net/bnxt: support redirecting tunnel packets to VF