 provides a more detailed discussion of historical information. The information being presented in this section as historical has been preserved as it was originally submitted to the NRC in the CNS FSAR.

5.1 Safety Objective To provide a single failure proof source of on-site AC power adequate for maintaining the safe shutdown of the reactor following abnormal operational transients and postulated accidents.

5.2 Safety Design Bases

1. The standby AC power system shall consist of two independent AC power sources that are self-contained within the station site and which are independent of off-site power sources.

2. Each standby generator unit shall be capable of providing sufficient power to satisfy the load on its independent critical bus, upon failure of all off-site power.

3. Each standby generator unit and its switchgear shall be designed in accordance with Class I Seismic criteria.

4. The DG sets shall be capable of automatic start at any time and capable of continued operation at rated load, voltage and frequency until manually stopped. USAR Section XIV requires each DG set to be operable for a 30 day mission time to support its safety objective for postulated design basis accidents.

5. The generator sets shall have the ability to pick up loads as described in Table VIII-5-1 in a sequence and time period as described in Table VIII-5-2 to satisfy design basis loss-of-coolant accident acceptance criteria assuming a loss of all off-site power sources.

6. The DGs shall be capable of being independently synchronized to the normal station service transformer (NSST), the startup station service trans farmer ( SSST) or the emergency station service trans farmer ( ESST) . This synchronization will be done manually for system performance tests or live source transfers. In the emergency mode, provisions shall be made in the design to prevent: (a) the automatic parallel electrical interconnection of both DGs and (b) the automatic electrical interconnection of either DG with the NSST, SSST or ESST.

7. Each DG unit shall have a unit fuel (day) tank. Either unit fuel (day) tank shall be supplied from the combined two main fuel storage tanks. Each unit fuel (day) tank will provide enough fuel to allow a minimum of 3. 9 hours1.041667e-4 days <br />0.0025 hours <br />1.488095e-5 weeks <br />3.4245e-6 months <br /> of full load operation of the DG unit. [34 l Both main fuel oil tanks combined shall have sufficient fuel for seven days of operation of one DG unit at full load which bounds postulated accident conditions. The specific Emergency Diesel Generator (EDG) fuel oil volumes contained in the diesel fuel oil storage tanks necessary to ensure that EDG run-duration requirements are met, are calculated using Section 5. 4 of American National Standards Institute (ANSI) N195-1976, "Fuel Oil Systems for Standby Diesel Generators," and are based on applying the conservative assumption that the EDG is operated continuously for 7 days at its rated capacity. This fuel oil calculation methodology is one of two approved methods specified in Regulatory Guide (RG) 1.137, Revision 1, "Fuel Oil Systems for Standby Diesel Generators," Regulatory Position C.l.c.

VIII-5-1 04/25/18

USAR

8. Control power required for the startup and operation of each DG unit shall be supplied from the 125 volt station DC power system. Other auxiliaries necessary to ensure continuous operation shall be supplied from the DG through the critical buses.

9. The uni ts shall be capable of being started or stopped manually from local control stations near the diesels or remotely from the Control Room. The diesels shall be capable of being connected to the 4160 volt critical buses during loss of off-site power: (a) automatically when the Control Room has remote control or (b) manually when the local control stations have local contro1.[ 32 J The diesels shall start automatically upon the loss of voltage on the 4160 volt critical buses, or low reactor water Level 1 or high drywell pressure.

10. The standby AC power system shall conform to the applicable sections of "IEEE 308 Criteria for Class lE Electrical Systems for Nuclear Power Generating Stations", issued in 1970.

VIII-5-2 04/25/18

USAR TABLE VI II-5-1 DIESEL-GENERATOR LOADING TABLE STANDBY AC POWER SYSTEM USAR Table VIII-5-1 is derived by the existing plant AC load study[ 23 l, and was constructed for the worst case condition described below:

LOCA WITH LOSS OF OFF-SITE POWER (LOCA W/LOOP): This condition calculates the loading on each DG during a Loss of Offsite Power condition. The loading on each DG is calculated assuming the redundant DG is inoperative. This condition assumes a LOCA occurs at the time t = -16 seconds and the SSST and ESST are unavailable.

VIII-5-3 07/01/02

USAR TABLE VIII- 5-1 DIESEL GENERATOR #1 SEQUENTIAL LOADING (kW)

TIME _IN':r,'ERVA:L NOTE 1 0-5 Sec. S***lO Sec. 10--15 Sec. 15---20 Sec. 20--30 Sec. 0.5-2 SW-MOT-SWPA (OR C) Mi.n. 2.0-10 Mi.n. 1.0-30 M.i.n. 0.5-2 NOTE 2 0 0 27$ 2,,1 Hours 2-12 Hours 0.5-7 Days RHR*-!"lOT***RHRPlA 275 275 275 275 NOTE 3 275 969 969 969 969" 969 275 275 RHR-MO T- RHRP l.B NOTE 4 969 969 969 969 0 968 96$ 96B 969 969 CS-MOT-CSPJ.A 968 968 968 0 NOTE 5 0 0 1115 1115 0 0 0 SW-MOT -*RSWPA 1115 J.115 1.115 1004 NOTE 6 0 0 0 1004 1004 1004 0 0 0 0 SSlF NOTE 7 606 ..... 606 916 916 916 609 618 705 701 916 MCC-DG.1 GS5 70.l 7.24 80 80 80 80 80 661 661 SU.!3TQTAL 80 80 59 59 1655 26'.2"3 4017 4026 4112 59 59

0. 74% 4109 4093 3924 3947 12 19 .30 30 30

~3884 3884.

30 30 29

.... ':rotal NOTE 8 1668 2643 4047 .. 4055 29 29 29 4143 4139 4123 3953 3977 3913 3913 DIESEL GENERATOR #2 SEQUENTIAL LOADING (kW)

TlM!!l INTERVAL NOTE 1 0-5 Sec, 5--10 Sec. J.0-15 sec. 15-20 Sec, 2.0-**30 Sec. 0.5-2 Mi.n.

sw-HOT-SWPB (ORD) NO':I'E ()

2.0-10 Mirl. 10---30 Min. 0.5-2 Hours 2-12 Hours 2 0 275 275 275 0.5--7 Days' RHR-MOT-RHRJ?lC 275 275 275 275 NOTE 3 0 992 992 992 992 275 275 R.HR-MOT-RHRPlD 992 992 0 NOTE 4 993 993 .. 993 993 0 0 0 CS-MO T-CSPl B 993 993 993 993 NOTE 5 0 0 i115 993 993 993 1115 1115 1115 1115 SW-MOT-RSWPB NOTE 6 0 0 979 979 979 979 0 0 0 0 S$1G NOTE 7 343 343 354 0 882 882 882 882 363 458 459 485 MCC-DG2 79 79 565 604 576 576 79 79 ' 79 79 SUBTOTAL 79 SB 58 1415 2407 3808 3817 3912 58 58 3913

o. 82% 12 20 31 31 3940 3752 37.91 .. 3763 3763 Total. NOTE 8

[-. 32 32 32 31 31 :n 1427 2427 3839 3849 3944 31 3945 3972 3783 3822

.. 3793 3793 VIII- .5-4 11/02 /20

USAR NOTES FOR TABLE VIII- 5-1:

1. Time steps were chose n to match the calcu lation and are not intend ed to refle ct actua Howev er, for the purpo se of the calcu lation , l compo nent sta:rt time.

the time steps used bound actua l start times .

