A method of controlling access, wherein, the method comprising: sending, by a VXLAN Tunnel End Point, VTEP, an authentication request packet to an authentication server upon receiving a user access request from a user terminal , so as to cause the authentication server to perform an authentication for a user; receiving, by the VTEP, authorization information of the user for which the authentication is passed, wherein the authorization information is sent by the authentication server and comprises a Virtual Switch Instance, VSI, identifier or a Virtual eXtensible LAN, VXLAN, identifier; creating, by the VTEP, upon receiving the authorization information, an Attachment Circuit, AC, interface on a user port of the VTEP connecting the user terminal; associating, by the VTEP, the AC interface with the authorization information; and wherein the method further comprises: receiving, by the VTEP, a user packet from the user terminal through the user port; determining, by the VTEP, the AC interface corresponding to the user port, and at least one of: a source Media Access Control, MAC, address of the user packet and a Virtual Local Area Network, VLAN, identifier carried in the user packet; and determining, by the VTEP, the authorization information associated with the determined AC interface; obtaining, by the VTEP, a VXLAN packet by performing a VXLAN encapsulation on the user packet according to the authorization information; and sending out, by the VTEP, the obtained VXLAN packet. sending, by a VXLAN Tunnel End Point, VTEP, an authentication request packet to an authentication server upon receiving a user access request from a user terminal , so as to cause the authentication server to perform an authentication for a user; receiving, by the VTEP, authorization information of the user for which the authentication is passed, wherein the authorization information is sent by the authentication server and comprises a Virtual Switch Instance, VSI, identifier or a Virtual eXtensible LAN, VXLAN, identifier; creating, by the VTEP, upon receiving the authorization information, an Attachment Circuit, AC, interface on a user port of the VTEP connecting the user terminal; associating, by the VTEP, the AC interface with the authorization information; and wherein the method further comprises: receiving, by the VTEP, a user packet from the user terminal through the user port; determining, by the VTEP, the AC interface corresponding to the user port, and at least one of: a source Media Access Control, MAC, address of the user packet and a Virtual Local Area Network, VLAN, identifier carried in the user packet; and determining, by the VTEP, the authorization information associated with the determined AC interface; obtaining, by the VTEP, a VXLAN packet by performing a VXLAN encapsulation on the user packet according to the authorization information; and sending out, by the VTEP, the obtained VXLAN packet. receiving, by the VTEP, a user packet from the user terminal through the user port; determining, by the VTEP, the AC interface corresponding to the user port, and at least one of: a source Media Access Control, MAC, address of the user packet and a Virtual Local Area Network, VLAN, identifier carried in the user packet; and determining, by the VTEP, the authorization information associated with the determined AC interface; obtaining, by the VTEP, a VXLAN packet by performing a VXLAN encapsulation on the user packet according to the authorization information; and sending out, by the VTEP, the obtained VXLAN packet. <EOS>