Organization identification of network access server devices into a multi-tenant cloud network access control service

A method comprising:

• receiving, at a cloud-based network access control (NAC) system in communication with a cloud-based network management system (NMS), a request to establish a secure tunnel from a network access server (NAS) device of a plurality of NAS devices associated with one or more network tenants, the request including an indicator to identify a network tenant of the one or more network tenants to which the NAS device belongs;
• obtaining, by the NAC system, configuration information for the network tenant based on the indicator, the configuration information including a server certificate associated with the network tenant;
• providing, by the NAC system, the server certificate to the NAS device in a response to the request;
• in response to receiving a client certificate from the NAS device, validating, by the NAC system, the client certificate using the configuration information for the network tenant;
• establishing, by the NAC system, the secure tunnel with the NAS device;
• and
• providing, by the NAC system, NAC service to the NAS device using the secure tunnel.

A computer-readable storage medium comprising instructions that, when executed, cause one or more processors of a cloud-based network access control (NAC) system in communication with a cloud-based network management system (NMS) to:

• receive a request to establish a secure tunnel from a network access server (NAS) device of a plurality of NAS devices associated with one or more network tenants, the request including an indicator to identify a network tenant of the one or more network tenants to which the NAS device belongs;
• obtain configuration information for the network tenant based on the indicator, the configuration information including a server certificate associated with the network tenant;
• provide the server certificate to the NAS device in a response to the request;
• in response to receipt of a client certificate from the NAS device, validate the client certificate using the configuration information for the network tenant;
• establish the secure tunnel with the NAS device;
• and
• provide NAC service to the NAS device using the secure tunnel.