ML20096C933

Proposed Tech Specs Changing & Discussing Justification & Safety Analysis in Response to NRC SER Re Tdi Diesel Generators

ML20096C933
Person / Time
Site:	Catawba
Issue date:	08/28/1984
From:	DUKE POWER CO.
To:
Shared Package
ML20096C919	List: ML20096C916 ML20096C933
References
NUDOCS 8409050448
Download: ML20096C933 (8)

Text

-

7 .

s

} ELECTRICAL POWER SYSTEMS V)'

g M LIMITING CONDITION FOR OPERATION Y% c ' ACTION (Continued)

2. When in MODE 1, 2, or 3 with a steam pressure greater than 900 m_t psig, the steam-driven auxiliary feedwater pump is OPERABLE.

3 -

If these conditions are not satisfied within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> be in at least '

mk -

HOT STAND 8Y wtthin the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUTOOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

(l.y d

-o

d. With two of the. abcve required offsite.A.C. circuits inoperable, demonstrate the OPERASILITY of two diesel generators by performirig q 3J# Specfication 4.8.1.1.2a.4) within 1 houis and at least once per -

-4 O 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> thereafteri unless the diesel generators are already operating;

-y restore at least one of the inoperaale offsite sources to OPERA 8LE h- p status within 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br /> or be in at least HOT STAN08Y within the next c 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br />. With only one offsite source restored, restore at least kg two offsite circuits to OPERABLE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> from time of 1 4 initial loss or be in at least HOT STAN08Y within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> Jp and in COLD SHUTCOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

J e.

d* $a With two of the above required diesel generators inoperable, demonstrate 0 ' the OPERABILITY of two offsite A.C. circuits by performing Specifica ,-

.e c tion 4.8.1.1.la. within 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> and at least once per 8 hours9.259259e-5 days <br />0.00222 hours <br />1.322751e-5 weeks <br />3.044e-6 months <br /> there-

-t j after; restore at least one of the inoperable diesel generators to ( *

.]. ~

3 OPERA 8LE status within 2 hours2.314815e-5 days <br />5.555556e-4 hours <br />3.306878e-6 weeks <br />7.61e-7 months <br /> or be in at least HOT STAND 8Y within-y2 thenext6hoursandinCOLDSHUTDOWNwithinthefollowing30hovrs.

Restore at least two diesel generators to OPERA 8LE status within 72 hours8.333333e-4 days <br />0.02 hours <br />1.190476e-4 weeks <br />2.7396e-5 months <br /> from time of initial loss or be in at least HOT STAND 8Y within the next 6 hours6.944444e-5 days <br />0.00167 hours <br />9.920635e-6 weeks <br />2.283e-6 months <br /> and in COLD SHUT.DOWN within the following 30 hours3.472222e-4 days <br />0.00833 hours <br />4.960317e-5 weeks <br />1.1415e-5 months <br />.

SURVEILLANCE REQUIREMENTS '

4.8.1.1.1 Each of the above required independent circuits between the offsite transmission network and the Onsite Essential Auxiliary Power System shall be:

a. Determined OPERABLE at least once per 7 days by verifying correct breaker alignments, indicated power availanility, and .

b. Demonstrated OPERA 8LE at least once per 18 months during shutdown by transferring (manually and automatically) unit power supply from the normal circuit to the alternate circuit. '

4.8.1.1.2 Each diesel generator shall be , demonstrated OPERABLE:

", a. In accordance with the frequency specified in Table 4.8-1 on a STAGGERED TEST BASIS by: ,

1) Verifying the fuel level in the day tank, CATAWBA - UNIT 1 , 3/4 8-2 D 0

./. . _

.f.

ELECTRICAL POWER SYSTEMS

-SURVEILLANCE REQUIREMENTS (Continued)

/

g- -

2) Verifying the fuel level in the fuel storage tank, e

s

3) Verifying the fuel transfer valve can be operated to allow a

fuel to be transferred from the storage system to the day tank,

.4) Verifying the diesel starts from ambient condition and accelerates

' to at least 441 rps in less than or equal to 11 seconds.

