This is a long shot but make sure you use Gen 1 and boot with BIOS instead of UEFI. I have it running on ESXi and both public and private NICs are in PCI pass-through mode so the client has exclusive access to them. This is important in my case for isolation for me since I don’t want the possibility of any other VMs acquiring or using a public address from the ISP.