ISSUE=9407 supporting STRIP_VLAN when output port allows vlan -1

If the action is strip_vlan, allow it only if the output port allows untagged traffic rather than automatically denying.