diff --git a/plugins/modules/cs_portforward.py b/plugins/modules/cs_portforward.py
index eb74d1cc..3c80ccbb 100644
--- a/plugins/modules/cs_portforward.py
+++ b/plugins/modules/cs_portforward.py
@@ -62,6 +62,7 @@
   open_firewall:
     description:
       - Whether the firewall rule for public port should be created, while creating the new rule.
+      - Not supported when forwarding ports in a VPC.
       - Use M(cs_firewall) for managing firewall rules.
     default: no
     type: bool
@@ -71,7 +72,7 @@
     type: str
   network:
     description:
-      - Name of the network.
+      - Name of the network. Required when forwarding ports in a VPC.
     type: str
   vpc:
     description:
@@ -140,6 +141,15 @@
     public_port: 22
     private_port: 22
     state: absent
+
+- name: forward SSH in backend tier of VPC
+  ngine_io.cloudstack.cs_portforward:
+    ip_address: '{{ public_ip }}'
+    vm: '{{ inventory_hostname }}'
+    public_port: '{{ ansible_ssh_port }}'
+    private_port: 22
+    vpc: myVPC
+    network: backend
 '''
 
 RETURN = '''