This should actually work flawlessly. Since you are able to communicate internally between the host (VMkernel) and the vCSA, I'd suggest you take a closer look at the physical port's configuration (assuming the vSwitch and port group configuration is still set to defaults). Do you see the vCSA's MAC address on the physical port(s)?
André