ML17033B533

North Anna Power Station, Units 1 and 2 - Redacted Updated Final Safety Analysis Report Chapter 8

ML17033B533
Person / Time
Site:	North Anna
Issue date:	09/29/2016
From:	V Sreenivas Plant Licensing Branch II
To:	Heacock D A Virginia Electric & Power Co (VEPCO)
Sreenivas V, NRR/DORL/LPL2-1, 415-2597
Shared Package
ML17033B477	List: ML17033B480 ML17033B492 ML17033B500 ML17033B509 ML17033B515 ML17033B518 ML17033B525 ML17033B531 ML17033B533 ML17033B540 ML17033B545 ML17033B550 ML17033B570 ML17033B573 ML17033B575 ML17033B583 ML17033B585 ML17033B590 ML17033B591
References
Download: ML17033B533 (82)

Text

North Anna Power Station Updated Final Safety Analysis Report Chapter 8 Intentionally Blank

Intentionally Blank Revision 52-09/29/2016 NAPS UFSAR 8-i Chapter 8: Electr ic Power SystemTable of ContentsSectionTitle Page

8.1INTRODUCTION

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.1-18.1.1Utility Grid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.1-18.1.2Onsite Electric System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.1-1 8.1.3Identification of Safety-Related Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

8.1-38.1.4Identification of Safety Criteria. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

8.1-48.1Reference Drawings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.1-58.2OFFSITE POWER SYSTEM. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.2-18.2.1Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.2-18.2.2Analysis. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.2

-28.2Reference Drawings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.2-48.3ONSITE POWER SYSTEMS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.3-18.3.1Alternating Current Power System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.3-18.3.1.1Station Service Power System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.3-18.3.1.2Vital Alternating Current Power System. . . . . . . . . . . . . . . . . . . . . . . . . . . . .

8.3-338.3.2Direct Current Power System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

8.3-368.3.2.1Description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.3-36 8.3.2.2Analysis. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.3-3 88.3References. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.3

-408.3Reference Drawings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8.3-40 Revision 52-09/29/2016 NAPS UFSAR 8-ii Chapter 8: Electr ic Power SystemList of TablesTableTitle PageTable 8.3-1Equipment Tripped Whenever Load Shedding is Initiated . . . . . . . . . .8.3-43Table 8.3-2RSS Transformer A - Equipment Tripped. . . . . . . . . . . . . . . . . . . . . . .8.3-43Table 8.3-3RSS Transformer B - Equipment Tripped. . . . . . . . . . . . . . . . . . . . . . .8.3-44Table 8.3-4RSS Transformer C - Equipment Tripped. . . . . . . . . . . . . . . . . . . . . . .8.3-44Table 8.3-5Cable and Raceway Redundancy Color Code Decision Table . . . . . . .8.3-45Table 8.3-6Emergency Diesel Generator Loading Schedule - Bus 1H . . . . . . . . . .8.3-46Table 8.3-7Emergency Diesel Generator Loading Schedule - Bus 1J. . . . . . . . . . .8.3-50Table 8.3-8Enclosures With More Than One Field Run Color-Coded Cable. . . . .8.3-53 Revision 52-09/29/2016 NAPS UFSAR 8-iii Chapter 8: Electr ic Power SystemList of Figures FigureTitle PageFigure 8.2-1One Line Diagram; Electrical Distribution System. . . . . . . . . . . . . . .8.2-5Figure 8.2-2General Arrangement Plan; Nort h Anna 500-kV Switchi ng Station; Louisa County, Virginia. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.2-6Figure 8.2-3Transmission Line Map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8.2-12Figure 8.3-1Examples of Acceptable Arra ngements Where Horizontal or Vertical Separation Distances Cannot be Maintained. . . . . . . . . . . . . . . . . . . .8.3-58 Revision 52-09/29/2016 NAPS UFSAR 8-iv Intentionally Blank

Intentionally Blank Revision 52-09/29/2016 NAPS UFSAR

8.1 Volume

VI -CHAPTER 8ELECTRIC POWER SYSTEM

8.1 INTRODUCTION

The electric power system generates power and delivers it to the high-voltage switchyard for transmission to the utility grid.

Note: As required by the Renewe d Operating Licenses for North Anna Units 1 and 2, issued March 20, 2003, various systems, structures, and components discu ssed within this chapter are subject to aging management. The programs and activities necessary to manage the aging of these systems, structures, and components are discussed in Chapter 18.

8.1.1 Utility

GridThe output of the two units is delivered to a 500-kV sw itchyard through the unit main step-up transformers, as descri bed in Section 8.2. The switchyard serves three 500-kV lines and one 230-kV line. The plant is connected to the switchyard by two 500-kV transmission lines, three 34.5-kV underground lines and two 34.5-kV overhead lines (avail able as back-up in case of a failed underground line or alternate feeders when the underground lines are out of service for testing, maintenance, or replacement) that supp ly power to the three reserve station service transformers. The 500-kV lines go to Ladysmith, Spotsylvania, and Midlothian, Virginia. The 230-kV line goes to Gordonsville. These intrasystem ties to the east, west, north, and south (Figure 8.2-3). VEPCO's transmis sion system and intrasystem ti es are further described in Section 8.2.

8.1.2 Onsite

Electric SystemThe onsite electric system includes electrical equipment necessary to generate power and deliver it to the high-voltage sw itchyard. It also includes power supplies and equipment, including batteries, necessary to distribute power, both ac and dc, to the normal (non-safety-related) auxiliaries, and emergency (safety-related) auxili aries. The onsite electric system also supplies power for control and instrumentation and is de signed to provide depe ndable sources of power and to distribute it to the plant auxiliaries.

The onsite electrical system is shown in Figure 8.2-1. A list of station electr ical drawings is provided as Reference Drawings 1 through 14.

The normal ac power source for each unit is the main generator, which is connected to three unit station service transformers by the isolated phase bus duct. Th e transformers have adequate capacity to supply all unit auxiliaries, with th e exception of 4-kV buses 1G and 2G, for plant operation during normal power generation. Buses 1G and 2G are powered from the offsite sources via the reserve station service transformers B and C, respectively.

Revision 52-09/29/2016 NAPS UFSAR 8.1-2 The preferred or reserve ac pow er source is the swit chyard, which is connected to both units via three reserve station service transformers. The reserve station service pow er is available at all times to the safety-related equipment and has the ca pacity to drive the stat ion auxiliaries in the event of a loss of the normal ac power supply. Upon a loss of pow er from the normal source on Unit 2, the normal station distribution system w ill transfer automatically to the reserve station service supply, provided no fault exists on the normal 4160V bus. On Unit 1, a main generator breaker has been installed. This allows Unit 1 to have its normal station se rvice buses supplied from its normal station serv ice transformers (backfed from the 500-kV switchyard) for most Unit 1 trips. This arrangement reduces the probability of combined loading from both Units 1 and 2 normal and emergency buses on the reserve station service transformer.The standby emergency ac power sour ce for each unit consists of two diesel generators. The standby ac power system has adequate capacity to supply the safety-related equipment. The standby ac power source, during the periods of interrupted preferred power, automatically supplies safety-related equipment.

An alternate ac (AAC) diesel generator has been added to provide emergency power in the event of a Station Blackout (SBO). A SBO is defined as loss of offsite power, co ncurrent with a turbine trip (loss of onsite power) and the failure of the emerge ncy ac power source, but not the station batteries for the blacked out unit. The AAC system is auto-started by an SBO event. Operator action is required to align the AAC diesel generator output to the desired emergency bus. The AAC diesel generator has adequate capacity to start and supply the required safety-related equipment for the blacked out unit.When the AAC diesel generator is functional, the core damage frequency (CDF) is reduced for both units. The CDF is reduced even though no credit is taken for the use of the AAC diesel generator during accident sequences which result in core damage in less than one hour. The AAC diesel generator provides an effective means of minimizing the increased risk associated with removing an emergency diesel generator from service during a ny mode of operation. Risk is minimized by having only one emergency dies el generator unavailable at a time.During a loss of offsite power when only one emergency diesel generator has failed, or is unavailable, the AAC diesel ge nerator can be utilized to power the emerge ncy bus without an emergency diesel generator. During a loss of of fsite power when two or more emergency diesel generators have failed, or are unavailable, the control room operators will decide, based upon actual plant conditions, which emergency bus to power using the AAC diesel generator.

The 120V vital ac power source consists of four static in verters, each powered from its associated dc bus. These inverters provide a dependable 120V ac power source for the safety-related equipment, control, and instru mentation and are shown in Reference Drawing 13.The 125V dc power so urce in each unit consists of four independent batteries and six battery chargers. Two battery chargers are spares.

Revision 52-09/29/2016 NAPS UFSAR 8.1-3The onsite ac power distribution system cons ists of three normal 4160V buses, a 4160V screen well bus, two emerge ncy 4160V alternate ac buses, two emergency 4160V buses per unit, and four emergency 480V buses per unit. In addition, Units 1 is equipped with 11 normal 480V buses and Unit 2 is equipped with eight normal 480V buses. The 480V buses are fed from their respective 4160V buses through transformers. Th e 480V buses feed motors, motor control centers, transformers for 240/120V ac power and lighting distribution, and battery chargers for the 125V dc system and the standby di esel generators' 125V dc systems.The intake structure ac power distribution system for each unit c onsists of one 4160V switchgear assembly and one 480V motor c ontrol center fed from the 4160V bus through a transformer. In addition, the Unit 1 intake structure ac power dist ribution system consists of an additional 480V load center fed from the 4160V bus through a transformer. They supply motors, transformers for 240/120V ac pow er and lighting, and electrical equipment for the Unit 1 bearing cooling water tower.

The dam site ac power distribution system consists of one 480V motor control center supplying motors and transformers for 240/120V ac power and lighting systems. The 240/120V ac system supplies the battery charger for the dam site standby diesel generator.The 125V dc distribution system for each unit consists of four main distribution cabinets for plant operation and dc loads essential for unit safety. The onsite dc power system is shown in Reference Drawing 13. Each standby diesel generator has an independent 125V dc power system.

Redundant safety-related equipment is supplied by redundant circuits that are physically and electrically isolated from each other to reduce the probability of simult aneous failure due to a single failure or incident.

Continuous Monitoring Recorders are installed to monitor and record main generator, station service, reserve station service and emergency bus volta ges and currents during normal and transient plant conditions.

8.1.3 Identification

of Safety-Related Systems The systems and device s that require electric power to function to achieve the system responses assumed in the safety evaluations and are needed to shut down the plant safely , are the following:System DescriptionSafety Func tionType of Electric Power Safety injectionEmergency core coolingac (& dc control)

Containment depressurization Containment cooling and depressurization ac (& dc control)Containment isolationIsolate containment atmosphere ac (& dc control)

Revision 52-09/29/2016 NAPS UFSAR 8.1-4 Equipment required to place the plant in a hot-shutdown condition and a cold-shutdown condition is listed in Sections 7.4.1.3 and 7.4.1.4, respectively.

8.1.4 Identification

of Safe ty Criteria The following is a list of thos e criteria, safety guides, and standards implemented, unless otherwise noted in this section, in the or iginal design of the onsite power systems:

10 CFR 50, Appendix A Gene ral Design Criterion 17 10 CFR 50, Appendix A Gene ral Design Criterion 18 Atomic Ener gy Commission (AEC) Safety Guide 6Atomic Energy Commission (AEC) Safety Guide 9Atomic Energy Commission (AEC) Safety Guide 22 IEEE-308-1971 IEEE-336-1971

IEEE-344-1971 Service waterEquipment and containment cooling ac (& dc control)Reactor protection systemCore protectionac Radiation monitoring (recirculation spray coolers water outlet monitors only)

Detect recirculation spray cooler leak acSystem DescriptionSafety Func tionType of Electric Power Revision 52-09/29/2016 NAPS UFSAR 8.1-5 8.1 REFERENCE DRAWINGSThe list of Station Drawings below is provided fo r information only. The referenced drawings are not part of the UFSAR. This is not intended to be a complete listing of all Station Drawings referenced from this section of the UFSAR. The contents of St ation Drawings are controlled by station procedure.

Drawing Number Description 1.11715-FE-1AMain One Line Diagram, Unit 112050-FE-1AMain One Line Diagram, Unit 2 2.11715-FE-1B4160V One Line Diagram: Buse s 1A & 1B, Transfer Buses D & E, Unit 112050-FE-1B4160V One Line Diag ram: Buses 2A & 2B, Unit 2 3.11715-FE-1C4160V One Line Diagram:

Bus 1C, Intake Structure Bus 1G, & Transfer Bus F, Unit 112050-FE-1C4160V One Line Diagram: Bu s 2C & Intake Structure Bus 2G, Unit 2 4.11715-FE-1D4160V One Line Diag ram: Emer gency Buses 1H &

1J, Unit 112050-FE-1D4160V One Line Diagram:

Emer gency Buses 2H & 2J, Unit 2 5.11715-FE-1AF480V One Line Diagram:

Emer gency Buses 1H, 1H1, 1J, &

1J1, Unit 112050-FE-1AF480V One Line Diagram:

Emer gency Buses 2H, 2H1, 2J &

2J1, Unit 2 6.11715-FE-1P480V One Line Diagram: M CC 1B2-1 & 1B2-3, Switchgear Room; Emergency MCC 1J1-1, Emergency Switchgear Room 7.11715-FE-1Q480V One Line Diagram:

Emer gency MCC 1H1-2, Cable Tunnel, Unit 112050-FE-1N480V One Line Diagram: Em ergency MCC 2H1-2, Cable Tunnel, Unit 2 8.11715-FE-1R480V One Line Diagram:

Emergency MCC 1J1-2, Cable Tunnel, Unit 112050-FE-1P480V One Line Diagram: Em ergency MCC 2J1-2, Cable Tunnel, Unit 2 9.11715-FE-1T480V One Line Diagram: MC C 1H1-3 & 1J1-3, SW Pump House; Emergency MCC 1H1-1A & 1J 1-1A, Emer gency Generator 1H & 1J; Emergency MCC 1H1-3A &

1J1-3A, SW Reservoir Valve House; Unit 1

Revision 52-09/29/2016 NAPS UFSAR 8.1-612050-FE-1R480V One Line Diagram: MCC 2H1-3 &

2J1-3, SW Pump House; Emergency MCC 2H1-1A & 2J 1-1A, Emer gency Generator 2H & 2J; Unit 2 10.11715-FE-1U480V One Line Diagram: MCC Feeders11.11715-FE-1Z480V One Line Diagram:

Emer gency MCC 1H1-1 & 1H1-4, Emergency Switchgear Room, Unit 112050-FE-1Q480V One Line Diagram:

Emer gency MCC 2H1-1, 2H1-4, & 2J1-1, Emergency Switchgear Room, Unit 2 12.11715-FE-1AEOne Line Diagram: 120V AC and 125V DC, Vital Power, Unit 112050-FE-1AEOne Line Diagram: 120V AC and 125V DC, Vital Power, Unit 2 13.11715-FE-1EOne Line Diagram: 125V DC 14.11715-FE-1N480V One Line Diagram: MCC 1C1-2, Switchgear Room; 1G1-1, Intake Structure C ontrol House; Unit 1

Revision 52-09/29/2016 NAPS UFSAR 8.2-18.2 OFFSITE POWER SYSTEM

8.2.1 DescriptionThe

North Anna Power Station is connected to the transmission syst em of VEPCO by three 500-kV lines and one 230-kV line going in separate directions.

Each main generator feeds electric power through a 22 kV isolated pha se bus to a bank of three single-phase transformers for each unit, ste pping the generator voltage of 22 kV up to the transmission voltage of 500 kV.

The physical arrangement of power and control lines from offsite power sources and to remo te structures is displayed in Figure 8.2-2. One-li ne diagrams depicting the electric system from the switchyard to the onsite system are given as Figure 8.2-1 and Reference Drawing 1. Additional information on VEPCO's transmis sion system, and specifically the portions of the system associated with the North Anna Power Station, is c ontained in the Applicant Environmental Report Supplement, North Anna Power Station, Units 1, 2, 3 and 4 , Section 3.2, Appendix I (transmission line right-of-way maps) and Appendix J (response to questions 1, 2, and 3).On Unit 1 & 2, surge arrestors (one per phase) have been installed in the isolated phase bus to protect the 22-kV system (main generator and isolated phase bus, etc.) from incurring damage in the event of a high-to-low fault in the generator step up transformers.Station service transformers connected to the 22-kV isolated phase bus from each main generator normally supply power to the auxiliaries of each unit by stepping down the 22 kV to 4.16 kV.Reserve station service power, for start-up and emergency use, is supplied by three 3-phase 34.5/4.16-kV transformers located near the power station. The 34.5-kV supp ly to these reserve station service transformers comes from two or more of the follo wing: two 500/36.5-kV transformers located in the 500-kV switchyard and on e 230/34.5-kV transfor mer located in the 230-kV switchyard. A sw itching capability is provided so th at all three of the 34.5/4.16-kV transformers can be supplied from any of the station reserve transformers if necessary.Transmission system interconnec tions required for Units 1 and 2 are shown in Figure 8.2-1.

These transmission interconnections are as follows:1.A 500-kV line to the east to a 500-kV switching station near Ladysmith, Virginia, provides a connection.2.A 500-kV line to the north to a substation near Spotsylvania, Virg inia, provides a second connection to the VEPCO 500-kV system.3.A 500-kV line to the south to a substation near Midlothian, Virginia, provides a third connection to the VEPCO 500-kV system.

Revision 52-09/29/2016 NAPS UFSAR 8.2-24.A 230-kV line to the west to a substation near Gordonsville, Virginia provides a connection to the VEPCO 230-kV system.Each of the four transmission lines leaves North Anna on a different right-of-way. The entire output of the two units can be carried on any one of three 500-kV lines. The 230-kV line rating is approximately one and a half times larger than the output of one nuclear unit due to the size of the two 500/230-kV transformers.As seen in Figure 8.2-3, the VEPCO 500-kV system is extensive and interconnects with neighboring utility grids to the nor th, south, and west. The additions to the system associated with North Anna Units 1 and 2 and the interconnection to the 230-kV system furthe r strengthen this system and increase its reliability.

8.2.2 Analysis

Each of the 500-kV circ uits and the 230-kV circ uit connected to North Anna has sufficient capacity to supply the total re quired power to the st ation under any station condition. System and substation designs are such as to minimize the probability of loss of all offsite power sources. Steady-state and transient stability studies have shown that offsit e power sources remain available for the loss of either or both units at North Anna, the loss of any other unit or station on the VEPCO system, the loss of any 500-kV transmission line, or the occu rrence of a th ree-phase fault on the transmission system followed by the failure of a circuit breaker.

