I'm not familiar with using an interface shared with Unraid, I passed through 2 ethernet ports entirely to the VM, Unraid has no access to those two ports, one is connected to WAN, the other connected to the same switch as my Unraid ethernet port.
I wanted as much isolation as possible so a misconfiguration or other issue couldn't accidentally allow my server to directly be connected to the internet. Plus, if the VM is down, it's easy to spin up my hardware pfsense box, and since it uses the same config, there's no change as far as Unraid is concerned, it still gets internet through the switch.