6248 : VLAN routing access control

Hello,

On the 62xx series, web interface page Switching > Network Security > Access Control Lists > IP Access Control Lists > Rule Configuration

it discusses Wild Card Mask

We see in page 304 of the User Manual

"Wild Card Mask — Specifies the source IP address wildcard mask. Wild card masks determines which bits are used and which bits are ignored. A wild card mask of 255.255.255.255 indicates that no bit is important. A wildcard of 0.0.0.0 indicates that all of the bits are important. This field is required when Source IP Address is checked."

Our example:

if we have subnet 192.168.200.0 / 24 and we want to restrict subnet access to remote host 192.168.100.45

We believe the rule would be:

source: 192.168.200.0, wild card: 0.0.0.255  - and - dest: 192.168.100.45, wild card 0.0.0.0

Is this correct or did we mis-understand the manual.

Thank you in advance for your help,