adding a restriction for nodes which contain tunnel interfaces