Good catch. Yes, you need to have eno3 and host0 on the bridge. I'm a little out of practice hand-building these. I wrote an Ansible script to build them for my deployments, and now, with SDN, I am moving things back to Linux bridging.
# === BRIDGES ===
auto vmbr0
iface vmbr0 inet manual...