2. Servi ce Water Pumps SW-MOT-SWPC and SW-MOT-SWPD (or SWPA and SWPB) are autom atical ly starte d at 13 secon ds.

3. RHR-M OT-RH RPlA{l D) is autom atical ly starte d at t=0 secon ds (as model ed in the calcu lation ).

4. RHR-M OT-RH RPlB(l C) is autom atical ly starte d at t=S secon ds, and manu ally shutdo wn at t=l0 minut es.

s~ CS-MO T-CSP lA(lB) is autom atical ly starte d at t=lO secon ds.

6. SW-MOT-RSWPA or C and B or Dis manua lly starte d at t=l0 minut es.

"/. SSlF(S SlG) repre sents the 480 VAC loads fed from 4160- 480 VAC distri butio n transf orme r SSlF( SSlG)

8. A 0.74% margi n for DGl and a 0.82% margi n for DG2 has been added to bus total s to accou nt for losse s. cable and transf ormer VIII- 5-5 11/02 /20

USAR TABLE VIII-5-2 STANDBY DIESEL GENERATOR SYSTEM TYPICAL SEQUENTIAL LOADING OF DIESEL GENERATORS Event Time (sec) Comment Design basis loss of coolant starts, -16 normal auxiliary power assumed lost.

Signal diesel generator to start from -14 This sequence applies drywell high pressure or vessel low to one diesel and its water Level 1 or loss of voltage on associated loads. The buses lF or lG. other diesel has a similar sequence and load.

Energize 480 volt critical bus. 0 Start first RHR pump (LPCI mode). .5 Start second RHR pump (LPCI mode). 5 Start core spray pump. 10 This is the relay setting. Reload Licensing Analysis is based on 11 seconds which includes relay drift. (39 l Start station service water pump. 13 Start REC pump. 20 VIII-5-6 02/28/00

USAR 5.3 Description (Refer to Burns and Roe Drawing 3002) 5.3.1 System Operation The NSST and two preferred off-site AC power sources are available to each 4160 volt critical bus; the preferred sources are the SSST and ESST.

The NSST and SSST are connected to buses lA and lB; buses lA and lB supply the critical buses through the normal supply breakers lFA and 1GB. The loss of the NSST source results in an automatic fast transfer to the SSST source. The loss of both the NSST and the SSST sources to either critical bus results in the automatic dead bus transfer of the critical bus to the ESST source and the automatic starting of the DG associated with that bus. If the ESST source fails or is unavailable the DG will reach rated speed and voltage prior to closing the supply breaker within 14 [39 J seconds, restoring power to the affected critical bus.

A DG starts automatically on a loss of coolant accident signal (i.e., low reactor water Level 1 signal or high drywell pressure signal) or on a critical bus loss of voltage signal. After the DG has started, it automatically ties to its respective bus after off-site power is tripped as a consequence of critical bus loss of voltage or degraded voltage, independent of or coincident with a LOCA signal. On a LOCA signal without a LOOP the DGs start and operate in the standby mode without tying to the critical bus.

Upon loss of voltage to a critical bus all off-site supply breakers to the critical bus are tripped and all loads are shed from the critical bus except the feeder to the 480 volt critical bus. When the DG circuit breaker closes onto the critical bus, loads are then sequentially connected to its respective critical bus. The sequencing logic controls the permissive and starting signals to the motor breakers as noted in Table VIII-5-2 and to prevent overloading the DG.

The following events occur under loss of coolant accident conditions in the order indicated:

1. The DGs are automatically started (independent of availability of off-site AC power).

2. If the SSST source is available, some non-essential loads of buses lA, lB, and lE are re-energized and critical loads of buses lF and lG required for safe shutdown are started sequentially.

3. If there has been a loss of power from the SSST source:

a. The normal power source breakers, lAF&lFA and lBG&lGB, to the critical buses are tripped open.

b. All 4160 volt feeder breakers from the critical buses are tripped open, except the feeds to the 480 volt critical buses.

c. If the ESST source is available, the ESST source feeder breakers, lFS and lGS, are automatically closed, feeding the critical buses.

d. When the voltage on any critical bus is restored, essential auxiliaries are then automatically started in a pre-determined sequence as shown on Table VIII-5-2.

VIII-5-7 02/28/00

USAR

4. If there has been a loss of power from the SSST and the ESST source:

a. The normal power source breakers lAF&lFA and lBG&lGB and the ESST source breakers lFS and lGS to the critical buses are tripped open.

b. All 4160 volt feeder breakers from the critical buses are tripped open, except the feeds to the 480 volt critical buses.

c. The diesel-generator supply breaker closing sequences are automatically started.

d. Within 14 seconds [39 l, the DG supply breakers, EGl (EG2), will close at each critical bus when its DG has reached rated voltage and speed.

e. When the voltage on any critical bus is restored, essential auxiliaries are then automatically started in a pre-determined sequence as shown on Table VIII-5-2.

DG auxiliary and support subsystems such as fuel oil and fuel oil transfer, lubricating oil, jacket water, service water, and starting air are required for operation of the DG. USAR Section X-8 .1, provides a detailed discussion of the SW supply to the DG jacket water subsystem. [45 l 5.3.2 Diesel Generator Protection Each DG is connected to only one 4160 volt critical bus.

Interlocks and procedural restrictions assure that the two DGs are not interconnected. Directional overpower relays are installed to monitor the generator power output to reduce the possibility of overloading the DGs in the test mode. [l 4 J Phase overcurrent relays protect the generator from overload resulting from external fault currents.

Since critical buses lF and lG supply 4160 volt power to the core cooling equipment, any power interruption to these buses must be avoided.

There is a possibility that the DG1(2) could carry the load of two (2) buses, lA and lF (1B and lG), during surveillance testing. Under these conditions the capacity of the DG could be exceeded which would result in an overload stall of the engine. Should this occur the 4160 V bus lF (lG) would be deenergized.

To prevent exceeding the stall horsepower of the engine, an overpower relay 32/lFE (32/lGE), set at 115% of rated power, will trip breaker lFA (1GB) and isolate bus lA from bus lF (bus 1B from lG) lowering the bus load to prevent a DG stall from the overload condition. This will assure continuous operation of the DG and availability of 4160 volt critical bus lF ( lG) . n 4 J The DG is tripped by the following:

1. Over speed,

2. Incomplete sequence,

3. Emergency stop push button,

4. Generator lockout,

5. Excessive vibration,

6. Low lube oil pressure,

7. High jacket water temperature,

8. Main and connecting rod bearing high temperature,

9. Turbocharger thrust bearing failure and

10. Low turbocharger oil pressure.

VIII-5-8 02/28/00

USAR Trips 1, 2, 3 and 4 are active in both the test and emergency mode of DG operation. Trips 5, 6, 7, 8, 9 and 10 are active in the test mode but are bypassed in the emergency mode of DG operation.

The generator lockout is initiated by the following protective relays:

1. generator differential current,

2. generator phase overcurrent,

3. loss of field,

4. generator overvoltage and

5. reverse power.

The overcurrent relays are set so they will not trip the generator on transient overcurrents or surges in power due to starting or tripping of large loads. Protective relays and devices are provided to annunciate abnormal DG conditions. Annunciator panels are located in the Control Room and at the local control station. Annunciators at the local control station subsequently annunciate the "DIESEL GEN 1(2) TROUBLE" annunciator in the Control Room.

The design criteria for the diesel-generator set protective relaying are as follows: [lSJ

1. Seismic The specification requires that the equipment and accessories shall be capable of withstanding seismic conditions listed below without any failure and without causing false operation of relays and controls. The equipment and accessories also shall be capable of operation during and following the occurrence of an earthquake having seismic forces at the equipment of magnitudes up to and including those listed as follows for a hypothetical maximum earthquake.

