opnsense in kvm (qemu) vm

[vanpupi]

Is there anyone who has opnsense running in a qemu vm on a solaris (omnios) box?
purpose is that a nic (wan interface) is not used by the global zone, but given directly to the vm which is running opnsense.
So it stays secure and lots of vm's (or zones) can be secured on one box.
Is there any description or documentation how to create such a setup?

[weust]

I don't know qemu at all, but isn't it the same as with other Hypervisors in that you create several virtual switches?
On ESXi and Hyper-V I use two. One for WAN and one for LAN.
The one for WAN just passes the my WAN address to the VM so I get the public address on the VM. Works great.