Extensive power flow studies have been made of the transmission system in the North Anna area, including outages of the 5 00-kV circuits. None of these studies gave any indication of a steady-state stability problem. This is to be expected, as the capacity of the 500-kV circuits are such that the entire output of Units 1 and 2 can be easily carrie d by any one of the three 500-kV circuits and the location of the North Anna Station, in the heart of VEPCO's system, provides for strong ties into the system. The 230-kV circuit also strengthens the VEPCO system, but this circuit rating is approximately one and a half times larger than the output of one nuclear unit due to the size of the two 500/230 kV transformers.

The transient stability of Units 1 and 2 at North Anna has be en analyzed by conventional methods using a digital computer program to perform the step-by-step analysis. The transient stability analysis showed that fo r any three-phase fault cleared at normal speed with normal relaying, the North Anna units remained quite stable.To further test the system, the failure of critical circuit breakers was postulated and the system analyzed with three-phase faults adja cent to the station cleared by backup protection.

It should be noted that with the redundant protective equipmen t in the station designed for independent pole tripping, a failure of all three poles of a breaker simultaneously or of both protective relay systems simultane ously would have to occur to have such a se vere condition.

These tests were made to assess overall system strengt h by determining the r eaction of the system Revision 52-09/29/2016 NAPS UFSAR 8.2-3 to situations more severe than considered credible with the protective equipment provided. If a three-phase fault were to occur on any of the circ uits at the station and all three poles of any breaker were to fail, the stability of the North Anna units is not ensured.

All of these situations postulate the failure of a line plus the failure of a circuit breaker and would be extremely rare occurrences. In any case, the studies have shown that the effects are local and that no cascading would result.Transient stability tests were also made to study the effects of one pole of a critical circuit breaker failing to open while the remaining two poles open foll owing a three-phase fault adjacent to the station and fina lly cleared by backup protection. The transient stability of both Units 1 and 2 were maintained under this severe condition.The effect of the simultaneous sudden loss of both Units 1 and 2 at North Anna on the overall interconnected network has also been analyzed. No serious eff ects anywhere on the interconnected network were found in these studies.

The VEPCO transmission system consists of 500-kV, 230-kV, and lower voltage facilities in a highly integrated network that is strongly interconnected w ith neighboring systems. This network is designed to withstand the loss of any single fa cility without significantly affecting the overall system. Transient capability is a requirement for unit operation. The design is routinely tested and analyzed for adequacy by digital computer simulation. Further analysis is done in studies made jointly, on a con tinuing basis, with neighboring systems under seve ral reliability agreements. Ongoing analysis is based on requirements dictated by federal regulations and industry standards and company procedures. Th ese requirements also specify the level of considered contingencies.

The reliability of the overall sy stem design is indicated by the fact that there have been no widespread system interruptions. Failure rates of individual facilities are low. Tr ansmission lines are designed to ha ve less than one lightning flashover per 100 miles per year, and the record shows much better performance, indicating conservative designs.

Most lightning-caused outages are momentary, with few instances of line damage. The 34.5 kV switchyard is protected with a passive lightning protection system composed of 75-foot masts and static shielding protection wires. Other facilities do fail occasionally, but these are random occurrences, and experience has shown that equipment specifications are adequate.The offsite power system conforms with General Design Criterion 17. Figure 8.2-2 shows the routing of redundant power and control lines from offsite power sources and to remote structures. The separation of re dundant circuits, as di scussed in Section 8.3.1.1.2.3, ensures that a single event will not cause a simult aneous failure of these circuits.

The control system for the switchyard breakers also conforms to General Design Criterion 17. Power supplies for the 500-kV switchyard controls are provided by two dc systems from separate and completely independent batteries and charge rs. As a general design criterion, Revision 52-09/29/2016 NAPS UFSAR 8.2-4 each side of the 500-kV switchyard control house panel row is connected to a different dc system fed from respective dc distribution boxes. In the switchyard, ea ch bay of three 500-kV circuit breakers is fed from battery 1 or battery 2, alternately. The battery chargers may be fed from any two of three independent source s in the switchyard. Power supp lies for the 230-kV switchyard controls are provided by a separate dc system lo cated in the 230-kV switchyard control house, and its battery charger is normally fed from 34.5 kv Bus 5 in the switchyard. Alternate feeds to this battery charger are also available from 34.5 kv Buses 3 and 4 as well as from a second source from Bus 5.

The control circuits are designed to operate as two different systems for each 500-kV line and circuit breaker function. The 500-kV transmission line protection consists of a combination of electromechanical, microprocessor based and static directional distance carrier blocking relay systems. There are two sets of protection relays for each transmission line with each on the opposite dc system and physically located on opposite sides of the c ontrol house. The line tripping functions from the primary and backup relays trip the respective circuit breakers through independent trip coils in each 500-kV circuit breaker. The line backup trip functions are routed directly to the breaker's second set of trip coils, while the prim ary trip functions are routed to the breaker control panel, which is on the opposite battery from the backup functions, and then to the breaker through separate cable tr ays and cable trough sections.

There are also redundant 500-kV bus differentials using separate and independent current and control circuits. The two differentials for each 500-kV bus are located in different panel rows and use separate batteries fo r better reliability and redundancy. The 500/36.5-kV and 230/34.5-kV transformer differentials are located on separate dc sources for increased reliability as are the three 34.5-kV bus differentials.

The three independent 34.5-kV bus es are separated by normally open circuit breakers with open disconnect switches. Each 34.5-kV bus #5 feeder breaker is operated by the battery associated with its sister breaker which feeds the same RSST since the prot ective relaying must be interconnected between the feeds to the RSSTs. The reserve stati on service transformers are fed from their respective 34.5-kV bus and are protected by overload rela y schemes, and the cables are protected by pilot wire differentials.

8.2 REFERENCE

DRAWINGSThe list of Station Drawings below is provided fo r information only. The referenced drawings are not part of the UFSAR. This is not intended to be a complete listing of all Station Drawings referenced from this section of the UFSAR. The contents of St ation Drawings are controlled by station procedure.

Drawing Number Description 1.11715-FE-1AMain One Line Diagram, Unit 112050-FE-1AMain One Line Diagram, Unit 2

Revision 52-09/29/2016 NAPS UFSAR 8.2-5 Figure 8.2-1 ONE LINE DIAGRAM; ELECTR ICAL DISTRIBUTION SYSTEM Revision 52-09/29/2016 NAPS UFSAR 8.2-6 Figure 8.2-2 (SHEET 1 OF 6)GENERAL ARRANGEMENT PLAN; NORTH ANNA 500-KV SWITCHING STATION; LOUISA COUNTY, VIRGINIA Revision 52-09/29/2016 NAPS UFSAR 8.2-7 Figure 8.2-2 (SHEET 2 OF 6)GENERAL ARRANGEMENT PLAN; NORTH ANNA 500-KV SWITCHING STATION; LOUISA COUNTY, VIRGINIA Revision 52-09/29/2016 NAPS UFSAR 8.2-8 Figure 8.2-2 (SHEET 3 OF 6)GENERAL ARRANGEMENT PLAN; NORTH ANNA 500-KV SWITCHING STATION; LOUISA COUNTY, VIRGINIA Revision 52-09/29/2016 NAPS UFSAR 8.2-9 Figure 8.2-2 (SHEET 4 OF 6)GENERAL ARRANGEMENT PLAN; NORTH ANNA 500-KV SWITCHING STATION; LOUISA COUNTY, VIRGINIA Revision 52-09/29/2016 NAPS UFSAR 8.2-10 Figure 8.2-2 (SHEET 5 OF 6)GENERAL ARRANGEMENT PLAN; NORTH ANNA 500-KV SWITCHING STATION; LOUISA COUNTY, VIRGINIA Revision 52-09/29/2016 NAPS UFSAR 8.2-11 Figure 8.2-2 (SHEET 6 OF 6)GENERAL ARRANGEMENT PLAN; NORTH ANNA 500-KV SWITCHING STATION; LOUISA COUNTY, VIRGINIA Revision 52-09/29/2016 NAPS UFSAR 8.2-12The following information is HISTORICAL and is not intended or expected to be updated for the life of the plant.

Figure 8.2-3TRANSMISSION LINE MAP Revision 52-09/29/2016 NAPS UFSAR 8.3-18.3 ONSITE POWER SYSTEMSThe onsite power systems consist of the ac power system, the vital ac power system, and the dc power system. A one line di agram showing the electrical dist ribution system is given in Figure 8.2-1.

8.3.1 Alternating

Current Power SystemThe ac power system is a depe ndable power source for the opera tion of the plant and safe shutdown of the reactor. The ac pow er system consists of the st ation service system and vital system. The voltage ratings of the ac power system are 4160V, 480V, 120/240V for the station service system, and 120V for the vital system. Reference Drawing 1 shows the main one-line diagram for the station, Reference Drawings 2 through 11 and 19 show the station service system, and Reference Drawing 12 shows the vital system.

Arrangement drawings of the onsite distribut ion and power supply components are shown on the following figures:1.Power supply system componentsa.Reserve station service transformers (preferred supply) - Reference Drawings 14 and 15.b.Emergency diesel generators (s tandby supply) - Reference Drawings 15 and 16.c.125V dc power - Reference Drawings 17 and 18.d.Vital ac power - Reference Drawing 18.2.Onsite distribution system co mponents - (ac) Reference Draw ings 17 and 18, (dc)

Reference Drawing 18.

Electrical schematic diagrams for each safety-related component and for each of its essential supporting system components are included in Report Numbers NA-TR-1001 and NA-TR-1002, Safety Related Electrical Schematics, dated May 10, 1973, and revisions thereto.

NA-TR-1001 and NA-TR-1002 were submitted to the Atomic Energy Commission (AEC) on May 18, 1973, as separate documents independent of the FSAR.

The ac power system for Unit 2 is similar to Unit 1.

8.3.1.1 Station Service Power System The station service power system sources are the station service tran sformers, the reserve station service transformers, th e alternate ac diesel generator, and the emergency diesel generators. The station se rvice transformers are also referred to as the normal source, the reserve station service transformers are referred to as the pref erred source, and the emergency diesel generators as the standby source. These sources feed the distri bution system (station service power system) consisting of the 4160V normal and emergency switchgear, 480V normal and emergency unit substations, 480V normal and emergency motor control centers, and the Revision 52-09/29/2016 NAPS UFSAR 8.3-2 safety-related equipment and auxiliaries necessary for safe shutdown of the reactor and power plant. In addition, the reserve station service tran sformers feed the intake structure consisting of two 4160V buses, three 480V transformers, two 480V motor control centers, and one 480V load center. The station service sy stem is shown in Reference Drawings 2 through 11 and 19.

8.3.1.1.1 Description The reserve station service power source is connected to the distribution system by several different feeds. The feed s connect the three 34.5/4.16 kV reserve station serv ice transformers to the following:1.Six normal station service buses (three per unit).

2.Four emergency buses (two per unit).3.Two intake structure buses (one per unit).

The normal buses are connected to the transformers via 5-inch overhead pipe bus and cables in tray. These feeds originate at the tran sformer low-side bushing and extend from the transformers to the north wall of the turbine bui lding via the 5-inch pipe bus. The cables connect to the pipe bus at the north wall , are carried in trays over the tu rbine building, and are terminated in the normal bus switc hgear located on the top floor of the service building. The normal bus feeds from A and B reserve tran sformers are physic ally separated from the C feed by an acceptable extent.The four emergency buses are fed from the tr ansformers by 4160V cable runs in duct, conduit, and cable tray. The first path has cable in duct from reserve station service transformers A and B to the turbine building wh ere it continues in conduit and then in tray to emergency bus feeder breakers D1 and E1, respectively. The sec ond path is for reserve station service transformer C cables, which run in duct to the service building so that they ar e kept separate from the cable runs of the other two tr ansformers; these cables then continue in conduit and tray to emergency bus feeder breaker F1. Feeder br eakers D1 and E1 are separated from breaker F1 by the wall separating Unit 1 switchgear from Unit 2 switchgear.

The feed to the intake struct ure buses is from th e B and C transforme rs through a small section of overhead bus, then through their own duct banks into the intake structure switchgear room.Before Unit 2 start-up, the reserve station service transformers are used to power auxiliaries. During start-up the reserve transformers deliver power to the ne cessary systems. Once the unit's generator is on the line, the station service transformers, are synchronized with the reserve station service transforme rs, and power to the normal 4160V switchgear is transferred to the normal source (main generator), without inte rruption, by feeding the bus es from both sources for a short duration. The feeder breakers to the norma l 4160V switchgear from the preferred source are then opened. Preferred power then feeds only the emergency and intake buses.

Revision 52-09/29/2016 NAPS UFSAR 8.3-3During Unit 1 start-up, if the reserve station service tr ansformers are used to power auxiliaries, then the el ectrical alignment would be similar to Unit 2 described above. Unit 1 does not require that the reserve stati on service transformers be used to power the auxiliaries. With the addition of the main generator breaker, power can be backfed from the 500-kV switchyard through the main transformer to the station servic e transformers to the normal 4160V switchgear. Once the unit's generator is online, power to the normal 4160V switchge ar is supplied by the normal source (main generator). Power to the 500-kV switchyard is now supplied by the main generator so that power flow through the main tr ansformer has been reversed. This arrangement reduces the probability of combined loading from both Units 1 and 2 normal and emergency buses on the reserve station service transformers. When combined with the load shedding scheme described later, it also allows for simultaneous start-up of Units 1 and 2 without overloading the reserve station service transformers.

The installation of the generato r breaker on Unit 1 creates an additional independent source of offsite power from the transm ission network to the onsite power distribution system, analogous to the reserve station service system, which is not dependent on the mo de of operation of the Unit 1 generator. In addition, the Unit 2 normal station service system can be considered an additional independent source of offsite power fr om the transmission netw ork to the onsite power distribution system. This source, however, is dependent on the mode of operation of the Unit 2 generator.

In the event that the main supply breaker from the normal source to a normal 4160V bus trips automatically, an automatic transfer from the normal station se rvice transformer to the reserve station service transformer occurs, if no fault exists on the normal 4160V bus. The affected normal 4160V bus is supplie d directly from the reserve station service transformer. The 4160V D, E, and F transfer buses are unaffected by the transfer and continue to connect the reserve station service transformers to the emergency buses to en sure continuous service for the safety-related equipment.The emergency diesel generator is connected to the emergency bus by a breaker in the emergency switchgear room with c ontrol power from the station battery. The connecting cable is run in a cable trough and duct to the switchgear. The two units use four diesel generators arranged so that two are for Unit 1 and two are for Unit 2. Each diesel generator has 100% capacity to power the necessary safety-related equipment. The diesel generators are situated in the service building in individual mis sile-protected rooms.

The three reserve station se rvice transformers are each rated at 18/24/30/33.6 MVA, OA/FA/FOA, 55/65C rise, 34.4/4.16 kV.

Alarms in the control room sound to warn of a potential overload condition of the three reserve station service transformers. The emergency diesel generators are rated at 2750 kW for 8000 hr/yr, 3000 kW for 2000 hr/yr, and 3100 kW for 168 hr/yr. These ratings are within the maintenance factor. The diesel generators are also rated for higher values with the maintenan ce factor unspecified, si nce it may reduce the life of the diesel.

These ratings are 3300 kW at 1/2 hr/yr and 3800 kW at 7 sec/yr

.

Revision 52-09/29/2016 NAPS UFSAR 8.3-4The 4160V emergency switchgear is arranged in two separate systems designated H and J. The H bus is associated with train A, while the J bus is associated with train B. The buses are physically as well as electrically, separated from each other in different missile-protected areas on the bottom floor of the service building as shown in Reference Drawing 18. The 4160V H and J buses are arranged as shown in Reference Drawing 4. The 4160V buses ar e rated 1200A serving emergency loads through breakers equipped to protect the loads from overcurrent. The 480V emergency switchgear is also separated and located in missile-protected areas.The 480V emergency switchgear buses H and J are arranged as shown in Reference Drawing 5. These buses are rated at 2000A with breakers equipped with overcurrent protection for the loads. The 480V motor control centers ar e shown in Reference Drawings 6 through 11 and 19.The 480V emergency buses are equipped with no rmally open back feed breakers and an electrical connection which can be powered by a portable gene rator during a Beyond Design Basis Event.The loads on the H and J buses on either the 4160V or the 480V level are typically redundant and are sized based on their required functions or the required functions of their associated components (e.g. a moto r on a safety-related pump). The safety-related buses and their loads are shown in Reference Drawings 1 through 11 and 19.

There are other interconnections between buses, buses and load s, and buses and sources on the emergency 4160V system. The interconnection between bus and supply will be described for the H bus only since the J bus is identical, with the exception of the reserve station service transformer and transfer bus used and as noted in the following paragraph.The H bus is connected to the reserve station service transformer C, its preferred supply, through a feeder breaker from the transformer to transfer bus F and two break ers in series between the transfer bus and the emergency bus. The f eeder breaker from th e transformer trips on overcurrent; transfer bus undervoltage; both 34.5 kV breakers (powering the transformer) open; or reserve station service transformer pilot wire, differential, or overcurrent. The breaker from the transfer bus trips due to overcurre nt; undervoltage on either of the transfer or emergency buses; a trip of the feeder breaker from the transformer to the transfer bus; or transformer pilot wire, differential, or overcurrent. The feeder breaker in the emergency bus will trip due to an emergency bus undervoltage or overcurrent. The emergency diesel generator starts when a safety injection signal is rece ived, at approximately 74% voltage on the bus for 2 se conds, or a 90%

degraded voltage level exists for 56 seconds. Following the safe ty injection start signal, the emergency diesel generator will load if a 90% degraded voltage level exists for 7.5 seconds. The emergency diesel generator breaker closes on the isolated bus at 95% generator voltage if certain conditions are met. The load breakers automatically trip on overcurrent or el ectrical fault and lock out, which prevents the breaker from being reclosed manually or automatically. Most of the 4160V load breakers also trip on undervoltage with time cont rolled reclosing when voltage is Revision 52-09/29/2016 NAPS UFSAR 8.3-5 restored on the bus. When a load breaker control switch is in the automatic position, the breaker will automatically close, as dictated by system requirements. All loads served by the stub bus, connected to the emergency bus, are shed due to undervoltage and may be manually reconnected.

The stub bus tie breaker is tripped and locked out when a containment de pressurization actuation signal exists. The 480V emerge ncy buses and motor control centers have no means of interconnections. Some 480V feeder breakers, in the motor contro l centers, automatically shed their loads on loss of offsite power to reduce emergency diesel generator loading.On Unit 1, normal to emergency bus ties have been installed and, with the Unit 1 main generator breaker, provides two independent offsite power sources to each emergency bus. These bus ties exist between emergency bus 1H and the normal 4160V bus 1B and between the normal 4160V bus 2B and emergency bus 1J. These bus ties have a normall y open breaker at each bus. In conjunction with this modification, the administrative tie between emergency buses 1H and 1J was removed.On Unit 2, normal to emergency bus ties have been installed which provide an independent offsite power source to each emergency bus. These bus ties exist between emergency bus 2H and the normal 4160V bus 2C and between the normal 4160V bus 1A and emergency bus 2J. These bus ties have a normally open breaker at each bus.