Horizontal= 2.4 W Vertical= 0.14 W Where Wis the weight of the item under consideration.

2. Temperature The protective relays are designed for operation at a maximum coil temperature of 105°C per IEEE 313-1971.

3. Overspeed The two overspeed devices which will shutdown the engine during an emergency are the mechanical overspeed governor and electronic relay tachometer, with one exception. If the diesel experiences an emergency start, has reached a speed of 550 rpm or greater, and the MPU to the relay tachometer is lost, then only the mechanical overspeed is available. The diesel engine shall be tripped on engine overspeed in excess of a nominal 10% of rated speed. Each trip generates a concurrent overspeed alarm.

4. Vibration During the test mode of operation, the vibration control unit mounted on the DG set will shut the engine down. However, this control function is bypassed by an emergency start and only initiates an alarm.

VIII-5-9 04/25/12

USAR

5. Humidity All protective relays are mounted in enclosed cases as in switchgear on panels raised one foot above floor elevation and are installed for usual service conditions in regard to humidity.

6. Physical Arrangement All components of the protective system are installed in separate Class I seismic rooms for complete independence and protection against design basis events enumerated in IEEE 308-1970.

Each DG unit is housed in a reinforced concrete Class I Seismic structure. Each unit is completely enclosed to provide independence from the other unit. DG1(2) is connected to the 4160 volt critical bus by cables routed in underground ducts and in rigid steel conduits, in compliance with the requirements for physical separation of Class lE electrical equipment. [161 4160 volt switchgear lF ( lG) is housed in a separate room within a Class I Seismic structure.

The generator, static exciter and voltage regulator are designed to accept load and accelerate the motors in the sequence and time requirements shown in Table VIII-5-2. Voltage drop on starting of large motors has been calculated to ensure proper acceleration of the pumps under the required conditions for core cooling after a design basis loss of coolant accident.

Proper control and timing relays are provided so that each load is applied automatically at the proper time in the starting sequence as indicated in Table VIII-5-2. After the automatic loading sequence of the emergency loads is completed, the operator may manually add other loads within the rating of the DG. The operator will follow an emergency operating procedure when determining which loads to manually connect or disconnect following a OBA, using the ammeter and wattmeters installed in the Control Room to evaluate loads on the DGs. By these means, the operator can prevent an overload condition and yet assure that required loads will not be disconnected. [l7J The operator may also manually trip redundant emergency loads if their continued operation is not necessary.

Each DG, associated auxiliaries, control system and distribution of power to the various emergency loads is segregated and separated from the corresponding systems of the other DG. Each unit is operated independently of the other unit.

All necessary information, data and annunciation of trouble at the DG is provided in the main Control Room. Table VIII-5-3 shows DG nominal ratings. The abnormal conditions delineated on Table VIII-5-4 would prevent the diesel generator from responding to an automatic emergency start signal. [lBJ These conditions are alarmed in the Control Room.

5.3.3 Diesel Generator Reliability Assurance To insure increased reliability in starting each unit, air is injected into each cylinder of each unit for quick starting. One electric motor driven air compressor and one tandem diesel or electric motor driven air compressor are provided for each DG. Two air receivers are provided for each diesel engine, with each air receiver capable of providing sufficient air to perform multiple starts without immediate replenishment. Additional flexibility is provided by a cross-connect line that allows, if needed, air receivers to be filled from the other diesel generator air compressors.

CNS is required to monitor the DG to maintain a minimum 0.95 reliability.

VIII-5-10 08/23/11

USAR TABLE VIII-5-3 STANDBY AC POWER SOURCE EQUIPMENT NOMINAL RATINGS Diesel Engine Rated Speed 600 rpm Continuous Rated Capacity 5560 HP Overload Capacity 6536 for 2,000 hrs. per yr.

Maximum Overload Capacity 6953 HP at generator synch. speed 7158 HP at stall point Fuel Consumption at Rated Capacity .0486 gals/HP hr.

Manufacturer Cooper - Bessemer Generator Continuous Rated Capacity 4000 KW Power Factor 0.8 Frequency 60 Hz Voltage 4,160 volts Phase (connection) 3 (wye)

Overload Capacity 4700 KW for 2,000 hrs. per yr.

5000 KW for 320 hrs./total (DEMA Standard Rating) 4400 KW for 2 hrs. per day Exciter Size 33 KW DG Startup Starting time to rated speed and  :::;; 14 seconds voltage, and ready to accept load (analytical limit)

Starting time to rated load  :::;; 30 seconds Fuel Oil Storage Day Tank 2,500 gallons Main Storage Tank 30,000 gallons VIII-5-11 02/28/00

USAR TABLE VIII-5-4 ABNORMAL DIESEL GENERATOR DISABLING CONDITIONS AND CONTROL ROOM INDICATION[lBJ CONDITIONS RENDERING DG INCAPABLE OF RESPONDING OTHER ALARM SIGNALS THAT TO AN AUTOMATIC EMERGENCY CONTROL ROOM INDICATION ALSO CAUSE THE CONTROL START SIGNAL AND ANNUNCIATOR WORDING ROOM ANNUNCIATOR TO ALARM

1. Loss of voltage to All indicating lights None 125V DC PNL DGl. associated with DGl go out.

DG-1 DC CONTROL POWER FAILURE

2. Loss of voltage to All indicating lights None 125V DC PNL DG2. associated with DG2 go out.

DG-2 DC CONTROL POWER FAILURE

3. Blown fuse in any of DG-1 DC None the 125V DC circuits CONTROL POWER FAILURE for DG control. or DG-2 DC CONTROL POWER FAILURE

4. DC control power to DG-1 DC None DGl breaker 72D CONTROL POWER FAILURE tripped.

5. DC control power to DG-2 DC None DG2 breaker 72D CONTROL POWER FAILURE tripped.

6. Maintenance lockout DIESEL GEN 1 [25 l None switch in OFF for DGl MAINT LOCKOUT SW or DG2. IN OFF or DIESEL GEN 2 MAINT LOCKOUT SW IN OFF

7. Incomplete sequence White light above the Local alarm FAILURE TO relay 48/ISEX not reset push button ON for START reset (seal in each respective DG.

circuit) caused by DIESEL GEN 1 engine overspeed or by TROUBLE excessive cranking or time (more than DIESEL GEN 2 20 sec) . TROUBLE

8. Diesel Generator DIESEL GEN 1 None lockout relay 86/DGl LOCKOUT actuated.

9. Diesel Generator DIESEL GEN 2 None lockout relay 86/DG2 LOCKOUT actuated.

VIII-5-12 02/28/00

USAR CONDITIONS RENDERING DG INCAPABLE OF RESPONDING OTHER ALARM SIGNALS THAT TO AN AUTOMATIC EMERGENCY CONTROL ROOM INDICATION ALSO CAUSE THE CONTROL START SIGNAL AND ANNUNCIATOR WORDING ROOM ANNUNCIATOR TO ALARM

10. Loss of all air DIESEL GEN 1 Local alarm STARTING AIR pressure in both air TROUBLE LOW PRESSURE tanks for DGl or DG2. or DIESEL GEN 2 TROUBLE

11. Failure of starting DIESEL GEN 1 Local alarm STARTING AIR air solenoids 20SAR TROUBLE SOLENOID VALVE FAILURE and 20SAL. or DIESEL GEN 2 TROUBLE

