Allow specific IP on IOT VLAN to access IP and port on LAN

[andy22]

Hi,
I have a little different requirement.
I am running Netgear ReadyNas on my LAN and it also runs my Plex server on port 32400.
My Samsung TV is in IOT VLAN.
How can I setup the rule so that I am punching a hole just to access port 32400 on my ReadyNAS and that is also my Samsung TV is the only one who can reach out to my ReadyNAS on port 32400?

Thanks
I tried the following but that doesn't seem to be working:

I am blocking IOTVLAN to have access to my LAN Like this:

Is it a problem?

Thanks in advance