Hi,
try this:
entry lacp {
if match all {
ethernet-destination-address 01:80:c2:00:00:02 ;
} then {
redirect-port 22 ;
count cnt_lcap;
}}
add that ACL on the correct port and use the forwarding port in the redirect-port action (22 in the example). If you have a LAG, add one ACL per physical port. Do the return path as well.