Industrial Surge Protection: SPDs for PLCs and Control Panels
Industrial surge protection explained — what causes surges, how SPDs work, the types and classes, and protecting PLCs, I/O, and signal lines from transients.
Industrial surge protection is the practice of installing devices and applying design principles that limit the damage voltage transients cause to PLC processors, I/O modules, drives, instrumentation, and communication equipment. A single unprotected surge event can destroy a PLC CPU, corrupt a SCADA server, or wipe out an entire I/O rack — often at a cost that dwarfs the price of a properly coordinated surge protection scheme.
This guide covers what surges and transients actually are, how surge protective devices (SPDs) work, the IEC/UL classification system, where to install SPDs in an industrial power distribution scheme, and the specific considerations for protecting PLC power supplies, analog I/O, and fieldbus signal lines.
What Are Surges and Transients?
A voltage surge (or transient overvoltage) is a brief, high-amplitude voltage spike superimposed on the normal supply waveform. The relevant parameters are peak voltage, rise time, and energy content. Surges can appear on AC power conductors, DC power buses, analog signal wires, and digital communication cables.
Lightning-Induced Transients
Lightning is the highest-energy transient source in most industrial environments. A direct strike to a facility or its service entrance can inject hundreds of kiloamperes, but indirect strikes are far more common and still dangerous. When lightning strikes nearby ground, induced voltages appear on power conductors, cable shields, and instrument loops through electromagnetic coupling. A strike 1 km away can produce a transient of several kilovolts on an unprotected service entrance.
The standard waveforms used to characterize lightning-induced transients are:
- 10/350 µs — used for direct strike testing (IEC 62305); very high energy
- 8/20 µs — used for indirect/conducted transient testing (IEC 61643); lower energy but fast rise time
- 1.2/50 µs — used for open-circuit voltage testing
The first number is the rise time to peak; the second is the time to half-peak. Faster rise times are harder for suppression components to clamp before the voltage reaches downstream equipment.
Switching Transients
Switching transients are generated internally within a facility and are the most frequent surge source in control panel environments. Common sources include:
- Motor and contactor switching — interrupting an inductive load (motor winding, solenoid coil, relay coil) causes the stored magnetic energy to release as a voltage spike. In a 480 V AC system, unsuppressed inductive kick can reach several kilovolts.
- Variable frequency drives (VFDs) — high-frequency PWM switching creates conducted and radiated transients on both the input power conductors and the motor output cables. The dV/dt on the motor output can stress cable insulation and damage motor bearings.
- Power factor correction capacitor switching — utility-side capacitor bank switching creates a high-frequency oscillatory transient that can reach two to three times nominal voltage.
- Transformer energization — inrush current when a transformer is energized creates a brief transient that appears on downstream circuits.
VFD-Specific Transients
VFDs deserve special attention in any surge protection strategy. The drive's input rectifier draws current in pulses, creating harmonic distortion and conducted emissions that travel back to the AC bus (see Power Quality and Harmonics Explained for the harmonics side of this). The drive's output creates reflected-wave effects in long cable runs — the voltage at the motor terminals can reach double the DC bus voltage due to impedance mismatch, which also stresses I/O wiring routed near motor cables.
What Is an SPD and How Does It Work?
A surge protective device (SPD) is a component connected in parallel with the circuit it protects. Under normal operating conditions the SPD presents a high impedance and passes essentially no current. When the voltage rises above the SPD's clamping voltage, the device transitions to a low-impedance state and diverts the surge current to the protective earth conductor, limiting the voltage seen by the protected equipment.