12. Automatic tripping of DIESEL GEN 1 None output breaker EGl or BKR EGl TRIP EG2 for DGl or DG2. or DIESEL GEN 2 BKR EG2 TRIP

13. Automatic tripping of 4160V BUS lF None output breaker lFE or BKR lFE TRIP lGE for DGl or DG2. or 4160V BUS lG BKR lGE TRIP

14. DGl or DG2 output 4160V BUS lF None breaker lockout relay BKR lFE LOCKOUT 86/lFE or lGE or actuated. 4160V BUS lG BKR lGE LOCKOUT

15. Emergency stop push DIESEL GEN 1 None button 86ESD not EMERG STOP reset. NOT RESET [261 or DIESEL GEN 2 EMERG STOP NOT RESET

16. Selector switch for DIESEL GEN 1 MODE SWITCH None DGl and DG2 on BD-C NOT IN AUTO [25, 26J not in AUTO. or DIESEL GEN 2 MODE SWITCH NOT IN AUTO

17. DGl control power DIESEL GEN 1 None [321 isolation switch(es) ISOLATION SW IN (IS-DGl A/B) not in LOCAL remote.

18. DG2 control power DIESEL GEN 2 None [321 isolation switch(es) ISOLATION SW IN (IS-DG2 A/B) not in LOCAL remote.

NOTE: Shared annunciators for DG disabling conditions cannot be cleared in the Control Room until all abnormal ( disabling) conditions are corrected. [251 VIII-5-13 02/28/00

USAR 5.4 Safety Evaluation 5.4.1 General The DG units were selected on the basis of their proven reliability and independence as standby power sources. Redundancy is provided in the air starting system components for each unit to improve the starting reliability of the units.

Either DG is capable of starting and continuously operating under postulated accident conditions for a period of seven days using fuel stored on-site in underground storage tanks. Independent sources of 125 volt DC control power are used to supply electrical control power to the air-starting system for the DG units. The units and all necessary auxiliaries are housed in Class I seismic structures.

The emergency loads are divided between the two 4160 volt critical buses so that the failure of one DG or one 4160 volt critical bus will not prevent a safe shutdown of the reactor. Each DG and its associated system is separated so that failure of any one component will not affect the operation of the redundant system. Sections VIII-2.2.5 and VIII-3.5 discuss the interlocks which prevent the inadvertent electrical interconnection of either diesel generator with the SSST or the ESST.

The capability of the DG to start and attain rated voltage and frequency within 14 seconds, to accept the necessary emergency engineered safeguard loads and to start and accelerate the emergency core cooling system pumps in the required time meets the necessary requirements for the standby AC power system. This is shown by comparing the DG ratings on Table VIII-5-3 with the load requirements on Table VIII-5-1.

Al though the DGs are designed to start and attain rated voltage and frequency within 10 seconds, analyses [33 , 39 l have been performed which show that the maximum DG startup time that assures consistency with the loss of coolant analysis (LOCA) is 14 seconds. This conclusion is based upon the loading sequence identified in the referenced analysis.

The Station Blackout Rule, 10CFR50. 63, required all licensees to assess the capability of their plants to maintain adequate core cooling and appropriate containment integrity during a station blackout event and to have procedures to cope with such an event. CNS has performed the Station Blackout assessment [3 BJ and determined that CNS has a four hour coping duration and a

. 95 DG target reliability. The NRC has reviewed [35 , 36 ' 37 , 42 l the District's submittals and has accepted the District's determinations of a four hour coping duration and .95 DG target reliability.

DG2 can be isolated from the Control Room.

5. 4. 2 Single Failure Analysis [l 6 l General Each of the two DG sets is housed in completely independent, separated rooms, together with the respective auxiliary systems which are provided independently in all respects for each unit. The rooms are connected by doors which are nonlouvered, 1 3/ 4" thick steel doors with an "A" fire rating.

Each DG Room is designed as a Class I Seismic building.

VIII-5-14 04/28/16

USAR Engine Fuel System Each DG set is supplied from a unit fuel oil day tank. Each day tank has sufficient capacity for a minimum of 3.9 hours1.041667e-4 days <br />0.0025 hours <br />1.488095e-5 weeks <br />3.4245e-6 months <br /> of operation at full load, for its respective DG. [34 l Two diesel oil storage tanks are provided, each with its own transfer pump and piping connections to its respective fuel oil day tank. A cross-tie is provided such that either DG can be supplied from both diesel oil storage tanks. Both diesel oil storage tanks combined contain sufficient fuel for seven days operation of one DG at its rated continuous load of 4 MW.

Separation and seismic consideration are incorporated in the installation of storage tanks, transfer pumps and piping in order to comply with the single failure criteria.

Electrical Sources Electrical feeders needed for the operation of the DG set auxiliaries are derived from independent sources associated with each DG set.

The feeders connecting the sources to the auxiliaries in the DG Rooms are routed in compliance with the requirements given for physical separation of Class lE Electrical equipment.

Cross-Tie Lines Review of the DG cross-tie lines indicate that there are four lines of importance. Two lines are Starting Air System cross-ties and two lines are Fuel Oil System cross-ties.

The 2" Starting Air System cross-ties provide a pair of common lines between the air receivers located in each room. Each line has a manually operated stop valve at each end. There is also a manually operated equalizing valve that ties the two cross-tie lines together. The normal valve line-up configuration maintains physical independence between the two Starting Air subsystems, such that no single failure of the cross-tie can disable both DGs.

A 2" Fuel Oil System Cross-tie line connects the discharge lines of the two fuel oil transfer pumps supplying the day tanks together. The cross-tie is downstream of the pump discharge check valves. The cross-tie has a single closed isolation valve in the DG2 Room. The normal valve line-up configuration maintains physical independence between the two Fuel Oil subsystems, such that no single failure of the cross-tie can disable both DGs.

A 4" Fuel Oil System Cross-tie line connects the two main fuel storage tanks together. The cross-tie has two open isolation valves buried between the main storage tanks in the bunker. The combined main fuel storage tanks provide sufficient fuel for seven days of operation of one DG unit under postulated accident conditions.

5.5 Inspection and Testing Since the DGs are utilized as standby units, readiness is of prime importance. Readiness can best be demonstrated by periodic testing, which insofar as practical, simulates actual emergency conditions. The testing program is designed to test the ability to start the system as well as to run under load for a period of time long enough to bring all components of the system into equilibrium conditions to assure that cooling and lubrication are adequate for extended periods of operation. Functional tests of the automatic circuitry are conducted on a periodic basis to demonstrate proper operation.

VIII-5-15 07/28/16

USAR For testing DG1(2)is manually synchronized to its 4160 volt critical bus lF(lG) and thereby paralleled to the off-site source. During station power operation when the NSST is supplying station auxiliaries, the DG is synchronized to the NSST. When the SSST is supplying station auxiliaries, the DG is synchronized to the SSST. Synchronization to the off-site sources provides the capability to functionally test the DG at full rated power.

Section VIII-5.2-6 provides additional synchronization requirements.

During a 6 year interval, each DG is inspected in accordance with instructions based on industry experience and the manufacturer's recommendations .

An initial system test was performed to demonstrate that the standby AC power system can start, accept design load within the design basis time and that the standby power source is independent of the off site power sources.

The undervoltage protective schemes for 4160 volt critical buses lF and lG provide for automatic start of the associated DG and assumption of load upon restoration of voltage to bus lF or lG. The protective scheme provides the following functions on each critical bus:

1. Clear the bus of all motor loads excepting supply to the 480 volt critical unit substation.

2. Isolate the bus by opening all incoming breakers.

3. Start the DG on emergency basis bringing it up to full speed and voltage.

4. Close the generator breaker to the critical bus when the DG is at rated speed and voltage.

5~ Signal to logic for RHR and CS Systems that diesel power is available for timed starts.

