UPDATE: still not sure why vmbr0 wasn't bridging to eth1000. It might have been a network-specific issue, since I created vmbr0 on a more private network, and used that to bridge between hardware and VM. The ping works now, and my VMs can ping each other... they just can't ping outside of the...