Tunnels 46602 to 3306 on the remote. Meaning if you connect to 46602 on local you are actually connecting to 3306 on remote. "/var/auth/tunnel_statserver" is the id_rsa file. "-l statserver kansas" means connect as statserver to kansas ( statserver@kansas ) ssh -f -N -i /var/auth/tunnel_statserver -L 46602:127.0.0.1:3306 -l statserver kansas Tunnels 22 to 2222 on the remote. Meaning if you connect to 2222 on the remote you are connecting to 22 on local. ssh -f -N -i /home/statpack/.ssh/id_rsa -R 2222:localhost:22 fremont@statserver