6. Start the SW standby pumps after approximately 13 second delay.

7. Remain in running status until manual shutdown.

Testability of the protective scheme can be demonstrated during normal station operation by opening incoming breaker lFE (lGE) to prevent actual standby power connection to the bus, and by using test switches at either switchgear buses lF or lG in proper sequence to allow all protective relays to operate as required.

Each of the two DGs has its own separate protective scheme, relays, switches, cables, buses and DC power supply. Thus a redundant source of power is available to the Standby AC Power System for safe shutdown of the reactor.

The diesel generator system is in scope for License Renewal per 10 CFR 54.4 (a) (1), (a) (2), and (a) (3) and was subject to aging management review. Aging effects are managed by the following Aging Management Programs: Bolting Integrity (see USAR Section K-2.1.2), Buried Piping and Tank Inspection (see USAR Section K-2.1.3), Diesel Fuel Monitoring (see USAR Section K-2. 1. 12) , External Surfaces Monitoring ( see USAR Section K-2. 1. 14) ,

Oil Analyses (see USAR Section K-2.1.28), Periodic Surveillance and Preventive Maintenance ( see USAR Section K-2. 1. 31), Selective Leaching ( see USAR Section K-2. 1. 34) , Service Water Integrity ( see USAR Section K-2. 1. 35), and VIII-5-16 01/17/14

USAR Water Chemistry Control - Closed Cooling Water ( see USAR Section K-2. 1. 4 0) .

The following Time-Limited Aging Analyses are applicable: Metal Fatigue (see USAR Section K-2.2.2.2).

5.5.1 DG Vendor Inspection and Testing The vendor has conducted seismic tests on the control and relay panels to insure compliance with the design criteria. Functional test records of the equipment are available including overspeed at 660 rpm

{I 0% overspeed).

Since a 4000 KW diesel generator like the units selected for CNS had no prior service history as a standby power source for nuclear power plants, a rigorous qualification test program was performed to assure the suitability of the CNS units for this emergency serviceJ19J This program is described below:

A. Shop Tests After completion at the factory and before shipment, the engine, generator, exciter and auxiliary equipment were tested in accordance with the following:

1. Diesel Engine-Generator Set Each entire engine-generator set and all set mounted accessories and auxiliaries were assembled on the sub-base and the equipment tested as a unit. These tests demonstrated that the diesel engine generator set is capable of

a. Operation with no load, or excitation on the generator, 110% rated speed

{I 0% overspeed) for five minutes, without indication of harmful vibrations and/or torsional vibrations.

b. Functional operation and starting of the automatic start system by successfully starting 21 consecutive times to rated speed in ten seconds or less; followed by sequential loading at five second intervals offour 1000 KW electrical resistive loads or water rheostats, to full load of 4000 KW within 30 seconds or less.

c. Functional operation at 100% rated load using electric resistive loads for four hours, with a record of all pertinent test data including at least the following minimum data at fifteen minute intervals:

c. l - All instrumentation on the generator control panel and the engine control panel.

c.2 - Observation and record of all temperatures, pressures, vibrations, speeds and/or other data to prove out the functional performance ofthe engine generator set.

c.3 - Record of all other important data in accordance with the Vendor's normal test and check-out program.

d. Functional overload test at the 2000 hour0.0231 days <br />0.556 hours <br />0.00331 weeks <br />7.61e-4 months <br /> rating for two (2) hours using electric resistive loads, with a record ofall pertinent data required by Section 1(c) above at the 100% rated load test.

Hydrostatic tests were performed on all tanks, in accordance with the applicable ASME Codes for Unfired Pressure Vessels. All piping provided with the engine-generator sets and accessories were hydrostatically tested at 1 1/2 times the design pressure.

VIII-5-1 7 01/17/14

USAR The balance, eccentricity and vibration of all rotating and reciprocating elements and assemblies was determined and recorded.

All other auxiliary machinery were tested in accordance with the manufacturer's standard testing and checkout procedures, and applicable standards to demonstrate compliance with guarantees.

The generator exciter auxiliary and accessory equipment tests demonstrated adequacy and coordination with the engine requirements.

2. Generator, Exciter, and Regulator Generator and exciter factory tests were in accordance with IEEE Test Code No. 503,for Synchronous Machines and the NEMA Test Code MG-1, Part II and include:

For the fully assembled generator:

a. Insulation resistance ofall stator and rotor windings.

b. Cold resistance of all stator and rotor windings.

c. Air gap measurement.

d. Dielectric tests on rotor and stator windings.

e. Overspeed.

f Bearing and shaft current test.

g. Phase sequence test.

h. No load, short-circuit and zero power factor saturation.

i. Mechanical balance and inspection.

j. Temperature rise test.

k. Exciter and regulator tests.

All control and instrument wiring together with the interconnected control and/or instrument devices were subjected to a one minute 1500 volt a-c insulation test.

B. Field Tests Field tests were made by the Equipment Vendor and the District to determine that the material and equipment meets the specified performance.

The overspeed, lube oil and jacket water safety controls were tested to show that they are properly adjusted and functioning.

The diesel-engine generator units were field tested in accordance with the NEMA Standard Test Codes and/or the ASME Power Test Code No. 17 for Internal Combustion Engines, and conformance to IEEE-387 loading was noted.

VIII-5-18 01;17;14 I

USAR

2. Generator, Exciter, and Regulator Generator and exciter factory tests were in accordance with IEEE Test Code No. 503, for Synchronous Machines and the NEMA Test Code MG-I, Part II and include:

For the fully assembled generator:

a. Insulation resistance of all stator and rotor windings.

b. Cold resistance of all stator and rotor windings.

c. Air gap measurement.

d. Dielectric tests on rotor and stator windings.

e. Overspeed.

f Bearing and shaft current test.

g. Phase sequence test.

h. No load, short-circuit and zero power factor saturation.

i. Mechanical balance and inspection.

j. Temperature rise test.

k. Exciter and regulator tests.

All control and instrument wiring together with the interconnected control and/or instrument devices were subjected to a one minute 1500 volt a-c insulation test.

B. Field Tests Field tests were made by the Equipment Vendor and the District to determine that the material and equipment meets the specified performance.

The overspeed, lube oil and jacket water safety controls were tested to show that they are properly adjusted and functioning.

The diesel-engine generator units were field tested in accordance with the NEMA Standard Test Codes and/or the ASME Power Test Code No. 17 for Internal Combustion Engines, and conformance to IEEE-387 loading was noted.

The units and all accessories were tested on the loads to be encountered at the operating site in accordance with the load requirements listed in Table VIII-5-2, using only the larger motor loads i.e., RHR Pump, Core Spray Pumps, and RHR S. W. Booster Pumps.

VIII-5-18 02/28/00

USAR The units and all accessories were tested on the loads to be encountered at the operating site in accordance with the load requirements listed in Table VIII-5-2, using only the larger motor loads i.e., RHR Pump, Core Spray Pumps, and RHR S. W. Booster Pumps.

Each diesel generator set and all mounted accessories when fully erected and assembled were also field tested to demonstrate capability of actually performing in accordance with specified requirements. The following tests were conducted to prove satisfactory performance and compliance with the Specification for each unit:

A minimum of ten consecutive successful starts (five hot, five cold) were made. Each start attained full speed and voltage in less than ten seconds followed with sequential loading per the Specification requirements of the actual equipment required for an emergency reactor shutdown. Minimum test duration was twenty minutes.

