H3C MSR 900路由器CPU占用率100%

公司路由器带办公电脑40台，手机等无线设备30台，只要下载或上传东西，路由器的CPU占用率就达到90%以上，延迟高，死机；
配置如下：

#

 version 5.20, Release 2311

#

 sysname H3C

#

 clock timezone Beijing add 08:00:00

#

 l2tp enable

#

 firewall enable

 firewall fragments-inspect

#

 domain default enable system

#

 dns resolve

#

 telnet server enable

#

 dar p2p signature-file flash:/p2p_default.mtd

#

 qos carl 1 destination-ip-address range 186.88.1.20 to 186.88.1.230 per-address

 qos carl 2 source-ip-address range 186.88.1.20 to 186.88.1.230 per-address

#

 port-security enable

#

 ip user-based-sharing enable

#

acl number 4999

 rule 0 deny source-mac 54a0-5086-9528 ffff-ffff-ffff

 rule 2 permit

#

vlan 1

#

domain system

 authentication ppp local

 access-limit disable

 state active

 idle-cut disable

 self-service-url disable

#

traffic classifier urllimit-1 operator or

#

traffic behavior behaviorforfilter

 filter deny

#

#

interface Dialer10

 nat outbound

 nat outbound 3000

 nat server 1 protocol tcp global current-interface 3389 inside 186.88.1.227 3389

 nat server 15 protocol tcp global current-interface ftp inside 186.88.1.227 ftp

 nat server 17 protocol tcp global current-interface 90 inside 186.88.1.95 90

 nat server 18 protocol tcp global current-interface 1433 inside 186.88.1.227 1433

 nat server 19 protocol tcp global current-interface 6666 inside 186.88.1.123 6666

 nat server 20 protocol tcp global current-interface 41362 inside 186.88.1.123 41362

 nat server 22 protocol tcp global current-interface 18168 inside 186.88.1.147 18168

 nat server 12 protocol tcp global current-interface 10010 inside 186.88.1.25 3389

 nat server 21 protocol tcp global current-interface 10095 inside 186.88.1.95 3389

 nat server 16 protocol tcp global current-interface gopher inside 186.88.1.227 gopher

 nat server 23 protocol tcp global current-interface 443 inside 186.88.1.227 8443

 nat server 2 protocol tcp global current-interface 18605 inside 186.88.1.8 3389

 nat server 3 protocol tcp global current-interface 18608 inside 186.88.1.88 3389

 nat server 6 protocol tcp global current-interface 4200 inside 186.88.1.36 4200

 firewall packet-filter 4999 outbound

 link-protocol ppp

 ppp chap user 310127704

 ppp chap password cipher $c$3$kXarX0AZklkvuIJGVpvGBuiJSrkJdanpSc1JBg==

 ppp pap local-user 310127704 password cipher $c$3$tTfIBS3NDa691ZITeWqoUukp1eA+ms6vf7ljJw==

 ppp ipcp dns admit-any

 ppp ipcp dns request

 mtu 1492

 ip address ppp-negotiate

 tcp mss 1024

 dialer user username

 dialer-group 10

 dialer bundle 10

 qos car inbound carl 1 cir 5000 cbs 500000 ebs 0 green pass red discard

 qos car outbound carl 2 cir 5000 cbs 64000 ebs 0 green pass red discard

跪求各位大神给看看 问题出在哪里

1个路由器，2台交换机