This is quite straightforward once you think of the CIP Path as sets of Ports and Addresses, and understand that an IP Address, a Slot Number, and a ControlNet Node are all "Addresses". Port 1 is the backplane, and Port 2 is the Network.
RSLogix 5000 Help has the definitive article to which I always refer.
I think that you are describing a situation where you have a ControlLogix that can reach another 1756 chassis over Ethernet, but the SLC-5/05 is connected to that "bridge chassis" via a different 1756-ENET/ENBT/EN2T module.
The CIP Path goes from your controller to its local ENBT slot, then out Port 2.
The CIP Path then goes to the first 1756-ENBT module's IP address, then to Port 1.
The CIP Path then goes to the second 1756-ENBT module's slot, then out Port 2.
The CIP Path then goes to the SLC-5/05 IP address, then to Port 0.
The last "port" is fake; the SLC doesn't really have a backplane object.
If you need more help, describe the route your message has to take, using IP addresses and 1756 Slot numbers.