The generator voltage and-frequency shall be 4160 + 420 volts and 60 + 1.2 Hz within 11 seconds after the start signal.

• The diesel generator shall be started for this test by using one of the following signals:

a) Manual,.or b) Simulated loss of offsite power by itself, or ,

c) Simulated loss of offsite power in conjunction with an ESF Actuation test signal, or .

%oo kW 4d less ' d) An ESF Actuation test signal by itself. .

b oI' 'Td* -

5) Verifyisc the generator is synchronizsd, loaded to greater than (576okW or equal to799fMkW in less than or equal to 60 seconds, and operates fo?'at least 60 minutes, and

6) Verifying the diesel = generator is aligned to provide standby

, power tJ the associated emergency busses.

b. At least once per'll days and after each cperation of the diesel where the period of op'eration was greater than or equal to 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> by checking for t.nd removing accumulated water from the day tank; .

c. At least once per 31 days by checking for and removing accumulated

,< water from the fuel oil storage. tanks;

+

d. By verifying that the Cathodic Protection System is OPERABLE by

. verifying:

"[j , l') At least once per 60 days that cathodic protection rectifiers are OPERABLE and have been inspected in accordance with the manufacturer's inspection procedures, and

2) At least once per 12 months that adequate protection from corrosion is provided in accordance with manufacturer's

• inspection procedures.

e. By sampling new fuel oil in accordance with ASTM-04057 prior to addition.to storage tanks and:

CAIAWBA - UNIT 1 3/4 8-3.

1 ,

1

-- / I

l ELECTRICAL POWER SYSTEMS

' SURVEILLANCE REQUIREMENTS (Continued)

l)

- By verifying in accordance with the tests specified in ASTM-0975-81 sample has:

prior to addition to the storage. tanks that the a) An API Gravity of within 0.3 degrees at 60*F, or a specific gravity of within 0.0016 at 60/60*F, when compared to the supplier's certificate, or an absolute specific gravity at 60/60*F of greater than or equal to 0.83 but less than or equal to 0.89, or an API gravity of greater than or equal to 27 degrees but less than or equal to 39 degrees; b) A kinematic viscosity at 40*C of greater than or equal .to 1.9 contistokes, but less than or equal to 4.1 centistakes (alternatively, Saybolt viscosity, SUS '

than or equal to 32.6, but less than or,atequal 100*Fto of greater 40.1),

if gravity was not determined by comparison with the supplier's certification; c) A flash point equal to or greater than 125*F; and d) A clear and bright appearance with proper color when tested in accordance with ASTM-04176-82.  !

2) By verifying within 30 days of obtaining the sample that the '

other properties specified in Table 1 of ASTM-0975-81 are met when tested in accordance with ASTM-0975-81 except that the analysis for sulfur may be performed in accordance with ASTM-01552-79 or ASTM-02622-82.

f.

At least once every 31 days by obtaining a sample of fuel oil in accordance with ASTM-02276-78, and verifying that total particulate contamination is less than 10 mg/ liter when checked in accordance with ASTM-D2276-78, Method A; g.

At least once per 18 months, during shutdown, by:

1) Subjecting the diesel to an inspection in accordance with procedures prepared in conjunction with its manufacturer's recommendations for this class of standby service; 2)

=

e een er eg Verifying the generator capability to reject a load of greater than or equal to 825 kW while maintaining voltage at 4160 1 420 h 5(noo kQ 6dles.r volts and frequency at 60 1 1.2 Hz; han oc < el O 3) Verifying the generator capability to reject a load o

.5fso w without tripping. The generator speed shall not excee 500 rpm during and following the load rejection; -

4) Simulating a loss-of-offsite power by itself, and:

a) Verifying deenergization of the emergency busses and load '

shedding from the emergency busses, and CATAWBA - UNIT 1 3/4 8-4

ELECTRICAL POWER SYSTEMS SURVEILLANCE REOUIREMENTS (Continued) b) Vdrifyingthedieselstartsontheauto-startsignal, energizes the emergency bussos with permanently connected loads within 11 seconds, energizes the auto-connected emergency (accident) loads through the load sequencer and operates for greater than o* equal to 5 minutes while its generator is loaded with the emergency loads. After ener-gization, the steady-state voltage and frequency of the emergency busses shall be maintained at 4160~+ 420 volts and 60 + 1.2 Hz during this test.

