net/ice/base: support adding MAC rules on specific port