channel 3: open failed: administratively prohibited: open failed

ssh -p 6000 -L 5901:127.0.0.1:5901 username@192.168.0.2

vncviewer localhost:1

AllowTcpForwarding yes

127.0.0.1     localhost
192.168.2.45  server.domain.com server

ssh user@server.domain.com -L 3456:127.0.0.1:5901