diff --git a/vmware_nsx/plugins/nsx_p/plugin.py b/vmware_nsx/plugins/nsx_p/plugin.py
index 13763ab980..a4859341e4 100644
--- a/vmware_nsx/plugins/nsx_p/plugin.py
+++ b/vmware_nsx/plugins/nsx_p/plugin.py
@@ -2095,8 +2095,9 @@ class NsxPolicyPlugin(nsx_plugin_common.NsxPluginV3Base):
 
         # Do this outside of the context writer scope so it can overcome
         # failures
-        if port.get('tenant_id'):
-            self._ensure_default_security_group(context, port['tenant_id'])
+        if port_data.get('tenant_id'):
+            self._ensure_default_security_group(context,
+                                                port_data['tenant_id'])
 
         with db_api.CONTEXT_WRITER.using(context):
             neutron_db = self.base_create_port(context, port)
diff --git a/vmware_nsx/plugins/nsx_v3/plugin.py b/vmware_nsx/plugins/nsx_v3/plugin.py
index fd357a9b35..5cd8a202fa 100644
--- a/vmware_nsx/plugins/nsx_v3/plugin.py
+++ b/vmware_nsx/plugins/nsx_v3/plugin.py
@@ -1466,8 +1466,9 @@ class NsxV3Plugin(nsx_plugin_common.NsxPluginV3Base,
 
         # Do this outside of the context writer scope so it can overcome
         # failures
-        if port.get('tenant_id'):
-            self._ensure_default_security_group(context, port['tenant_id'])
+        if port_data.get('tenant_id'):
+            self._ensure_default_security_group(context,
+                                                port_data['tenant_id'])
 
         with db_api.CONTEXT_WRITER.using(context):
             neutron_db = self.base_create_port(context, port)