The invention discloses a network configuration method and device for a user terminal, which relates to the communication filed and is aimed at solving the problem that a configuration server is unable to carry out network configuration for the user terminal according to the prior art when a firewall or a NAT function exists. The technical proposal of the invention is that: the network configuration method for the user terminal is applicable to a global microwave access interoperability network; the method comprises the following steps: acquiring the IP address of the configuration server, and establishing a secure transmission layer protocol tunnel between the user terminal and the configuration server according to the IP address; acquiring configuration data through the established secure transmission layer protocol tunnel, and configuring the parameters of the user terminal according to the acquired configuration data. The network configuration method and device for the user terminal provided by the invention can be applicable to a WiMAX network and carry out network configuration for MS/SS according to the framework provided by OMA.