Ah, working through the examples I see now, they just aren't the prim/sec nodes for rhe purposes of the failover.

Final question (!) - the ping node. Does it have to be on same subnet as the primary/secondary node subnet? Or is any (reliable) reachable IP ok?