A wildcard mask (also called inverse mask) is a 32-bit binary represented in dotted decimal notation. In contrast to a subnet mask, The 0 bits in a wildcard mask represents "do care" bits, and the 1 bits represent "don't care" bits.
If the "do care" bits in an IP address are identical to the "do care" bits in an IP address criterion, the IP address matches the criterion. All "don't care" bits are ignored. The 0s and 1s in a wildcard mask can be noncontiguous. For example, 0.255.0.255 is a valid wildcard mask. If inverse mask is enabled, the system automatically inverses the network mask.