EvoTech

Like Sakura_T said, within a Layer 2 switch traffic cannot be routed between VLANs. If you just need to restrict internal_network ping factory network, you can try one VLAN and use ACL to block icmp packet from internal to factory.