Are you able to ping the SelfIP address on the 10... subnet?
Can you from and SSH session of from the console of the BIG-IP, ping the client address you are trying to connect from?
The Management interface can be on the same PortGroup and even on the same 802.1q VLAN but must be on a different subnet. In my testing environment, I often setup my BIG-IP management on the same PortGroup as the interface attached to the Internal VLAN, but I assign the mgmt a 192.168.x.x/24 address and the internal a 10.x.x.x/24 address.