路由器MSR2600+CPU过高如何解决

不清楚哪里引起路由器cpu报错，Cpu usage threshold has been exceeded，以下为配置：

#

version 7.1.064, Release 0809P33

#

sysname H3C

#

security-zone intra-zone default permit

#

ip load-sharing mode per-flow src-ip global

#

nat static inbound 117.159.229.25 10.7.168.200 description hik

nat static outbound 10.7.168.200 117.159.229.25 description hik

#

dhcp enable

dhcp server always-broadcast

#

dns proxy enable

#

password-recovery enable

#

vlan 1

#

controller Cellular0/0

#

interface Aux0

#

interface Dialer0

mtu 1492

#

interface Dialer1

mtu 1492

#

interface NULL0

#

interface Vlan-interface1

description LAN-interface

ip address 10.7.168.1 255.255.255.0

tcp mss 1280

undo dhcp select server

ip subscriber l2-connected enable

ip subscriber initiator dhcp enable

ip subscriber initiator unclassified-ip enable

ip subscriber dhcp domain ipoeenabledomain

ip subscriber unclassified-ip domain ipoeenabledomain

#

interface GigabitEthernet0/0

port link-mode route

description Double_Line1

speed 1000 

ip address 39.164.83.144 255.255.255.128

dns server 211.138.24.66

dns server 211.138.30.66

tcp mss 1280

ip last-hop hold

packet-filter name WebPing2 inbound

packet-filter name WebHttpHttps2 inbound

nat outbound

nat server protocol tcp global current-interface 53 inside 10.7.168.13 56666

nat server protocol tcp global current-interface 76 inside 10.7.168.16 80

nat server protocol tcp global current-interface 78 inside 10.7.168.15 80

nat server protocol tcp global current-interface 81 inside 10.7.168.10 80

nat server protocol tcp global current-interface 83 inside 10.7.168.14 83

nat server protocol tcp global current-interface 84 inside 10.7.168.13 23

nat server protocol tcp global current-interface 85 inside 10.7.168.14 55554

nat server protocol tcp global current-interface 86 inside 10.7.168.12 222

nat server protocol tcp global current-interface 123 inside 10.7.168.14 123

nat server protocol tcp global current-interface 552 inside 10.7.168.15 555

nat server protocol tcp global current-interface 553 inside 10.7.168.15 555

nat server protocol tcp global current-interface 554 inside 10.7.168.14 554

nat server protocol tcp global current-interface 559 inside 10.7.168.14 559

nat server protocol tcp global current-interface 655 inside 10.7.168.14 655

nat server protocol tcp global current-interface 1443 inside 10.7.168.14 443

nat server protocol tcp global current-interface 1935 inside 10.7.168.14 1935

nat server protocol tcp global current-interface 5010 inside 10.7.168.14 5010

nat server protocol tcp global current-interface 6009 inside 10.7.168.14 6009

nat server protocol tcp global current-interface 6014 inside 10.7.168.14 6015

nat server protocol tcp global current-interface 6633 inside 192.168.2.1 6633

nat server protocol tcp global current-interface 7010 inside 10.7.168.14 7010

nat server protocol tcp global current-interface 7031 inside 10.7.168.14 7031

nat server protocol tcp global current-interface 7033 inside 10.7.168.14 7033

nat server protocol tcp global current-interface 7087 inside 10.7.168.14 7087

nat server protocol tcp global current-interface 7099 inside 10.7.168.14 7199

nat server protocol tcp global current-interface 7100 inside 10.7.168.14 7100

nat server protocol tcp global current-interface 7302 inside 10.7.168.14 7303

nat server protocol tcp global current-interface 7304 inside 10.7.168.14 7304

nat server protocol tcp global current-interface 7307 inside 10.7.168.14 7307

nat server protocol tcp global current-interface 7314 inside 10.7.168.14 7314

nat server protocol tcp global current-interface 7660 inside 10.7.168.14 7660

nat server protocol tcp global current-interface 8000 inside 10.7.168.10 8001

nat server protocol tcp global current-interface 8001 inside 10.7.168.14 8001

nat server protocol tcp global current-interface 8002 inside 10.7.168.16 8001

nat server protocol tcp global current-interface 8003 inside 10.7.168.15 8001

nat server protocol tcp global current-interface 8098 inside 10.7.168.1 8098

nat server protocol tcp global current-interface 8201 8202 inside 10.7.168.13 8201 8202

nat server protocol tcp global current-interface 8204 inside 10.7.168.13 8204

nat server protocol tcp global current-interface 8208 8220 inside 10.7.168.13 8208 8220

nat server protocol tcp global current-interface 8222 8400 inside 10.7.168.13 8222 8400

nat server protocol tcp global current-interface 8603 inside 10.7.168.14 10000

nat server protocol tcp global current-interface 8800 8999 inside 10.7.168.14 8800 8999

