Hi,
the normal way is to use vlans on the host and define for each vlan an bridge (you can use the same number, eg. vlan 25 - eth1.25 - vmbr25).
The VMs get for each vlan an nic.
Works well for me. I heard about trouble to use vlan-tagging on bondet devices but i'm don't using this configuration (i think this depends also on the switch-side).