Core Suppression Technologies
| Technology | Symbol | Mechanism | Characteristics |
|---|---|---|---|
| Metal Oxide Varistor (MOV) | MOV | Zinc-oxide grains form back-to-back diode junctions | Fast response (~1 ns), high energy capacity, degrades with repeated surges |
| Transient Voltage Suppression Diode (TVS) | TVS | Avalanche breakdown of a silicon junction | Very fast (~1 ps), precise clamping voltage, lower energy capacity than MOV |
| Gas Discharge Tube (GDT) | GDT | Ionized gas creates a low-impedance arc path | Handles very high surge currents, slow response (~100 ns), follow-current risk |
| Silicon Avalanche Diode (SAD) | SAD | Similar to TVS, optimized for signal lines | Low capacitance, suitable for high-speed data lines |
Industrial SPDs almost always use MOVs as the primary suppression element, often combined with a GDT in series for high-energy applications or a TVS diode in parallel for faster signal-line clamping. The GDT handles the initial high-current surge; the MOV clamps the residual voltage to a safe level.
Clamping vs. Diverting
These two terms describe the same physical action from different perspectives:
- Clamping describes the voltage-limiting effect: the SPD holds the voltage at or below its protection level (Up) regardless of the incoming surge amplitude.
- Diverting describes the current path: the surge energy that would have flowed into the protected equipment is instead routed through the SPD to the earth electrode system.
Both actions happen simultaneously. The critical design requirement is that the protective earth conductor and the earth electrode system must be capable of absorbing the diverted surge current without itself rising to a dangerous potential. This is why surge protection and grounding are inseparable — a well-designed SPD connected to a high-impedance earth path is largely ineffective. For grounding fundamentals, see Industrial Grounding and Bonding.
Key SPD Parameters
- Nominal discharge current (In) — the 8/20 µs test current the device handles repeatedly without damage (typically 5–20 kA for distribution-level SPDs)
- Maximum discharge current (Imax) — the single-event 8/20 µs test current
- Protection level (Up) — the peak voltage appearing across the SPD terminals during a nominal discharge current test; the lower, the better
- Voltage protection rating (Up) vs. equipment withstand (Uw) — the SPD's Up must be below the equipment's impulse withstand voltage to provide meaningful protection
- Response time — the time from surge arrival to clamping; MOV-based SPDs are fast enough for most applications
SPD Types and Classes: IEC and UL Frameworks
Two parallel classification systems exist: IEC 61643 (European/international) uses Classes I, II, and III; UL 1449 (North American) uses Types 1, 2, 3, and 4. They map approximately as follows:
| IEC Class | UL Type | Installation Point | Test Waveform | Typical Imax |
|---|---|---|---|---|
| Class I | Type 1 | Service entrance / main switchboard | 10/350 µs (current impulse) | 25–100 kA |
| Class II | Type 2 | Distribution panels / sub-panels | 8/20 µs | 20–40 kA |
| Class III | Type 3 | Point of use / at equipment | 1.2/50 µs + 8/20 µs combination | 1–5 kA |
| Class I+II | Type 1+2 | Combined service entrance device | Both | — |
Class I / Type 1 SPDs
Class I devices are designed to handle the high-energy surge currents that result from a nearby direct lightning strike or a direct strike to the facility's lightning protection system. They are mandatory when a building has a lightning protection system (IEC 62305-4) because the lightning rod conductors inject surge current directly into the earth bonding network, which is bonded to the building's electrical system.
Class I devices typically use GDT or spark gap technology combined with MOVs, and they must be installed ahead of the main distribution board or at the service entrance. Installation in a downstream panel provides no Class I protection because the high-energy surge has already propagated into the facility wiring.
Class II / Type 2 SPDs
Class II devices protect against the residual transients that pass through Class I protection and against switching transients generated within the facility. They are the workhouse of industrial surge protection and are installed at:
- Main distribution panels
- Motor control center (MCC) bus
- Sub-panels serving control rooms or instrumentation areas
- PLC panel main power feeds
Class II SPDs must be coordinated with the upstream Class I device — the combined protection level (Up) of both devices must be below the impulse withstand voltage of the downstream equipment. IEC 61643-12 provides guidance on coordination distance and voltage let-through calculations.