On either degraded voltage or loss of voltage, an emergency bus will automatically transfer from its normally connected reserv e station service transformer to the diesel generator. Manual transfer capability to the normal st ation service bus is also provided.

On Unit 2, the feeder breakers from the normal source (main ge nerator) to the normal buses trip on overcurrent; undervolta ge on the normal bus; turbine stop valve diff erential; generator differential; generator negative phase sequence

generator loss of fi eld; generator ground; generator backup; generator overe xcitation; generator leads differential; transmission line (A, B, or C) differential overcurrent; main transformer sudden pressure; turbin e intercept and reheat valve differential; or generator power circuit breakers open. Tripping these breakers will, in turn, provide a permissive to close the breaker from the preferred power source (RSSTs) if there is no overcurrent on the normal bus and no undervoltage on the preferred source. The normal source feeder breakers that have tripped are locked open.

On Unit 1, the various main gene rator faults discussed above cau se the tripping of the main generator breaker rather than th e main feeder breakers from the normal source to the normal buses. The conditions of over current, undervoltage on the normal bus, transmission line differential overcurrent, or sudden pressure, stil l trip the main feeder breakers. The main generator breaker trips associated with main generator faults or reactor trips allow power to be provided to the normal buses from the 500-kV switchyard instead of transferring to the preferred source as discussed on page 8.3-3.To alleviate potential low-voltage profile condi tions of the reserve st ation service system during combined unit operation us ing only the reserve station se rvice system transformers, a Revision 52-09/29/2016 NAPS UFSAR 8.3-6 load-shedding scheme to certain non-safety-related secondary plant electri cally driven equipment has been incorporat ed. When used, this scheme sends trip ping signals to specific pieces of equipment based on the position of a "unit start-up" switch and the status of certain plant equipment. The tripping signal will trip specified running equipment and will defeat the auto-start capability of nonrunning equipment.

For the system to function, the operator plac es a two-position control switch in either the Unit 1 or Unit 2 start-up position. The particular equipment to be tripped by the switch positions

will depend on the operating status of the main feedwater pumps , while other equipment will always receive a trip signal when load shedding is initiated.

The load-shedding scheme will initiate whenever the Unit 1 and Unit 2 normal (A, B, or C) bus is being fed from its associated reserve station service transformer, unless the operator has specifically defeated load shedding. To ensure the requireme nts of GDC-17 are met, load shedding should be enabled when (1) one unit is on-line and the other is in startup, (2) both units are on-line, or (3) both units are in startup. It may be necessary to defeat the load shed circuit for short periods to support maintenance activities.

This will be procedurally controlled.

The equipment that is tripped any time load shedding is initiated is given in Table 8.3-1. The other equipment powered by a particular reserve station service tran sformer is selectively tripped depending on the unit start-up switch position and the status of the feed water pump in that unit. This results in six possible combinations of equipment to be tri pped in addition to the equipment that is normally tri pped for load shedding. The combinat ions are given in Tables 8.3-2, 8.3-3, and 8.3-4.

An undervoltage sensed on the preferre d source feed trips th e preferred source supply breakers, which, in turn, trip a nd lock open the preferred source feeder breakers to the emergency buses. An undervoltage caused on the emergency buses trips the preferred f eeder breaker to the emergency buses and the associated emergenc y bus preferred supply breakers. These two breakers, which tie the transfer buses with the emergency buses, are in series so that a stuck breaker does not affect the clearing of the emergency buses from out side power sources before the connection of the diesel generators to the emergency buses.Safety-related loads that may be transferred manually from one emerge ncy bus to the other are charging pump C (CH-P-1C) and containment recirculation cooler fan C (HV-F-1C). Channel 1 of the excore neutron flux monitor system (AMP-NM-1) can be powered from an emergency bus on the other unit.The charging pump C is normally operated as either:1.Running, in case pump A or B (CH-P-1A or CH-P-1B, respectively) is out for maintenance or otherwise not prefer red to be in operation.

2.Available (not running) when either pump A or B is running.

Revision 52-09/29/2016 NAPS UFSAR 8.3-7Even though charging pump C ma y be powered from either the H or J emergency buses through breakers 15H7 or 15J7, respectively, interconnection of the buses cannot occur. These breakers are electrically interlocke d to prevent inadvertant, simultaneous closing of both breakers.To prevent overloading of the di esel generators, interlocks prevent automatic operation of two charging pumps on an emergency bus that has experienced an undervoltage.

During a safety injection signal with no loss of power, the A and B charging pumps, if available, will automatically start, but the diesel generators, even though started with the safety injection signal, will not be c onnected to their resp ective buses so they cannot be overloaded. Normally only one charging pump (A or B) is requi red to run, with the other remaining pump (A or B) in the automatic mode. The C pump is normally a "swi ng" pump - availabl e to be manually started when the A or B pump is una vailable (or it is not desired to operate them). If the C pump is to be considered an operable pump, it will be running, since the C pump gets no automatic starts.The elementary diagram numbers showing the breaker in terlocks mentioned above are 11715-ESK-5AL, 5AM, 5AN, and 5A P and are containe d in Reference 1.

The indicators for each of the thr ee char ging pumps are as follows:1.Green, red, and amber br eaker position indication lights, loca ted locally at switchgear, on the main control board and the auxiliary shutdown panel.2.Ammeters, located on the main control board.3.Annunciation on the main contro l board including "86 lockout tr ip" for all four breakers associated with the three pumps.4.Charging pump flow on main boar d and auxiliary shutdown panel.5.Computer inputs include "break er closed" for all four breaker s associated with the three pumps.The requirements of the single-failure criterion have been satisfied by providing three full-sized pumps and proper control design so that there will always be one pump available, even with a pump out for maintenance.

Three containment recirc ulation cooler fans are used for containment ventilation. The A and B fans are powered from the H and J emergency busses, respectively. The C fan can be powered from either the H or J emergency bus through br eaker positions 14H7 or 14J7, respectively. Even though containment recirculation cooler fan C may be powered from either H or J emergency busses, the interconnection of the busses can not occur. There is only one breaker, and it has to be physically taken out of one cubicle a nd inserted into the other position.All three containment recirculation fans are tripped by a containm ent depressurization actuation (CDA) signal or undervoltage. Fans A a nd B are available to be manually restarted when the CDA signal is reset and after a 30 seconds. delay on restoration of voltage. Fan C is Revision 52-09/29/2016 NAPS UFSAR 8.3-8 available to be manually restarte d when the CDA signal is reset a nd on restoration of voltage. The elementary diagrams showing the breaker controls are 11715-ESK-6B, -6C, -6D, and -6E and are contained in Reference 1.

The indicators for each of the three containmen t recirculation cooler fans are as follows:1.Green, red, and amber breaker position indicating lights, loca ted on the ventilation panel in the main control room.

2.Annunciation on the main control board of br eaker trip for each of the fan breakers.3.Computer inputs for each fan breaker.

The requirements of single-failure criterion ha ve been satisfied by pr oviding proper control design to ensure that interconnection of the emergency busses will not occur.Channel 1 of the Excore Neutron Flux Monitor System can be operated using either Unit 1 or Unit 2 emergency power. The option to use power from the opposite un it was provided to ensure that indication for this pa rameter would be available in th e Fuel Building following a fire in the Control Room, Emergency Switchgear Room, Cable Tunnel, or Cable Vault.For Unit 1, the transfer to Unit 2 power is made in the Unit 2 Emer gency Switchgear Room. A breaker in the Unit 1 Emergency Switchgear Room protects the Unit 1 Emergency Power System from faults caused by a fire in the Unit 2 Emergency Switchgear Room. The Unit 2 design is similar.The transfer switches cannot be positioned to connect Unit 1 and Unit 2 Emergency Power Systems.The identification of safety-r elated equipment enables pl ant personnel to recognize safety-related components. The emergency buses are color coded with the H bus designated as orange and the J bus designated as purple, and all cables associated with these buses that have safety-related functions are also color coded. The equipment is rela ted to its associated bus by the alphanumeric equipment mark number; that is, the H bus feeds A, C, E, etc., designated

equipment, and the J bus feeds B, D, F, etc., designated equipment.The controls for the 4160V and 480V emergency switchgear breakers are powered from the battery (125V dc) distribution switchboards, as described in Section 8.3.2. The supplies are separate to ensure the redundancy of the contro l power for proper actua tion of the breakers and are arranged so that the distribution board I is associated with bus H a nd board III with bus J.The emergency switchgear is energized during normal operati on, but not all equipment is continuously running. Because th is situation exists, it becomes necessary to ensure that the equipment will work when it is needed. Therefore, tests of the entire system or components are conducted at specified intervals in accordance with Technical Specification requirements. The entire standby system is tested af ter installation to verify the starting speed and load ability. After Revision 52-09/29/2016 NAPS UFSAR 8.3-9 acceptance, the standby power syst ems are operated on a r outine test schedule.

Automatic starting of the diesel generators, an essential part of the safety-related systems, is tested in accordance with Technical Specifications.

Load Shedding and/or auto-start blocking of large 4160V motors is provided when the normal or "G" buses are being fed from the reserve station servic e transformers, to alleviate potential low-voltage profile conditions on the emergency buses during unit emergency (SI or CDA) conditions. This scheme is in addition to and separate from the load shedding previously described in this section.*For the condition of bus 2A be ing fed from RSST "A" during a Unit 1 SI or CDA, loads 2-SD-P-1A and 2-SD-P-2A will be shed.*For the conditions of bus 2B being fed from RSST "B" during a Unit 1 SI or CDA, loads 2-SD-P-1B, 2-FW-P-1B1, 2-FW-P-1B2 and 2-CN-P-1B will be shed.*All circulating water pumps of either unit experiencing an SI or CDA will be tripped when both buses 1G and 2G are be ing fed from the same source.

Automatic starting of the Condensate, Bearing Cooling, Component Cooling and Steam Generator Feed Pumps will be blocked during an SI or CDA when bus alignments are such that starting one or more of the pumps will degrade the voltage on the emergency bus.

The voltage correction mechanism on the Load Tap Changers for Reserve Station Service Transformers A, B, and C receiv es a signal to provide instanta neous voltage correction upon the occurrence of an SI signal on either unit. The signal will last for the duration of the event.The equipment capacities are sp ecified to meet the plant requirements and are shown in Reference Drawings 2 through 11 and 19.Emergency Diesel GeneratorsThe emergency diesel generator, being a vital part of the emergency onsite power system, is discussed in detail below.

There are two 100%-capacity diesel generators for each unit. The dies el generators will automatically start when a safety injection signal is receive d, a 90% degraded voltage level for 56 seconds is sensed on the bus, or approximately 74% voltage for 2 seconds exists on the bus.

Following the safety injection start signal, the emergency diesel generator will load if a 90% degraded voltage level exists for 7.5 seconds. Wh en approximately 74% voltage is sensed for 2 seconds, or if the degraded voltage condition exists, the emerge ncy bus is isolated and load shedding begins. The generator output breaker automatically closes onto the bus when the generator output voltage reaches 95% of nominal, either of the normal offsite power supply breakers are open, limit ed residual voltage remains on the bus, and the generator differential auxiliary relay is reset. An additional permissive exists for the emergency diesel generators output breakers requiring either of the bus-tie breakers to be open. Residual voltage on the Emergency Revision 52-09/29/2016 NAPS UFSAR 8.3-10 Bus is sensed by a relay that allows breaker closure only afte r the residual volta ge has dissipated to approximately 1050V. The unde rvoltage and degraded voltage relaying schemes that initiate load-shedding are defeated when the diesel generator output breaker closes onto an isolated bus.This is necessary to prevent voltage drops encountered during the diesel-loading sequence from causing load shedding to recur.

The following conditions will render the diesel generators incapable of responding to an emer gency start signal discussed above:1.Shutdown relay not reset.

2.Diesel generator (87) differential relay not reset.3.Battery failure (100% loss of dc power).

4.Clogged or air-bound fuel oil lines.

5.Injection racks not open.6.Air distributor valves sticking or low air pressure (less than 175 psig).7.Air-start valves fail.

8.Improper governor setti ng or governor failure.9.Improper set or faulty overspeed relay.10.Engine firing on lube oil.11.Control Room selector switch in MAN LOCAL.These conditions are ann unciated either directly based on the situation or indirectly via a start failure alarm in the dies el generator room and via an emergency diesel generator (EDG)Trouble Alarm in the main control r oom. The diesel will also fail to start if the air start manual isolation valves are closed. These valves ar e locked in the open position and are checked periodically to ensure that they will not prevent the diesel generator from starting.

A listing of all equipmen t on the bus, including loadi ng and unloading by manual or automatic action, time of each event, size of load, identifi cation of redundant equipment, and length of time each load is required is shown in Table 8.3-6 for the H bus and Table 8.3-7 for the J bus. The schedules were set up in order to ensure that the emergency diesel-gen erator loading satisfies Position 2 of Safety Guide 9. The sequence of events us ed in the development of the schedules is as follows, where T o = 0 seconds: (1) safety in jection signal occurs at T o - 50 seconds, (2) loss of preferred power so urce is sensed by undervoltage relays at T o seconds, and (3) the CDA si gnal occurs at T o + 55 seconds. Tables 8.3-6 and 8.3-7 show two Unit 1 scenarios as examples. While these scenarios do not bound worst-case EDG loading, they show the sequencing of loads for thes e events. Engineering controls and incorpor ates load additions into worst-case voltage profile and load calcul ations to ensure EDG ratings are not exceeded.

Revision 52-09/29/2016 NAPS UFSAR 8.3-11The accident analysis in Chapter 15 consider a loss-of-coolant accident (LOCA) to occur coincident with a loss of offsite pow er (LOOP). Information Notice 93-17, Safety Systems Response to Loss of Coolant and Loss of Offsite Power identified a potential problem with the diesel loading sequence if a LOOP should occur subsequent to a LOCA. Virginia Power evaluated this situation with respect to emergency diesel generator loading even though the North Anna licensing basis considers the LOOP to occur coin cident with the LOCA. Th e evaluation identified that a LOOP subsequent to a LOCA would not result in overloading of the emergency diesel generators.

A diesel can be started by either of two redundant compressed air-starting systems (described in Section 9.5).The diesel is fueled from the fuel-oil system described in Section 9.5.4. The fuel-oil day tank in the missile-prote cted diesel-generator room has a minimum allowed fuel capacity to enable the diesel to run for one hour. The da y tank is designed to meet applicable codes.

The engine lubrication system consists of engine and motor-driven lubricating-oil pumps, lubricating-oil filters, and an air cooler. The diesel-generator lubrication system is described in Section 9.5.

The diesel-generator combustion air intake a nd exhaust system and the diesel-generator cooling and heating systems are described in Section 9.5.

All the required equi pment and acces sories of the above syst ems are supplied from the emergency motor control centers a ssociated with the particular diesel generator. Each diesel generator has associated with it an ac fuel-oil transfer pump, an ac backup fuel-oil transfer pump, and a dc auxiliary fuel-oil pump. The ac fuel-oil transfer pump and its backup are fed from separate emergency motor contro l centers, and the dc auxiliary fuel-oil pump (backup to diesel-driven fuel-oil pump) is supplied fr om its respective diesel-generator battery.The instrumentation and control for the diesel generators are fed from the emergency motor control centers and the 125V dc system associated with the diesel. The instrumentation includes: voltmeters, ammeters, wattmeter, frequency meter, synchroscope, and varmeters, which are situated on the emergency-generator panels in the main control room. Local meters are in the diesel-generator room.

The controls include manual switches and push buttons, which are situated on the emergency-diesel-generator panels in the main control room. Local switches and push buttons are in the emergency-diesel-generator rooms.

The diesel-generator seismically-qualified contro l panels are floor rather than engine-skid mounted to reduce the possibility of vibration-induced failure.The emergency-diesel-generator supply breaker automatic protective tr ips are diesel-engine overspeed, generator overexcitation, bus overcurrent, and generator differential. The Revision 52-09/29/2016 NAPS UFSAR 8.3-12emergency-diesel-generator automatic engine trips ar e high lube-oil temper ature, high jacket water coolant temperature, high crankcase pressure, low lube-oil pressure, st art failure, generator differential, and diesel-engine overspeed. During testing, all protective trips are available to protect the emergency diesel generator from the abnormal occurrences stat ed above. During an emergency start, the emergency-diesel-generator breaker trips automatically only on diesel overspeed, bus overcurrent, and generator differential. The emer gency diesel generators are automatically shut down only on generator differential and di esel-engine overs peed. All other emergency-diesel-generator protec tive trips are bypassed during an emergency start. The breakers can also be manually tripped, and the diesels manually stopped.

The diesel-generator feeder breaker trip a nd engine shutdown setp oints are as follows:

The bases for the setpoints are as follows:

1.Overcurrent: The setpoint of 1200A is 213% of full load current of the generator, which adequately protects the equipment against fault currents. This setting offers some level of protection against high continuous currents, but is high enough to prevent inadvertent tripping and enforces the equipment availability.2.Overexcitation: The setpoint range 59.4A - 62.1A is 110-115%

of normal operation rating at rated kVA, which protects the equipment but is high enough to prevent inadvertent tripping.3.Generator differential: This se tpoint is not based on any design rating of the diesel generator, but on the criter ia that the minimum availa ble fault current should be at least 10 times the pick-up of the differential relay in order to account for current transformer error. The 144A

setpoint meets this criteria and therefore, prot ects the generator from internal faults while avoiding spurious relay actuation due to current transformer error.4.Low lube-oil pressure: The setpoint of 17 psig, with alarm at 20 psig, is 57% of normal operating pressure and is high enough to protect the engine fr om damage but low enough to prevent inadvertent tripping.Cause of Trip Setpoint Percent of Design1.Overcurrent1200A time overcurrent2132.OverexcitationRange 59.4 A - 62.1A110-115%3.Generator differential144A time overcurrentNot applicable4.Low lube-oil pressure 17 psig 575.Engine overspeed 1035-1053 rpm115-1176.Start failure 7 sec 3007.High lube-oil temperature 230°F 1078.High jacket coolant temperature 205°F1119.High crankcase pressure

+2.0-in. water Revision 52-09/29/2016 NAPS UFSAR 8.3-135.Engine overspeed: The setpoint range of 1035-1053 rpm is 115-117% of rated speed, which is low enough to protect the engine from da mage but high enough to prevent tripping recovery from load rejection, in accordance with Safety Guide 9.6.Start failure: The setpoint of 7 seconds is 300% of normal st art time, which is long enough to ensure a start, if the engine is capable of starting, but short enough not to drain the air-starting tanks, which would prevent subsequent manual start tries (see Section 9.5.6).7.High lube-oil temperature: Th e setpoint of 230°F is 107% of normal ope rating temperature, which is low enough to protect the engine but high enough to prevent inadvertent tripping. The alarm setpoint is 225°F.8.High jacket coolant temperature: The setpoint of 205°F is 111% of normal operating temperature, which is low enough to protect the engine but high enough to prevent inadvertent tripping. The alarm setpoint is 195°F.9.High crankcase pressure: The setpoints are low enough to prot ect the engine but high enough to prevent inadvertent tripping, and within the requirements of the diesel-generator manufacturer.

