net: filter: add vlan tag access