Precaching precursor keys within a roaming domain of client devices

A computing system comprising:

• one or more processors;
• and
• a memory storing instructions that, when executed by the one or more processors, cause the one or more processors to:
• receive an indication that a client device has been authenticated at a first network device of a network, the client device being authenticated by an authentication server, the first network device belonging to a first cluster corresponding to a first level 3 (L3) subnet, the computing system being remote from the first network device;
• receive one or more first precursor keys and identification information of the client device, wherein the first precursor keys were generated from the authentication of the client device;
• determine one or more second clusters, wherein:
• the second clusters comprise remaining clusters, besides the first cluster, that the client device has historically roamed to;
• receive one or more second precursor keys corresponding to the second clusters;
• distribute the second precursor keys and the identification information to the corresponding second clusters;
• determine to create one or more tunnels among the second clusters and the first cluster;
• and
• provision the tunnels to transmit data traffic through the tunnels to a second network device, the second network device belonging to one of the second clusters, the computing system being remote from the second network device.

A non-transitory storage medium storing instructions that, when executed by at least one processor of a computing system, cause the computing system to:

• receive an indication that a client device has been authenticated at a first network device of a network, the client device being authenticated by an authentication server, the first network device belonging to a first cluster corresponding to a first level 3 (L3) subnet, the first network device disposed separately from the computing system;
• receive one or more first precursor keys and identification information of the client device, wherein the first precursor keys were generated from the authentication of the client device;
• determine one or more second clusters, wherein:
• the second clusters comprise remaining clusters, besides the first cluster, that are within a roaming domain of the first cluster or the client device;
• and
• each of the second clusters corresponds to a different L3 subnet;
• receiving one or more second precursor keys corresponding to the second clusters;
• distribute the second precursor keys and the identification information to the corresponding second clusters;
• determine to create one or more tunnels among the second clusters and the first cluster;
• and
• provision the tunnels to transmit data traffic through the tunnels to a second network device, the second network device belonging to one of the second clusters, the second network device disposed separately from the computing system, wherein the client device maintains its original Internet Protocol (IP) address corresponding to the first cluster, when the client device roams to the second clusters.