The embodiment of the invention relates to the technical field of wireless communication, particularly to a method and a device for access control, and the method and the device are used for solving aproblem that user equipment cannot safely access to an APG in the existing technology. In the embodiment of the invention, when the user equipment need to access to a network, the user equipment anda local service center perform network layer two-way authentication; after passing through the network layer two-way authentication, the user equipment perform access layer two-way authentication withthe corresponding access point group, thereby enabling the user equipment to access to the corresponding access point group after passing through the access layer two-way authentication. Since two-layer two-way authentication is used in the embodiment of the invention, and the user equipment can access to the corresponding access point group after passing through the two-layer two-way authentication, the user equipment can safely access to the corresponding access point group.