BIG-IQ device discovery issue - no route

Hi guys, trying to discover BIG-IP devices via a mgmt interface of the BIG-IQ and getting the "no route to host" error. I have only the mgmt interface on this big-iq VE with default mgmt route and specific mgmt route to the big-ip device. ping and trace work fine but 443 and 22 fail with "no route to host".

[root@bigiq1:Active:Standalone] config  tmsh list sys management-route
sys management-route ccnet {
    description configured-statically
    gateway 10.10.10.1
    mtu 1500
    network 10.20.20.0/24
}
sys management-route default {
    description configured-statically
    gateway 10.10.10.1
    mtu 1500
    network default
}

[root@bigiq1:Active:Standalone] config  ping 10.20.20.130
PING 10.20.20.130 (10.20.20.130) 56(84) bytes of data.
64 bytes from 10.20.20.130: icmp_seq=1 ttl=54 time=1.09 ms
64 bytes from 10.20.20.130: icmp_seq=2 ttl=54 time=0.947 ms
^C
--- 10.20.20.130 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1776ms
rtt min/avg/max/mdev = 0.947/1.023/1.099/0.076 ms

[root@bigiq1:Active:Standalone] config  curl -k -v -X GET https://admin:admin@10.20.20.130/mgmt/shared/echo
* About to connect() to 10.20.20.130 port 443 (0)
*   Trying 10.20.20.130... No route to host
* couldn't connect to host
* Closing connection 0
curl: (7) couldn't connect to host

[root@bigiq1:Active:Standalone] config  ssh 10.20.20.130
ssh: connect to host 10.20.20.130 port 22: No route to host

Any advice will be appreciated.

Mike