A method for configuring a network policy for a virtual port, comprising: creating, by the network management center, a physical network policy group in a local database, wherein the physical network policy group is a group of network policy configuration information that a physical switch uses for a virtual port of a virtual machine, VM, the virtual port of the VM is an interface between a virtual switch and the VM for connecting the virtual switch and the VM; receiving, by the network management center, a media access control, MAC, address of the virtual port, and a mapping between the MAC address of the virtual port of the new VM created by the server management center and a virtual network policy group sent by a server management center, wherein the virtual network policy group is a group of network policy configuration information that is used by the virtual switch to configure a network policy for the virtual port of the new VM, the virtual port is uniquely identified by the MAC address of the virtual port; establishing, by the network management center, a mapping locally by using the MAC address of the virtual port as the index, and associating the virtual network policy group, the physical network policy group, and the MAC address of the virtual port to form a virtual port policy association table; receiving, by the network management center, a request from the physical switch, wherein the request carries the MAC address of the virtual port, and the request is for obtaining the physical network policy group and the virtual network policy group corresponding to the MAC address of the virtual port; selecting, by the network management center, the physical network policy group and the virtual network policy group corresponding to the MAC address of the virtual port from the virtual port policy association table, and delivering the physical network policy group and the virtual network policy group to the physical switch, so that the physical switch configures the network policy for the virtual port corresponding to the MAC address according to the physical network policy group and the virtual network policy group. creating, by the network management center, a physical network policy group in a local database, wherein the physical network policy group is a group of network policy configuration information that a physical switch uses for a virtual port of a virtual machine, VM, the virtual port of the VM is an interface between a virtual switch and the VM for connecting the virtual switch and the VM; receiving, by the network management center, a media access control, MAC, address of the virtual port, and a mapping between the MAC address of the virtual port of the new VM created by the server management center and a virtual network policy group sent by a server management center, wherein the virtual network policy group is a group of network policy configuration information that is used by the virtual switch to configure a network policy for the virtual port of the new VM, the virtual port is uniquely identified by the MAC address of the virtual port; establishing, by the network management center, a mapping locally by using the MAC address of the virtual port as the index, and associating the virtual network policy group, the physical network policy group, and the MAC address of the virtual port to form a virtual port policy association table; receiving, by the network management center, a request from the physical switch, wherein the request carries the MAC address of the virtual port, and the request is for obtaining the physical network policy group and the virtual network policy group corresponding to the MAC address of the virtual port; selecting, by the network management center, the physical network policy group and the virtual network policy group corresponding to the MAC address of the virtual port from the virtual port policy association table, and delivering the physical network policy group and the virtual network policy group to the physical switch, so that the physical switch configures the network policy for the virtual port corresponding to the MAC address according to the physical network policy group and the virtual network policy group.