Type: Select the type of the tunnel from the drop-down list. Valid choices are TCP and FTP.

Listen port: Define the number of a local port that Tectia Client listens to and that the applications connect to. Do not use a reserved port number.

	Note
	The protocol or application for which you wish to create the tunnel may have a fixed port number (for example, 143 for IMAP and 25 for SMTP) that it needs to use to connect successfully. Other protocols or applications may require an offset (for example, 5900 for VNC) that you will have to take into account.

Allow local connections only: Leave a check mark in this box if you want to allow only local connections to be made. This means that other computers will not be able to use the tunnel created by you. By default, only local connections are allowed. This is the right choice for most situations. You should carefully consider the security implications if you decide to also allow outside connections.

Destination host: This field defines the destination host for the port forwarding. The default value is localhost.

	Note
	The destination host address is resolved after the Secure Shell connection has been established, so here localhost refers to the Tectia Server host you have connected to.

Destination port: The destination port defines the port to which the forwarded connection is made on the destination host.

Tunnel using profile: Select a connection profile through which the tunnel will be created. See Creating Connection Profiles for instructions on creating connection profiles.