The consequences to the plan t of the loss of a diesel-gen erator set during accident conditions due to inadvertent trip(s) or trip(s) caused by marginal se ttings of essential protective functions are minimal since: these trip(s) will af fect only one diesel gene rator and, therefore, one train of the redundant engineered safeguards equipment is still available; a nd, the tripped diesel, since it is still in sound condition, ca n be restarted after isolation of th e cause, thus re storing to full redundancy the engineered safeguards equipment.

The consequence to the plant of the loss of a diesel-generator set dur ing accident conditions due to bypassing of the various trips, at a time a trip is necessary to pr otect the diesel-generator set, will in all probability be the permanent lo ss of the generator set. However, the redundant diesel-generator set will still be available to supply its e ngineered safeguards equipment.The difference between the above two cases is that in the form er the diesel-generator set will be protected from di sabling damage and probably can be restarted. In the latter case, it may be lost permanently. The result of both cases is that the redundant di esel-generator set will always be available to power the necessary engineered safeguards equipment.

The diesel generators are protected against missiles, which include tornado missiles and air bottle failure generated missiles, by missile-proof rooms. Since the engine is designe d to contain a crankcase explosion, there will be no missiles resulting from such an explosion.

The individual rooms are designed to meet criteria indicated on Table 3.2-1 for tornado missile protection. Th e air bottles are built to ASME Section VIII require ments and are protected from overpressure by two re lief valves; therefore, overpressure failure is not credible. In addition, Revision 52-09/29/2016 NAPS UFSAR 8.3-14individual rooms are provided for each diesel so air bottle rupture would not affect more than one diesel.With respect to no-loa d operation, the manufacturer has stat ed that there are no mechanical limitations on running the Fairbanks Morse model 38TD8-1/8 engine at full-speed no-load conditions; however, running in an unloaded c ondition would result in an accumulation of unburned oil residue in the engine exhaust system, wh ich could result in a "s tack" fire if a sudden load were applied. Operating procedures ensure th at the engine is loaded up before securing the unit, after extende d no-load operation.The diesel generators are load tested in accordance with Technical Specifications.To allow isochronous (independent) and droop (parallel) operation of the diesel generator following testing, an automatic speed rese t capability has been installed in the emergency-diesel-governor speed reference circuit. The preset speed condition (900 rpm) is necessary for two reasons: (1) to ensure that the emergency diesel generators can accommodate the oncoming load without tripping, and (2) to ensure that control instrumentation and other safety-related equipment will operate at the proper frequency. Following the shutdown of the emergency-diesel-generator system, the reset will automatically set the speed reference to the predetermined speed setting on the electric governor. The control relays that are used for this purpose are powered from the 125V dc distribution panels 2A and 2B.

Surveillance testing of the dies el generators does not conflict with the recommendations of the engine manufacturer.Maintenance on the emergency diesel genera tors is performed in accordance with established administrative procedures.To comply with 10 CFR 50, Appendix R, capability has been provi ded to operate the diesel from the diesel generator room when a fire prevents access to the ma in control room. The following design features have b een provided for this capability:1.Location of relays and current transducers for Train H diesel generators in the Unit 1 and Unit 2 Emergency Switchgear Train H Rooms.2.Installation of transfer switches, lockout relays, metering, control and indication of circuit breakers and diesel engines in the 1H and 2H diesel generator rooms.3.Installation of meters in the 1H and 2H diesel generator rooms to measure bus voltage, frequency, kilowatts, kilovars, and emergency supply breaker amperes.4.Cable routing outside the main control room and plant fire areas containing Train J diesels, with the exception of the emergency switchgear room.

Revision 52-09/29/2016 NAPS UFSAR 8.3-15 8.3.1.1.2 Analysis 8.3.1.1.2.1 Compliance with NRC Criteria.

In accordance with Gene ral Design Criterion 17, the onsite ac power syst em is highly reliable, wi th redundancy to ensure sa fe shutdown of the plant while maintaining fuel conditions within acceptabl e design limits and containment integrity. The onsite ac power system ha s been shown in the desc ription of the system to have the independence, redundancy, and testability necessary to perform its necessary functions with a single failure. The offsite ac power system is energized at all times so that it is avai lable continuously. The onsite power system is designed to mini mize the possibility of losing al l ac power onsite. The individual systems are separated and independent of each ot her so a coincidental loss of power generation and offsite power will not reduc e the integrity of the plant.

In accordance with General Design Criterion 18, the opera bility and functional performance of the components of the systems are designed to permit periodic testing.In accordance with Safety Guide 6, the emergency ac power system for each unit is separated into two redundant and independent syst ems to provide safety-related equipment with dependable power with the loss of one system. The separated systems are able to be connected to a preferred power source or to a standby power source with no connection between the redundant systems.In accordance with Safety Guide 9, the emergency diesel generators were sized by conservative methods during the construction permit stage of design. The diesel generator's 2000-hour rating is 3000 kW with a 30-minute rating of 3300 kW. At the operating license stage of review, the greatest predicte d load for each diesel-generator set was 2938-kW maximum for the worst case of loss of power a nd a design-basis LOCA (DBA) which was 89.03% of the 30-minute rating. The emergency diesel generators shall not be continuously loaded to mo re than their 2000-hour rating of 3000 kW. The emergency power system has been tested prior to reactor criticality, as specified in Table 14.1-1.

The diesel-generator sets are capable of reach ing rated voltage and speed within 10 seconds of receiving the starting signal and accepting sequentially the required safety and shutdown loads after a loss of offsite power. Duri ng initial loading, the voltage decr eases to approx imately 60% of nominal. This voltage value is less than the minimum indicated in Safety Guide 9; however, it is still satisfactory since the voltage drop occurs only at the application of the initial load block and voltage regulator action re stores voltage so that motors accelerate and volta ge is restored to 100%

before the application of the s econd load block. At no other time during the loading sequence does voltage dip below 75% of nominal.

The restoration of voltage is to 90% of nominal within 40% of the load block interval. The diesel-generator sets, even under this condition, meet the requirements of Safety Guide 9; that is, they successfully start and accelerate the motors to meet their design purpose.

Revision 52-09/29/2016 NAPS UFSAR 8.3-16 Frequency during the initial loading does decrease below 95% of nominal and is not restored to within 2% of nominal in less than 40% of the initial load block time interval. This is not in accordance with the values in Safety Guide 9; however, it is s till satisfactory since the discrepancy occurs only at the application of the initial load block and governor action restores the frequency and accelerates the motors prior to the application of the second load block. At no other time does the frequency viol ate Safety Guide 9 requirements.

The diesel generators, during rec overy of transients or disconnections of the largest single load, do not reach above 1001 rpm, which is the total normal speed plus 75% of the difference between overspeed trip (1035-1053 rpm) and nominal (900 rpm). A diesel generator is tested for confirmation of its suitability to carry the required emergency loads.The following information is HISTORICAL and is not intended or expec ted to be updated for the life of the plant.

A description of the testing procedures follows:Tests have been conducted by the manufact urer to document ge nerator transient performance under across-the-line induction-motor-starting conditions. These tests were conducted on a 12-cylinder 38TD8-1

/8 engine, a 996-30 frame-size alternator, and a Basler exciter. The only essential diff erence between the equipment test ed and the equipment supplied is the field-forcing capability in crease from 300 to 500%. This change results in improved transient performance (Reference 2).Tests have been conducted by the manufacturer to document starting and load acceptance reliability on a similar 12-cylinder 38TD8 1/8 engine generator set. The diesel generator was connected directly to a 3000 kW resistive load and automatically set to sequence as follows:1.Start unit and accelerate it to rated speed and load.2.Maintain 3000 kW load for 5 minutes 3.Shut the unit down without an idling or cooling-off peri od and allow it to stand until temperatures drop to the keep-warm system level.4.Repeat steps 1, 2, and 3 th rough 100 consecutive cycles.

The manufacturer performed pr ototype tests including "100 st art and load acceptance" tests on similar equipment and supplied the test records. Also, one of the furnished diesel generators was loaded at the fact ory with a starting load equivalent to 110% of the initial and largest load block as follows:1.Start diesel generator and a ccelerate to speed and voltage.2.Load generator with approximately 11,000-starting-kVA motor load (110% of initial load block).3.Repeat 25 times allowing a sufficient interval between successive starts for diesel generator and load to cool.

Revision 52-09/29/2016 NAPS UFSAR 8.3-17In accordance with Safety Guide 22, the ac power systems important to safety are designed to permit their safety-related functions to be tested periodically by VEPCO's trained personnel to ascertain the actuation of compone nts and of the whole system, where possible, during reactor operation. When the actuation of th e entire system is not feasib le during reactor operation, those systems are calibrated and tested during a scheduled shutdown of the plant. These systems are impracticable to test during reactor operation and would adversely affect reactor operability. The control components are set and tested by VEPCO's personnel to ensure proper actuation.

Additional information is provided in Chapter 7.

8.3.1.1.2.2 Compliance with IEEE Criteria.

In accordance with IEEE Standard 308, the station service power system a nd its components are designed to opera te during and after a design-basis event, retain its safety features, and keep its parameters within their specified limits. The safety-related systems are redunda nt systems so that a loss of one will not enda nger personnel or structures. The design basis accident is discussed in Chapter 15, and all required Class 1E equipment is qualified to operate during and after an event. The onsite electric system is designed to deliver dependable power to components during and after the event, so that there is no degradation in performance. The onsite electric system is constantly monitored in the main control room, and the breakers can be operated remotely or locally. All associated material pertaining to Class 1E equipment is installed separately from it s redundant counterpart to prevent a common failure.During each start and loading, generator transients including speed, terminal voltage, and frequency were recorded. The results included a "voltage drop-voltage recovery" profile to indicate the value and duration of the transients. The test report provide d verification that the generator voltage was restored before th e application of the second load block.Preoperational testing of the emergency dies el generator portion of the onsite power system was as follows:1.The plant emergency electric power distribution system was isolated from the offsite transmission system by direct actuation of the undervoltage sensing relays within the onsite system.2.By applying simulated accident signals, the emergency diesel generator was functionally tested in the modes of opera tion and sequencing of loads. Each test was of sufficient duration to achieve stable operating conditi on, and thus permit de tection of adverse conditions.3.During each test, the termin al voltage and power were monitored to verify proper operation of the diesel generator.The following information is HISTORICAL and is not intended or expec ted to be updated for the life of the plant.

Revision 52-09/29/2016 NAPS UFSAR 8.3-18The power supply to the Class 1E equipment is from either the pref erred power source or the standby power source. The Class 1E bus is energized during all phases of operation. This arrangement permits immediate re sponse of equipment to any a bnormal operating conditions. In the event of a preferred power source failure, the standby pow er source is ener gized and supplies the necessary power to the safety-related loads for safe shutdown and ma intenance of security after shutdown or accide nt. The independent power supplies (p referred and standby) are arranged and connected such that loss of one does not degrade or cause loss of the other. The standby system is designed to withsta nd all postulated events so that a common failure is minimized.

The onsite electric power system is designed with physical separation, electrical isolation, and redundancy to prevent a failure of safety-related loads.

The redundant loads are physically separated, either by distance or barrier, depending on available room and the area's environment. They are electrically separated to minimize concurrent failure and allow a redu ndant group to perform its function even though its counterpart is incapacitated.

Each safety-related load group has power avai lable from either pref erred or standby power supplies, which are completely independent.

The preferred power system supplies power to the onsite electric system through the distribution system. The pr eferred power suppl y is capable of providing sufficient power to start up one unit while operating all required loads of the other unit. The system is nor mally fed by two circuits in the high-volta ge switchyard but can opera te with only one circuit available. The entire system is monitored to ensure th e availability of the supply to the onsite el ectric system, and the source is capable of operating necessary equipment.

The standby power system supplies power to the emergency buses in the event the preferred power source is una vailable. Each standby po wer source has the capacity to supply the necessary safety-related equipment. The standby power su pply is monitored constantly by indicators and alarm points that annuncia te if any of the major component s or parameters are not within specified conditions.

The standby power source contains more than 7 days of fuel available for the operation of the system. The fuel is provided from two underground mis sile-protected tanks. Fuel transfer from the undergroun d tanks to each diesel day tank is performed by an ac fuel-oil transfer pump fed from the emergency buses associated with th e respective diesel. The standby power supply is controlled from a remote station or locally so th e supply or feed can be chosen automatically or manually for the conditions presented (i.e., start and load standby power supply, disconnect unnecessary loads due to loss of pref erred power source, and selection of suitable power supply when both are available). The standby power source supply breakers and load breakers automatically protect equipment from electrical distur bances not associated with normal operation, and the action is indicated both at the remote station and locally

.The onsite electric equipment after installatio n and before reactor criticality was tested to demonstrate that all components were installed, connected, and ope rate properly and all metering and protective devices were properly calibrated and adjusted. The safety-related systems are Revision 52-09/29/2016 NAPS UFSAR 8.3-19 tested periodically to detect the start of deterioration and to demonstrate that the system is available for proper operation.In accordance with IEEE Standard 336, VEPCO's agent had a Quality Control Division responsible for inspecting and wi tnessing electrical e quipment tests from th e time of production to the start-up of the power generating station. Chapter 17 of the original FSAR described the Division's responsibilities, procedures, and do cumentations in detail. The Division used 10 CFR 50, Appendix B, as a basic requirement of operation and maintained a staff to enforce manufacturers, installers, and testers compliance to 10 CFR 50, Appendix B, and all applicable codes, standards, and guides.The Class 1E equipment compliance to IEEE Standard 344-1971 is described in Section 3.10.2.

8.3.1.1.2.3 Criteria for Cable and Raceway Rout ing, Designation, and Identification.

Safety system cables and raceways are color coded. Safety system cables or raceways of one color code are separated from cables or raceways of another color code in accordance with the criteria contained in this section. This separation is desi gned so that a single failure within the protection system does not preven t minimum protection system acti on. Non-safety-sys tem cables and raceways are not color coded. Non-safety-related cables are not permitted to be routed in raceways with cable of more th an one color code. Where field run non-color-coded cables are routed with cables of one color code and then enter an en closure containing different color-coded cables, they are separated by 6 in ches or a barrier is provided. If a barrier cannot be provided or they cannot be separated, then these cases are documented, reviewed, and resolved by the engineers.

The cable code designation is a 10-character al phanumeric code with each part indicating specific information, such as unit number, system code letters, part code number or letter, color code letter, service class letter, and cable number.

The design of the cable system incorporates this code designation. Every cable run 10 feet or mo re and raceway section in the power station, except security, lighting, party-paging, and telephone systems, is identified with an alphanumeric code designation that includes a color code letter for "safety system" circuits. "Non-safety-system" circuits are no t color coded; cables are given th e code letter "N" in the color code letter designation, meaning no color code.The raceway code designation is an 8- or 9-character alphanumeric code with each part indicating specific information, such as unit number, raceway type, se rvice class, raceway identification, color code, and c onduit number identificati on letter if required. The design of the raceway system incorporates this code designation.Both code methods of identification, designation and color, are used to ensure physical separation of redundant circuits that are a part of the safety system. Re dundancy is primarily obtained by the use of two trains and four channels, each of which is color coded.

Revision 52-09/29/2016 NAPS UFSAR 8.3-20 Applicable train and channel colo r identification is as follows:Train A - Orange color and code letter O Train B - Purple color and code letter P Channel I - Red color and code letter R

Channel II - White colo r and code letter W Channel III - Blue color and code letter BChannel IV - Yellow color and code letter YWhen it becomes necessary to have common ties between buses, the direct tie between 4160V emergency orange a nd purple buses is accomplished by usi ng a bus tie cable that is color coded green (G), so that it can be associated with either P or O.The charging pumps for each unit are provided in triplicate, each pump being rated at 100% capacity. Two pumps are permanently connected (one to each emergency bus) with the third pump capable of being tied through in terlocks and individual circuit breakers to either bus, depending on needs. The power cables of the third "swing" pump are color coded green (G), while the individual circuit breaker control cables will be color coded the same as the bus to which the circuit breaker is connected.

The containment recirculation c ooler fans for each unit are provided in triplicate. Two fans are permanently connected (one to each emergency bus) with the third fan be ing capable of being tied to either bus by physically moving the circuit breaker from one redundant bus to the other.

The cable between the two breaker cubicles is color coded green (G), and the cable feeding the load is color coded orange (O). The breaker is assigned to the or ange bus, and the only time it can be moved to the purple bus is after the total loss of the orange bus. This circuit is run in conduit.

The control ties between the nor mal 4160V buses and safety-relat ed control panels are color coded G (green). These circuits are each run in conduit. The G conduits running to the orange and purple cabinets are separated from each other.

The reserve station service tran sformers supply preferred power to the emergency buses via feeders from transfer buses D, E, and F. These tie power cables between the emergency buses and the transfer buses are not color coded. However, the tie breaker c ontrol cables are color coded, the same as the bus to which the breaker is connected.Color-coded cable routing separation is pr ogrammed into the computerized cable scheduling program to prevent the placement of cables of one co lor code into a raceway with cables(s) of another color code. Table 8.3-5 lists the availa ble color codes and related color code letters that are contained in the co mputerized cable scheduling program.The service classes for cables are as follows.

Revision 52-09/29/2016 NAPS UFSAR 8.3-21 The H service identification is used primarily for raceways and cables above 600V service.

Minimum tray size is based on sc heduling the cables one layer deep with maintained 1/4-diameter spacing of the larger cable betw een adjacent cables. One-eighth-di ameter spacing is maintained between outside cables and tray side rails. IPCEA Publication No. P-46-426, Derating Table VII, Line 1, is applied where required.The L service identification is used for race ways and power cables 600V or less, including 480V feeders, large 480V motor leads, dc feeders, dc motor leads, lighting feeders, etc. Tray size and cable spacing and/or derating is the same as for the H service.The K service identification is used for raceways and power cables No.

4 AWG copper or smaller operating at 600V or less. In general, th is service class includes small 480V motor leads, small 480V distribution circuits, small dc circu its and motor leads, and some lighting loads.

K service class tray fill does not exceed 50% of the calculated us able cross-section tray area.

