illegal reference for provisioning a policy on LSA setup: 1. Setup LSA with IPv6 addresses2. Onboard NSO and devices to CNC3. Provision policy or service from CNC UI  The dry-run failed with illegal reference ( screenshot attached )Validation failed : illegal reference : /ncs:devices/device{rfs-196}/config/cisco-sr-te-cfp-internal:sr-te/cisco-sr-te-cfp-sr-policies-internal:policies/policy{SRv6-711-te-absolute-segments PE-C}/head-endshow commands output for cfs and rfs nodes:CFS:admin@ncs> show cluster                                RECEIVED    NAME   NAME    STATUS LAST EVENT            NOTIFICATIONS ------------------------------------------------------------------------------rfs-195 ncs-events up   2022-04-04T03:42:50.818341+00:00 10       rfs-196 ncs-events up   2022-04-04T22:15:01.063702+00:00 12       REMOTE                          LOCAL REMOTE          NODE   ADDRESS             PORT CHANNELS USER  USER  STATUS TRACE   -------------------------------------------------------------------------------------------rfs-196 2001:420:10e:201d:172:23:85:196 2022 -     admin admin  up   disabled rfs-195 2001:420:10e:201d:172:23:85:195 2022 -     admin admin  up   disabled RFS-195:root@rfs-195:~# ncs_cli -u adminUser admin last logged in 2022-04-04T22:13:13.951887+00:00, to rfs-195, from 2001:420:10e:201d:250:56ff:fe84:171e using netconf-sshadmin connected from 10.21.118.208 using ssh on rfs-195admin@ncs> show devices listNAME    ADDRESS          DESCRIPTION NED ID        ADMIN STATE -----------------------------------------------------------------------------------CE-B    f168:2000::192:168:11:98 -      cisco-iosxr-cli-7.38 unlocked   PE-A    f168:2000::192:168:11:79 -      cisco-iosxr-cli-7.38 unlocked   SR-PCE-85 f168:2000::192:168:11:85 -      cisco-iosxr-cli-7.38 unlocked   TOP-LEFT  f168:2000::192:168:11:76 -      cisco-iosxr-cli-7.38 unlocked   TOP-RIGHT f168:2000::192:168:11:74 -      cisco-iosxr-cli-7.38 unlocked   RFS-196:admin@ncs> show devices listNAME     ADDRESS          DESCRIPTION NED ID        ADMIN STATE --------------------------------------------------------------------------------------BOTTOM-LEFT  f168:2000::192:168:11:77 -      cisco-iosxr-cli-7.38 unlocked   BOTTOM-RIGHT f168:2000::192:168:11:75 -      cisco-iosxr-cli-7.38 unlocked   CE-A     f168:2000::192:168:11:99 -      cisco-iosxr-cli-7.38 unlocked   PE-B     f168:2000::192:168:11:78 -      cisco-iosxr-cli-7.38 unlocked   PE-C     f168:2000::192:168:11:73 -      cisco-iosxr-cli-7.38 unlocked   
Hi Crystal,It seems like NSO is having trouble finding your RFS Node in your CFS device tree.Could you paste the output of the following commands from your CFS node (in config mode):1. "run show devices list"2. "show devices lsa dispatch-map"Thanks,Isaac KimHi Isaac,Here is the output from my CFS nodes:admin@ncs% run show devices listNAME   ADDRESS             DESCRIPTION NED ID      ADMIN STATE ------------------------------------------------------------------------------------rfs-195 2001:420:10e:201d:172:23:85:195 -      cisco-nso-nc-5.7 unlocked   rfs-196 2001:420:10e:201d:172:23:85:196 -      cisco-nso-nc-5.7 unlocked   admin@ncs% show devices lsa dispatch-map device BOTTOM-LEFT {  ned-id   cisco-iosxr-cli-7.38:cisco-iosxr-cli-7.38;  remote-node rfs-196;}device BOTTOM-RIGHT {  ned-id   cisco-iosxr-cli-7.38:cisco-iosxr-cli-7.38;  remote-node rfs-196;}device CE-A {  ned-id   cisco-iosxr-cli-7.38:cisco-iosxr-cli-7.38;  remote-node rfs-196;}device CE-B {  ned-id   cisco-iosxr-cli-7.38:cisco-iosxr-cli-7.38;  remote-node rfs-195;}device PE-A {  ned-id   cisco-iosxr-cli-7.38:cisco-iosxr-cli-7.38;  remote-node rfs-195;}device PE-B {  ned-id   cisco-iosxr-cli-7.38:cisco-iosxr-cli-7.38;  remote-node rfs-196;}device PE-C {  ned-id   cisco-iosxr-cli-7.38:cisco-iosxr-cli-7.38;  remote-node rfs-196;}device SR-PCE-85 {  ned-id   cisco-iosxr-cli-7.38:cisco-iosxr-cli-7.38;  remote-node rfs-195;}device TOP-LEFT {  ned-id   cisco-iosxr-cli-7.38:cisco-iosxr-cli-7.38;  remote-node rfs-195;}device TOP-RIGHT {  ned-id   cisco-iosxr-cli-7.38:cisco-iosxr-cli-7.38;  remote-node rfs-195;}device rfs-195 {  ned-id cisco-nso-nc-5.7:cisco-nso-nc-5.7;  local;}device rfs-196 {  ned-id cisco-nso-nc-5.7:cisco-nso-nc-5.7;  local;}Hi Crystal,Your CFS output looks good. To accelerate RCA, would it be possible to provide your NSO node ssh credentials so I can check a few things? I will not modify anything on your NSO setup.Thanks,Isaac KimSure Isaac,Here is the info.:CFS: 172.23.85.194RFS-195: 172.23.85.195RFS-196: 172.23.85.196id/pw: root/Vtsisco@123!Thanks.-CrystalHello Crystal,Thank you for access to your setup.I can see the following on your CFS node :<div class="code panel" style="border-width: 1px;"><div class="codeContent panelContent"><pre class="code-java">admin@ncs% show devices device rfs-195 config devices deviceNo entries found.</pre></div></div>It seems like your rfs-195 config has not been synced with your CFS node.I would suggest to try a sync-from on your CFS node targeting your RFS node as suggested here : Please let me know if this works.Thanks,Isaac KimThanks Isaac. I am able to provision service/policy after running the following commands on CFS node:request devices fetch-ssh-host-keysrequest devices sync-fromThanks.-CrystalGreat! In that case, I will mark this ticket as resolved.If you have any other further related issues, please feel free to reopen this ticket.Thanks,Isaac Kim