Roni
The access-class 23 in came from SDM. It is part of the default config supplied with SDM (which also puts the privilege level 15 on the VTYs and the username cisco).
If you want you could delete access-list 23 and recreate it as the access list to use with access-class. Or you could remove access-list 23 and create some other standard access list to identify the private addresses which you want to be able to access the router (the access-list 50 suggested in my previous post).
Do you really need all these VTYs? Well that depends a bit on what you are doing with the router. But probably you do not need all of these. The original standard for VTY was to have 5 (line vty 0 4). Now some of the platforms (or maybe it is the version of IOS) creates 16 VTYs (vty 0 15). You are able to delete vty 5 through 15. I do not believe that you can delete vty 0 4.
One other thing to mention. The configuration of vty 0 3 has the privilege level 15 command which will automatically put the person who logs in at privilege mode. (the default config also does that for vty 4 but that appears to have been removed in your config). In general I do not like to have people go automatically to privilege mode. I prefer that they log in at user level and if they need privilege leve then they should authenticate to privilege level. If you like to have them go directly to privilege level then leave it in the config. But if you want them to have to authenticate to the privilege level then remove the command: privilege level 15 from the vty lines.
HTH
Rick
HTH
Rick
