diff --git a/vmware_nsx/plugins/nsx_p/plugin.py b/vmware_nsx/plugins/nsx_p/plugin.py
index 3e7c01522c..73123206d5 100644
--- a/vmware_nsx/plugins/nsx_p/plugin.py
+++ b/vmware_nsx/plugins/nsx_p/plugin.py
@@ -2098,8 +2098,9 @@ class NsxPolicyPlugin(nsx_plugin_common.NsxPluginV3Base):
 
         # Do this outside of the context writer scope so it can overcome
         # failures
-        if port.get('tenant_id'):
-            self._ensure_default_security_group(context, port['tenant_id'])
+        if port_data.get('tenant_id'):
+            self._ensure_default_security_group(context,
+                                                port_data['tenant_id'])
 
         with db_api.CONTEXT_WRITER.using(context):
             neutron_db = self.base_create_port(context, port)
diff --git a/vmware_nsx/plugins/nsx_v3/plugin.py b/vmware_nsx/plugins/nsx_v3/plugin.py
index e7ee948f37..a5c961056c 100644
--- a/vmware_nsx/plugins/nsx_v3/plugin.py
+++ b/vmware_nsx/plugins/nsx_v3/plugin.py
@@ -1465,8 +1465,9 @@ class NsxV3Plugin(nsx_plugin_common.NsxPluginV3Base,
 
         # Do this outside of the context writer scope so it can overcome
         # failures
-        if port.get('tenant_id'):
-            self._ensure_default_security_group(context, port['tenant_id'])
+        if port_data.get('tenant_id'):
+            self._ensure_default_security_group(context,
+                                                port_data['tenant_id'])
 
         with db_api.CONTEXT_WRITER.using(context):
             neutron_db = self.base_create_port(context, port)