Pasthough vlans to virtual firwall

I have seen this discussed a few times, but they tend not to clarify the requires properly and end up with no answer so hopefully someone can help.

I have an unpaid host setup with a 4 port network card. So before it's suggest I pass through the network card that's not possible in this case and I'm out of PCI slots. 

I'm trying to replicate my firewall configuration that runs on a mini pc. The reasons for this is the mini pc sometimes has issues booting so doing firewall firmware updates can be troublesome and leave me without internet. 

Ideally I want to replicate the exact setup as I do have an option of adding the virtual firwall as a HA standby so it needs the same setup.

Currently my firewall is 1 wan connection, and 1 connection used for the LAN, the LAN connection then has multiple vlans.

The issue with the virtual one is that I can create multiple virtual nic adapters bound to each direct vlans, and while it works it's not the same as the current firwall so the ha will not be possible.

So for example unpaid now has br0, br0.100, br0.110, br0.120 etc configured.

Is there anyway I can have one virtual nic that will provide all the vlans and let the virtual firewall determine what vlans they are on using the Vlan tagging?

I suspect it's going to be a case or a dedicated network card password though to the VM but trying to avoid this.

Thanks