I didn't see if you were using allowed address pairs in this setup, do you have allowed address pairs configured on the 2 VM ports?
I didn't see if you were using allowed address pairs in this setup, do you have allowed address pairs configured on the 2 VM ports?