anchor.diff:  <%= vars.ssh_service_access_key %>
   </pre>
   
  -##<a id="ssh-tunnel"></a>Configuring Your SSH Tunnel 
  +##<a id="ssh-tunnel"></a>Configure Your SSH Tunnel 
   
   Configure an SSH tunnel to your service instance using `cf ssh APP-NAME`. Tailor the example command below with information from your service key.
   <pre class="terminal">$ cf ssh -N -L 63306:<%= vars.ssh_service_host %>:3306 YOUR-HOST-APP</pre>
  
positive.code: <pre class="terminal">$ cf enable-ssh YOUR-HOST-APP</pre>
  <p class="note"><strong>Note</strong>: In order to enable SSH access to your app, SSH access must also be enabled for both the space that contains the app and <%= vars.product_full %>. See the [Application SSH Overview](./app-ssh-overview.html) topic for further details.</p>
  
  ##<a id="bind-app"></a>Creating Your Service Key##
  To establish SSH access to your service instance, you need to create a service key that contains critical information for configuring your SSH tunnel.
  
  1. Create a service key for your service instance.
  
negative.code:   * Use any available local port for port forwarding. For example, `63306`.
    * `-N` tells `cf ssh` not to execute a remote command.
  
  <p class="note"><strong>Note</strong>: Because the SSH tunnel may timeout, run <code>cf ssh</code> in the foreground and restart it if it exits. </p>
  
  ##<a id="access-service"></a>Access Your Service Instance##
  To establish direct command-line access to your service instance, use the relevant command line tool for that service. This example uses the MySQL command line client to access the <%= vars.ssh_service %> service instance. 
  
  <pre class="terminal">$ mysql -u b5136e448be920 -h 0 -p -D ad_b2fca6t49704585d -P 63306</pre>
  