In my current setup I have a multiple bridges on each libvirt-host with do have access to untagged ethernet. VLAN-Tagging is done on the hosts interface.

To spare me some clicks, I'd like to associate each interface on a compute-profile with a specific subnet and a specific domain.