I own: RB4011iGS+5HACQ2HnD (primary router in the wiring closet with both 2.4 and 5 Ghz wifi services)
RB2011UAS-2hND - Used as a bridge upstairs with a CAP2nd connected via the POE port.

THis was all working flawlessly for years and then my wife power cycled the house and none of my passwords were working - and the router was really slow...I wasnt sure if I got hacked so I restored the 4011 from backup and the RB2011 was reverted to factory using Reinstall. All passwords beefed up and ip restrictions placed on who can authenticate.

Now my problem is that I didnt back up the config for the RB2011 (bridge) and am wondering if you can leave that in bridge mode AND configure capsman as well ?

Do you use vlans?
The RB2011 is basically acting as a switch?