fix vlan filters

Each VF app can be declared on a single VLAN, the NIC will add 802.1q tags on every outgoing packet, and strip tags on incoming packets.