assume tunnel if no cidr provided, closes #244