Being able to ping both VLANs from the desktop, without the traffic going through the router, sounds like you may have added vpids to the interfaces allowing traffic between vlan1 and vlan2 on the switch. I might be wrong (only two people company wide can touch our switches and I'm not one) depending on the netmask your network segments use.
Could you post the network addresses, e.g. 172.21.0.0/16. The router might have a wider range so both subnets can see it.
Also check that the printer's switch port has a vpid for vlan10 as well.
If the router is out of scope for vlan10 hosts, you won't be able to ping it.
If the router has two LAN side switch ports, you could have one connection to a VLAN5 port, another on a VLAN10 port and control traffic between vlans as if they were from two separate switches. However if you have vlan1 - vlan10, this wouldn't be practical.
|