net/ice/base: allow GENEVE and VXLAN rules with VLAN