KVM VLANs setup with one NIC

Hello,

recently installed RHEL 9 on spare INUC which has only one NIC, I'm planning to run some lightweight VMs on it, mostly for learning RHEL itself and different OSes also run some small "home services".

INUC is connected to trunk port with one untagged network and two tagged VLANs - 50 & 60

Here is what I want to achieve:
INUC host - connected to untagged network,
KVM guest 1 - connected to untagged network (same as host),
KVM guest 2 - connected to VLAN50 only,
KVM guest 3 - connected to VLAN60 only.

Right after installation of RHEL, the host was in correct, untagged network, so using cockpit I have created br0 with slave eno1 (my network interface). I have setup static IP, and all was good.

Later (still using cockpit) I have created eno1.50 and enslaved it in br50.

Then issues start. Since the VLAN networks have DHCP servers running, br50 directly gest IP and host start to be exposed to VLAN50. More, after host reboot cockpit was not responsive on untagged network but started to be available in VLAN50.

Can anyone point me in direction how to setup networking to achieve separate networks for host/guest1 and two other guests?