Policy conflict resolution method and apparatus

摘要

This application discloses a policy conflict resolution method which includes receiving a first control policy and decomposing the first control policy into m first rules, and receiving a second control policy and decomposing the second control policy into n second rules. The method also includes performing negation on each first rule to obtain a first negation rule, performing negation on each second rule to obtain a second negation rule, and generating a corresponding first execution rule by using each first negation rule and each second negation rule according to a rule synthesis principle. Additionally, the method includes deleting an invalid rule, using a remaining one of the first execution rules as a valid first execution rule, performing negation on each valid first execution rule, and converting, according to a protocol supported by a first forwarding device, each valid first execution rule on which negation has been performed into a corresponding forwarding entry of the first forwarding device.