Presented herein are techniques to handle data packets received at a top-of-rack (ToR) switch in an underlay network hosting one or more tenant networks. The underlay network may comprise a plurality of ToR switches each connected to each of a plurality of spine switches. The data packet may be received from a virtual machine in a tenant network, and have a header with a data packet identifier. A mobility domain identifier may be determined that corresponds to the network portion within which the virtual machine can be migrated. The mobility domain may be configured on the ToR switch on a per-port basis based on the virtual machine connected to the ToR switch port. A unique identifier may be formed based on the data packet identifier and mobility domain identifier. Using this unique identifier, provisioning information may be obtained for the tenant network on the ToR switch.