I set up the virtual infrastructure last evening, and got it working. 5 QEMU virtual machines with 4 unique vlans.
The first thing I learned was that dhclient will not communicate with
tun(4) devices, nor will it operate properly even if the tun device is driven through a
bridge(4).
I stopped at that point, and will pick it up again either tonight or on the weekend.