5) Verifying that on an ESF Actuation test signal, without loss-of-offsite power, the diesel generator. starts on the auto-start' signal and operates on standby for greater than or equal to 5 minutes. The generator voltage and frequency shall be at 4160

• 420 volts and 60 i 1.2 Hz within 11 seconds after the auto-start signal; the steady-state generator voltage and frequency shall be maintained within these limits during this test;

6) Simulating a loss-of-offsite power in conjunction with an ESF Actuation test signal, and C' a) Verifying deenergization of the emergency busses and load shedding from the emergency busses; b) Verifying the diesel starts on the auto-start signal,-

energizes the emergency busses with permanently connected loads within 11 seconas, energizes the auto-connected emergency (accident) loads through the load sequencer and operates for greater than or equal to 5 minutes while its generator is loaded with the emergency loads. After l

energization, the steady-state voltage and frequency of the emergency busses shall be maintained at 4160 + 420 l

volts and 60 + 1.2 Hz during this test; and c) Verifying that all automatic diesel generator trips,

' except engine overspeed, low-low lube oil pressure, generator differential, and the 2 out of 3 voltage controlled overcurrent relay scheme, are automatically bypassed upon loss of voltage on the emergency bus concurrent with a Safety Injection Actuation signal.

7) Verifying the diesel generator operates for at least 24 hours2.777778e-4 days <br />0.00667 hours <br />3.968254e-5 weeks <br />9.132e-6 months <br />.

SLoo kQ Ld less eg,6 n i ya". ;tn 2;723' r: :? _ gr'.; t::t, "- d'::d  ;;=r .t;;-

g g u_ ____,_2__ ~ . < - __ _, m - '-

_. _ - g ;;; ,; 3 Fie diesel generator shall.

~ 6750 ko

• be loaded to greater than or equal to}m The generator voltage and frequency shall be 4160 + 420 volts and 60 + 1.2 Hz l

( within 11 seconds after the start signal; the steady-state

(. generator voltage and frequency shall be maintained within these CATAWBA - UNIT 1 3/4 8-5 l

ELECTRICAL POWER SYSTEMS ,

SURVEILLANCE REOUIREMENTS (Continued) limits during this test. Within 5 minutes after completing this 24-hour test, perform Specification 4.8.1.1.2g.6)b);*

8) Verifying that the auto-connected loads to each diesel generator do not exceed - " . J _, . . = ,m ;

j 6750 VLO

9) Verifying the dissol generator's capability to:

a) Synchronize with the offsite power source while the

, generator is loaded with its emergency loads upon a simulated restoration of offsite power, b) Transfer its load,s to the offsite power source, and c) Be restored to its standby status.

10) Verifying that with the diesel generator operating in a test mode, connected to its bus, a simulated Safety Injection signal overrides the test mode by: (1) returning the diesel generator to standby operation, and (2) automatically energizing the emergency loads with offsite power;

11) Verifying that the fuel transfer valve transfers fuel from each (

fuel storage tank to the day tank of each diesel via the in- '

stalled cross-connection lines;

12) Verifying that the automatic load sequence timer is OPERABLE with giventhe in interval Table 4.8-2; between each load block within the tolerances

13) Verifying that the voltage and diesel speed tolerances for the accelerated sequencer permissives are 92.5 1% and 98 + 1%,

respectively, with a minimum time delay of 210.2 s; and

14) Verifying that the following diesel generator lockout features prevent diesel generator starting only when required:

l a) Turning gear engaged, or l b) Maintenance mode.