Class III / Type 3 SPDs
Class III devices are point-of-use protectors installed close to or inside the protected equipment. They handle the low-energy residual transients that survive upstream SPDs and the internally generated noise from switching power supplies and other sources. In control panel work, Class III devices appear as:
- DIN-rail-mount SPDs on the 24 V DC bus feeding PLC power supplies
- Signal-line surge protectors on analog inputs and outputs
- Data-line protectors on communication ports
Class III devices must always be installed in addition to Class II upstream protection, not as a substitute for it. Using only a Class III device at the equipment exposes the suppressor to the full, undivided surge energy from a lightning event — far beyond its energy-handling capacity.
Where to Install SPDs: A Layered Approach
Effective surge protection uses a coordinated, layered scheme that progressively limits the surge voltage at each stage. The analogy often used is a set of cascaded filters: each stage attenuates the transient, so the final stage at the equipment sees only a small, manageable residual.
Layer 1: Service Entrance (Class I / Type 1)
Install a Class I SPD at the main service entrance switchboard or at the point where the lightning protection down-conductor bonds to the electrical system. This device handles direct and near-direct lightning energy.
Installation requirements:
- Lead length from the protected bus to the SPD terminals must be minimized — every 1 m of conductor adds roughly 1 µH of inductance, which adds ~1 kV per microsecond of surge current rise rate
- Both line conductors and the neutral must be protected (L-N, L-PE, N-PE modes)
- A disconnect means (fuse or breaker) must protect the SPD per NEC 285 / IEC requirements
- The SPD earth terminal connects to the main equipotential bonding bar via the shortest possible conductor
Layer 2: Distribution and MCC Panels (Class II / Type 2)
Install Class II SPDs at every sub-panel and MCC that feeds control system equipment. The coordination distance between a Class I and Class II device matters: IEC 61643-12 requires either a minimum conductor length of 10 m between the two devices (which provides natural inductance to separate their clamping actions) or a decoupling impedance if the distance is shorter.
For an industrial plant, Class II SPDs typically appear at:
- The control room main distribution panel
- MCC sections feeding large motors (to protect against switching transients propagating upstream)
- Any panel that combines power distribution and control equipment
Layer 3: At the Control Panel and Equipment (Class II / Type 2 or Class III / Type 3)
This layer provides the last stage of protection immediately before the sensitive equipment. Options include:
- A DIN-rail Class II SPD on the 480 V or 120 V AC input to the control panel, ahead of the control transformer
- A DIN-rail Class III SPD on the 24 V DC bus after the power supply
- Plug-in SPDs on individual I/O channels or communication ports
The protection level (Up) at this layer must be below the impulse withstand voltage of the PLC hardware. Most PLC power supply modules and I/O cards specify a withstand voltage; check the manufacturer's data sheet and confirm the SPD's Up is at least 20% below that figure.
Signal and Data Line Surge Protection
Power-side surge protection alone is insufficient. Surges couple onto signal and communication cables through three mechanisms: conducted paths (when both ends of a cable connect to systems at different ground potentials during a surge), inductive coupling (from rapidly changing magnetic fields near lightning down-conductors or motor cables), and capacitive coupling (from high-dV/dt sources near signal cables).
Analog Signal Lines (4–20 mA, 0–10 V)
The standard 4–20 mA current loop is relatively tolerant of surge energy compared to high-impedance voltage inputs, but a transient that exceeds the input protection diodes' energy rating will still destroy the channel. Signal-line SPDs for analog loops typically use a TVS diode or a combination of GDT and TVS to achieve:
- A low capacitance (important for preserving signal bandwidth)
- A clamping voltage below the input circuit's absolute maximum rating
- Full bidirectional protection (surges can be positive or negative)
Install signal-line protectors at the field entry point of the control panel — where cables from the field first enter the enclosure, before they reach the terminal blocks that connect to I/O modules. This prevents a surge propagating through a field cable from reaching the backplane.
Fieldbus and Communication Lines
Digital communication lines (Profibus, DeviceNet, Modbus RS-485, Ethernet) are vulnerable to transients because the UART/transceiver ICs at each end have relatively low withstand voltages. Surge protectors for these lines must account for:
- Line impedance — an improperly matched protector can degrade signal integrity even without a surge event. Use SPDs specifically rated for the bus impedance (e.g., 120 Ω for RS-485, 100 Ω for 100BASE-TX Ethernet).
