How to indicate a link is protected and which tunnel is the backup?