An on-demand access tunnel to a service provider is provided for a mobile device that first receives information about supported service providers from a wireless communication network entity. The mobile device can select a supported service provider and start an association process to communicate with the selected service provider. The network entity determines the selected service provider and sets up a tunnel connection from an access point of the wireless communication network to the selected service provider. The tunnel connection is torn down when the mobile device dissociates from the access point and no other device is connected to the service provider network using the tunnel connection.