ip access-group用在接口下；access-class用在VTY线下
access-class命令前面没有“ip”

例子：

先配置access-list：

access-list 1 permit host 192.168.1.1

access-list 1 permit host 192.168.2.1

情况一：line vty 0 4（最多允许5个telnet）

               access-class 1 in

情况二：int f0/0

               ip access-group 1 in