KVM Networking - PNET vs VNET MACs and JUMPStation Host Planning

Used an unused bridge br10 to for external Networking (within guest) as mentioned below:
---


$ cat /etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
# VLan 11  interface
iface eno2 inet manual
# Bridge
auto br11
iface br11 inet static
        address 10.1.11.15
        netmask 255.255.255.0
        network 10.1.11.0
        gateway 10.1.11.1
        broadcast 10.1.11.255
        bridge_ports eno2
        bridge_stp off
        bridge_fd 0
        bridge_maxwait 0
        dns-nameservers 8.8.8.8
#VLam10 interface
#iface eno1 inet manual
# Bridge
auto br10
iface br10 inet auto
#        address XX.17.93.156
#        netmask 255.255.255.248
#       network XX.17.93.152
#        gateway XX.17.93.153
#        broadcast XX.17.93.159
#        dns-nameservers 8.8.8.8
#
#        bridge_ports eno1
#        bridge_stp off
#        bridge_fd 0
#       bridge_maxwait 0
#        dns-nameservers 8.8.8.8
#Vlan13 interface
iface eno4 inet manual
# Bridge
auto br13
iface br13 inet static
        address 10.1.13.15
        netmask 255.255.255.0
        network 10.1.13.0
        bridge_ports eno4
        bridge_stp off
        bridge_fd 0
        bridge_maxwait 0
        dns-nameservers 8.8.8.8
#VLan12 Interface
iface eno3 inet manual
# Bridge
auto br12
iface br12 inet static
        address 10.1.12.15
        netmask 255.255.255.0
        network 10.1.12.0
        gateway 10.1.12.1
        broadcast 10.1.12.255
        bridge_ports eno3
        bridge_stp off
        bridge_fd 0
        bridge_maxwait 0
        dns-nameservers 8.8.8.8

stackadmin@Host15:~$ ifconfig |grep HWaddr
br11      Link encap:Ethernet  HWaddr 44:a8:42:13:06:96
br12      Link encap:Ethernet  HWaddr 44:a8:42:13:06:97
br13      Link encap:Ethernet  HWaddr 44:a8:42:13:06:98
eno1      Link encap:Ethernet  HWaddr 44:a8:42:13:06:95
eno2      Link encap:Ethernet  HWaddr 44:a8:42:13:06:96
eno3      Link encap:Ethernet  HWaddr 44:a8:42:13:06:97
eno4      Link encap:Ethernet  HWaddr 44:a8:42:13:06:98
vnet0     Link encap:Ethernet  HWaddr fe:54:00:cd:58:b2
vnet1     Link encap:Ethernet  HWaddr fe:54:00:73:e6:49
vnet2     Link encap:Ethernet  HWaddr fe:54:00:58:b7:d8
vnet3     Link encap:Ethernet  HWaddr fe:54:00:0c:9d:59
vnet4     Link encap:Ethernet  HWaddr fe:54:00:39:f7:ca
vnet5     Link encap:Ethernet  HWaddr fe:54:00:55:b2:90
vnet6     Link encap:Ethernet  HWaddr fe:54:00:7d:af:66
vnet7     Link encap:Ethernet  HWaddr fe:54:00:3e:28:cc
vnet8     Link encap:Ethernet  HWaddr fe:54:00:26:94:7f
vnet9     Link encap:Ethernet  HWaddr fe:54:00:65:11:72
vnet10    Link encap:Ethernet  HWaddr fe:54:00:35:2d:10
vnet11    Link encap:Ethernet  HWaddr fe:54:00:5c:54:4f
vnet12    Link encap:Ethernet  HWaddr fe:a8:42:13:06:95

You can see that Mac addresses in VM nets are vnets (vnet9-12) on Host above as well, same can be created/used on JUMPSTATION host to connect directly to these VMs, ensuring that IPTABLES/FW rules are all set:
------
stackadmin@VM1:~$ ifconfig |grep HWaddr
ens3      Link encap:Ethernet  HWaddr 52:54:00:65:11:72
ens4      Link encap:Ethernet  HWaddr 52:54:00:35:2d:10
ens5      Link encap:Ethernet  HWaddr 52:54:00:5c:54:4f
ens9      Link encap:Ethernet  HWaddr 44:a8:42:13:06:95