Abstract: A method for operating a control network includes a first control computer, a second redundant control computer and a plurality of data-processing appliances, wherein a connection between the computers and the appliances is provided by a redundant and diverse heartbeat. The connection between the computers is checked before operating the control network. If a test result is positive, a master function is assigned to the first computer. If the test result is negative, both computers connect the appliances to themselves in a defined sequence. When a predetermined number of appliances are connected to the first computer, the computer takes over a master function and the second computer takes over a standby function, or, when a number, which is less than the predetermined number, of appliances are connected to each of the two computers, a signal is produced which signals a fault state of the control network.

Abstract: A method for operating a control network includes a first control computer, a second redundant control computer and a plurality of data-processing appliances, wherein a connection between the computers and the appliances is provided by a redundant and diverse heartbeat. The connection between the computers is checked before operating the control network. If a test result is positive, a master function is assigned to the first computer. If the test result is negative, both computers connect the appliances to themselves in a defined sequence. When a predetermined number of appliances are connected to the first computer, the computer takes over a master function and the second computer takes over a standby function, or, when a number, which is less than the predetermined number, of appliances are connected to each of the two computers, a signal is produced which signals a fault state of the control network.