I wonder if this is robust enough for multi-NIC VMs and hosts?  Maybe match any MAC on the VM against any on the host?