add support for vlan rewrite in ncs vpn backend