• If Specification 4.8.1.1.2g.6)b) is not satisfactorily completed, it is not necessary to repeat the preceding 24-hour test. Instead, the diesel generator may be operated at 4999=W for 1 hour1.157407e-5 days <br />2.777778e-4 hours <br />1.653439e-6 weeks <br />3.805e-7 months <br /> or until operating temperature has submzed' gred*e han oc quel -lo 5(ooo ktd lod less een or agud b .5730 kd CATAWBA - UNIT 1 .

3/4 8-6

_ _ _ _ ~ . . _ _ -_ _ . . __ _ _ _ . _ _ _ _ . _ _ _ .

l i

3/4.8 ELEC*RICAL POWER SYSTEMS l

1 8ASES '

3/4.8.1, 3/4.8.2 and 3/4.8.3 A.C. SOURCES. 0.C. SOURCES, and ONSITE POWER

. DISTRIBUTION The OPERA 8ILI1Y of the A.C. and 0.C power sources and associated distribu-tion systems during operation ensures that sufficient power will be available to supply the safety-related equipment required for: (1) the safe shutdown of the facility, and (2) the mitigation and control of accident conditions within

' the facility. The minimum specified independent and redundant A.C. and 0.C.

power sources and distribution systems satisfy the requirements of General Design Criterion 17 of Appendix A to 10 CFR Part 50.

The ACTION requirements specified for the levels of degradation of the power sources provide restriction'upon continued facility operation commensurate with the level of degradation. The OPERA 8ILITY of the power sources are consistant with the initial condition assumptions of the safety analyses and are based upon maintaining at least one redundant set of onsite A.C. and 0.C.

power sources and associated distribution systems OPERABLE during accident conditions coincident with an assumed loss-of-offsite power and single failure '

of the other onsite A.C. source. The A.C. and 0.C. source allowable out-of-service times are based on Regulatory Guide 1.93, " Availability of Electrical

(, -

Power Sources," December 1974. When one diesel generator is inoperable, there is an additional ACTION requirement to verify that all required systems.

subsystems, trains, componnnts and devices, that depend on the remaining t

OPERA 8LE diesel generator as a source of emergency power, are also OPERA 8LE, and that the steam-driven auxiliary feedwater pump is OPERA 8LE. This require-ment is intended to provide assurance that a loss-of offsite power event will not result in a complete loss of safety function of critical systems during

• the period one of the diesel generators is inoperable. The term, verify, as

! used in this context means to administrative 1y check by examining logs or other information to determine if certain components are out-of-service for maintenance or other reasons. It does not mean to perform the Surveillance Requirements needed to demonstrate the OPERABILITY'of the component.

The OPERA 8ILITY of the minimum specified A.C. and 0.C. power sources and associated distribution systems during. shutdown and refueling ensures that:

(1) the facility can be maintained in the shutdown or refueling condition for

, extended time periods, and (2) sufficient instrumentation and control capa-bility is available for monitoring and maintaining the unit status.

'The Surveillance Requirements for demonstrating the OPERABILITY of the

' diesel generators are in accordance with the recommendations of Regulatory Guides 1.9, " Selection of Diesel Generator Set Capacity for Stanoby Power

-Supplies," March 10,1971,1.108, " Periodic Testing of Of esel Generator Units Used as Onsite Electric Power Systems at Nuclear Power Plants," Revision 1, August 1977,m 1.137, " Fuel-011 Systems for Standby Diesel Generators,"

l Revision 1, October 1979. If any other metallic structures (building, new or modifiedpipingsystemsfconduits)areplacedinthegroundneartheFuel

[ 011 Storage System or if the original system is modified, the adequacy and L .( frequency of inspections 'or the Cathodic Protection System shall be re-

. evaluated and adjusted in laccordance with the manufacturer's recommendations.

l CATAWSA - UNIT 1 8 3/4 8-1 and & arc, Sky s' arch Evaluabon %ri toneernian Ase-wb/dy of sies<l Senarat%s & Calada , aqd N, lhf

_. ~ ._ _ . _ _ . _ _ _ _ . _ ______

h

[.-

gj - - .. . . ..

/ JUSTIFICATION AND ANALYSIS'0F uGNIFICANT HAZARDS CONSIDERATIONS

r. .

