A flow entry management method comprises receiving a management instruction for any flow entry, where the management instruction is initiated by a controller connected to a switch, wherein the switch may first determine, according to an obtained management authority level of the the controller relative to the switch and a security level of the any flow entry, when the management authority level of the any controller relative to the the switch is not lower than the security level of the a flow entry corresponding to the management instruction initiated by the any controller, that the controller has an authority to perform corresponding management on the any flow entry, and perform corresponding management on the any flow entry according to the management instruction initiated by the controller.