When we apply an access-list to our router/switch, take this note:
To apply an access list to a virtual terminal interface we must use the “access-class” command. This is used when we want to limit the access to our management interface.
To apply an access list to a physical interface, we must use the “access-group” command.