Question on Virtual Servers and inner-tunnel