diff --git a/apps/rego-tunnel/vpn_scripts/start.sh b/apps/rego-tunnel/vpn_scripts/start.sh
index f5f7d4e..0e1470d 100755
--- a/apps/rego-tunnel/vpn_scripts/start.sh
+++ b/apps/rego-tunnel/vpn_scripts/start.sh
@@ -67,9 +67,9 @@ get_container_ip() {
   iptables -C FORWARD -d "$WINDOWS_IP" -j ACCEPT 2>/dev/null || \
   iptables -A FORWARD -d "$WINDOWS_IP" -j ACCEPT
 
-  # Forward port 2222 to VM's SSH (22) for VM access
+  # Forward port 2222 to VM's SSH (2222) for VM access
   pkill -f "socat.*:2222" 2>/dev/null || true
-  socat TCP-LISTEN:2222,fork,reuseaddr TCP:"$WINDOWS_IP":22 &
+  socat TCP-LISTEN:2222,fork,reuseaddr TCP:"$WINDOWS_IP":2222 &
   echo "[rego-tunnel] SSH to VM available on port 2222"
 
   # Add DNAT rules for port forwarding