Trip-free mechanism and anti-pumping — two distinct safety functions of a circuit breaker (IEC 62271-100)

The shunt trip and undervoltage release guide, the Icw/Icm guide and the LSI settings guide cover how and at what current threshold a circuit breaker trips. This article covers a different pair of properties, often confused with each other, that say nothing about when a breaker trips but everything about what behaviour is guaranteed around the closing and tripping mechanism itself: the trip-free mechanism and the anti-pumping function, both defined in IEC 62271-100 (and, for low-voltage equipment, the equivalent IEC 60947-2).

Trip-free: the breaker can always trip, regardless of the close command

A trip-free mechanism guarantees that a circuit breaker's tripping mechanism can open the contacts at any moment, independent of the state or persistence of a close command. This sounds obvious, but is mechanically non-trivial: if a close command (for example a stuck pushbutton, a faulty relay contact, or a SCADA command that hangs on too long) is active at the same time as a trip command from a protection relay, the breaker must always be able to open. Without a trip-free design, a sustained close command could block or override the tripping mechanism — a breaker that cannot trip while a real fault is present is a fundamental safety risk. Trip-free is therefore a mechanical property of the linkage between the closing and tripping mechanisms themselves, not a setting that can be turned on or off.

Anti-pumping: no repeated closing-and-tripping on a persistent fault

Anti-pumping (sometimes identified by the auxiliary-relay designation "Y", or implemented through an internal seal-in/memory circuit) is a separate, typically electrically realised behaviour: if a close command is given while a persistent fault is present, the breaker closes, the protection detects the fault and trips again immediately (thanks to the trip-free mechanism). Without anti-pumping, a close command that remains sustained (rather than a momentary pulse) would make the breaker close again every time the tripping mechanism resets — a repeating close-trip-close cycle, informally called "pumping". Each cycle causes arc erosion on the contacts and mechanical stress on the operating mechanism; repeated cycles in a short time can lead to severe contact damage or even an explosive mechanical failure. The anti-pumping function prevents this by requiring that the close command first be fully released and given again (a fresh low-to-high transition) before a subsequent closing is permitted — simply holding the close command therefore does not produce repeated closings.

The distinction: mechanical versus electrical, "can always trip" versus "does not reclose"

Property	What it guarantees	Nature
Trip-free	The breaker can always trip, even during a closing operation or with an active close command	Mechanical, in the linkage of the mechanism itself
Anti-pumping	The breaker does not automatically reclose as long as the close command persists after tripping on a sustained fault	Electrical, via an auxiliary relay or interlock logic in the control circuit

The two functions are complementary and are almost always applied together in practice: trip-free ensures tripping is never blocked; anti-pumping ensures a stuck or over-long close command does not lead to damaging repeated switching cycles.

Design practice: pulsed commands as the first line of defence

A correctly designed control circuit uses a momentary pulse command for closing in the first place (for example through a seal-in relay contact that automatically breaks after closing), so that the close command normally does not persist at all. The anti-pumping function is therefore the second line of defence: a safety net for the scenario where the pulsed command nonetheless persists due to a wiring fault, a stuck contact, or a SCADA error. Relying solely on the anti-pumping function, without a pulse-based close circuit as the first line of defence, is not good design practice.

Practical relevance

When testing a circuit breaker's close/trip circuit, it must be verified not only that the breaker closes and trips on command, but also explicitly that the anti-pumping function works: a sustained close command during a simulated persistent fault must not result in repeated closing. For a breaker tripped by a lockout relay (see the lockout relay guide), it must additionally be recognised that the anti-pumping function does not replace that lockout relay: an 86 lockout requires a separate, manual reset before closing is permitted again, regardless of the anti-pumping logic's behaviour.

Common mistakes

Treating trip-free and anti-pumping as the same thing — they are two distinct properties: one guarantees tripping is always possible, the other prevents repeated closing on a sustained command.
Not explicitly testing the anti-pumping function when commissioning the close/trip circuit — testing closing and tripping themselves does not automatically confirm that repeated pumping is prevented under a sustained close command.
Relying solely on the anti-pumping function instead of designing a pulse-based close command as the first line of defence — a well-designed control circuit already prevents a sustained close command at the source.
Assuming the anti-pumping function makes a lockout relay (86) redundant — an 86 lockout requires its own manual reset; the anti-pumping logic resets itself as soon as the close command is released and given again, which serves a fundamentally different purpose.