 VLAN 1 also doesn’t route by default since it is the management VLAN. You may need to move everything to VLAN 10 so that both sides are the same. 
Hi, I'm working with a hybrid cloud and between the two sites I have an Ethernet Line, so we can have the same IP class. At my site, there is a Router that receives packets from the cloud with VLAN 10. Here we only have the default vlan 1. I have two SW 6248 and I don't have access to the Router because it belongs to the ISP. I've connected the Router to 2/g1 and I've connected the 2/g2 to 1/g20. It is possible to untag every packet coming from the router at 2/g1 and tag every packet that goes to the router at 2/g2? I've tried a lot of combinations and nothing worked when I set the PVID different than 1 any port. In a closed test, which I'd used a notebook directly connected with 2/g2, It worked with both ports at PVID 20. When I connect my network cable at this port, anyone can reach each other. Another odd detail is that with no configuration, with all at Vlan 1, some machines communicate, so I realize that the router in some way is tagging and untagging. At the cloud, they assured me that all packets are tagged with VLAN 20. They have the same Router there, connected with their SW. The problem is that in only some machines it works.  Example:  Every server in the domain from Site 1 can ping a Server at Site 2 No server out of the domain from Site 1 can ping a Server at Site 2 Any Server at Site 2 can ping any Server at Site 1 if it is in the domain No Server at Site 2 can ping a Server at Site 1 if it is out of  the domain   With tcpdump I can see that the Servers receive the packets, but can't reply.  Sorry for the wall of text and my English.  [IMAGE] 
Problem between vlans