add --tunnel option to IVS

Reviewer: @poolakiran

This change disables tunnels by default. Fixes XE-50.