I tought you needed vmbr0 for managment and vmbr1 for VMs...:/
This scenario does work somehow, but only in direction vmbr1 -> vmbr0. Maybe ARP related problem because there is IP on vmbr0. If you add new eth3 and vmbr2 without IP i guess you should be ok.