"Well known TCP and UDP ports used by Apple software products"
http://support.apple.com/kb/ts1629
Airport uses Bonjour for discovery, but if you know the IP-address of the Airport you are trying to reach on the remote network you only have to forward a single TCP port, 5009.
ssh -L...