This proposed amendment'would reduce the. required loading..during testing, c 'for. Catawba emergency diesel generators. It is proposed that the present 7000 KW and 7700 KW. loading requirements in the Technical Specifications

. be revised. co greater than~ or equal to 5600 KW but less .than or. equal to 5750.KW to the diesel generators during the required surveillance testing.

(This change also.would limit the auto-connected loads on the' diesel generators.

"The'NRC has expressed a concern regarding the reliability of the TDI diesels ist . Catawba and requested in the Staff's Safety Evaluation Report, dated August 14,'1984Lthat Duke propose changes to the Technical Specifications.

It was. requested ~that:the changes specify that the monthly and the 18 month  ;

surveillance testing be conducted at an engine load corresponding to

'185 psig' Brake.Mean Effective Pressure (BMEP). The Staff has determined that a1 generator load of approximately 5750 KW corresponds to 185 psig BMEP.

L In complying ~with the NRC' request, Duke has determined that the test.

-values for the diesel generator loading should be specified as at least 5600 KW, but not to exceed 5750 KW.-

The lower.value of 5600 KW is 80% of the continuous rating offthe diesels

-and is greater than-the auto-connected loads required for the loss of' ,

,offsite power and post-LOCA conditions. The loss of offsite power loads

'and LOCA loads required to shutdown the plant and maintain-it in a safe

. condition which were given to the Staff in previous meetings (i.e. 5714 KW)-

~

contained ~a significant conservatism.- The loadings in the FSAR table are; conservative in many cases'in that actual brake hor'sepower requirements are not. reflected. In addition, efficiency values of 0.9 were assumed, whereas_they are considerably above that in many cases, especially for

."s Ethe: 4KV motors.- These loads have been reevaluated and it has been deter--

mined'that 5600 KW is more;than adequate to meet the power requirement-needs in the case.of;a station blackout.or a LOCA. . In addition, during the' diesel' generator-functional-test:the actual blackout loads encountered

~

were well below 5600 KW. . There exists sufficient capacity and capability

'in the onsite powerJsupplies to assure that (1) the fuel-design limits and design conditions of the reactor coolant pressure boundary are not' exceeded and (2) tha core is cooled and' containment integrity and other

- vital functions are maintained in the event of postulated accidents (as required'by GDC-17. The.upperLlimit of 5750 KW will ensure that the NRC. requested value is not exceeded during testing.- These limits (5600'

. :and' 5750 KW) establish a reasonable, -achievable test band that will permit c' -

verification of operability while ensuring that-the requested load limit is'not exceeded.

' ~

Requiring verification that:the auto-connected loads do not exceed the reduced value will ensure that the sequential loading of the diesels during emergency operations will not exceed 5750 KW.

f

, , - - *.m., , , you-,- ,,s-,--s-wyhy~--ap+,--, -,%. , - , , ,y-e o--- -.-u. -e-,-<-,---, ,y -y. - . - , , . .y.,y y9 ,-.gg~,y-pgs-m--,- ,m-, 9

fI . . ..

Testing at this reduced load <would still demonstrate that the diesel

. generators are capable of providing the required electrical power necessary to supply.the loads required for a loss of offsite power of LOCA event.

'The proposed change limits the load at which the diesel generators are tested at during the surveillance testing. This limit has been established per'K'O aquest.

This. change is considered to be temporary pending completion, to the NRC. Staff's satisfaction of the requirements outlined in the c SER. Upon completion and Staff review and acceptance of the appropriate SER conditions, Duke will seek to reinstate the 7000 KW rating of the emergency diesel generators at. Catawba.

This change in the diesel generator loading during testing does not

increase the probability of different accidents cr equipment mal-functions from those currently evaluated in the FSAR. This change does not reduce the margin of safety as the design continuous load

~ rating of the diesel generators has not been affected. Thus no signi-ficant hazards considerations are associated with this change.

- It is.the' Duke position that such limits are not required; however,-

these limits will decrease the working stresses and wear in the diesel engine components.

e b

e k

k u