Do you have some spare power adapter for hAP ax3 ? It sounds to me that there is maybe a problem with power supply when you load your device with some more intensive traffic.
I would also add to check the PoE injector (if used, not specified),
and the length of the cable used, in case they cause a voltage drop or do not pass enough current...
Not sure to understand the issue, IF the pppoe connection on ether1 of the CRS326 is - say - 150 or 200 Mbit, the CRS326 can manage it with the same speed as an Ax2 or Ax3 would do.
The CRS is a "Cloud Router Switch", it has a relatively weak CPU, and while is pretty fast at switching it is relatively slow at routing.
The Ax2 and Ax3 are (roughly) 4-5 times faster at routing.
The usual reference value from Mikrotik test results used to have an idea of the performance in routing is the 512 byte packet with 25 firewall rules.
CRS326 269.9 Mbps
Ax3 1145.2 Mbps
Ax2 912.9 Mbps
If your (PPPOE) ISP connection is - say - 1 GB, the CRS326 is a bottleneck, if it is - still say - 100-200 Mb, maybe up to 300 or so, it is fine.
It depends also on the placement of the devices (for their AP functions) but if you have a fastish connection you should use the Ax2 or the Ax3 as router connecting it to the ISP line, and use the CRS 326 as switch only.