Cables in a K service class raceway meet one of the following conditions:1.No conductor I 2 R loss heating (interlocks, i ndicating lamps, controls, etc.).2.Intermittent duty (valve operato rs, cranes, etc.) operation less than 40% of the time or for not longer than 30 minutes at any one operation.3.Cable for continuous operation is derated to 40% of normal.K service class derating and size limitations are not appl icable to BDB (Beyond Design Basis) cables permanently installed in K service class raceway that distribute power from BDB receptacle cabinets and distri bution panels. During normal op erations, BDB cables are de-energized and have negligible effect on existing non-BDB cabling. Du ring postulated BDB external events with ELAP (extended loss of AC power), existing non-BDB K service cabling would be de-energized, therefore would neither affect nor be affected by BDB cabling.The C service identification is used for race ways and cables of cont rol, metering, relaying, and alarm circuits. In general, these services include 125V dc and 120V ac control leads, PT cables, CT cables, etc. The C service class tray fill does not exceed 50% of the calculated usable cross-sectional tray area.The X service identification is used for racew ays and cables of data, communication, alarm, control, or instrumentation serv ices. These services include cable s from thermocouples, resistance temperature detectors, process in struments, and computer signals. Generally, this service class includes anything less than 50V, although some low-energy control or signal systems may operate above 50V and still be considered low level. The X service class tray fill does not exceed 50% of the calculated usable cross-sectional tray area.C and K service class cables (600V insulation) ma y be combined in the same K raceway without further separation. The C and L service class cables may be run in the same L tray providing that L cable spacing is maintained. BD B low voltage power and control cables (600V)

Revision 52-09/29/2016 NAPS UFSAR 8.3-22are maintained de-energized during normal operations and design basis accidents/events and have negligible effect on non-BDB cabling; therefore they may be run in service class C, K and L raceway.Raceway type identifi cation is as follows:The conduit, sleeve, and duct have the following restrictions placed on them for percent fill:1.One cable - 50% fill.

2.Two cables - 3l% fill.3.Three or more cables - 40% fill.

4.Floor and wall sleeves 5 feet long or less - 80% fill.

The overfill of raceways may be authorized after it has been determined that the electrical and mechanical integrity of the cable(s) in the raceway have not been compromised.

The unit number indicates the unit to be serviced. The system code designator, the part code number or letter, cable number, raceway number, or conduit number, depending on which one is described, are all design controlled for internal use. The entire alphanumeric designation code is to ensure separation, isolation, and identification.Non-color-coded trays in all areas are in ge neral vertically sepa rated 15-inch minimum from color-coded trays as measured from the bottom of one side rail to the bottom of the side rail of the tray above or below. This 15-inch vertical separation from other trays may be reduced to a minimum separation of 2 inches as measured between the bot tom of one tray side rail to the top of the side rail below for short tray runs if required. Non-color-coded trays do not have any horizontal separation requirements beyond sta ndard construction and access clearances.Solid metal tray covers (sheet or corrugated) are provided on all trays except the top tray under a solid floor for general ca ble protection. Other approved tr ay cover configurations (e.g. marinite board) have been prov ided in lieu of solid metal tray covers where construction constraints dictate and electrical separation barriers are required.

Raceway Type CodeRaceway Type A Armored cable or direct burial cable C Conduit DDuct and concealed conduit over 20 ft length FFloor sleeves and concealed conduit 20 ft length or under TTray and troughs UTrenches and blockouts WWall sleeves Revision 52-09/29/2016 NAPS UFSAR 8.3-23 Safety system trays in missile-producing areas are separated as described below:1.Vertical separation between different color-c oded trays is maintained at 45 inches at a minimum from the bottom of the side rail to the bottom of the side rail of the tray above or below. Non-color-coded trays may be installed between color-coded trays provided the 15-inch separation is maintained betw een the bottoms of the side rails.2.Horizontal tray separation is maintained at 4 feet from side rail to side rail between trays of different color coding.3.Where separation cannot be maintained in accordance w ith the paragr aphs above, appropriately designed missile barriers are provided.Color-coded trays in non-missile-producing areas have separation criteria as follows:1.Orange and purple safety system cable trays are vertically separate d from each other by a 30 inches at a minimum from the bottom of one side rail to the bottom of the side rail of the tray above or below. A non-color-coded tray may be installed between two color-coded (orange and purple) trays provided the 15-inch separation (30 inches overall) is maintained.2.Horizontal tray separation is maintained at 24 inches at a minimu m from side rail to side rail between trays having different color coding.3.Color-coded trays other than orange and purple trays are vertically separated from one another 15 inches at a minimum fr om the bottom of one side rail to the bottom of the side rail of the tray above or below.4.Vertical separation between an orange or purple tray to any other color-coded tray is 15 inches at a minimum from the bottom of one side rail to the bottom of the side rail of the tray above or below.

Where separation cannot be maintained in accordance with the paragraphs above for non-missile-producing areas or for color-coded vertical tray risers that pass less than 2 feet from horizontal tray runs of different color coding , barriers are provided and as a minimum conform dimensionally to Figure 8.3-1.Color-coded rigid metallic conduits in missile-producing areas have a 2-foot separation vertically and horizontally between conduits and trays having different color codings.

Rigid metallic conduits or me tal-enclosed ducts in non-mis sile-producing areas have no minimum physical vertical or horizontal separa tion beyond that requi red by construction installation or access clea rances between conduits and/or metal enclosed ducts of different color coding.When encased in concrete, cables in a duct bank are vertically and/or horizontally separated from differently color-coded ducts and/or non-color-coded ducts by standard duct bank design separation.

Revision 52-09/29/2016 NAPS UFSAR 8.3-24Color-coded cables are not permitted to be direct buried.Unit 1 color-coded cables are separated from Unit 2 color-coded cables in accordance with the general separation criteria contained in this section.For example, Unit 1 orange cabl es not only are separated from other differently color-coded Unit 1 cables, but also are separated from Unit 2 color-coded cables, including Unit 2 orange color-coded cables.Where cables are routed in free air to enter and exit raceways, the separation requirements are the same as required for cable trays. Wher e minimum physical separati on cannot be achieved, barriers are used.

Sleeve separation criteria are as follows: sleeves that ente r equipment are separated such that the minimum cable separation cr iteria detailed in the specificat ion for that piece of equipment are met, or sleeves may be separated by a barrier. Sleeves that are used as intermediate raceway sections are separated such th at the minimum separation is the more stringent separation requirement of the tw o ends of the sleeves. Where minimum physical separation cannot be achieved, barriers are used.

Criteria for separation in special areas are as follows: the open cable trench is a non-missile-producin g area in the main cont rol room. The open cable trench is de fined as a non-color-coded raceway for the purposes of separation from any color-coded raceway running within the open cable tr ench. Where color coded trays run ove r non-color coded cable in the open cable trench, the barrier is installed in the color coded tray. Where cables are routed in free air space from raceways to the board rack or panel sillframe, the minimum separation is equivalent to requirements for separating trays in that area. The areas en closed by control board or panel sillframes directly under the te rmination area are special non-mi ssile-producing areas and are an extension of the control boards or panels. Where cables are routed in the free air space within the sillframe to a control board or a panel entrance location, the mini mum separation is as stated in the specification for the respec tive equipment entered, or a barrier is used. Where cables are routed in the free air space within the sillframe, which is commo n to adjacent control boards or panels with different color codes, a barrier is provided as an ex tension of the separation partition between the adjacent panels for a distance re quired to meet the mi nimum separation in the specification for the equipment entered.

The areas enclosed above the panels' top hat ar e considered an extens ion of the panels. The separation criterion in the top hat is in accordance with the separation required in the specification of the panel entered or barrie rs approved by the engineers.

Revision 52-09/29/2016 NAPS UFSAR 8.3-25Differently color-coded field run cables within eq uipment are separated from each other as outlined below.1.Separation requirements in the equipment supp lied by the nuclear steam supplier are 6 inches or as much as practicable.2.Separation requirements in the balance-of-plant equipment are in accordance with the specification for the equipment, or by 6 inches if no specification requi rements are stated, or a barrier is used.

All enclosures that have more than one field run color-coded cable within them are listed in Table 8.3-8 with the color codes per Table 8.3-5. The differently color-coded cables are separated in accordance with the above unless noted below.

There are certain conditions wher e the above separation instruct ions cannot be followed or would be impractical. These author ized exceptions are as follows:1.Green (G) with orange (O) or purple (P) in Panels 1-EP-CB-28E and F and 2-EP-CB-28E and F. G cable does not have to be sepa rated from O cable in 1-EP-CB-28E and 2-EP-CB-28E but does have to be separated from all other colo rs. G cable does not have to be separated from P cable in 1-EP-CB-28F and 2-EP-CB-28F bu t does have to be separated from all other colors. (In 2-EP-CB-28E and F Unit 1, G cable must be separated or barriered from all Unit 2 colors including Unit 2 G color-coded cable.) The single-failure criterion is not compromised since the signal is from a single nonsafety-relate d source and any failure of it, or any other associated electrical fa ilure, will cause a safety action mode.2.Orange (O) with red (R) in Enclosures 1-BY-C-02, 1-EI-CB-23A, 34, 63A, 301A, 1-EI-CP-04, 1-EP-CB-04A, 11N1, 13N1, 14N1, 32, 36, 41N1, 43N1, 80A, 80E, MOV-1590, 1591, 1592, 1593, 1594, 1595, RCPC&V19A, 19D, 19E and HH-14, and 2-BY-C-02, 1-VB-INV-01, 2-VB-INV-01, 2-EI-CB-23A, 34, 63A, 192A, 301A, 2-EI-CP-04, 2-EP-CB-04A, 12N1, 34, 37, 42N1, 43R1, 80A, 80E, MOV-2590 , 2591, 2592, 2593, 2594, 2595, RCPC&V6B-2, 6C-2, 6D-2 and HH-2-2. O and R cables in the a bove enclosures do not have to be separated from each other, except for service class considerations, since they are integrally associated with each other and do not compromise the single-failure criterion.3.Purple (P) with blue (B) in Enclosures 1-BY-C-05, 1-EI-C B-23C, 301B, 1-EI-CP-04, 1-EP-CB-04C, 01-VB-INV-03, 11R1, 13R1, 14R1, 31, 37, 41R1, 80C, 80G, RCPC&V8B and HH-15, and 2-EI-CP-04, 2-BY-C-05, 2-EI-CB-23C, 192B, 301B, 2-EP-CB-04C, 02-VB-INV-03, 12R1, 35, 36, 42R1, 80C, 80G, RCPC&V21B-2 and HH-1-2. P and B cables in the above enclosures do not have to be separated from each other, ex cept for service class considerations, since they are integrally associated with eac h other and do not compromise the single-failure criterion.4.Orange (O), red (R), and red/white (A), a nd white (W) and red/white (A) in Enclosures 1-EP-CB-12A and B, and 2-EP-CB-12A and B. O, R and A, and W and A cables in the Revision 52-09/29/2016 NAPS UFSAR 8.3-26above enclosures do not have to be separated from one another since the A cable is electrically isolated from the other color-coded cables by a key interlock. Thus, the single-failure criterion is not compromised.5.Purple (P), blue (B), and blue/yellow (T), a nd yellow (Y) and blue/yellow (T) in Enclosures 1-EP-CB-12C and D, and 2-EP-CB-12C and D. P, B and T, and Y and T cables in the above enclosures do not have to be separated from one another since the T cable is electrically isolated from the other color-coded cables by key interlock. Thus, the single-failur e criterion is not compromised.6.Green (G) and orange (O) and green (G) a nd purple (P) in Enclosures 1-EE-SS-01 and 02, and 2-EE-SS-01 and 02. G and O and G and P cables need not be separated in the above enclosures since there is no means of pr oviding an electrical connection between the redundant buses. The breaker in 1-EE-SS-01 (2-E E-SS-01) has to be physically moved to 1-EE-SS-02 (2-EE-SS-02) to pr ovide an electrical power sour ce from the redundant bus. The moving of the breaker may only take place on total loss of the O system. Thus, the single-failure criterion is not compromised.7.Green (G) and orange (O) a nd green (G) and purple (P) in Enclosures 1-EE-SW-01 and 02, and 2-EE-SW-01 and 02. G and O and G and P cables need not be separated in the above enclosures since there is no means of providing an uncontrolled electrical connection between the redundant buses. There is one area where the above occurs.

The swing backup devices selectiv ely tied to either emer gency bus as described previously are provided in accordance with Section 8.3.1.1 , which describes the operation of the three pump motors. Thus, the single-failur e criterion is not compromised.8.Orange (O) and purple (P) in Enclosures 1-EI-CP-04, 1-EP-CB-28A, B, H, and J, and 2-EI-CP-04, 2-EP-CB-28A, B, H, and J. O and P cables have been separa ted and barriered as much as practicable. Areas where there is less than 6 inches of separation have been analyzed and it has been determined that the single-failure criterion is not compromised. In 1-EP-CB-28H Unit 2, O must be separated from all Unit 1 colors including O. In 1-EP-CB-28J Unit 2, P must be separated from all Unit 1 colors including P. In 2-EP-CB-28H Unit 1, O must be separated from all Unit 2 colors including O. In

2-EP-CB-28J Unit 1, P must be separated from all Unit 2 colors including P.9.Red (R) and white (W), and blue (B) and ye llow (Y) in Junction Boxes JB-009 and JB-010, and JB-009-2 and JB-010-2. R cabl e does not have to be sepa rated from W cable in JB-009 and JB-009-2. B cable does not have to be se parated from Y cable in JB-010 and JB-010-2.

The cables in the junction boxes ar e not redundant to each other; t hus, they do not violate the single-failure criterion.10.Orange (O) and white (W), and purple (P) and yellow (Y) in 1-BY-C-04 and 07, and 2-BY-C-04 and 07. O cable does not have to be separated from W cable in 1-BY-C-04, Revision 52-09/29/2016 NAPS UFSAR 8.3-272-BY-C-04, 1-VB-INV-02, and 2-VB-INV-02. P cable does not have to be separated from Y cable in 1-BY-C-07, 2-BY-C-07, and 02-VB-INV-

04. These cables are integrally associated with each other and do not compromi se the single-failure criterion.11.Orange (O) and white (W) in RCPC/V-17C and 1-EP-CB-204, and purpl e (P) and yellow (Y) in RCPC/V-4C and 1-EP-CB-204. O cable does not have to be separated from W cable in RCPC/V-17C and 1-EP-C B-204. The cables are integrally as sociated with each other since the cables go to the SOVs for PCV-1455C. P cable does not have to be separated from Y cable in RCPC/V-4C, 01-VB-INV-04, and 1-EP-CB-204. The cables are inte grally associated with each other since the cables go to the SOVs for PCV-1456.

Therefore, these cables do not compromise the single-failure criterion.12.Orange (O) and white (W) in RCPC/V-11D-2 and 2-EP-CB-204, and purple (P) and yellow (Y) in RCPC/V-21D-2 and 2-EP-CB-204. In pa nel 2-EP-CB-204, the O se ction and P section are separated by a barrier in the panel. O cable do es not have to be separated from W cable in RCPC/V-11D-2 and 2-EP-CB-204. The cables are inte grally associated wi th each other since the cables go to the SOVs for PCV-2455C. P cable does not have to be separated from Y cable in RCPC/V-21D-2 and 2-EP-CB-204. The cables are integrally asso ciated with each other since the cables go to the SOVs for PCV-2456. Theref ore, these cables do not compromise the single-failure criterion.13.Orange (O), red (R), purpl e (P) and blue (B) in 1-EI-C B-49B, 2-EI-CB-49B, 1-EP-CP-219, and 2-EP-CB-219. O cable does not have to be separated from R cable and P cable does not have to be separated from B cable. It is required to have O and R cable separated from P and/or B cable in the above e quipment. The O and R, and P a nd B are integrally associated with each other and do not compromi se the single-failure criterion.14.Red (R), white (W), blue (B) and yellow (Y) cables in Panel 1-EI-CB-159. These cables do not perform a safety-related function and are not redundant to each other. Therefore, the single-failure criterion does not apply and is not violated.15.Orange (O), purple (P), red (R) and blue (B) in 1-EI-CP-0

4. O cable does not have to be separated from R cable, and P cabl e does not have to be separate d from B cable. It is required to have O and R cable separated from P and/or B cable in the above equipm ent. The O and R, and P and B are integrally associated wi th each other and do not compromise the single-failure criterion.16.Red (R) and blue (B) color-coded cable were routed in JB-5098 (TE-1453-1 and 2), JB-5877-2 (TE-2453-1 and 2). The use of dual element RTD (TE-1453/2453) to provide redundant monitoring is acceptable because a fault in the RTD or in the common cable to the junction box would result in a loss of pressurizer liquid temperature indication which does not affect any present safety analysis. Since pressurizer li quid temperature channel is a nonsafety related channel, no cred it has been taken for it in a ny accident analysis. A review has been made to determine if a short circuit in the common cable (either a ground fault or a Revision 52-09/29/2016 NAPS UFSAR 8.3-28 hot short between channels) would have any imp act on any other existing circuits in the primary plant process rack. The investigation has determined th at this would have no impact on existing circuits in the primary plant process rack.17.During an Appendix R emergency, the back up containment telecommunications antenna system of one unit will be connected to the primary antenna system of the other unit. Neutral cables are routed with yellow cables of one unit and blue cables of the other unit. The acceptability of this situation is justified under Design Change DC 91-03-03.

The duct lines for reserve stat ion service transfor mer C have a 2-foot minimum separation, and the overhead buses have a 20-foot minimum separation from transformers A and B so that any single duct line, manhole, overhead bus, or cable failure does not disable the entire system and at least one station transformer. The 4160V power control a nd protection system cables are similarly separated.

The nuclear instrumentation system (NIS) cabl es are run in rigid st eel conduit. NIS conduit groups, color-coded red, white, blue, and yellow, have a minimum 2-foot separation between the differently color-coded conduits. A minimum of 2-foot separation is maintained between NIS conduits, power cables, or control rod drive mechanism cables.

A minimum 6-foot separation is maintained between differently color-coded NIS cables at electrical penetrations.The methods of fire detection and protection in the areas where cables are installed are described in Sections 8.3.1.1.2.6 and 9.5.1.

8.3.1.1.2.4 Criteria for Identifying Saf ety-Related Equipment.

Safety-related cable and raceways are identified in the plant by the color coding scheme discussed in Sections 8.3.1.1.2.3, 8.3.1.2, and 8.3.2. During installation, the cable is marked every 20 to 25 feet with a single bank of appropriately colored tape. In addition, a permanent color mark er with the cable alphanumeric code designation, which indicates, as described before, the unit number, system code, part code, color code, service class, and the cable number, is attached to the cable at each end after the cable has been permanently terminated at both ends.A permanent colored marker ta g or band without the alphanum eric code designation is attached wherever the cable passes from one type of raceway to another.

The color marker indicates to plant personnel th at equipment and cabli ng is safety-related since only those components that are safety-related have color-coded feeders. There are seven basic color codes throughout the pl ant, as described in Section 8.3.1.1.2.3.

Revision 52-09/29/2016 NAPS UFSAR 8.3-29The following information is HISTORICAL and is not intended or expec ted to be updated for the life of the plant.

