LocalForwards

LocalForward Mechanism:
SSH client binds a local port on local machine.

SSH client logs into server.

When connection to local port is received:
Tunnel (encapsulate) connection over the encrypted SSH connection
Destination can be any machine reachable by the SSH server

Applications (on SSH client machine/network) point at the client machine, not the destination.