Randomly connection lost to CRS317

I have a strange problem. Sometimes i can not connect to the management IP of my CRS317.
There is an interface at VLAN1000. Winbox sometimes can not connect to the switch or when it is connected it loses the connection.

Ping also does not work. I tried to ping the management IP from my firewall but it does not work. When pinging the management IP from an other mikrotik device the device suddenly gets accessable.

Where could the problem be?
Is there a mistake in my configuration?

/interface bridge
add admin-mac=C4:AD:34:6D:40:37 auto-mac=no comment=defconf frame-types=admit-only-vlan-tagged ingress-filtering=yes name=bridge vlan-filtering=yes
/interface ethernet
set [ find default-name=sfp-sfpplus1 ] auto-negotiation=no
set [ find default-name=sfp-sfpplus12 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full,10000M-full
set [ find default-name=sfp-sfpplus13 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full,10000M-full
set [ find default-name=sfp-sfpplus14 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full,10000M-full
set [ find default-name=sfp-sfpplus15 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full,10000M-full
set [ find default-name=sfp-sfpplus16 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full,10000M-full
/interface vlan
add interface=bridge name=vlan1000 vlan-id=1000
/interface bonding
add mode=802.3ad name=ch:downlink slaves=sfp-sfpplus16,sfp-sfpplus15
add mode=802.3ad name=ch:freenas slaves=sfp-sfpplus9,sfp-sfpplus10
add mode=802.3ad name=ch:pfsense slaves=sfp-sfpplus14,sfp-sfpplus13
add mode=802.3ad name=ch:proxmox slaves=sfp-sfpplus11,sfp-sfpplus12
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/interface bridge port
add bridge=bridge comment=defconf frame-types=admit-only-untagged-and-priority-tagged interface=sfp-sfpplus1 pvid=1000
add bridge=bridge comment=defconf interface=sfp-sfpplus2
add bridge=bridge comment=defconf interface=sfp-sfpplus3
add bridge=bridge comment=defconf interface=sfp-sfpplus4
add bridge=bridge comment=defconf interface=sfp-sfpplus5
add bridge=bridge comment=defconf interface=sfp-sfpplus6
add bridge=bridge comment=defconf interface=sfp-sfpplus7
add bridge=bridge comment=defconf interface=sfp-sfpplus8
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ch:pfsense
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ch:proxmox
add bridge=bridge frame-types=admit-only-vlan-tagged ingress-filtering=yes interface=ch:downlink
add bridge=bridge frame-types=admit-only-untagged-and-priority-tagged ingress-filtering=yes interface=ch:freenas pvid=1000
/ip neighbor discovery-settings
set discover-interface-list=none
/interface bridge vlan
add bridge=bridge tagged=ch:pfsense,ch:downlink,ch:proxmox,bridge vlan-ids=1000
add bridge=bridge tagged=ch:pfsense,ch:proxmox,ch:downlink vlan-ids=1001
add bridge=bridge tagged=ch:pfsense,ch:downlink,ch:proxmox vlan-ids=1051
/ip address
add address=192.168.1.23/24 interface=vlan1000 network=192.168.1.0
/ip dns
set servers=192.168.1.254
/ip route
add distance=1 gateway=192.168.1.254
/system clock
set time-zone-name=Europe/Vienna
/system identity
set name=TestLab
/system ntp client
set enabled=yes primary-ntp=192.168.1.254
/system routerboard settings
set boot-os=router-os
/tool bandwidth-server
set authenticate=no enabled=no
/tool graphing interface
add interface=ch:pfsense store-on-disk=no
add interface=ch:downlink store-on-disk=no
add interface=ch:proxmox store-on-disk=no
add interface=ch:freenas store-on-disk=no
/tool graphing resource
add store-on-disk=no
/tool mac-server
set allowed-interface-list=none
/tool mac-server mac-winbox
set allowed-interface-list=none
/tool mac-server ping
set enabled=no