8.3.1.1.2.5 Cable Qualification Tests. Stone & Webster ScopeAll cable for safety and safety-related services, whether inside or outside the containment, was purchased under particular sp ecifications for the design-basis conditions of inside the containment.The qualification test requirements under these specifications include the following tests.1.Standard cable tests - these tests were covered by IPCEA S-19-81 and/or ASTM-B8, whichever is applicable for the cable construction.2.Radiation resistance test - each cable sample was irradiated to the expected dose within the containment over a period of 40 years (3 x 10 7 rads) plus the maximum dose during a postulated accident condition, the sum of which was equivalent to 10 8 rads and did not show any significant change in the physical and electrical properties.3.Nuclear incident qualification test - each cable sample should be capable of operating for not less than 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> when subjected to the following environmental conditions:a.Temperature - 280°F; pressure - 45 psig.b.Partial steam pressure - 49.2 psia.c.Relative humidity - 100%.

In addition, the cable sample shall, subse quent to the transien t conditions above, be capable of operating for 12 months when subj ected to the environm ental conditions of:a.Temperature - 140°F; pressure 14.7 psia.b.Relative humidity - 100%.4.Cable tray fire propagation test - each cable sample shou ld pass the following fire propagation test:a.A metallic test tray, approximately 8 feet in length, should be arranged vertically, protected from drafts or winds, and loaded with one layer of cables allowing 1/2 of a cable diameter space between cables.b.Crumpled burlap (24 by 24 inches, 9 oz/yd

2) previously soaked with transformer insulating oil, was affixed approximately 12 inches above the lower cable ends and ignited and allowed to burn until the burlap igniter is consumed.c.The cable sample was be considered satisfactory if:1)A self-sustaining or propa gating fire did not result.2)Electrical integrity was not lost in less than 5 minutes after ignition.3)Excessive smoke did not appear from cable sample after burlap is consumed.

Revision 52-09/29/2016 NAPS UFSAR 8.3-304)Hot drippings of insulation did not result.

Any cable construction that di d not pass all of th e above qualification tests was rejected and not permitted for use within the c ontainment on safety-related equipment.Westinghouse ScopeWestinghouse performed cable testing in a pos taccident steam and ch emical environment of 80 psig (maximum) and a temperature in excess of 300°F.

The general appearance of the cables following these tests was good. Some loosen ing of the jacket from the insulation at the cable ends occurred, due to mo isture getting under the insulati on and then flashing to steam during the rapid decrease in pressure in the tests. Had the cable en ds been prepared as field-made splices, this separa tion would have been prevented.Tests were performed by the cable manufacturer in a stea m environment of 214°F for 436 hours0.00505 days <br />0.121 hours <br />7.208995e-4 weeks <br />1.65898e-4 months <br />. During this test, some cable was energized and was carrying current. A visual inspection following this test showed the cable s to be in excellent condition. High voltage, tensile, elongation, and stretch showed insi gnificant changes in th eir characteristics.Tests were also performed by the cable manuf acturer where the spec imens were exposed to a gamma radia tion field of 2.8 x 10 7 rads followed by exposure in a steam atmosphere of 85 psig for two 30-minute cycles. Following these tests, the p hysical appearance of the cable was excellent. Changes in electrical characteristics were as follows:1. Insulation resistance - 90% of original value.

2.Specific inductan ce (SIC) - no change.3.Dissipation factor - change from 2.2 to 2.1%.4.AC breakdown - 82% of original value.

In another test program, cable s obtained from a nuclear cons truction site were tested. These cables consisted of AWG No. 12 conductor control cable, AWG No. 4 single conductor power cable, and AWG No. 12 singl e conductor instrument cable.

The cables were thermally aged to an equivale nt of 40 years followed by irradiation up to 2 x 10 8 rads, followed by steam exposure at 287°F and 60 psig and boric acid spray.

On the sixth day of the test, the 480V potential and the cable currents were reestablished.

From this point on, the potential and currents were reset each day to the desired values: Potential = 480V, current through No. 4 conductors = 50A, current through cables with No. 12 conductors = 15A. The potential and currents were maintained for 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> each day, for a total of 16 days.The following information is HISTORICAL and is not intended or expec ted to be updated for the life of the plant.

Revision 52-09/29/2016 NAPS UFSAR 8.3-31 8.3.1.1.2.6 Criteria for Fire Stops and Seals.

Cables, cable trays, and conduits penetrate walls and floors through metal sleeves im bedded in the walls and floors or rectangular blockouts in the walls and floors. These sleeves an d blockouts are sealed at all floor and wall penetrations between fire areas. In addition, all condu its penetrating walls or floors and terminating at a distance of up to 5 feet from such walls or fl oors are sealed. All conduits that pe netrate the contro l room pressure envelope are sealed.

The seals perform two functions. The seals are designed to have a fire rating equal to the fire rating of the wall or floor in which installed and to provide th e necessary pressure seal where required (i.e., the seals in walls and floors surrounding the main control area).

In addition, the seals are designed (1) to permit future addition and removal of cables, (2) for ease of installation, (3) to permit uniform quality, and (4) for compatibility with cable jacket materials.Installed cables are specified to meet, as a min imum, the fire propagation test outlined in IEEE 383 or, for some cables, UL 910 (NFPA 262 in conjunctio n with the National Electric Code), when the cable is to be used for appl ications involving non-safety-related equipment and non-Appendix R equipment. The UL 910 test is considered an acceptable alternative to the IEEE 383 fire propagation test.

Since the cables are designed not to propagate flame, no intermediate fire stops in raceways are installed except at the cable penetrations thr ough walls and floors between fire areas and in the vertical cable tray risers found in the reactor containment.

The fire stops found in all verti cal cable tray risers in the re actor containment were installed such that a continuous vertical riser that may have more than one race way identification number was considered to be "one" rise r for purposes of installing fire stops (i.e., 1T K1 1ON (17-foot riser) and 1TK111N (2-foot riser) was considered to be one 19-foot riser). Cable trays that have The results of the test program indicate that all except one sample withstood the postaccident environmental and electrical conditions to which they were subjected. The test sample that failed appeared to have shorted as a resu lt of cable whipping adjacent to the rigid splice material during the steam injection phase.The following information is HISTORICAL and is not intended or expec ted to be updated for the life of the plant.

Revision 52-09/29/2016 NAPS UFSAR 8.3-32 portions of their routing installed ve rtically have fire stops installed in the vertical sections only , if applicable as described herein.1.Cable Penetration Area In the area located between Elevation 259 ft. 6 in. and Elevation 291 ft. 10 in. and between column 9 and column

7. Fire stops were installed at midheight for risers between 10 and 30 feet or at no greater than 15-foot inte rvals for risers more than 30-foot high.2.Outside of Cabl e Penetration AreaVertical risers in these have fire stops installed at each floor/ceiling level (on the floor side) and between levels, fire stops were instal led at no greater than 30-foot intervals.Dow Corning Q3-6548 RTV Silicone Foam is used for the fire stops and for the penetration seals. The foam may be used in conjunction with Johns Manville Cerafiber, Ce rablanket, or their equal as the permanent damming material, or in conjunction with temporary damming materials which are removed.

The combination of foam and permanent damming materials has been successfully tested by VEPCO for a 3-hour fire resi stance rating. Penetration seal s which do not use permanent damming materials have been succe ssfully tested by Dow Corning for a three hour fire resistance rating.Procedures regarding silicone foamed penetr ation seals have been developed. These procedures described all preinstallation, installatio n, and postinstallation quali ty control checks to ensure properly installed seals.

When Dow Corning foam (DCF) was installed as a penetration sealant for fire barrier penetrations at North Anna Power Station, very little data existed on the aging effects on the DCF fire protection properties. Due to this lack of data, forty-eight samples of DCF material were prepared in 1976 and stor ed within the normal plant envir onment for the purpose of studying the effects aging has on the foam material.

The samples of Dow Corning silicone foam were stored in tw o locations at the station: Unit 1 cable tray room and the Auxiliary Building. After a ten-year waiting peri od, the samples were analyzed in 1986, 1991, and 1996, to determine if any shrinkage had taken place or if its ability to withstand flame had been affected.

Laboratory measurements indicated that the shrinkage stopped and its ability to withstand flame had not been affected. Therefore, no further testing will be performed. The results of the testing are contained in Technical Report No. EE-0109, Dow Corning Foam Analysis Five-Year Evaluation of Aging Effects, North Anna Power Station.

Detailed procedures for resealing breached s eals have been developed. These procedures require that breached seals be resealed in a timely manner following th e completion of removing or adding cables. Station procedures require that compensatory measures be imposed during Revision 52-09/29/2016 NAPS UFSAR 8.3-33periods when seals have been br eached. The procedures ensure th at the resealing provides the original integrity of the seal.Sample penetration seal inspections to identi fy open or deteriorated seals are performed on an annual basis (20% per year).

The cable used throughout the plant is fire retard ant and, therefore, fire hazards in areas of electrical cable concentrat ions are minimized. The cable vaults and tunnels have smoke detectors for alarm and carbon dioxide extinguishing systems activated by temperature detectors. The control room has smoke detectors in the air in lets and the subfloor for alarm and Halon-1301 extinguishing system in the subfl oor activated by temperature, ex cept directly under cabinets that are barriered from the remainder of the subfloor area. Fires in these cabinets would be extinguished manually with carbon dioxide extinguishers.

8.3.1.2 Vital Alternating Current Power System The vital ac power syst em provides a highly reliable source of 120V ac for safety-related instruments and equipment.

8.3.1.2.1 Description The vital ac power system is shown in Referen ce Drawing

12. It consists of four separate vital bus panels, each fed independently from an associated 125V dc/120V ac, single-phase static inverter. Each inverter's output is rated at 120V ac and 60 Hz.

The inverters are norma lly powered from the station battery chargers via the 125V dc system. In the event station ac power is lost, each inverter is automatically fed from its associated station battery without disturbing the vital bus voltage or frequency.

Each inverter has a dedicated Class 1E bypass transformer, a st atic transfer switch and a manua l transfer switch to supply an alternate source of power to the vital bus.Voltage regulating transformers fed from 480V ac emergency buses are provided to supply a nominal 120V ac to vital bus panels in the event either panel's respective inverter fails or is undergoing maintenance. For this reason, manual bypass switches or static tr ansfer switches are provided to transfer the load of vital bus panels from the inve rters to the voltage regulating transformers. The vital bus panels 1-I and 1-III supply 120V ac power to the safety system trains A and B, respectively. All four vital bus panels 1-I, 1-II, 1-III, and 1-IV supply 120V ac power to the safety system channels I, II, III, and IV, respectively. The loads for each vital bus panel are shown in Reference Drawing 12.Unit 1 supplies power to Unit 1 instruments and equipment and certain Unit 2 instruments that are required following fires that cause the loss of the Unit 2 Emergency Power System, in accordance with 10 CFR 50 Appendix R (Section 9.5.1). Channel 1 of the Unit 2 Excore Neutron Flux Monitor System is normally supplied from Unit 2 vital bus panel 2-I via a transfer switch in the Unit 1 Emergency Switchgear Room. This transfer switch allows th e power source to be Revision 52-09/29/2016 NAPS UFSAR 8.3-34shifted to a Unit 2 Appendix 'R' distribution panel which is powered from the Unit 1 vital bus system. The same Appendix 'R' panel also supplies power to the Unit 2 indicators on auxiliary monitoring panel 1-EI-C B-203 in the Fuel Building. The Unit 2 Emergency Power System supplies power to Unit 1 indicators in a similar manner. (See Section 7.7.1.13.2.)Vital ac power system moni toring equipment is provided in the main control room. Voltmeters are provided for monitoring the vital bus voltage through isolating transducers mounted in each vital bus panel. Annunciation of inverter trouble to input under voltage, output under voltage, synchronization fail ure, or input ground detection on each inverter is provided.The Vital AC buses are equipped with normally open back feed breakers and an electrical connection which can be powered by a portabl e generator during a Beyond Design Basis Event.In accordance with the N RC Safety Evaluation Report for License Amendments 235 and 217, dated May 12, 2004, the following compensatory meas ures will be implemented when an instrument bus inve rter is unavailable:1.Entry into the extended inverter Completi on Time of Required Action A.1 of Technical Specification 3.8.7, Inverters-Oper ating will not be planned concurrent with emergency diesel generator maintenance.2.Entry into the extended inverter Completion Time of Required Action A.1 of Technical Specification 3.8.7, Inverters-Operating will not be planned concu rrent with planned maintenance on another Reactor Protection System/Engin eered Safeguards Feature Actuation System channel that results in that channel being in a tripped condition.

Each inverter is equipped with output voltage, current, and frequency meters.

8.3.1.2.2 Analysis 8.3.1.2.2.1 Compliance with AEC General Design Criteria. In accordance with Criterion 17, the vital power system has suffic ient capacity to supply vita l equipment necessary for safe operation and shutdown of the reactor while maintaining the acc eptable fuel design limits and containment integrity.

The system also has indepe ndence and redundancy of co mponents to ensure the performance of safety functi ons despite a single failure.

The individual components are protected an d separated from each other to reduce the probability of simultaneous malfunction during a design basis accident or a loss-of-power condition.

In accordance with Criterion 18 and Regulatory Guide 1.22, the v ital power system status is continuously displayed and periodically checked. It is designe d to allow periodi c testing of the system and individual components with the testi ng usually performed during reactor refueling so Revision 52-09/29/2016 NAPS UFSAR 8.3-35as not to interrupt power generation. The individual channels or trains may be checked during operation without affecting the total system.

8.3.1.2.2.2 Compliance with NRC Safety Guides.

In accordance with Safety Guide 6, the vital power system is separated into redundant and independent components so that loss of one component will not jeopardize the safety functions performed by the other components.

8.3.1.2.2.3 Compliance with IEEE Standards 336 and 344. The vital power sy stem equipment was in spected and tested from the time of manufacturing to the start-up of the entire plant by VEPCO's agent. Inspection provi ded assurance of first-rate qu ality of equipm ent and included, but was not limited to, checks for dimensions, part identification, correct wiring, cleaning and packaging for shipment, and inst allation. The tests performed a nd witnessed included standard factory tests and special tests when specified. After installati on, the system and individual components were completely checked out to ensu re completeness and co rrectness of the system. The system was then energized and checked out again as further proof of completeness of the system and its components.

Additional details on quality assurance and seismic requirements are in Section 3.10.2 and Chapter 17 of the original FSAR.

8.3.1.2.2.4 Criteria for Vital Cable and Raceway Routing, Designation, and Identification.

For a general description of cabl e and raceway routing, designati on, and identification refer to Section 8.3.1.1.2.3.

Specific information on color coding applicable only to the vital power systems for North Anna Units 1 and 2 is as follows:The cables that are color c oded purple and blue may be in the same cabinet and the blue/yellow may be to either a blue or yellow piece of equipment as outlined in Section 8.3.1.1.2.3. Orange &

red and orange & white color-coded cable ma y be run in the 1-I (2-I) and 1-II (2-II) inverter cabinets respectively since they are integrally associated as outlined in Section 8.3.1.1.2.3. Purple & blue and purple & yellow color-coded cable may be run in 1-III (2-III) and 1-IV (2-IV) inverter cabinets respectively since they are integrally associated as outlined in Section 8.3.1.1.2.3.Vital Bus Unit 1Vital BusUnit 2 Bus SourceBus Service Codes1-I2-IRed (R)Orange (O), red (R) and Non Coded (N)1-II2-IIWhite (W)White (W) and Non Coded (N)1-III2-IIIBlue (B)Purple (P), blue (B) and Non Coded (N) 1-IV2-IVYellow (Y)Yellow (Y) and Non Coded (N)

Revision 52-09/29/2016 NAPS UFSAR 8.3-36 8.3.2 Direct Current Power System The dc power system is rated at 125V to provide a highly reli able source of power for the operation of vital safety and non-safety-related equipment nece ssary for the proper and safe operation of the station, as well as safe reactor shutdown under a ll postulated accident conditions.

8.3.2.1 DescriptionThe principal equipment for the 125V dc system for Unit 1 is shown in Reference Drawing 13. The 125V dc system for Unit 2 is identical to that of Unit 1 and is completely independent.The 125V dc system for Unit 1 consists of six battery chargers (two of which are spares), four 60-cell lead calcium ba tteries, and four battery distribution switchboards.

The system is divided into four channels, each operating independently of the other. The channels are identified by Roman numeral I, II, III, or IV. All equipment assigned to the same channel has the same Roman numeral.

Each battery consists of 60 series-connected cell s, ungrounded and design ed for continuous duty. The individual cells are of the sealed type, arranged two cells per clear plastic container, with covers bonded in place to fo rm a leakproof seal.

Each cell has one hydrom eter reading tube built in and located in diagonal corners of the container. Each battery cell is designed to be earthquake resistant. The batteries are mounted on earthquake-resistant rack s for security and to facilitate maintenance.Each battery charger has a max imum continuous output current of 250A with an input of 460 +/- 10% V ac, three phase. Each charger is equipped with a dc voltmeter and ammeter, ground detection, and alternating current failure relays.

Each battery distribution switchboard is NEMA Class II meta l clad, with a 2500A, two-wire ungrounded main bus, and two-pole, manually operated air circuit br eakers. Each switchboard is provided with a noninterr upting ground-testing system for thos e loads being fed from breakers rated at 100A or less. Each switchboard provides the interconnection of the respective battery charger and battery to their particular loads.Batteries are contained in separate missile-protected battery rooms. All rooms are located in the service building, as shown in Reference Drawings 17 and 18. Batteries 1-I and 1-III are located at Elevation 294 ft. 0 in. and batteries 1-II and 1-IV are located at Elevation 254 ft. 0 in.

The batteries are connected by separate conduit an d duct routes to their respective distribution switchboards.The 125V dc distribution switchboards 1-I and 1-III supply 125V dc power to the safety system trains A and B, respectively. Each dc switchboard supplies 125V dc to its respective vital bus inverter. The vital bus system is di scussed in further detail in Section 8.3.1.2.

Revision 52-09/29/2016 NAPS UFSAR 8.3-37 The loads for each dc distribution switc hboard are shown in Reference Drawing 13.Battery chargers 1-I, 1-II, and 1C-I are powered from 480V ac emergency bus 1H; battery chargers 1-III, 1-IV, and 1C-II are powered from 480V ac emergency bus 1J. Charger 1C-I provides backup service for charger 1-I or 1-II in the event that either is out of service. Key interlocked circuit breakers are provided on switchboards 1-I and 1-II to ensure against the connection of charger 1C-I to both switchboards simultaneously. Charger 1C-II operates identically to charger 1C-I in providing backup service for chargers 1-III and 1-IV.The 125V dc system is ungrounded. Two lamps are provide d on each distribution switchboard and main control bo ard for ground detection indicatin

g. A ground-testing system for loads fed from breakers rated at 100A or less is also provided.

