spec: add tunnel identifier