I suspect what's happening is an isolation address needs to be set for the vSAN n/w i.e. you need to use an isolation address that is in the same network as vSAN
I'm paraphrasiong from his blog but..
This way during an isolation event the isolation is validated using the vSAN vmkernel interface, and set the isolation response to power-off. and if you have traditional storage, then you can enable heartbeat datastores. it will allow the HA hosts to communicate state through the datastore.
here's a table from his blog post
