The SE management interface has to be connected to an overlay logical segment. It also needs a tier-1 gateway to provide external connectivity to be able to reach the Controller management IP.