I propose the setup where each virtual machine corresponds to a single network and device. Each virtual machine will be placed in its own subnet, which will eliminate, firstly, the visibility of virtual machines to each other over the network, and secondly, any consolidation under a common router/switch.
whisp me for more info
ps: description will be update soon