Message processing control method and device

The invention provides a message processing control method applied to network equipment. The method comprises the following steps of: step A: creating at least one retaining VPN (virtual private network) forwarding unit on a forwarding plane, and establishing the binding relationship between the retaining VPN forwarding unit and a retaining VPN interface identifier; step B: issuing ACL (access control list) rules to an ACL execution module, wherein the ACL rules are used for reporting specified user messages to a retaining VPN interface; and step C: issuing forwarding table items to the VPN forwarding unit so as to guide message forwarding of the retaining VPN forwarding unit. The message processing control method utilizes isolation characteristics among the VPN forwarding units, the longest matching principle of three-layer forwarding and natural support for equivalent routing, and solves the problems of strategy routing that at present, since the issuing sequence needs to be calculated, an administrator is