During the series of test runs, no adjustments were made to the engine and/or generators. During each test run all generator control panel and engine panel instruments were observed and data recorded. Strip chart load recorders and a sequence timer maintained permanent records of the load, voltage and time sequence of loads and events during the entire duration ofeach test run.

The test results demonstrated successful operation of all standby system and auxiliaries included herein.

C. Reliabilit/201 In order to demonstrate 0.99 starting reliability at 95% confidence level, 298 consecutive successful starts are required. The following consecutive successful starts have been performed on the Cooper Nuclear Station diesel-generator unit or its equivalent.

a. Forty-two (42) consecutive successful starts on the CNS units performed during factory tests. Test records show 8.8 seconds maximum starting time, approximately 4000 kW load acceptance in three equal steps within 18 seconds at each start at rated voltage and frequency.

b. Sixty-five (65) consecutive successful factory test starts on the Zion Station units for Commonwealth Edison Company performed during tests similar to those for the CNS units as described in a. above.

c. The balance of starts necessary to establish equipment reliability consisted of a combination of total successful starts as conducted by Zion* Station units in combination with those conducted by NPPD.

The units were loaded to a minimum of 50% of the continuous rating within 30 seconds with each start from design cold ambient conditions.

Prior to fuel loading, each NPPD unit was field tested a minimum of ten consecutive successful starts (five hot, five cold) to demonstrate capability of actual performance as described above.

• The Zion units are identical to NPPD's except for the following:

1. Static excitation vs. brushless

2. Electric load sensing governor vs. hydraulic speed sensing VIII-5-19 01;17;14 I

6.0 125/250 VOLT DC POWER SYSTEMS This USAR section contains historical information, as indicated by italicized text. USAR section I-3. 4 provides a more detailed discussion of historical information. The information being presented in this section as historical has been preserved as it was originally submitted to the NRC in the CNS FSAR.

6.1 Safety Objective To provide an uninterruptible source of power to supply all normal and emergency 125 volt DC and 250 volt DC control and power loads under all conditions.

6.2 Safety Design Bases

1. Each 125 volt and 250 volt battery shall have adequate capacity to safeguard the station until AC power sources are restored.

2. Each battery charger shall have adequate capacity to restore its battery to full charge from a totally discharged condition while carrying the normal station steady state DC load.

3. The 125/250 volt DC power systems shall be arranged so that no single component failure will prevent the systems from providing power to a sufficient number of vital DC loads necessary for safe shutdown.

4. The 125/250 volt DC power systems shall be provided in accordance with the "IEEE 308 Criteria for Class lE Electrical Systems for Nuclear Power Generating Stations", issued in 1970.

5. The 125/250 volt batteries and battery racks shall be Class I Seismic equipment to assure continuous operation of the equipment under maximum seismic shock conditions applicable to the area and locations of the equipment.

6. The 125/250 volt Division I and II batteries shall provide power for a 4 hour4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> duration during a Station Blackout in accordance with 10CFR50.63, NUMARC 87-00, and Reg. Guide 1.155.

6.3 Description The list of major equipment in the 125/250 V DC power systems is shown in Table VIII-1-3.

The DC power systems (125/250 volt for power and control) supply DC power to conventional station emergency equipment and selected safeguard system loads. The DC power systems are credited with mitigating a Station Blackout event. [35 l [ 36 l [ 37 l [ 3 Bl [ 42 l The DC power systems are shown in Burns and Roe Drawing 3058.

The 125 volt DC switchgear buses lA and lB each receive their power from either a 125 volt station battery or the 460 volt critical MCC-LX and MCC-TX through a 2 0 0 ampere battery charger ( charger lA, lB or charger lC) . Chargers lA and lB are dedicated to their respective DC buses.

Charger lC is a spare and can supply power to either bus in place of 125 volt system charger lA or charger lB. Charger lC can be powered from either MCC-LX or MCC-TX. When the lC charger is not in operation, its feeder breakers shall be locked in the open position.

VIII-6-1 04/08/15

USAR Each 125 volt distribution panel receives its power from either 125 volt DC switchgear bus lA or lB. Distribution panel A is normally fed from Bus lA and distribution panel B is normally fed from Bus lB. The 125 volt DC station batteries for Bus lA or Bus lB are service rated for 1800 ampere hours each at an eight hour discharge rate. The batteries are lead-calcium type with 58 cells. Each battery is located in a separate ventilated battery room.

The 250 volt DC switchgear buses lA and lB each receive their power from either a 250 volt station battery or the 460 volt critical MCC-LX and MCC-TX through a 200 ampere battery charger ( charger lA, lB or charger lC) . Chargers lA and lB are dedicated to their respective DC buses.

Charger lC is a spare and can supply power to either bus in place of 250 volt system charger lA or charger lB. Charger lC can be powered from either MCC-LX or MCC-TX. When the lC charger is not in operation, its feeder breakers shall be locked in the open position.

The 250 volt DC station batteries for Bus lA or lB are service rated for 1800 ampere hours each at an eight hour discharge rate. The batteries are lead-calcium type with 120 cells. Each battery is located in a separate ventilated battery room. The 250 volt DC switchgear Bus lA feeds through the static inverter for the 115/230 volt AC No Break Power Panel.

The 250 volt DC system contains several starter racks. The 250 volt DC Reactor Core Isolation Cooling (RCIC) starter rack receives its feed from Bus lA. This starter rack is used for the RCIC condensate pump and vacuum pump. The 250 volt Division I Reactor Building starter rack is fed from Bus lA. The 250 volt DC starter rack B is located in the CST room and feeds RHR shutdown cooling motor operated valves (MOVs) and the 250 volt DC High Pressure Cooling Injection (HPCI) starter rack. The HPCI starter rack is fed from Bus lB. The 250 volt DC HPCI starter rack is used for the HPCI Auxiliary Lube Oil Pump, HPCI Gland Exhaust Blower, HPCI Gland Seal Condensate Pumps and associated motor operated valves. The 250 volt DC Turbine Building starter rack is supplied from either the 250 volt Bus lA or lB through a manual throw over switch. This switch is normally connected to Bus lB. This starter rack provides DC power for the Main Turbine Emergency Oil Pump, Air Side Seal Oil Backup Pump, and the Reactor Feed Pump Turbine Emergency Oil Pumps. The 250 volt Di vision I I Reactor Building starter rack is fed from Bus lB. The Division I and II Reactor Building starter racks power the LPCI RHR injection valves and Reactor Recirculation Pump Discharge Valves.

Cables and components of the redundant 125 and 250 volt DC system circuits are physically separated in accordance with Section VII-1. 7. 3 .1 to assure maximum independence of redundant channels. The 125 and 250 volt DC system cables are installed in conduits and metal trays. The current carrying capacity of all power cables is conservatively calculated in accordance with Section VII-1.7.3.2 to preclude thermal overloads. Provisions for loss of AC and DC power have been made in the design. The multiplicity of battery charger sources and the division of critical loads between buses yields a system that has a high degree of reliability. The physical separation of buses and service components will limit or localize the consequences of electrical faults or mechanical accidents occurring at any point in the system.

6.4 Safety Evaluation Power is normally supplied to the DC systems from the critical 4 60 volt AC buses of the auxiliary power distribution system through the battery chargers. Loss of either AC power source to any of the four circuits causes the related battery to supply power to its DC loads. Each 125 and 250 volt battery is capable of supplying adequate power to operate its loads during emergency conditions. When AC power is returned to service after its VIII-6-2 04/08/15

loss, the related battery charger is then re-energized by the 460 volt service bus, and the battery charger recharges the battery while supplying power to the loads. This satisfies safety design basis 2.

