When I have in the CAP setup as “discovery interface” bridge where is ether1-5, than CAPsMAN is connected. But when I will change it only to ether2 where is router with CAPsMAN, than I have "no connection”, but when I add into CAPsMAN Addresses a IP of my router, connection is also working.
Question is why setup with only ether2 doesn’t work and what is correct setup.
Not when ether interfaces are part of bridge.
As indicated already (and to continue with the Borg analogy), if ether interfaces are part of bridge they have been assimilated by it so you need to use the upper level (bridge) as discovery interface.
When you use IP of controller, you use L3 (via bridge) and that's why it will work with that config.
Discovery without any other parameter works on L2.
You can add IP address of controller but then you're moving to L3.
You can even add VLAN to the mix and then you need to be careful there the correct interface is specified.
So if it works or not, depends on your config.
Correct config for most AP running under capsman (without VLAN) is to have all interfaces connected to bridge.
There is a reason that's the default config when doing "reset to caps mode".
Normally yes, the AP is a switch combining all the cabled interfaces and the radios.
If you prefer, most common AP's have only one ethernet port (the one with the connection to the "main" router) and one (or two) radio(s) all assembled in a bridge.
As well most common non-wifi routers have one "WAN" port (usually blue in colour) connected to the ISP/internet and (usually) 4 "LAN" ports (usually yellow in colour) assembled in a bridge, while wifi routers have the same arrangement with a "WAN" port and 4 "LAN" ports assembled in a bridge together with radio(s).
The above configurations are usually "fixed" and you buy either an AP or a router.
An Ax2 is a very flexible device, that allows to manage each interface by itself, but the most common configurations are the same as the above:
wifi AP (with all radios and ports into a bridge)
wifi router (with all radios and ports BUT ether1 assembled into a bridge "LAN" and ether1 self-standing "WAN")
But you could do crazy things like (don't do it) make on it two bridges, one with all ether ports in it and one with the two radios, using the first bridge as a cabled switch and the two radios as an independent range extender, keeping the two bridges separated.