A method may be disclosed in accordance with some embodiments, comprising: receiving, at a virtualizing gateway between the eNodeB and a first core network, a service request from a first user equipment (UE) via an eNodeB; applying a filter to an identifier of the UE to authenticate the UE; and forwarding, based on the applied filter, the service request from the first UE to the first core network. The identifier may be an international mobile subscriber identity (IMSI). The filter may be a whitelist containing a plurality of IMSIs to be granted service or a blacklist containing a plurality of IMSIs to be denied service, the service request may be a Long Term Evolution (LTE) attach request, and the method may further comprise forwarding the message from the first UE to a first mobility management entity (MME) in the first core network.