Systems and methods are described for extending the trust relationship established with a network interface device that provides access to a service provider network that includes an IP-based overlay network. The trust relationship is extended to a consumer premises equipment (CPE) device operating on the overlay network. A network element of the service provider network may authenticate the CPE device when communicating via the overlay network. The service provider network may store an association between network configuration data of the network interface device and the CPE device provisioned via the network interface device and may provide the CPE device with an identity token that encodes this network configuration data. The CPE device may provide the identity token to a network element of the service provider network, and the service provider network may authenticate the identity of the CPE device using the identity token provided.