A method for joining an access points group, the method comprising performing, by an access point, network-layer mutual authentication with a local service center when the access point determines that the access point is going to join an access points group; and performing, by the access point, network configuration according to configuration information in a network configuration message sent by the local service center, when the access point receives the network configuration message; wherein the network configuration message is sent by the local service center when the access point determines that network-layer mutual authentication is passed; wherein performing, by the access point, network-layer mutual authentication with the local service center comprises: authenticating, by the access point, a network side according to an access points group identifier corresponding to the access points group, and a network-layer authentication parameter corresponding to the access point, which are sent by the local service center to the access point; and returning, by the access point, a network-layer authentication response message comprising the access points group identifier to the local service center after authentication on the network side is passed, so that the local service center authenticates the access point according to the network-layer authentication response message. performing, by an access point, network-layer mutual authentication with a local service center when the access point determines that the access point is going to join an access points group; and performing, by the access point, network configuration according to configuration information in a network configuration message sent by the local service center, when the access point receives the network configuration message; wherein the network configuration message is sent by the local service center when the access point determines that network-layer mutual authentication is passed; wherein performing, by the access point, network-layer mutual authentication with the local service center comprises: authenticating, by the access point, a network side according to an access points group identifier corresponding to the access points group, and a network-layer authentication parameter corresponding to the access point, which are sent by the local service center to the access point; and returning, by the access point, a network-layer authentication response message comprising the access points group identifier to the local service center after authentication on the network side is passed, so that the local service center authenticates the access point according to the network-layer authentication response message. authenticating, by the access point, a network side according to an access points group identifier corresponding to the access points group, and a network-layer authentication parameter corresponding to the access point, which are sent by the local service center to the access point; and returning, by the access point, a network-layer authentication response message comprising the access points group identifier to the local service center after authentication on the network side is passed, so that the local service center authenticates the access point according to the network-layer authentication response message.