A method for providing a network traversing service, comprising: receiving, by the secure traversing server, a network traversing tunnel resource creating instruction sent by a resource management center, wherein the network traversing tunnel resource creating instruction carries the number of virtual access points needing to be leased by a carrier and the number of users that can be borne by each virtual access point; creating, by the secure traversing server and according to the received number of virtual access points and the received number of users that can be borne by each virtual access point, a network traversing tunnel resource that satisfies a leasing requirement of the carrier, wherein the network traversing tunnel resource comprises a virtual access point and a service channel interconnected to the virtual access point, the virtual access point is a virtualized secure traversing gateway for establishing a virtual private network VPN tunnel with a terminal and providing an access capability of the VPN tunnel for the terminal; and returning, by the secure traversing server, information of the created network traversing tunnel resource to the resource management center;receiving, by the secure traversing server, a network traversing tunnel registering request from the terminal, wherein the network traversing tunnel registering request carries information of a first virtual access point to be accessed by the terminal, the identifier of the carrier to which the terminal belongs, and the address of the core network of the carrier; determining, by the secure traversing server, whether the first virtual access point is the virtual access point selected by the secure traversing server for the terminal; if the first virtual access point is not the virtual access point selected by the secure traversing server for the terminal, selecting, by the secure traversing server and according to the identifier of the carrier and in the network traversing tunnel resource leased by the carrier, a second virtual access point for the terminal; and returning, by the secure traversing server, a network traversing tunnel registration success message to the terminal, wherein the network traversing tunnel registration success message comprises information of the second virtual access point. receiving, by the secure traversing server, a network traversing tunnel resource creating instruction sent by a resource management center, wherein the network traversing tunnel resource creating instruction carries the number of virtual access points needing to be leased by a carrier and the number of users that can be borne by each virtual access point; creating, by the secure traversing server and according to the received number of virtual access points and the received number of users that can be borne by each virtual access point, a network traversing tunnel resource that satisfies a leasing requirement of the carrier, wherein the network traversing tunnel resource comprises a virtual access point and a service channel interconnected to the virtual access point, the virtual access point is a virtualized secure traversing gateway for establishing a virtual private network VPN tunnel with a terminal and providing an access capability of the VPN tunnel for the terminal; and returning, by the secure traversing server, information of the created network traversing tunnel resource to the resource management center;receiving, by the secure traversing server, a network traversing tunnel registering request from the terminal, wherein the network traversing tunnel registering request carries information of a first virtual access point to be accessed by the terminal, the identifier of the carrier to which the terminal belongs, and the address of the core network of the carrier; determining, by the secure traversing server, whether the first virtual access point is the virtual access point selected by the secure traversing server for the terminal; if the first virtual access point is not the virtual access point selected by the secure traversing server for the terminal, selecting, by the secure traversing server and according to the identifier of the carrier and in the network traversing tunnel resource leased by the carrier, a second virtual access point for the terminal; and returning, by the secure traversing server, a network traversing tunnel registration success message to the terminal, wherein the network traversing tunnel registration success message comprises information of the second virtual access point.