RE: How can I create a VM in virt-manager that can access the internet through the host but can't even see the host or other devices on the LAN?
I don't have a VLAN aware router. Or do you mean create VLANs on the host? I'm not
even sure how to do that.