The address should be on the internal network. Also, the default gateway should be the gateway for this network. Session into the AIP to ensure your access-list is setup to allow access from the IP address you're trying to connect from. Its easy to breeze through this step when running the "setup" command. You can setup to allow the entire subnet to be able to communicate with the management interface, or just the IP of your workstation.