I cannot ssh in line vty 0 4 ( access-class xxx in )

[chhayhengc]

ip access-list extended BLOCK
 permit tcp host 10.10.10.2 any eq 22
 deny tcp any any eq 22 (work)

But, 
ip access-list extended BLOCK
 permit tcp host 10.10.10.2 host 10.10.10.1 eq 22
 deny tcp any any eq 22 (not work) when i apply vty
 

[Karsten Iwen]

When binding the access-list with an access-class to a router/switch-line, then the destination has to be "any". It's not allowed to have a different destination specified (like your "host 10.10.10.1").