Better error message for missing route of VPN
Fixed check for multiple promiscuous ports
Print rule for some internal_err
Ignore aggregates enclosing tunnel or id_hosts.