A method for provisioning a virtual router providing virtual wireless services, at a base station comprising a small cell transceiver associated with a cellular network and a wireless access point, the wireless access point being configured to exchange short-range communications, the method comprising: receiving (710; 810), by the base station via the wireless access point of the base station, a first request to connect to a virtual router from a first client device, the first request including a service set identifier, SSID; determining (730; 820), by the base station, that the SSID is registered by a user of the client device for virtual wireless services; determining that authentication credentials utilized to provision the virtual wireless services are associated with the SSID; receiving, by a virtual router service element associated with the base station, via the cellular network, a provision message including the SSID and the authentication credentials based at least in part on the SSID being registered, and on the authentication credentials being associated with the SSID; provisioning (740; 830), by the virtual router service element, based on the received provision message, a virtual router to be accessible through the wireless access point, the virtual router being identifiable using the SSID; receiving (480; 750), by the base station, from the first client device, a first authentication request to connect to the virtual router, the first authentication request including the SSID; authenticating (485; 760), by the base station, the first client device based at least in part on whether the first authentication request includes information matching the authentication credentials; receiving (490; 770), by the base station, a first association request from the first client device, the first association request including the SSID; and associating (495; 780; 840), by the base station, the first client device with the virtual router. receiving (710; 810), by the base station via the wireless access point of the base station, a first request to connect to a virtual router from a first client device, the first request including a service set identifier, SSID; determining (730; 820), by the base station, that the SSID is registered by a user of the client device for virtual wireless services; determining that authentication credentials utilized to provision the virtual wireless services are associated with the SSID; receiving, by a virtual router service element associated with the base station, via the cellular network, a provision message including the SSID and the authentication credentials based at least in part on the SSID being registered, and on the authentication credentials being associated with the SSID; provisioning (740; 830), by the virtual router service element, based on the received provision message, a virtual router to be accessible through the wireless access point, the virtual router being identifiable using the SSID; receiving (480; 750), by the base station, from the first client device, a first authentication request to connect to the virtual router, the first authentication request including the SSID; authenticating (485; 760), by the base station, the first client device based at least in part on whether the first authentication request includes information matching the authentication credentials; receiving (490; 770), by the base station, a first association request from the first client device, the first association request including the SSID; and associating (495; 780; 840), by the base station, the first client device with the virtual router.