nat server protocol tcp global current-interface 9017 inside 10.7.168.14 10000

nat server protocol tcp global current-interface 9018 inside 10.7.168.14 9017

nat server protocol tcp global current-interface 14998 14999 inside 10.7.168.200 14998 14999

nat server protocol tcp global current-interface 15000 16999 inside 10.7.168.14 15000 16999

nat server protocol tcp global current-interface 17000 inside 10.7.168.14 17000

nat server protocol tcp global current-interface 55555 inside 10.7.168.14 55554

nat server protocol udp global current-interface 53 inside 10.7.168.13 56666

nat static enable

#

interface GigabitEthernet0/1

port link-mode route

description Double_Line2

duplex full

speed 1000 

ip address 117.159.229.25 255.255.255.192

dns server 114.114.114.114

dns server 8.8.8.8

tcp mss 1280

ip last-hop hold

packet-filter name WebPing3 inbound

packet-filter name WebHttpHttps3 inbound

nat outbound

nat server protocol tcp global current-interface 55555 inside 192.168.100.2 55554

nat static enable

#

interface GigabitEthernet0/2

port link-mode bridge

port link-type trunk

port trunk permit vlan 1

speed 1000 

#

interface GigabitEthernet0/3

port link-mode bridge

port link-type trunk

port trunk permit vlan 1

speed 1000 

duplex full

#

interface GigabitEthernet0/4

port link-mode bridge

port link-type trunk

port trunk permit vlan 1

speed 1000 

duplex full

#

interface GigabitEthernet0/5

port link-mode bridge

port link-type trunk

port trunk permit vlan 1

#

interface GigabitEthernet0/6

port link-mode bridge

#

interface GigabitEthernet0/7

port link-mode bridge

#

interface GigabitEthernet0/8

port link-mode bridge

#

interface GigabitEthernet0/9

port link-mode bridge

#

security-zone name Local

#

security-zone name Trust

#

security-zone name DMZ

#

security-zone name Untrust

#

security-zone name Management

#

scheduler logfile size 16

#

line class aux

user-role network-admin

#

line class tty

user-role network-operator

#

line class usb

user-role network-admin

#

line class vty

user-role network-operator

#

line aux 0

user-role network-admin

#

line vty 0 63

authentication-mode scheme

user-role network-operator

#

ip route-static 0.0.0.0 0 GigabitEthernet0/0 39.164.83.129

ip route-static 0.0.0.0 0 GigabitEthernet0/1 117.159.229.1

#

acl advanced name WebHttpHttps2

rule 0 permit tcp source 59.41.46.147 0 destination-port eq www

rule 1 permit tcp source 59.41.46.147 0 destination-port eq 8098

rule 2 permit tcp source 59.41.46.148 0 destination-port eq www

rule 3 permit tcp source 59.41.46.148 0 destination-port eq 8098

rule 4 permit tcp source 59.41.46.145 0 destination-port eq www

rule 5 permit tcp source 59.41.46.145 0 destination-port eq 8098

rule 6 permit tcp source 14.116.207.97 0 destination-port eq www

#

acl advanced name WebHttpHttps3

rule 65533 deny tcp destination-port eq www

rule 65534 deny tcp destination-port eq 8098

#

acl advanced name WebPing2

rule 1 deny icmp icmp-type echo

#

acl advanced name WebPing3

rule 1 deny icmp icmp-type echo

#

password-control enable 

undo password-control aging enable 

undo password-control history enable 

password-control length 6

password-control login-attempt 3 exceed lock-time 10

password-control update-interval 0

password-control login idle-time 0

#

domain ipoeenabledomain

authentication ipoe none

authorization ipoe none

accounting ipoe none

#

domain system

#

domain default enable system

#

role name level-0

description Predefined level-0 role

#

role name level-1

description Predefined level-1 role

#

role name level-2

description Predefined level-2 role

#

role name level-3

description Predefined level-3 role

#

role name level-4

description Predefined level-4 role

#

role name level-5

description Predefined level-5 role

#

role name level-6

description Predefined level-6 role

#

role name level-7

description Predefined level-7 role

#

role name level-8

description Predefined level-8 role

#

role name level-9

description Predefined level-9 role

#

role name level-10

description Predefined level-10 role

#

role name level-11

description Predefined level-11 role

#

role name level-12

description Predefined level-12 role

#

role name level-13

description Predefined level-13 role

#

role name level-14

description Predefined level-14 role

#

user-group system

#

local-user admin class manage

service-type telnet http https

authorization-attribute user-role network-admin

#

session statistics enable

#

l2tp enable

#

ip https port 8098

ip http enable

ip https enable

web new-style

#

wlan global-configuration

#

wlan ap-group default-group

vlan 1

#

uapp-control

policy name AuditLog audit

  source-zone trust

  destination-zone untrust

  rule 1 any behavior any bhcontent any keyword equal any action permit audit-logging

#

dac storage service audit limit hold-time 1

dac storage service traffic limit hold-time 1

#

 

return