Which IOS feature can limit SSH access to a specific subnet under a VTY line?

Which IOS feature can limit SSH access to a specific subnet under a VTY line?

A.
access class

B.
access list

C.
route map

D.
route tag