Until the diesel generators are started for standby service following loss of all normal AC power to the critical service buses, the batteries are supplying all DC power. The 250 volt DC battery chargers and the 125 volt DC battery chargers will be automatically energized by the standby AC power source as soon as their respective diesel generator comes on line.

Therefore, the loads receive uninterrupted DC power during AC power interruptions. The above satisfies design basis 1.

The 125 volt and 250 volt DC power systems are ungrounded with ground detectors which alarm in the main control room. The potential for multiple grounds is minimized since the first ground will be located and removed as soon as possible after alarming in the main control room.

The batteries, battery racks, and battery chargers are designed and installed to Class lE requirements. The batteries and battery chargers are seismically qualified and are located in the Control Building which is a Class I Seismic structure per Section XII-2.1.2.1. This satisfies safety design basis 5.

Although loss of one of the four DC sources is highly improbable, loss of one source would not prevent safe shutdown of the station. The cumulative preceding discussion satisfies safety design bases 3 and 4.

Di vision I and I I batteries have been analyzed to supply their respective loads for a minimum of 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> due to Station Blackout Requirements. This satisfies safety design basis 6.

It is therefore concluded that the safety design bases are met.

The 125 volt and 250 volt DC power systems are also credited for mitigation of fire events, as described in NEDC 11-019 of the CNS Fire Safety Analysis.

6.5 Inspection and Testing Inspection and testing at vendor factories and initial system test was conducted to insure that all components are operational within their design ratings.

Periodic tests and inspections of the equipment and the system are conducted to detect the deterioration of the equipment in the system toward an unacceptable condition. The periodic tests and inspections of the 125 volt and 250 volt batteries meet the intent of the manufacturer's recommendations. The 125 and 250 volt batteries meet the requirements of "IEEE Recommended Practice for Maintenance, Testing, and Replacement of Large Stationary Type Power Plant and Substation Lead Storage Batteries", IEEE Standard 450-1995 and "IEEE Standard for Qualification of Class lE Lead Storage Batteries for Nuclear Power Generating Stations", IEEE Standard 535-1979. Based on CNS engineering judgment, the safety-related batteries shall be considered at 15 years to have reached 85 percent of expected service life. l 4 GJ The 125 and 250 volt battery chargers meet the requirements of "IEEE Standard for Qualification of Class lE Static Battery Chargers and Inverters for Nuclear Power Generating Stations", IEEE Standard 650-1979.

VIII-6-3 04/08/15

USAR 7.0 24 VOLT DC POWER SYSTEM 7.1 Power Generation The power generation objective of the 24 volt DC power system is to provide uninterruptible DC power to neutron moni taring and process radiation monitoring instrumentation .

7.2 Power Generation Design Bases

1. The 24 volt DC batteries shall have adequate capacity to power the instrument loads for four hours upon loss of AC power supply to the battery chargers.

2. The battery chargers shall have adequate capacity to automatically recharge the batteries to full charge from a totally discharged condition while carrying the normal station steady state DC load.

3. Undervol tage relays shall be provided to alarm in the main control room on low voltage conditions.

7.3 Description A one line diagram of the 24 volt DC power system is shown in Burns and Roe Drawing 3058. Two 24 volt DC systems are provided. Each system has two 24 volt batteries and two 24 volt battery chargers arranged in a three wire system to provide +/-24 volt DC power relative to ground. Each system is insulated from ground at all points except at the main control room where the neutral wire for each instrument is grounded.

The batteries and associated chargers in each system are operated as units.

During normal operation the load requirements and system losses are supplied from the battery chargers. Upon failure of the supply of DC power from the charger, the DC loads are supplied from the batteries until power to the charger is restored or the battery capacity is exhausted. Two battery chargers, Al and A2, are energized from the 120/240 volt AC critical distribution panel Bus lA and the other two battery chargers, Bl and B2, are energized from the 120/240 volt AC critical distribution panel Bus lB.

Each 24 volt subsystem is provided with an undervoltage relay that alarms in the main control room if voltage falls below normal.

Each battery has a minimum design requirement of a 60 ampere hour rating based on a constant discharge rate for four hours with a starting voltage of 2 volts per cell and a minimum voltage of 1.75 volts per cell at the end of the four hour period. General Electric Design Specification 22A1134 provides the design requirements for the 24 volt subsystems.

The 24 volt DC system supplies the source and intermediate range neutron monitors and their trip auxiliaries, selected process radiation monitors, the process radiation monitor trip auxiliaries and the safety system status panel.

Battery chargers for both divisions are fully capable of supplying their respective loads and batteries (either fully charged or depleted) during normal operation. They also have reverse current protection to prevent them from loading the batteries.

VIII-7-1 01/09/09

USAR The chargers are supplied from the Critical Distribution Panels which receive their power from the normal or emergency AC systems as well as the standby AC system. The aggregate system is so arranged that the probability of system failure resulting in loss of DC power is very low.

The 24 volt batteries for each system are each located in a ventilated battery room which is separate from the other.

Loss of one of the two 24 volt DC systems will not affect plant safety since redundant instrumentation will continue to be supplied by the second system.

Total loss of power from both 24 volt DC systems will result in actuation of the intermediate range neutron monitor trips because of the fail safe behavior of the neutron monitoring system (refer to Subsection VII-5).

7.4 Inspection and Testing The batteries and other equipment associated with the 24 volt DC system are easily accessible for inspection and testing. Service and testing is accomplished on a routine basis in accordance with recommendations of the manufacturer. The periodic tests and inspections of the equipment and the system are conducted to detect deterioration of the equipment in the system toward an unacceptable condition.

VIII-7-2 02/09/00

USAR 8.0 120/240 VOLT VITAL AC POWER SYSTEMS This USAR section contains historical information , as indicated by italicized text. USAR section I-3. 4 provides a more detailed discussion of historical information . The information being presented in this section as historical has been preserved as it was originally submitted to the NRC in the CNS FSAR. The vital AC power systems are comprised of the No-Break Power Panel (NBPP), Reactor Protection System (RPS), and the Critical Distribution System.

8.1 Power Generation Objectives

1. The 120/240 volt vital AC power system shall provide power to the NBPP and to the Reactor Protection System (RPS) Power Panels.

2. The 120/240 volt vital AC power system shall provide power for the Critical Distribution System. These critical services are necessary for the operation of the station but are not critical to station safety.

8.2 Power Generation Design Bases

1. The design basis of the No-Break Power System is to provide a non-interru ptible power source for non-essenti al components that are critical for plant operation.

2. The 120/240 volt vital AC power system in conjunction with the RPS motor-gener ator sets provide a continuous supply of AC power required by certain controls and instruments associated with the plant operation.

3. The 120/240 volt vital AC power system provides power to the Critical Distribution System through the critical control panels (CCPs),

control power panels (CPPs), and the critical distribution panels (CDPs) for distribution to components of various systems critical to plant operation.

8.3 Description (Refer to Burns and Roe Drawing 3010, Sheet 1)

The 120/240 volt vital AC power system NBPP is powered from an inverter, which is normally fed from 250 volt DC Bus lA. An emergency AC feed to the NBPP is provided from critical MCC-R via a static switch. The NBPP is rated for 115/230 volt single phase three-wire service. The combination of the static switch and manual bypass switch also allow either the inverter or the alternate 25 KVA supply to be taken out of service for maintenance .

