net/sfc/base: fix tunnel configuration