- Common-mode vs differential-mode — most communication transients are common-mode (the entire cable rises together relative to local ground). Protectors should clamp common-mode voltages without affecting the differential signal.
- Data rate — high-speed Ethernet (100 Mbit/s and above) requires very-low-capacitance protectors to avoid signal attenuation.
For Profibus and RS-485, DIN-rail-mount surge protectors with integrated bus termination are available from Phoenix Contact, Weidmuller, and similar vendors. For Industrial Ethernet, patch-panel-style protectors insert inline in the RJ45 connection with no bus configuration required.
Thermocouple and RTD Lines
Thermocouples and RTDs present a particular challenge because the signal levels are very small (millivolts for thermocouples) and the measurement circuitry is sensitive. Surge protectors for these applications must have:
- Very low clamping voltage consistent with the signal range
- Low series resistance that does not affect the measurement accuracy
- Low capacitance for RTD excitation frequency compatibility
Protecting PLCs Specifically
A PLC is a concentration of vulnerable components: a microprocessor, volatile and non-volatile memory, communication ICs, and analog measurement circuits — all in a DIN-rail package that may be just meters from contactors, VFDs, and other high-energy switching sources. The protection strategy addresses three entry paths for surges.
PLC Power Supply Input
The PLC power supply (whether 24 V DC from a panel power supply or 120/240 V AC directly) is the most obvious entry point. Protection measures:
- Upstream Class II SPD on the AC feed to the panel or to the control transformer
- 24 V DC bus SPD on the DC rail that feeds the PLC, installed as close as possible to the DC bus bar
- Fuse or circuit breaker coordination — the branch circuit protection for the PLC power circuit should clear before the SPD degrades; check that the branch circuit rating is within the SPD's short-circuit current rating (SCCR)
I/O Module Channels
Every input and output channel that connects to field wiring is a potential surge path. The I/O module's built-in protection (typically transient suppression diodes on each channel) handles small transients but is not designed for lightning-induced events.
Best practices for I/O surge protection:
- Install DIN-rail signal-line SPDs at the field cable entry to the panel, wired in series with the field cable before the terminal block that connects to the I/O module
- For digital output channels driving solenoids or relays, install a freewheeling diode or RC snubber across the inductive load — this eliminates the switching transient at the source rather than requiring the I/O module to absorb it
- For analog input channels connected to transmitters in the field, use 4–20 mA loop protectors rated for the loop supply voltage
- Group field cable entry by signal type (power, analog, digital I/O, communications) and route them in separate cable ducts to minimize inductive coupling between power and signal cables
Communication Ports
The CPU's Ethernet port, serial ports, and any fieldbus interface ports are all vulnerable. These ports connect to cables that may run hundreds of meters through an industrial facility, picking up induced transients along the entire length.
- Install Ethernet surge protectors inline on every Ethernet connection that leaves the control panel enclosure
- For RS-485 Modbus or Profibus, use surge-protected terminal block connectors or inline bus protectors at the panel entry
- Ensure the shield of shielded communication cables is bonded to the panel's protective earth at the panel entry point (not at both ends, to avoid ground loops — see Industrial Grounding and Bonding for the correct shield termination strategy)
Coordinating Multiple Layers
A common mistake is installing a Class III point-of-use protector at the PLC without any upstream protection. When a Class III device absorbs a surge that should have been handled by a Class I or II device upstream, it either fails immediately or degrades over multiple events, eventually failing shorted or open — often without any visible indication. Many modern SPDs include a status indicator (green LED or mechanical flag) that shows when the MOV has been damaged beyond its useful life.
For critical processes, consider SPDs with remote fault indication — a dry contact output that the PLC can monitor as a digital input. This allows the PLC program to generate an alarm when the surge protector needs replacement. This integrates naturally with a broader maintenance approach — see PLC Troubleshooting: A Complete Guide for diagnostic frameworks.
