Virtual machine access device and method

The invention provides a virtual machine (VM) access device and method applied to a gateway. The method comprises: receiving a VM access request message transmitted from a client, acquiring VM access authority corresponding to the client according to the source IP address of the VM access request message, and determining a VM corresponding to the target IP address of the VM access request message and a virtual switch to which the VM accesses; issuing the VM access authority corresponding to the client to the virtual switch in order that the virtual switch controls the authority of the VM for accessing network resource; after the VM access authority is successively issued, forwarding the VM access request message transmitted from the client to the VM and forwarding a success access message returned from the VM to the client. The device and the method may control the authority of the client for accessing the VM so as to guarantee enterprise data security.