The dc system status is con tinuously displayed in the main control room and a periodic visual check is made of the equi pment. Each battery distribution switchboard is provided with an isolating transducer that feeds a battery voltage recorder in the main control room. In addition, voltmeters are provided on the ma in board to indicate switchboa rd voltage. A condition of high output voltage, low supply voltage, low output current, low output voltage, or ground fault of a particular battery charger will activate an alarm on the main control room board annunciator.During normal operation, the 125V dc load is fed from the battery chargers with the batteries floating on the system.

On loss of normal power to the battery chargers, the dc load is automatically fed fro m the station batteries. Ea ch battery is rated and designed to operate all required loads for 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />, after wh ich standby generation power will be available to energize the battery chargers.

The diesel generators have their own separate and independent batteries, chargers, and distribution panels and are described in detail in Section 8.3.1.

The battery rooms are continuous ly ventilated to reduce th e accumulation of hydrogen gas that is emitted during charging and discharging. The maximum hydrogen generation occurs during overcharging, and since hydroge n is highly combustible, the po ssibility of a fire must be considered. The ventilation syst em in the battery room is de signed to maintain the hydrogen concentration well below 2% volume hydrogen concentration. Twenty-four hours of overcharge with the fire dampers shut an d the room essentially airtight would result in a hydrogen concentration in the room of less than 1.75%. The threshold concentration for ignition is 4% and considering that the room is ventilated continuously and all materials are fire resistant, the likelihood of a fire is virtually negligible. Flow sw itches are installed in the ventilation ducts and provide an alarm to the control room on loss-of-air flow to the battery rooms.

Revision 52-09/29/2016 NAPS UFSAR 8.3-38The consequences of a battery e xplosion is limited to the incap acitation of only that battery since:1.Each battery is located in a separate cl osed room designed to criteria indicated on Table 3.2-1.2.The amount of combustible materials wi thin any one batter y room is minimal.3.The ventilation systems for each of the battery rooms is independent and isolable.

The probability of a battery expl osion is minimal beca use of the type of battery construction and accessories, such as sparkproof vents. However, if a battery explosion should occur, it would be contained within its room. Any fire that might ensue following the explosion will be contained within the room by automatic operation of fire dampers. Smoke detectors are provided to alert the station operating personnel so that the ventilat ion system for that room can be shut down.

8.3.2.2 Analysis 8.3.2.2.1 Compliance with NRC General Design CriteriaIn accordance with Criterion 17, the 125V dc system, consisting of batteries, battery chargers, and dc distribution switchboards, is of a capacity that one channel provides highly reliable 125V dc power for 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> to provide for the safe sh utdown of the reactor during postulated accidents in the event there is a loss of power. The redundant batteries are separated from each other in missile-protected rooms, and their chargers are separated and fed from two separate emergency buses, H and J. The switchboard circuits are redundant to each other so that a single failure of the battery will not disable any of the safety functions that are required. The redundancy includes breaker control power from board I to the H bus breakers and from board III to the J bus breakers. The boards also feed redundant dc distribution panels. The I channel is associated with train A, and the III channel is associated with train B. The 125V dc channels are designed to perform indepe ndent of each other to ensure proper actuation in the event of a single failure.In accordance with Criterion 18 and Regulatory Guide 1.22, the 125V dc system is tested periodically in addition to its st atus being displayed continuously from the main control room. A periodic check of the individual pieces of equipm ent is made, and the indicators on the equipment reveal any trouble that may be encountered.

The batteries are subject to periodic inspection and test as required by the Technical Specifications. The battery test allo ws the testing of alarms for the charger and the battery. Test jacks allow for the testing of the branch circ uits to alleviate grounds on the system without interrupting power to the equipment being checked.

Revision 52-09/29/2016 NAPS UFSAR 8.3-39 8.3.2.2.2 Compliance with NRC Safety GuidesIn accordance with Safety Guide 6, the batter y system has no automa tic connection between redundant dc load groups. Two batteries share one backup charger, but the connecting breakers for the backup charger are key interlocked to avoid si multaneous closing. Both breakers are normally open and are manually operated. The backup charger may be used in place of either one of the normal chargers, but not both of the normal charge rs due to the key interlock. The separation of redundant loads is provided by conc rete walls, individual cable tr ays, or conduits. The design of the system eliminates any possibility of a single failure disrupting power to vital sources.

8.3.2.2.3 Compliance with IEEE StandardsIn accordance with IEEE 308-1971, the 125V dc system is redundant and separated, as previously stated. The char gers are capable of charging the batteries from the maximum discharged condition to full charge in 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> while supplying the normal or emergency steady-state loads. The chargers are internally protected from a feedback surge from the batteries resulting from internal damage or loss of ac power.In accordance with IEEE 336 and 344-1971, the 125V dc system, consisting of all components, was checked and tested many times from the time of manufacturing to start-up of the entire plant by VEPCO's agent. The checks were to ensure first-rate quality of the equipment and included checks of dimensions, performance, cl eaning, packaging for shipment, and installation. The tests on the chargers that we re performed and witnessed includ ed a 24-hour test at float and equalizing voltage, performance tests that included dielectric, a circuit operation test, a no-load test, a current limit, a ripple vol tage measurement, voltage regulation, and seismic tests. The test on the batteries included 5-hour discharge at the 5-hour rate for each cell for batteries 1-I, 1-II, 1-III, 1-IV, 2-I, 2-II, and 2-III, and a 2-hour discharge at the 2-hour rate for battery 2-IV and a duty cycle test on thr ee randomly picked cells. All equipm ent was inspected and documentation concerning the equipment from start to completion of the power station was prepared. In the event of a malfunction or discrepancy with the equipment or installation, the equipment was held until the defect was corrected and the equipment proven to have been in compliance with standards.

Additional details are in Section 3.10.2 and Chapter 17 of the original FSAR.

8.3.2.2.4 Criteria for Direct Cu rrent Cable and Raceway Routing, Designation, and Identification A general description of cabl e and raceway routi ng, designation, and id entification is in Section 8.3.1.1.2.3.

Revision 52-09/29/2016 NAPS UFSAR 8.3-40 Specific information on color coding applicable only to the 125V dc power system is as follows:Battery charger (C-I), which is powered from the orange train, can supply either dc bus I or II via red/white (A) secondary cables. Similarly, battery charger (C-II), which is powered from the purple train, can supply either dc bus III or IV via blue/yellow (T) secondary cables. Unit 2 is arranged similarly.

8.3 REFERENCES

1.Safety-Related Electrical Schematics , North Anna Power Station, Units 1 and 2, NA-TR-1001.

2.Fast Starting Diesel Generator for Nuclear Plant Protection, IEEE Paper No. G9CP177 -

PWR.3.Criteria Specification for Design and Id entification of Electrical Cable, NAS-3012.

4.Test for Flame-Propagation and Smoke-Density Values for Electrical and Optical-Fibre Cables Used in Spaces Transporting Environmental Air, Underwriters' Laboratories (UL) 910, Fifth Edition.

8.3 REFERENCE

DRAWINGSThe list of Station Drawings below is provided fo r information only. The referenced drawings are not part of the UFSAR. This is not intended to be a complete listing of all Station Drawings referenced from this section of the UFSAR. The contents of St ation Drawings are controlled by station procedure.

Drawing Number Description 1.11715-FE-1AMain One Line Diagram, Unit 112050-FE-1AMain One Line Diagram, Unit 2 DC Switchboard Designations Power Source CodesService CodesUnit 1Unit 2Battery ChargerBattery1-I2-IOrange (O)Red (R)Orange (O), red (R), and noncoded (N)1-II 2-IIOrange (O)White (W)White (W) and noncoded (N)1-III2-IIIPurple (P)Blue (B)Purple (P), blue (B), and noncoded (N) 1-IV2-IVPurple (P)Yellow (Y)Yellow (Y) and noncoded (N)

Revision 52-09/29/2016 NAPS UFSAR 8.3-41 2.11715-FE-1B4160V One Line Diagram: Buse s 1A & 1B, Transfer Buses D & E, Unit 112050-FE-1B4160V One Line Diag ram: Buses 2A & 2B, Unit 2 3.11715-FE-1C4160V One Line Diagram:

Bus 1C, Intake Structure Bus 1G, & Transfer Bus F, Unit 112050-FE-1C4160V One Line Diagram: Bu s 2C & Intake Structure Bus 2G, Unit 2 4.11715-FE-1D4160V One Line Diag ram: Emer gency Buses 1H &

1J, Unit 112050-FE-1D4160V One Line Diagram:

Emer gency Buses 2H & 2J, Unit 2 5.11715-FE-1AF480V One Line Diagram:

Emer gency Buses 1H, 1H1, 1J, &

1J1, Unit 112050-FE-1AF480V One Line Diagram:

Emer gency Buses 2H, 2H1, 2J &

2J1, Unit 2 6.11715-FE-1P480V One Line Diagram: M CC 1B2-1 & 1B2-3, Switchgear Room; Emergency MCC 1J1-1, Emergency Switchgear Room 7.11715-FE-1Q480V One Line Diagram:

Emer gency MCC 1H1-2, Cable Tunnel, Unit 112050-FE-1N480V One Line Diagram: Em ergency MCC 2H1-2, Cable Tunnel, Unit 2 8.11715-FE-1R480V One Line Diagram:

Emergency MCC 1J1-2, Cable Tunnel, Unit 112050-FE-1P480V One Line Diagram: Em ergency MCC 2J1-2, Cable Tunnel, Unit 2 9.11715-FE-1T480V One Line Diagram: MC C 1H1-3 & 1J1-3, SW Pump House; Emergency MCC 1H1-1A & 1J 1-1A, Emer gency Generator 1H & 1J; Emergency MCC 1H1-3A &

1J1-3A, SW Reservoir Valve House; Unit 112050-FE-1R480V One Line Diagram: MCC 2H1-3 &

2J1-3, SW Pump House; Emergency MCC 2H1-1A & 2J 1-1A, Emer gency Generator 2H & 2J; Unit 2 10.11715-FE-1U480V One Line Diagram: MCC Feeders11.11715-FE-1Z480V One Line Diagram:

Emer gency MCC 1H1-1 & 1H1-4, Emergency Switchgear Room, Unit 112050-FE-1Q480V One Line Diagram:

Emer gency MCC 2H1-1, 2H1-4, & 2J1-1, Emergency Switchgear Room, Unit 2 12.11715-FE-1AEOne Line Diagram: 120V AC and 125V DC, Vital Power, Unit 112050-FE-1AEOne Line Diagram: 120V AC and 125V DC, Vital Power, Unit 2

Revision 52-09/29/2016 NAPS UFSAR 8.3-42 13.11715-FE-1EOne Line Diagram: 125V DC 14.11715-FY-1BSite Plan, Units 1 & 2 15.11715-FY-1APlot Plan, Units 1 & 2 16.11715-FM-5AArrangement: Service Building, Sheet 1 17.11715-FM-5BArrangement: Service Building, Sheet 2 18.11715-FM-5CArrangement: Service Building, Sheet 3 19.11715-FE-1N480V One Line Diagram: MCC 1C1-2, Switchgear Room; 1G1-1, Intake Structure C ontrol House; Unit 1

Revision 52-09/29/2016 NAPS UFSAR 8.3-43Table 8.3-1EQUIPMENT TRIPPED WHENEVER LOAD SHEDDING IS INITIATEDUnitIdentificationEquipment Description11-SD-P-1A High-pressure heater drain pump 1A11-SD-P-1B High-pressure heater drain pump 1B11-SD-P-1C High-pressure heater drain pump 1C11-SD-P-2A Low-pressure heater drain pump 2A11-SD-P-2B Low-pressure heater drain pump 2B22-SD-P-1A High-pressure heater drain pump 1A22-SD-P-1B High-pressure heater drain pump 1B22-SD-P-1C High-pressure heater drain pump 1C22-SD-P-2A Low-pressure heater drain pump 2A22-SD-P-2B Low-pressure heater drain pump 2B1Breaker 15G10Tie breaker Unit 1 G bus to Unit 2 G busTable 8.3-2RSS TRANSFORMER A - EQUIPMENT TRIPPED Switch Position Feed PumpStatusUnit 1 Start-upUnit 2 Start-upFeed Pump1-FW-P-1A RunningFeed Pump2-FW-P-1A Running Unit 1 Equipment tripped on load shed1-FW-P-1BFeed pump1B1-FW-P-1AFeed pump1A1-FW-P-1CFeed pump1C1-FW-P-1BFeed pump1B1-CN-P-1BCond. pump1B1-CN-P-1ACond. pump1A 1-CN-P-1CCond. pump1C1-CN-P-1BCond. pump1B Unit 2 Equipment tripped on load shed2-FW-P-1AFeed pump1A2-FW-P-1BFeed pump1B2-FW-P-1BFeed pump1B2-FW-P-1CFeed pump1C 2-CN-P-1ACond. pump1A2-CN-P-1BCond. pump1B2-CN-P-1BCond. pump1B2-CN-P-1CCond. pump1C Revision 52-09/29/2016 NAPS UFSAR 8.3-44Table 8.3-3RSS TRANSFORMER B - EQUIPMENT TRIPPED Switch Position Feed PumpStatusUnit 1 Start-upUnit 2 Start-upFeed Pump1-FW-P-1B RunningFeed Pump2-FW-P-1B Running Unit 1 Equipment tripped on load shed1-FW-P-1AFeed pump1A1-FW-P-1AFeed pump1A1-FW-P-1CFeed pump1C1-FW-P-1BFeed pump1B1-CN-P-1ACond. pump1A1-CN-P-1ACond. pump1A1-CN-P-1CCond. pump1C1-CN-P-1BCond. pump1B Unit 2 Equipment tripped on load shed2-FW-P-1AFeed pump1A2-FW-P-1AFeed pump1A2-FW-P-1BFeed pump1B2-FW-P-1CFeed pump1C2-CN-P-1ACond. pump1A2-CN-P-1ACond. pump1A2-CN-P-1BCond. pump1B2-CN-P-1CCond. pump1CTable 8.3-4RSS TRANSFORMER C - EQUIPMENT TRIPPEDSwitch Position Feed Pump StatusUnit 1 Start-upUnit 2 Start-upFeed Pump1-FW-P-1C RunningFeed Pump 2-FW-P-1C Running Unit 1 Equipment tripped on load shed1-FW-P-1AFeed pump1A1-FW-P-1BFeed pump1B1-FW-P-1BFeed pump1B1-FW-P-1CFeed pump1C 1-CN-P-1ACond. pump1A1-CN-P-1BCond. pump1B 1-CN-P-1BCond. pump1B1-CN-P-1CCond. pump1C Unit 2 Equipment tripped on load shed2-FW-P-1BFeed pump1B2-FW-P-1AFeed pump1A2-FW-P-1CFeed pump1C2-FW-P-1BFeed pump1B 2-CN-P-1BCond. pump1B2-CN-P-1ACond. pump1A 2-CN-P-1CCond. pump1C2-CN-P-1BCond. pump1B Revision 52-09/29/2016 NAPS UFSAR 8.3-45Table 8.3-5 CABLE AND RACEWAY REDUNDANCY COLOR CODE DECISION TABLE Raceway Color CodeRBOPYGNWAT CableColor CodeRX--------- RedB-X--------BlueO--X-------OrangeP---X------PurpleY----X-----Yellow G-----X----Green NXXXXXXXX--NoneW-------X--WhiteA--------X-Red/WhiteT---------XBlue/YellowNote:N coded cable may be routed through (N+R) or (N+B) or (N+O) or (N+P) or (N+Y) or (N+G) or (N+W) coded raceway sections but may not go through any two colors.

Revision 52-09/29/2016 NAPS UFSAR 8.3-46The following information is HISTORICAL and is not intended or expected to be updated for the life of the plant.

This table was provided as an example of a Unit 1 loading scenario to ensure complia nce with Position 2 of Safety Guide 9 durin g the operating license stage of review.Table 8.3-6 EMERGENCY DIESEL GENERATOR LOADING SCHEDULE - BUS 1H EquipmentIdent. No.Description (g) 0-10 sec10-15 sec15-25 sec25-30 sec30-55 sec (h)55-250 sec250-265 sec265 Sec.-1hr1-12 hr**StContStContStContStContStContStContStContStContStCont1-FW-P-3AAux. Steam Gen Fd Pp------603403-403-403-403-403-(a)3541-SW-P-1AServ, Wtr Pp (o)--652353-353-353-353-353-353-353-353 1-CH-P-1ACharging Pp1338610-610-610-610-610-610-610-610-6101-SI-P-1AL.H.S.I. Pp430180-180-180-180-180-(b)193-193-193-1931-RS-P-2ARecirc. Spray Pp - Outside--------------858325-3251-CC-P-1AComponent Cool Pp----1040410-410-410--------1-RH-P-1AResidual Ht Removal Pp------------------1-RS-P-1ARecirc. Spray Pp - Inside------------638228-228-(c)2281-QS-P-1AQuench Spray Pp----------418125-125-125-(d)1251-HV-F-1A Contain Recirc. Cool Fan--------368133--------1-HV-F-42Emer. Swgr Rm Vent Fan----------------16(e)31-CW-P-SBScrn Wash Pp (Serv W M'up) (p)-------------------1-HV-E-4ACont. & Relay Rm A/C Chill10685-85-85-85-85-85-85-85-851-HV-P-20ACont. & Relay Rm A/C-W. Circ. Pp2812-12-12-12-12-12-12-12-121-HV-P-22ACont Area Cond Pp155-5-5-5-5-5-5-5-51-GM-P-10Gen Brg Lift Pp----------------27(m)13 TRANS-70Semi-Vital Bus Cab1515-15-15-15-15-15-15-15-15TRANS-86Rod Pos Ind Cab55-5-5-5-5-5-5-5-5TRANS-504kV Em Swgr Bus "IH" Htr Transf1010-10-10-10-10-10-10-10-10Emer Lighting2525-25-25-25-25-25-25-25-25 Revision 52-09/29/2016 NAPS UFSAR 8.3-47The following information is HISTORICAL and is not intended or expected to be updated for the life of the plant.Diesel Gen Aux2015-15-15-15-15-15-15-15-151-PG-P-2APri Wtr Standby (i)--682268226822682268226822682268221-SI-TK-2ABoron Inj Tank Htr33-3-3-3-3-3-3-3-31-CH-E-6ABoric Acid Tank Htr----------------20 (e)161-1A-C-2AContain Air Comp3917-17-17-17-17-17-17-17-171-EG-P-1HAEmer Gen 1H F.O. Pp - Lead32-2-2-2-2-2-2-2-21-DA-P-1ASafeguard Area Sump Pp32-2-2-2-2-2-2-2-21-HV-F-40ASafeguard Area Exh Fan1910-10-10-10-10-10-10-10-101-CH-P-1A1Charging Pp - Aux. L.O. Pp53-3-3-3-3-3-3-3-31-CH-P-2ABoric Acid Transfer Pp165-5-5-5-5-5-5-5-51-1A-D-2AContainment Air Dryer33-3-3-3-3-3-3-3-3Motor Htr Trans1111-11-11-11-11-11-11-11-11Heat Tracing Trans5050-50-50-50-50-50-50-50-501-FC-P-1ASpent Fuel Pit Pp----------------164(n)65Power Recept1515-15-15-15-15-15-15-15-151-1A-C-1Inst. Air Comp.16434-34-34-34-34-34-34-34-341-SW-P-3AServ. W Sump Pp42-2-2-2-2-2-2-2-21-SW-P-2Scrn Wash Pp4234-34-34-34-34-34-34-34-341-DB-P-10AEmergency Swgr Rm Sump Pp51-1-1-1-1-1-1-1-11-HV-F-68AMCC Rm Emerg Sup Fan42-2-2-2-2-2-2-2-21-HV-F-69Aux Fd Wtr Pp Hse Exh Fan41-1-1-1-1-1-1-1-11-HV-F-70AAux Fd Wtr Pp Hse Exh Fan115-5-5-5-5-5-5-5-51-SW-C-1AServ Wtr Comp219-9-9-9-9-9-9-9-9Unit Heaters3528-28-28-28-28-28-28-28-28Table 8.3-6 (continued)EMERGENCY DIESEL GENERATOR LOADING SCHEDULE - BUS 1H EquipmentIdent. No.Description (g) 0-10 sec10-15 sec15-25 sec25-30 sec30-55 sec (h)55-250 sec250-265 sec265 Sec.-1hr1-12 hr**StContStContStContStContStContStContStContStContStCont Revision 52-09/29/2016 NAPS UFSAR 8.3-48The following information is HISTORICAL and is not intended or expected to be updated for the life of the plant.1-SW-S-03Serv Str Strainer11-1-1-1-1-1-1-1-11-HV-F-49A Serv Wtr Pp Hse Exh Fan209-9-9-9-9-9-9-9-91-SW-S-1ATraveling Scrn42-2-2-2-2-2-2-2-21-HV-AC-6Emer Swgr Rm A/C3517-17-17-17-17-17-17-17-17 1-TM-P-01Turn Gear Brg Oil Pp----------------101(m)50Rad Mon Fdr Cab. 1-1 & 1-21010- 10-10-10-10-10-10-10-101-RS-P-3ACasing Cooling Pp (l)----------13564-64-64-(l)64Bat Chgr Fdr8080-80-80-80-80-80-80-80-801-HV-F-61Scrn Wash & Serv W.

