A policy conflict resolution method, wherein the method comprises: receiving a first control policy and decomposing the first control policy into m first rules, and receiving a second control policy and decomposing the second control policy into n second rules, wherein m and n are natural numbers, both the first control policy and the second control policy act on a first forwarding device, and the first rules and the second rules each comprise a matching field and an action; performing negation on each first rule by keeping the matching field of said first rule unchanged and performing negation on the action of said first rule, to obtain a first negation rule, performing negation on each second rule by keeping the matching field of said second rule unchanged and performing negation on the action of said second rule, to obtain a second negation rule, and generating a corresponding first execution rule by using each first negation rule and each second negation rule according to a rule synthesis principle, wherein the rule synthesis principle comprises: forming the first execution rule by using the following: an intersection between a matching field of a first negation rule and a matching field of a second negation rule that are of a same matching field type or a union between a matching field of a first negation rule and a matching field of a second negation rule that are of different matching field types, and an intersection between an action of the first negation rule and an action of the second negation rule; and using a first execution rule, in which there is no intersection between the matching field of the first negation rule and the matching field of the second negation rule that are of the same matching field type, as an invalid rule; and deleting the invalid rule, using a remaining one of the first execution rules as a valid first execution rule, performing negation on each valid first execution rule by keeping the matching field of said valid first execution rule unchanged and performing negation on the action of said valid first execution rule, and converting, according to a protocol supported by the first forwarding device, each valid first execution rule on which negation has been performed into a corresponding forwarding entry of the first forwarding device. receiving a first control policy and decomposing the first control policy into m first rules, and receiving a second control policy and decomposing the second control policy into n second rules, wherein m and n are natural numbers, both the first control policy and the second control policy act on a first forwarding device, and the first rules and the second rules each comprise a matching field and an action; performing negation on each first rule by keeping the matching field of said first rule unchanged and performing negation on the action of said first rule, to obtain a first negation rule, performing negation on each second rule by keeping the matching field of said second rule unchanged and performing negation on the action of said second rule, to obtain a second negation rule, and generating a corresponding first execution rule by using each first negation rule and each second negation rule according to a rule synthesis principle, wherein the rule synthesis principle comprises: forming the first execution rule by using the following: an intersection between a matching field of a first negation rule and a matching field of a second negation rule that are of a same matching field type or a union between a matching field of a first negation rule and a matching field of a second negation rule that are of different matching field types, and an intersection between an action of the first negation rule and an action of the second negation rule; and using a first execution rule, in which there is no intersection between the matching field of the first negation rule and the matching field of the second negation rule that are of the same matching field type, as an invalid rule; and deleting the invalid rule, using a remaining one of the first execution rules as a valid first execution rule, performing negation on each valid first execution rule by keeping the matching field of said valid first execution rule unchanged and performing negation on the action of said valid first execution rule, and converting, according to a protocol supported by the first forwarding device, each valid first execution rule on which negation has been performed into a corresponding forwarding entry of the first forwarding device.