[nsp] VTY ACL

[Damien Holloway]

I applied an ACL to the vty interface on a router

access-list 101 permit tcp host 10.1.1.1 host 10.2.2.2 eq telnet

line vty 0 4
 access-class 101 in

and the host 10.1.1.1  **cannot** telnet to the router on 10.2.2.2 

BUT if I do this 

access-list 101 permit tcp host 10.1.1.1 any eq telnet

line vty 0 4
 access-class 101 in

and the host 10.1.1.1  **can** telnet to the router on 10.2.2.2 

Why would the first example NOT work???

I am confused