Grounding's Role in Surge Protection
No surge protection scheme functions without a low-impedance path to earth. When an SPD diverts surge current, that current must flow through the protective earth system to the earth electrode. If the earth path has high impedance — from long conductor runs, loose connections, corroded lugs, or an undersized electrode — the diverted current causes the local ground reference to rise in potential. This potential rise negates the clamping action of the SPD.
Key grounding requirements for surge protection:
- Short, direct earth connections — the conductor from the SPD earth terminal to the equipotential bonding bar should be as short and straight as possible. Every meter of conductor adds inductance that degrades clamping performance.
- Equipotential bonding bar — all SPD earth conductors, cable shields, instrument earth connections, and equipment chassis grounds should terminate at a single equipotential bonding bar, which in turn connects to the earth electrode via a single low-impedance conductor
- Earth electrode resistance — IEC 62305 recommends less than 10 Ω for general installations; facilities with extensive electronic equipment should target less than 1 Ω
- Single-point earthing for signal references — to avoid ground loops, signal references should connect to earth at a single point, typically at the control panel, while the field instrument is isolated or floated
For a complete treatment of earthing systems, ground loops, and shield termination, see Industrial Grounding and Bonding.
Selecting and Specifying an SPD
When specifying SPDs for a project, the selection process involves five steps:
- Determine the lightning protection level (LPL) for the facility using IEC 62305-2 risk assessment or a simplified approach based on geographic lightning density and building exposure
- Identify all surge entry points — service entrance, every sub-panel, every field cable entry to control panels, every communication cable leaving the building or control room
- Select SPD class and discharge current rating — Class I at the service entrance with a discharge current rated for the facility's LPL; Class II at sub-panels and panel feeds; Class III or signal-line SPDs at equipment
- Verify coordination — confirm that the protection levels (Up) cascade correctly from the service entrance to the equipment, and that the distance or decoupling requirements between devices are met
- Verify SCCR — the SPD must have a short-circuit current rating equal to or greater than the available fault current at the installation point
For a control panel designed to electrical control panel design best practices, the SPD specifications belong in the panel BOM and the protection scheme belongs in the panel schematic, typically shown on a dedicated power distribution drawing page.
Frequently Asked Questions
What is industrial surge protection? Industrial surge protection is the use of surge protective devices (SPDs) and design practices to limit the damage that voltage transients — from lightning, switching operations, or VFDs — cause to PLC processors, I/O modules, instrumentation, and communication equipment. A coordinated scheme uses layered SPDs at the service entrance, distribution panels, and point of use to progressively clamp transients before they reach sensitive electronics.
How does an SPD work? An SPD is connected in parallel with the circuit it protects. Under normal conditions it passes essentially no current. When the voltage rises above its clamping threshold, the SPD transitions to a low-impedance state — typically through a metal oxide varistor (MOV) — and diverts the surge current to the protective earth conductor. This limits the voltage seen by the protected equipment to the SPD's protection level (Up). The SPD then returns to its high-impedance state once the transient passes.
What are the types of SPD? SPDs are classified by the IEC into three classes. Class I (UL Type 1) devices are installed at the service entrance and handle high-energy lightning-induced surges, tested with a 10/350 µs waveform. Class II (UL Type 2) devices protect distribution and sub-panels against residual lightning transients and switching transients, tested with an 8/20 µs waveform. Class III (UL Type 3) devices are point-of-use protectors installed at or near the equipment, handling low-energy residual transients. Effective protection requires all three layers working together.
How do you protect a PLC from surges? PLC surge protection requires a layered approach targeting all three entry paths: the power supply input, the I/O module channels, and the communication ports. Install a Class II SPD on the AC power feed to the panel, a 24 V DC bus SPD on the PLC power rail, signal-line protectors at the field cable entry point ahead of every I/O module, and Ethernet or fieldbus surge protectors inline on all communication cables that leave the panel enclosure. All SPD earth terminals must connect via short, direct conductors to the panel's equipotential bonding bar. SPDs with status indicators allow the PLC to generate a maintenance alarm when a protector needs replacement.
