My question:  Can one device contact another device in a different Vlan?

My understanding: If Vlans are created on this switch, they can contact each other (ping) unless ACLs are created to block it.

Test setup:  SG3428X switch.  Vlan1 is set to 10.10.1.1/24. I create Vlan10 at 10.10.10.1/24, I create Vlan20 at 10.10.20.1/24 and Vlan30 at 10.10.30.1/24.

There is NO router connected to this switch.  I have ports 1,2,3,4 as access ports for Vlan1   I have ports 5,6,7,8 on Vlan10, ports 9,10,11,12 on Vlan20 and ports 13,14,15,16 on Vlan30.

I connect laptop 1 with a static ip address of 10.10.1.16/24 to port 1.

I connect laptop 2 with a static ip address of 10.10.10.10/24 to port 5.

I connect computer 1 with a static ip address of 10.10.20.5/24 to port 11. (ran out of laptops)

I connect computer 2 with a static ip address of 10.10.30.8/24 to port 15.

I cannot ping from any device to any other device.

If I reset the static address of laptop 2 to 10.10.1.10, still connected to port 5, I cannot ping any other device.

If I change the connected port of laptop 2 to port 2, I can ping laptop 1 and laptop 1 can ping laptop 2.

My conclusion is that one Vlan cannot contact another Although this goes against what I was told and saw on TP-Link's website.

Am I missing something?