Method and apparatus for supporting access control lists in a multi-tenant environment

An apparatus comprising:

• a processor for identifying common access control list (ACL) parameters and variable ACL parameters among a plurality of tenants in a network, mapping parameter values for said variable ACL parameters to said tenants, and generating a multi-tenant access control list for said plurality of tenants, the multi-tenant access control list comprising said common ACL parameters and said variable ACL parameters;
• and
• memory for storing the multi-tenant access control list and said mapping;
• wherein the multi-tenant access control list is configured for use at a virtual switch.

Logic encoded on one or more non-transitory computer readable media for execution and when executed operable to:

• identify common access control list (ACL) parameters and variable ACL parameters among a plurality of tenants in a network;
• map parameter values for said variable ACL parameters to said tenants;
• generate a multi-tenant access control list for said plurality of tenants, the multi-tenant access control list comprising said common ACL parameters and said variable ACL parameters;
• store the multi-tenant access control list and said mapping;
• and
• apply the multi-tenant access control list to ports at a network device.