A method for access control of a network service, which is implemented based on a terminal with capability of accessing a wireless local area network and capability of accessing a mobile network, characterized by comprising: a route establishing step, in which the terminal obtains a first Internet Protocol, IP, address allocated by a wireless local area network, WLAN, and a second IP address allocated by a mobile core network packet domain device according to service configuration information, wherein the service configuration information comprises link information associated with a service and route configuration information, wherein the route configuration information comprises a domain name of a WLAN service server, or comprises an IP address and port information of a mobile packet domain service server, and establishes Internet service route options corresponding to the first IP address and mobile packet domain service route options corresponding to the second IP address according to the route configuration information; these route options enable IP messages with a destination address being an IP of the mobile packet domain service server to be transmitted through a device port corresponding to the second IP address, and IP messages with a destination address being not the IP of the mobile packet domain service server to be transmitted through a device port of the WLAN corresponding to the first IP address; a route matching step, in which the terminal matches the service route options according to a destination address of an original service message; and a message encapsulating and transmitting step, in which the terminal encapsulates the original service message according to the matched service route options and transmits the encapsulated service data message. a route establishing step, in which the terminal obtains a first Internet Protocol, IP, address allocated by a wireless local area network, WLAN, and a second IP address allocated by a mobile core network packet domain device according to service configuration information, wherein the service configuration information comprises link information associated with a service and route configuration information, wherein the route configuration information comprises a domain name of a WLAN service server, or comprises an IP address and port information of a mobile packet domain service server, and establishes Internet service route options corresponding to the first IP address and mobile packet domain service route options corresponding to the second IP address according to the route configuration information; these route options enable IP messages with a destination address being an IP of the mobile packet domain service server to be transmitted through a device port corresponding to the second IP address, and IP messages with a destination address being not the IP of the mobile packet domain service server to be transmitted through a device port of the WLAN corresponding to the first IP address; a route matching step, in which the terminal matches the service route options according to a destination address of an original service message; and a message encapsulating and transmitting step, in which the terminal encapsulates the original service message according to the matched service route options and transmits the encapsulated service data message.