Yes, I din't request a public ip for the switches. Originally my topology had three hosts connected via switches. I had requested public IPs for the three hosts. I was planning on installing Floodlight on the Utah VM, but there seems to be problem with the Utah resources. So I took a chance with one of the switches since I noticed that the control ip on the switch was reachable via other two switches, so I installed Floodlight on that switch node.
I am able to telnet to 172.17.3.22 on port 22, and its establishing the connection, so there must be some firewall rules preventing the connections on port 6633.
I din't see any on the Ubuntu VM though. It might be the case that since its a control ip only port 22 is open for outside connections.
Anyway, I will go ahead, and request a VM with public ip address, and install Floodlight on that host.
Thanks Niky.