The 250 volt DC Bus lA, the inverter, and the NBPP are credited with mitigating a Station Blackout event. [35 J [ 36 l [ 37 J [ 3 BJ [ 42 J Critical 460 volt AC MCCs Land Teach feed the RPS MG sets lA and lB, respectively . The generator of each set feeds RPS power panels RPSPPlA and RPSPPlB. There are no electrical connections between the two RPS power panels.

Each RPS bus is rated for 120 volts single phase two-wire service. A 120 volt single phase power supply from critical distribution panels CDPlA and CDPlB can be used in-lieu of each MG to allow the MG sets to be taken out of service for maintenance .

Critical 460 volt AC MCC-LX and MCC-TX each feed 75 KVA 480-120/240 volt single phase transformex s which in turn feed critical distribution panels CDPlA and CDPlB. Separate feeds from CDPlA and CDPlB through fused disconnect switches, connect to a manual throw-over switch. This manual throw-over switch is directly connected to the critical instrument and control power panel (CPP), which is rated for 120/240 volts single phase VIII-8-1 02/09/00

USAR three-wire service. The CPP feeds the control board instrumenta tion, radwaste instrumenta tion, radwaste monitoring system, Reactor Manual Control System and other important equipment.

8.4 Inspection and Testing Inspection and testing at vendor factories and initial system tests were conducted to insure that all components are operational within their design ratings.

Periodic tests of the equipment and system are conducted to detect the deterioratio n of the equipment in the system toward an unacceptabl e condition.

VIII-8-2 02/09/00

USAR 9.0 OFF-SITE DISTRIBUTION POWER 9.1 Power Generation Objective The 12. 5 kV system shall provide a reliable supply to station support facilities with some degree of independence from those sources directly associated with, or dependent on, the main generating unit.

9.2 Power Generation Design Bases

1. The 12.5 kV system shall distribute AC power throughout the site at useable voltage levels.

2. The 12.5 kV system power sources shall be independent from site generated power such that neither the 12.5 kV power sources or the main generating unit are de~endent upon the other.

3. The 12.5 kV system shall have an alternate power source.

9.3 Description (Refer to NPPD Drawing NC44587 and Burns and Roe Drawing 3009, Sheet 1)

The 12.5 kV system, which is a combined underground and overhead system that encircles the plant and its facilities, is designed to distribute power to miscellaneous plant services. These include various out buildings and utilities such as - the Craft Change Building, Condensate Storage Tank heaters, Trailers, Electric Boilers C and D, the Multi-Purpose Facility (MPF), the North Warehouse (Maintenance Training Facility), the N2 System heaters, the Office Building, the South Warehouse heaters, the Learning Center, the West Warehouse, the Communications Building, the MET tower, the Toilet Building, the Utility Building, the North Well Pump, the LLRT Storage Site, Ionic Water Treatment Skid, the Optimum Water Chemistry (OWC) Gas Generator Building, Sewer Lagoons, the Supplemental Diesel Generator ( SDG),

and the Alternate Decay Heat Removal (ADHR) Subsystem of the Fuel Pool Cooling and Demineralizer System.

The 12.5 kV system receives power from the 13.8 kV/12.5 kV Transformer No. 3, which is powered from the 13.8 kV tertiary winding of the 345 kV/161-13.8 kV Auto-Transformer "T-2", both in the 345 kV Switchyard.

Through an assembly of live-front feeder Switchgear, also in the Switchyard, power is distributed to strategically located pad-mounted Switchgear units and Step-Down Transformer Substations around the plant.

An alternate feed to the 12.5 kV system is from the 13.8 kV/12.5 kV Transformer No. 7, which is powered from the 13.8 kV tertiary winding of the 345 kV/161-13.8 kV Auto-Transformer "T-5", also in the 345 kV Switchyard. Through two oil circuit reclosers (OCRs), power is distributed to the 12.5 kV system.

9.4 Inspection and Testing No inspection or testing requirements are specified for the non-essential 12.5 kV system.

VIII-9-1 02/07 /13

USAR

10.0 REFERENCES

FOR CHAPTER VIII

~. Letter J. Pilant (NPPD) to T. Ippoli to (NRC) dated 12 79 (17525 1138).

2. Delete d.

3. Letter J. Pilant (NPPD) to D. Zieman n (NRC) dated 9-17-7 6 (17525 1363).

4. Q/A 8.3; Amend. 13.

5. Q/A 8.5; Amend. 14.

6. Q/A 8.2; Amend. 14, 15.

7. Q/A 8. 4; .Amend. 15 .

8. Letter J. Pilant (NPPD) to W. Gammi ll (NRC) dated 12 79 (17525 1133).

9. Electr ical Distri bution Grid Stabi lity Analy sis For CNS.

10. MDC 78-25.

11. Memo J. Hackne y (NPPD) to J. Pilant (NPPD); "LPCI Modif ication ",

1977. Enclos ure to letter J. Weave r (NPPD) to J. Meacha m (SWEC) dated 5-28-8 1, LQA 810018 7.

12. Delete d.

13. FSAR Markup s prepar ed by J. Philbr ick 6-23-7 7. Enclos ure to letter J. Weaver (NPPD) to J. Meacham (SWEC) dated 5-28-8 1, LQA 810018 7.

14. MDC 87-133 .

15. Q/A 8. 7; Amend. 13.

16. Q/A 8. 6; Amend. 16.

17. Q/A 8.11; Ainend. 11.

18. Letter J. Pilant (NPPD) to D. Davis (NRC) dated 6-2-77 (17524 1534).

19. Q/A 8.Si Amend . 14.

20. Q/A 8.13; Amend. 15.

21. MDC 74-127 .

22. Q/A 8.9; Amend . 14.

23. NEDC 00-111 , Revisi on 10, "CNS Auxil iary Power System AC Loads" .

24. Delete d.

25. Letter J. Pilant (NPPD) to G. Lear (NRC) dated 5-19-7 8

{17524 1405).

VIII-1 0-1 11/02/ 20

USAR

26. MDC 7 8 - 2 6 .

27. MDC 79-58.

28. MDC 77-24.

29. Contract E69-17, Electrical Power System.

30. Letter J. Pilant (NPPD) to D. L. Ziemann (NRC) dated 9-17-76 (17580 1965).

31. Deleted.

32. MDC 84-180.

33. Evaluation of Diesel Generator Startup Requirements for Cooper Nuclear Station (EAS-133-1187, Rev. 1, February 1988).

34. NEDC 97-012.

35. NRC Safety Evaluation Station Blackout Rule for CNS dated August 22, 1991.

36. NRC Supplemental Safety Evaluation Report (SSER) Station Blackout Rule 10CFR50.63, for CNS dated June 30, 1992.

37. NRC Supplemental Safety Evaluation Report (SSER) Station Blackout Rule 10CFR50.63, for CNS dated November 19, 1992.

38. Enercon Services Report NPPl-PR-01, "Station Blackout Coping Assessment for Cooper Nuclear Station," Rev. 2, June 1993.

39. DC 95-036.

40. Q/A 8.1; Amend. 9.

41. (Unused)

42. Updated Response to Station Blackout Rule 10CFR50.63, for CNS dated 12/19/94 (NLS940088).

4 3. DC 8 7-15 2, Rev. 1 .

44. (Unused)

45. Generic Letter 89-13. (50.7le item), Service Water System Problems Affecting Safety-related Equipment.

46. License Amendment 236, dated March 18, 2010, Issuance of Amendment Re: Revise Battery Resistance in Surveillance Requirements.

VIII-10-2 04/22/10