Exh Fan62-2-2-2-2-2-2-2-2Motor-Operated Valves1818-18-18-18-189393 (f)------1-HV-AC-2Cont Rm A/C Unit2811-11-11-11-11-11-11-11-111-HV-F-8AAux Bldg Cen Exh Fan10426-26-26-26-26-26-26-26-261-HV-F-37 A,B,C Cont Rod Cool Fans (three)--36384-84-84-84--------1-HC-HC-01 Post D.B.A. Hydrogen Recomb. (j)------------------1-EG-P-1HB Emer Gen 1H F. O. Pp - B.U.21-1-1-1-1-1-1-1-11-EG-C-1HA Air Comp No. 1 (i)1051051051051051051051051051-EG-C-1HB Air Comp No. 2 (i)105105105105105105105105105 1-SW-P-5Rad Mon Sample Pp (k)----------62-2-2-21-SW-P-8Rad Mon Sample Pp (k)----------62-2-2-2Totals (1-4 hr)277713861103184511282255691265846627917462445726258094629052522938*

Totals (4-8 hr) (l)882749Totals (8-12 hr) *2522814* This value is 89.03% of the 30-minute rating of diesel generator set

• • All loads continue after 12 ho urs unless otherwise indicatedTable 8.3-6 (continued)EMERGENCY DIESEL GENERATOR LOADING SCHEDULE - BUS 1H EquipmentIdent. No.Description (g) 0-10 sec10-15 sec15-25 sec25-30 sec30-55 sec (h)55-250 sec250-265 sec265 Sec.-1hr1-12 hr**StContStContStContStContStContStContStContStContStCont Revision 52-09/29/2016 NAPS UFSAR 8.3-49The following information is HISTORICAL and is not intended or expected to be updated for the life of the plant.Notes:All values are in kilowatts, St = Start, Cont = Continuous(a)Operator action - after 1-hour pump requirement cut back(b)New running condition - CDA requirement greater than SI (See g & h)(c)Shutoff after 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />(d)Shutoff after 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> (e)Manual operation at end of 1st hour(f)Operates approx. 1 min(g)At To=0 diesel is up to speed + voltage, SI has occurred at To-50 seconds and turbine has tripped(h)At To+55 sec, CDA signal initiated(i)Intermittent automatic operation(j)After 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> (k)Start 120 sec. after CDA(l)Shutoff after 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />(m)After 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> (n)Manual loading after 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br />(o)1-SW-P-1A or 1-SW-P-4, which are the same site, will be on the bus in accordance with Section 9.2.1.2.5(p)After 30 daysTable 8.3-6 (continued)EMERGENCY DIESEL GENERATOR LOADING SCHEDULE - BUS 1H EquipmentIdent. No.Description (g) 0-10 sec10-15 sec15-25 sec25-30 sec30-55 sec (h)55-250 sec250-265 sec265 Sec.-1hr1-12 hr**StContStContStContStContStContStContStContStContStCont Revision 52-09/29/2016 NAPS UFSAR 8.3-50The following information is HISTORICAL and is not intended or expected to be updated for the life of the plant.

This table was provided as an example of a Unit 1 loading scenario to ensure complia nce with Position 2 of Safety Guide 9 durin g the operating license stage of review.Table 8.3-7 EMERGENCY DIESEL GENERATOR LOADING SCHEDULE - BUS 1JEquipmentIdent. No.Description (g)0-10 Sec.10-15 Sec.15-25 Sec.25-30 Sec.30-55 Sec.(h)55-250 Sec.250-265 Sec.265 Sec.-1hr1-12 hr**StContStContStContStContStContStContStContStContStCont1-FW-P-3BAux Steam Gen Fd Pp------603403-403-403-403-403-(a)a)3541-SW-P-1BServ Wtr Pp--652353-353-353-353-353-353-353-3531-CH-P-1BCharging Pp1338610-610-610-610-610-610-610-610-6101-SI-P-1BL.H.S.I. Pp430180-180-180-180-180-(b)193-193-193193 1-RS-P-2BRecirc Spray Pp - Outside--------------858325-3251-CC-P-1BComponent Cool Pp----1040410-410-410--------1-RH-P-1BResidual Ht Removal Pp------------------

1-RS-P-1BRecirc Spray Pp - Inside-------------638-228-(c)2281-QS-P-1BQuench Spray Pp----------418125-125-125-(d)1251HV-F--1BContain Recirc Coll Fan--------368133--------

1-TM-P-02Tuning Gear Mtr---------94(m)441-HV-E-04BCont & Relay Rm A/C Chill10685-85-85-85-85-85-85-85-851-HV-P-20BCont & Relay Rm A/C-W. Circ. Pp2812-12-12-12-12-12-12-12-121-HV-P-22BCont Area Cond Pp155-5-5-5-5-5-5-5-5TRANS - 71Semi-Vital Bus Cab1515-15-15-15-15-15-15-15-15TRANS - 524 kV Em Swgr Bus "IJ" Htr Transf1010-10-10-10-10-10-10-10-10Emer Lighting2525-25-25-25-25-25-25-25-25Diesel Gen Aux2015-15-15-15-15-15-15-15-151-PG-P-2BPri Wtr Standby (i)--682268226822682268226822682268221-SI-TK-2BBoron Inj Tank Htr33-3-3-3-3-3-3-3-31-CH-E-6BBoron Acid Tank Htr----------------20(e)161-IA--C-2BContain Air Comp3917-17-17-17-17-17-17-17-17 Revision 52-09/29/2016 NAPS UFSAR 8.3-51The following information is HISTORICAL and is not intended or expected to be updated for the life of the plant.1-EG-P-1JAEmer Gen "1J" F.O. Pp - Lead32-2-2-2-2-2-2-2-21-DA-P-1BSafeguard Area Sump Pp32-2-2-2-2-2-2-2-21-HV-F-40BSafeguard Area Exh Fan1910-10-10-10-10-10-10-10-101-CH-P-1BICharging Pp - Aux L.O. Pp53-3-3-3-3-3-3-3-3 1-CH-P-2BBoric Acid Transfer Pp165-5-5-5-5-5-5-5-51-IA-D-2BContainment Air Dryer33-3-3-3-3-3-3-3-3Motor Htr. Trans1111-11-11-11-11-11-11-11-11Heat Tracing Trans5050-50-50-50-50-50-50-50-50Power Recept1515-15-15-15-15-15-15-15-151-HV-F-49BServ Wtr Pump Hse Exh. Fan209-9-9-9-9-9-9-9-91-SW-P-3BServ W Sump Pp42-2-2-2-2-2-2-2-21-HV-F-41Cont Rm Emer Vent----------------16(i)3 1-DB-P-10BEmer. Swgr. Rm. Sump Pp51-1-1-1-1-1-1-1-11-HV-F-68BMCC Rm. Emerg. Sup. Fan42-2-2-2-2-2-2-2-21-EG-P-1JBEmer. Gen. 1J F.O. Pump - BU21-1-1-1-1-1-1-1-11-EG-C-1JAAir Comp No. 1 (i)1051051051051051051051051051-EG-C-1JBAir Comp No. 2 (i)105105105105105105105105105 1-SW-P-6Rad Mon Sample Pp (k)----------62-2-2-21-SW-P-7Rad Mon Sample Pp (k)----------62-2-2-21-SW-C-1BServ Wtr Comp219-9-9-9-9-9-9-9-9Unit Heaters3528-28-28-28-28-28-28-28-281-SW-S-1BTraveling Scrn42-2-2-2-2-2-2-2-2 1-HV-AC-07Emer Swgr Rm A/C3517-17-17-17-17-17-17-17-17TRANS-51Rad Mon Fdr Cab. Common1010-10-10-10-10-10-10-10-101-RS-P-3BCasing Cooling Pp (l)----------1356464-64-(l)64Bat Chgr Fdr8080-80-80-80-80-80-80-80-80Motor-Operated Valves1818-18-18-18-18 93 (f)93-93-----Table 8.3-7 (continued)EMERGENCY DIESEL GENERATOR LOADING SCHEDULE - BUS 1JEquipmentIdent. No.Description (g)0-10 Sec.10-15 Sec.15-25 Sec.25-30 Sec.30-55 Sec.(h)55-250 Sec.250-265 Sec.265 Sec.-1hr1-12 hr**StContStContStContStContStContStContStContStContStCont Revision 52-09/29/2016 NAPS UFSAR 8.3-52The following information is HISTORICAL and is not intended or expected to be updated for the life of the plant.1-HV-AC-1Cont Rm A/C Unit2811-11-11-11-11-11-11-11-111-HV-F-8BAux Bldg Cen Exh Fan10426-26-26-26-26-26-26-26-261-HV-F-37D,E ,FCont Rod Cool Fans (three)--36384-84-84-84----------

2-HC-HC-01 Post D.B.A. Hydrogen Recomb (k)--------------------Totals (1-4 hr)25441304110317631128217369125764562709746236372624689462823 2182837*Totals (4-8 hr) (l)882604Totals (8-12 hr) *882604* This value is 85.97% of the 30-minute rating of diesel generator set** All loads continue after 12 hours1.388889e-4 days <br />0.00333 hours <br />1.984127e-5 weeks <br />4.566e-6 months <br /> unless otherw ise indicatedNotes:All values are in kilowatts, St = Start, Cont = Continuous(a)Operator action - after 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> pump requirement cut back(b)New running condition - CDA requirement greater than SI (See g & h)(c)Shutoff after 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> (d)Shutoff after 4 hours4.62963e-5 days <br />0.00111 hours <br />6.613757e-6 weeks <br />1.522e-6 months <br /> (e)Manual operation at end of 1st hour(f)Operates approx. 1 min (g)At T o=0 diesel is up to speed + voltage, SI has occurred at T o-50 seconds and turbine has tripped(h)At T o+55 sec, CDA signal initiated(i)Intermittent automatic operation (j)After 48 hours5.555556e-4 days <br />0.0133 hours <br />7.936508e-5 weeks <br />1.8264e-5 months <br /> (k)Start 120 seconds after CDA(l)Shutoff after 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br />(m)Approximately at end of the first hourTable 8.3-7 (continued)EMERGENCY DIESEL GENERATOR LOADING SCHEDULE - BUS 1JEquipmentIdent. No.Description (g)0-10 Sec.10-15 Sec.15-25 Sec.25-30 Sec.30-55 Sec.(h)55-250 Sec.250-265 Sec.265 Sec.-1hr1-12 hr**StContStContStContStContStContStContStContStContStCont Revision 52-09/29/2016 NAPS UFSAR 8.3-53Table 8.3-8 ENCLOSURES WITH MORE THAN ONE FIELD RUN COLOR-CODED CABLE Equipment NumberDifferently Color-Coded Cables Within an Enclosure per Cable and Raceway Redundancy Color Code Decision Table (Table 8.3-5)

Unit 1Unit 2Units 1 & 21-BY-C-02 2-BY-C-02O,R 04 04 O,W 05 05P,B 07 07P,Y1-EE-SS-012-EE-SS-01G,O 02 02G,P1-EE-SW-012-EE-SW-01G,O 02 02G,P1-EP-SW-07G,P1-EI-CB-012-EI-CB-01 O,P 02 02 O,P 03 03O,P,R,W,B,Y 04 04 O,P 05 05 O,P 07 07 O,P 20 20 O,P 23A 23A O,R 23B 23B O,W 23C 23CP,B 23D 23DP,Y 34 34 O,R 46A 46A O,P 46B 46B O,P 47A 47AR,W,B,Y 47B 47BR,W,B,Y 47C 47C O,P1-EI-CB-47D2-EI-CB-47D O,P 47E 47E O,R,W Revision 52-09/29/2016 NAPS UFSAR 8.3-54 47F 47FP,R,W 49B 49BO,P,R,B 49C O,P 51 51 O,R 54 54P,Y 62A 62A O,P 62B 62B O,P 63A 63A O,R 63B 63BP,W, 73 R,B116AO,P,Y 159R,W,B,Y 192A O,R 192BP,B 300 300O,P 301A 301A O,R 301B 301BP,B 301C 301C O,P1-EP-CB-02A2-EP-CB-02A O, P1-EP-CB-04A2-EP-CB-04A O,R 04C 04CP,B 07 O,P11N1 12N1O,R11R1 12R1P,B 12A 12A O,R,A 12B 12BW,A 12C 12CP,B,T 12D 12DY,T13N1 O,RTable 8.3-8 (continued)ENCLOSURES WITH MORE THAN ONE FIELD RUN COLOR-CODED CABLE Equipment NumberDifferently Color-Coded Cables Within an Enclosure per Cable and Raceway Redundancy Color Code Decision Table (Table 8.3-5)

Unit 1Unit 2Units 1 & 2 Revision 52-09/29/2016 NAPS UFSAR 8.3-55 1-EP-CB-13R1P,B14N1 O,R14R1P,B28A2-EP-CB-28A O,P 28B 28B O,P 28EO,P,G,R,W,B 28FO,P,G,R,W,B 28BT 28BTO,P 28G2 28G2O,P 28UA 28UAG,B 28UB 28UBG,W 28UC 28UCG,R 31 35P,B 32 34 O,R 36 37 O,R 37 36P,B 41N1 42N1O,R 41R1 42R1P,B43N1 O,R 43R1O,R 80A 80A O,R 80C 80CP,B 80E 80E O,R 80G 80GP,B115C O,W116AO,P,Y 204O,W 204P,YTable 8.3-8 (continued)ENCLOSURES WITH MORE THAN ONE FIELD RUN COLOR-CODED CABLE Equipment NumberDifferently Color-Coded Cables Within an Enclosure per Cable and Raceway Redundancy Color Code Decision Table (Table 8.3-5)

Unit 1Unit 2Units 1 & 2 Revision 52-09/29/2016 NAPS UFSAR 8.3-56ELECT ALT 01ELECT ALT 20 O,PHH 14HH 2-2O,RHH 15HH 1-2P,BMOV-1590MOV-2590O,R 1591 2591O,R 1592 2592O,R 1593 2593O,R 1594 2594O,R 1595 2595O,R JB-009JB-009-2R,W 010 010-2B,Y 5098 R,B 5877-2R,BJB-8028JB-8028-2O,PRCPC&V-8BRCPC&V-21B-2P,B11D-2O,W 21D-2P,Y 19A 6B-2 O,R 19D 6C-2 O,R 19E 6D-2 O,R 11C-2O,W1-EI-CP-042-EI-CP-04O.P,R,B 07 07 O,P 1-EP-CB-28H Unit 1: O,P Unit 2: O 1-EP-CB-28JUnit 1: O,P Unit 2: P1-EP-SW-08 Unit 1: G Unit 2: OTable 8.3-8 (continued)ENCLOSURES WITH MORE THAN ONE FIELD RUN COLOR-CODED CABLE Equipment NumberDifferently Color-Coded Cables Within an Enclosure per Cable and Raceway Redundancy Color Code Decision Table (Table 8.3-5)

Unit 1Unit 2Units 1 & 2 Revision 52-09/29/2016 NAPS UFSAR 8.3-571-EP-SW-09Unit 1: G,O Unit 2: P 2-EP-CB-28E Unit 1: GUnit 2: O,P,G,R,W,B 2-EP-CB-28F Unit 1: GUnit 2: O,P,G,R,W,B 2-EP-CB-28H Unit 1: O Unit 2: O,P 2-EP-CB-28JUnit 1: P Unit 2: O,P 2-EP-CB-219O,P,R,B2-VB-INV-01O,R2-VB-INV-02O,W2-VB-INV-03P,B2-VB-INV-04P,Y1-VB-INV-01O,R1-VB-INV-02O,W1-VB-INV-03P,B1-VB-INV-04P,Y 1-EP-CB-219O,P,R,B 1-EE-TRS-01O, P, G 2-EE-TRS-01O, P, GTable 8.3-8 (continued)ENCLOSURES WITH MORE THAN ONE FIELD RUN COLOR-CODED CABLE Equipment NumberDifferently Color-Coded Cables Within an Enclosure per Cable and Raceway Redundancy Color Code Decision Table (Table 8.3-5)

Unit 1Unit 2Units 1 & 2 Revision 52-09/29/2016 NAPS UFSAR 8.3-58 Figure 8.3-1EXAMPLES OF ACCEPTABLE ARRANGEMENTS WHERE HORIZONTAL OR VERTICAL SEPARATION DISTANCES CANNOT BE MAINTAINED