This is similar to what I do. I run Debian as the host machine and then have guests running on QEMU/KVM. I don't use IOMMU, I simply create a bridge on each physical ethernet. This allows me to add other "router/vm" on the WAN side and play with some additional isolated "networks".